Security Directory

P

Profit Visions s.r.o.

profit-visions.com

58

LINK-V is a small technology company based in the Czech Republic, specializing in bespoke web and mobile app development, digital automation, and business management solutions. Their offerings include Timeless Web and App services, as well as Grace Engine and Grace Manager tools designed to streamline development workflows and business operations. The company positions itself as an innovator blending technology, automation, and style to deliver future-proof digital products with ongoing support. Technically, the website is built with modern HTML5, CSS3, and JavaScript technologies, featuring custom scripts and SVG graphics. The site is well-structured, mobile-optimized, and includes tracking via a proprietary analytics service (data.grace.link). However, no major CMS or hosting provider details are disclosed. Performance is moderate, with good navigation and SEO practices. From a security perspective, the site uses HTTPS but lacks visible security headers and published security policies. The contact form uses POST method, indicating basic secure data submission. No vulnerabilities or exposed sensitive data were detected, but privacy and cookie policies are missing, representing compliance gaps. WHOIS data is limited due to TLD restrictions and privacy protection, but the domain appears legitimate with consistent company contact details. Overall, the website demonstrates a professional and credible business presence with moderate technical maturity and security posture. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and reduce risk.

Cafe DECADA is a small local hospitality business operating a cafe in Prague, Czech Republic. The website presents basic business information including contact details, social media links, and location. The business targets local customers and offers cafe services with reservation options. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, CSS, and HTML5. The site is moderately optimized for mobile devices and has a good design quality with clear navigation. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and privacy compliance features such as privacy and cookie policies. WHOIS data is unavailable, likely due to privacy protection, which is common for small businesses. Overall, the website is trustworthy and professional but could improve in privacy compliance and security best practices.

M

MM Programming s.r.o.

mmprog.cz

41

MM Programming s.r.o. is a newly founded Czech technology company specializing in professional IT services including custom web development, web management, hosting, and IT consulting. The company targets both businesses and individual clients, positioning itself as a small but professional local IT service provider. Their website reflects a clear business focus with references to client projects and a consistent brand identity. Technically, the website uses modern frameworks such as Bootstrap and Font Awesome, is mobile optimized, and has good SEO fundamentals. However, it lacks published privacy and cookie policies, security headers, and advanced security disclosures, which are areas for improvement. The domain registration data is consistent with the company information and business claims, supporting legitimacy. Overall, the website is functional and professional but would benefit from enhanced privacy and security compliance to improve trust and reduce risk.

S

SK Rapid Psáry

rapid-psary.cz

45

SK Rapid Psáry is a local Czech football club with a long tradition dating back to 1931. The website serves as an information hub for club members, fans, and the local community, providing news, match schedules, team information, and an e-shop for merchandise. The club targets football enthusiasts and community members interested in local sports activities. The business model is typical for a community sports club, focusing on engagement, membership, and local sponsorships. Technically, the website is built on a modern stack using EOS CMS, Alpine.js, Swiper.js, and other JavaScript libraries loaded from reputable CDNs. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, there is a lack of visible security headers and no privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data limits domain trust assessment, but the website content and active social media presence support its legitimacy. Overall, the site is functional and professional for its purpose but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve trust and security posture.

Ö

Östgöta Correspondenten

corren.se

68

Östgöta Correspondenten (Corren) is a regional news media outlet serving the Östergötland region in Sweden. It operates as part of the larger Norrköpings Tidningar Media AB group, providing local news content primarily in Swedish. The website targets residents and Swedish-speaking audiences interested in regional news, offering digital subscriptions and advertising services as its main revenue streams. The market position is that of a leading regional news provider with a professional and consistent brand presence. Technically, the website is built using modern web technologies including Angular and Font Awesome, with good mobile optimization and accessibility features. The site employs HTTPS with strong security headers, indicating a good security posture. Privacy and cookie policies are present with consent mechanisms, supporting GDPR compliance. However, no explicit security policy or incident response contact information is publicly available. Security-wise, the site demonstrates good practices such as HTTPS enforcement and security headers, with no obvious vulnerabilities detected in the provided content. The lack of WHOIS data for the exact domain suggests the domain may be a subdomain or alias managed under the parent domain ntm.se, which is consistent with the business affiliation. This slightly reduces trust but does not indicate malicious intent. Overall, the website is professional, secure, and compliant with privacy regulations, serving a clear business purpose in the media sector. Strategic recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and enhancing incident response contact visibility to further strengthen trust and security posture.

D

Digitaliseringsstyrelsen

borger.dk

70

Borger.dk is the official Danish government portal providing digital access to public services, including digital post, personal overviews, and guides for citizens on various life situations. It serves as a centralized platform for Danish residents to interact with government services efficiently. The website demonstrates a high level of content quality, professional design, and clear navigation tailored to its target audience of Danish citizens. Technically, the site uses modern web technologies with good mobile optimization and accessibility features, although some security headers and explicit security policies are not evident in the provided data. The security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but could be improved by publishing incident response and vulnerability disclosure information. Overall, the site is trustworthy and well-maintained, reflecting its role as a key government digital service portal.

M

Martin Tournoij

arp242.net

54

The website arp242.net is a personal site owned by Martin Tournoij, focusing on programming topics, open source projects, and technical writings. It serves as a hub for various Go libraries, Vim plugins, and other software tools, targeting developers and the open source community. The site is well-maintained with a consistent brand and high-quality content, reflecting a small-scale but professional personal brand. Technically, the site uses modern web standards with clean HTML, CSS, and JavaScript. It integrates GoatCounter for privacy-conscious analytics and hosts numerous GitHub repositories linked directly from the site. The site is mobile optimized, accessible, and performs well, though it lacks a CMS or complex frameworks. From a security perspective, the site enforces HTTPS and avoids collecting sensitive user data, which reduces risk. However, it lacks explicit security headers, privacy and cookie policies, and vulnerability disclosure information. The WHOIS data is missing or unavailable, which raises questions about domain registration legitimacy despite the active and professional site presence. Overall, the site presents a low-risk profile with strong content and technical quality but would benefit from improved privacy compliance and clearer domain registration transparency. Strategic recommendations include publishing privacy and cookie policies, adding security headers, and providing vulnerability disclosure details to enhance trust and compliance.

G

GoatCounter

goatcounter.com

60

GoatCounter is an open source web analytics platform that emphasizes privacy and ease of use as an alternative to mainstream analytics solutions like Google Analytics and Matomo. It offers both a free hosted service supported by donations and a self-hosted option, targeting personal websites and small to medium businesses that prioritize privacy. The website is professionally designed with clear navigation and accessibility features, reflecting a mature digital presence. Technically, the site uses modern web standards including JavaScript and optimized fonts, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS enforced and privacy-aware tracking methods, though explicit security headers and formal policies are absent. The lack of WHOIS data is a notable anomaly, reducing domain trustworthiness despite the professional content and external references. Overall, GoatCounter presents a trustworthy and privacy-conscious service with room for improvement in formal security disclosures and contact transparency.

GolfEurope.cz is a Czech golf portal providing news, competitions, golf packages, and links to related golf e-commerce and service sites. The website targets golf enthusiasts primarily in the Czech Republic and offers a network of related golf project sites. The business model appears to be content-driven with affiliate or partner e-commerce integration. Technically, the site uses Bootstrap and jQuery, delivering a responsive and moderately optimized user experience. However, the site lacks advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. WHOIS data is unavailable, indicating privacy protection or domain registration issues, which slightly reduces trustworthiness. Overall, the site is functional and safe but requires improvements in security, privacy compliance, and transparency to enhance credibility and user trust.

Sport Černošice operates as a local community sports facility portal providing information and reservation services for sports venues in Černošice, Czech Republic. The website is managed by WEBHOUSE, s.r.o., a Czech company specializing in web design and CMS solutions. The site targets local residents and sports enthusiasts, offering news, contact details, and links to reservation systems. The business model focuses on information dissemination and facility management support rather than direct commercial transactions. Technically, the website uses the vismo CMS platform with standard web technologies including HTML5, CSS, and JavaScript, supplemented by Google Translate for multilingual support. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility features. Security posture is moderate with HTTPS usage implied but no visible security headers or explicit security policies published. Privacy compliance is basic with presence of privacy and cookie policies but no active consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and trustworthy for its intended local audience but could benefit from improved security and privacy practices.

V

Vectron Systems AG

bonvito.net

67

bonVito is a German-based multichannel marketing platform operated by Vectron Systems AG, specializing in customer loyalty, e-payment, online table reservations, and live reporting solutions primarily for retail and hospitality sectors. The platform integrates with Vectron's POS systems, offering a comprehensive suite of marketing tools such as coupons, digital stamp cards, and direct discounts. The website is professionally designed, mobile-optimized, and provides a clear navigation structure, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS and leverages modern marketing and analytics technologies including Google Tag Manager, Facebook Pixel, and Cookiebot for GDPR-compliant cookie consent management. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and vulnerability disclosure mechanisms suggests room for improvement. The WHOIS data is notably absent, raising concerns about domain registration transparency, but the overall business credibility is supported by the professional website and parent company association. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing clearer contact and legal information to strengthen trust and compliance.

D

Decentral Erhvervsfremme

eufonde.dk

59

EUfonde.dk is an official Danish government portal providing detailed information about EU funding programs available in Denmark for the 2021-2027 period. The site targets Danish citizens, businesses, and public sector stakeholders interested in regional development, social funds, green transition, and digitalization initiatives supported by the EU. It serves as a centralized informational hub with campaign highlights, news, and links to partner government sites. Technically, the site is built on Drupal CMS with modern web standards, good mobile optimization, and accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers could enhance protection. The domain registration is consistent with the business purpose and timeline, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

Signify Holding

signify.com

67

Signify Holding operates as a global leader in connected LED lighting products, systems, and services, serving both business and private customers. The company maintains a strong market position with a comprehensive portfolio including well-known brands such as Philips and Interact. The website reflects a mature digital presence with professional design, clear navigation, and targeted content for various customer segments including lighting professionals and system integrators. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and performance optimization tools. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, although the lack of WHOIS data slightly reduces domain registration transparency.

K

KAISER GmbH & Co. KG

kaiser-elektro.de

65

KAISER GmbH & Co. KG operates a professional website focused on electrical installation products and systems, targeting business customers primarily in Germany and internationally. The company offers a broad portfolio including boxes, housings, cable glands, and specialized installation solutions emphasizing energy efficiency and fire protection. The website reflects a mature B2B business model with a consistent brand presence and a well-structured product catalog. Technically, the website is built on the Shopware e-commerce platform, utilizing modern web technologies such as JavaScript, CSS, and HTML5. It integrates third-party services like Signalize for marketing and eTracker for analytics, alongside Google reCAPTCHA for bot protection. The site is mobile-optimized with good SEO and basic accessibility features, hosted on servers associated with internet1.de. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. Security headers are likely present, and no critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic enhancements in security transparency and contact availability would further strengthen trust and operational resilience.

F

FABAS LUCE S.P.A.

fabasluce.it

53

Fabas Luce S.p.a. is an established Italian manufacturer specializing in decorative and technical lighting solutions, serving primarily specialized retailers and professional clients. The company offers a broad product portfolio including modular lighting systems, architectural lighting, and naval lighting, complemented by a commitment to sustainability through photovoltaic energy production. Their market position is supported by a long domain history dating back to 1999 and a professional digital presence. Technically, the website employs modern JavaScript frameworks and asynchronous loading techniques, integrating third-party services such as YouTube and Google Tag Manager for analytics and media. The site is mobile-optimized with good navigation and design quality, though some SEO and accessibility features could be enhanced. Hosting and CMS details are not explicitly identified. From a security perspective, the site uses HTTPS and avoids exposing sensitive data, but lacks advanced security headers and DNSSEC. There is no visible cookie consent mechanism or comprehensive privacy policy addressing GDPR compliance, which represents a compliance gap. Incident response and security policies are not published, limiting transparency. Overall, the website is professional and trustworthy with moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and DNS security would enhance the security posture and regulatory adherence, reducing risk and improving user trust.

Ř

ŘÍHA

naholou.cz

47

The website 'Na holou' represents a small cultural theatre group based in the Czech Republic, active since at least 2005. It offers information about theatrical performances, photo and video galleries, and contact details primarily via email and Facebook. The business model appears to be focused on local cultural entertainment with a niche audience. Technically, the site is built using RapidWeaver CMS with common JavaScript libraries and Google Fonts, but lacks modern security and privacy features. The site uses HTTP URLs without HTTPS enforcement, lacks privacy and cookie policies, and does not implement security headers or secure forms. Overall, the security posture is weak, and privacy compliance is minimal. The domain age and WHOIS data support the legitimacy of the site as a long-standing small cultural entity. Strategic improvements in security, privacy compliance, and HTTPS adoption are recommended to enhance trust and protect visitors.

CLASIC CZ s.r.o. is a Czech manufacturing company specializing in industrial furnaces and related devices, with a well-established presence since 1998. Their website showcases a broad portfolio of furnace types and control systems, targeting industrial clients requiring specialized thermal equipment. The company appears to operate primarily in the manufacturing sector within the Czech Republic. Technically, the website is built using Nicepage CMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, and is hosted via a Czech hosting provider. The site is mobile-optimized and presents content clearly, though it lacks advanced SEO and accessibility features. Security posture is basic, with no evident security headers or published security policies, and no HTTPS status was determinable from the provided data. Privacy compliance is minimal, as no privacy or cookie policies are found. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

W

WebSite21

website21.cz

54

WebSite21 is a small Czech technology company specializing in custom web development, e-commerce solutions, and mobile application development. With over 15 years of experience, they focus on delivering tailored solutions using PHP frameworks such as Joomla, Nette, and Laravel, as well as C# for mobile apps. Their market position is that of a trusted, experienced provider serving B2B and B2C clients primarily in the Czech Republic. The website demonstrates a high level of professionalism, with comprehensive service offerings, client testimonials, and clear contact information. Technically, the website employs modern web technologies including PHP 8, C#, HTML5, CSS3, UIkit, and jQuery. It is mobile-optimized, fast-loading, and SEO-friendly. The presence of structured data and Google verification tags indicates good digital maturity. Security-wise, the site uses HTTPS with strong SSL configuration and security headers, integrates Google reCAPTCHA on forms, and provides cookie consent mechanisms, reflecting a solid security posture. However, the absence of WHOIS data limits the ability to fully verify domain legitimacy and registration details, which slightly impacts trust. Additionally, no explicit security policy or incident response information is published, which could be improved. Overall, the site is safe, professional, and well-maintained, with minor gaps in transparency and domain registration data. Strategic recommendations include publishing a formal security policy, adding incident response contacts, and considering a vulnerability disclosure program to enhance trust and compliance.

M

Město Milovice

mesto-milovice.cz

48

Město Milovice operates an official municipal website serving residents and visitors with comprehensive local government information, including news, public notices, contacts, and event calendars. The site is positioned as the authoritative source for municipal services in Milovice, Czech Republic, and targets local citizens and stakeholders. The business model is a government service portal focused on transparency and community engagement. Technically, the website uses a modern CMS platform (Vismo), employs HTTPS for secure communications, integrates Google reCAPTCHA for form security, and offers multilingual support via Google Translate. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are missing. From a security perspective, the site maintains a solid posture with encrypted connections and anti-bot measures but lacks explicit incident response contacts and advanced security headers. No vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-related information and cookie policy available. Overall, the website is trustworthy, professional, and well-maintained, with a strong legitimacy score based on domain age and WHOIS data. Strategic improvements could enhance security headers and incident response transparency to further strengthen trust and compliance.

O

Obec Nučice

nucice.eu

45

The website nucice.eu serves as the official digital presence of the municipality of Nučice in the Czech Republic. It provides residents and visitors with essential local government information, including official announcements, event calendars, public documents, and contact details. The site targets local citizens and stakeholders interested in municipal affairs and community events. The business model is that of a governmental public service portal, focusing on transparency and community engagement. The website maintains a consistent brand identity aligned with municipal standards and offers good content quality and navigation.

M

Město Rokycany

rokycany.cz

48

The website rokycany.cz serves as the official digital presence of the city of Rokycany, Czech Republic. It provides comprehensive information about municipal services, local news, cultural and sports events, public notices, and online services for residents and visitors. The site is well-established, with a domain age dating back to 1997, reflecting a mature and stable online presence. The content is primarily in Czech and targets local citizens, businesses, and tourists. The business model is centered on public administration and community engagement, offering transparent access to city governance and services. Technically, the website employs a proprietary CMS (vismo) common among Czech municipalities, leveraging modern web technologies such as HTML5, CSS3, JavaScript, Google reCAPTCHA for form security, and Google Translate for multilingual support. The site is mobile-optimized and features a clear navigation structure, although accessibility features are basic. Performance is moderate, with external dependencies on Google fonts and CDN-hosted libraries. From a security standpoint, the site uses HTTPS and integrates Google reCAPTCHA to protect forms from abuse. However, it lacks explicit security headers and a dedicated security or incident response policy page, which are areas for improvement. Privacy compliance is addressed with a privacy policy and cookie policy, but no active cookie consent mechanism is implemented. Contact information is clearly provided, enhancing trust and transparency. Overall, rokycany.cz is a trustworthy and professional municipal website with good content quality and business credibility. Strategic recommendations include enhancing security headers, implementing cookie consent mechanisms, and publishing detailed security and incident response policies to strengthen compliance and user trust.

M

Městský úřad Spálené Poříčí

spaleneporici.cz

50

The website spaleneporici.cz serves as the official digital presence of the municipal office of Spálené Poříčí, a town in the Czech Republic. It provides residents and visitors with comprehensive information about the town, including local news, official documents, event calendars, and tourism-related content. The site targets local citizens, tourists, and stakeholders interested in municipal services and community activities. The business model is government/public service oriented, focusing on transparency and community engagement. The domain is well-established since 2001, reinforcing its credibility and trustworthiness. Technically, the website employs a modern tech stack including HTML5, CSS, JavaScript, and integrates Google services such as Analytics, Tag Manager, reCAPTCHA, and Translate. It uses the vismo CMS platform, which is common for Czech municipal websites. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and domain registration are consistent with Czech providers, supporting local presence. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA to protect forms, and implements a cookie consent mechanism compliant with GDPR. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The security posture is solid but could be enhanced by adding security headers and formal policies. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and user experience. It demonstrates compliance with privacy regulations and employs standard security practices. Strategic improvements in transparency around security policies and incident handling would further strengthen its posture.

Dieter Krauss GmbH is a small, family-run business specializing in heating, sanitation, ventilation, and renewable energy solutions, operating primarily in Klein Offenseth-Sparrieshoop, Germany. The company offers a broad range of services including bathroom installations, heating systems, ventilation and air conditioning, photovoltaic and solar thermal systems, as well as gas heating services through its Krauss GAS Center. The website reflects a professional and consistent brand image with clear contact information and service descriptions, targeting local residential and commercial customers. Technically, the website is built using Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of advanced CMS or hosting details. The site lacks modern security headers and cookie consent mechanisms, and no analytics or tracking tools are detected, indicating minimal user tracking. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site does not show critical vulnerabilities but lacks HTTPS confirmation and security headers, which are recommended for improved protection. The absence of a privacy policy with GDPR compliance details and cookie consent reduces privacy compliance. WHOIS data is missing, raising questions about domain registration legitimacy, although the website content and business information appear trustworthy and professional. Overall, the site is a solid representation of a small regional business with room for improvement in security, privacy compliance, and domain registration transparency.

N

Netzwerkagentur Erneuerbare Energien Schleswig-Holstein

ee-sh.de

53

The website for Netzwerkagentur Erneuerbare Energien Schleswig-Holstein (EE.SH) serves as a regional network agency focused on supporting renewable energy initiatives in Schleswig-Holstein, Germany. It promotes regional value creation, innovation, and digital transformation for companies involved in renewable energy sectors such as wind, solar, bioenergy, and hydrogen. The site is built on the Weblication® CMS platform and hosted via DomainControl name servers, indicating a standard commercial hosting setup. The content is professionally presented with good design and navigation, targeting regional businesses and stakeholders in the energy sector. From a technical perspective, the website uses modern HTML5, CSS3, and JavaScript technologies with a responsive design optimized for mobile devices. However, no advanced frameworks or analytics tools were detected. The site lacks visible privacy and cookie policies, which is a compliance gap. No contact emails or phone numbers were explicitly found, though a physical address is provided in meta tags. Security posture is moderate but could be improved. There is no evidence of security headers or incident response contacts, and no vulnerability disclosure or security.txt files were found. The SSL configuration status is unknown from the provided data. The domain WHOIS data is minimal but does not indicate privacy protection or suspicious patterns, though registrant details are not fully available. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve trust and regulatory adherence.

W

Watt 2.0

wattzweipunktnull.de

57

Watt 2.0 is a German industry association focused on renewable energy, aiming to connect companies, academia, and policymakers to strengthen the renewable energy sector and promote sustainable solutions. The website presents a professional and consistent brand image with content primarily in German, targeting stakeholders in the energy sector. The business model is that of a trade association, providing networking and advocacy services within the renewable energy industry. Technically, the website uses modern web technologies with responsive design and good SEO practices, hosted on UI-DNS infrastructure. Security posture is moderate; while HTTPS is assumed, no explicit security headers or advanced policies are detected. Cookie consent mechanisms are implemented, but privacy and terms of service policies are missing, indicating room for compliance improvement. Overall, the site is accessible, safe, and professional but would benefit from enhanced transparency and security practices.

T

TodaysWeb Ltda.

bloggtavlingen.se

54

The website bloggtavlingen.se operates as a niche Swedish platform organizing blog competitions with monetary prizes and premium service incentives. It targets bloggers and blog readers interested in participating in contests. The business model revolves around hosting competitions sponsored by various companies, with a small but engaged audience. The site content is well-structured and relevant, though some dated references suggest limited recent activity. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics and social media widgets. The site is served over HTTPS, indicating a baseline security posture, but lacks advanced security headers and comprehensive privacy or cookie policies. Mobile optimization and accessibility are basic, with room for improvement. From a security perspective, the site shows no immediate vulnerabilities or exposed sensitive data, but the absence of privacy and cookie policies, as well as missing WHOIS domain registration data, reduce overall trustworthiness. The lack of clear contact information and incident response channels further limits security maturity. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance, improved security practices, and better transparency regarding ownership and contact details to increase trust and compliance with regulations.

P

Pumpkin TD | Official website of the known Warcraft III Map

pumpkintd.com

52

Pumpkin TD is a fan-made custom tower defense map for Warcraft III, offering players a strategic and engaging gameplay experience. The website serves as the official hub for downloads, community engagement via Discord, and support through Patreon. It features rich multimedia content including video guides and changelogs, targeting Warcraft III players and tower defense enthusiasts. The business model is primarily community-driven with free distribution and optional supporter contributions. Technically, the website is built using modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as YouTube IFrame API, Google Tag Manager, and Redistats for analytics. The site is mobile-optimized, accessible, and performs well with fast loading times. However, it lacks some security headers and formal privacy or cookie policies. From a security perspective, the site enforces HTTPS and implements good practices such as ARIA labels and keyboard navigation support. No forms collect sensitive data, reducing risk exposure. However, the absence of privacy and cookie policies, security headers, and incident response contacts indicates areas for improvement. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional website presence. Overall, Pumpkin TD's website is a well-designed, content-rich platform with strong community engagement but requires enhancements in privacy compliance, security headers, and domain registration transparency to improve trust and security posture.

BMW Slovakia operates an official, professionally designed website offering premium automotive products including electric vehicles, financing, and after-sales services. The site is well-structured, mobile-optimized, and uses advanced Adobe Experience Manager CMS and marketing tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the website demonstrates high trustworthiness and compliance with GDPR, targeting Slovak customers interested in premium vehicles and services.

I

IBK-Akademie

ibk-akademie.org

61

The IBK-Akademie website represents a specialized educational platform focused on cross-border cooperation and administrative training within the Bodensee region, targeting government and public sector professionals. The platform offers modular courses, networking opportunities, and knowledge exchange to enhance regional collaboration. The website is professionally designed, mobile-optimized, and provides clear navigation and contact options, including a contact form with CAPTCHA for spam prevention. Technically, the site uses modern web technologies and a Sitejet CMS, with Matomo analytics for user tracking. Security posture is solid with HTTPS and basic protections, though security headers are not explicitly detected. WHOIS data is unavailable or malformed, limiting domain registration transparency, but the website content and partner affiliations suggest legitimacy. Privacy and cookie policies are present and GDPR compliant. Overall, the site scores well on content quality, business credibility, and technical implementation, with recommendations to improve WHOIS transparency and security headers.

E

Evangelisch Luther

luth-kirche.li

58

The website www.luth-kirche.li represents a small, local religious organization affiliated with the Evangelisch Luther church in Liechtenstein. The site is built using the Wix platform and serves primarily as an informational portal for community members and visitors interested in the church's activities. The content is basic and primarily in German, with no advanced business or e-commerce features detected. Technically, the site uses standard Wix scripts and styles, with moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacks important security headers and privacy policies. No contact information or incident response details are provided, limiting transparency and user trust. Overall, the site is legitimate and consistent with its stated purpose but would benefit from enhanced privacy compliance and security best practices.

D

Start | Dompfarrei Vaduz

dompfarrei.li

60

The website www.dompfarrei.li appears to represent a religious parish entity based in Liechtenstein. The site is built using the Wix platform, leveraging standard Wix scripts and hosting. The content is minimal and primarily in German, with no clear business or organizational details provided in the accessible HTML content. There is no evidence of privacy, cookie, or terms of service policies, nor any contact information or social media presence. Technically, the site uses Wix's infrastructure but lacks advanced SEO, accessibility, and security features. Security posture is basic with no detected security headers or incident response information. Overall, the site appears to be a small-scale, low-traffic informational site with limited digital maturity.

L

Liechtensteinische Landesverwaltung

gesetze.li

54

The website gesetze.li is an official government legal database operated by the Liechtensteinische Landesverwaltung, providing up-to-date consolidated legal texts and state treaties for the Principality of Liechtenstein. It serves legal professionals, government officials, and the general public interested in Liechtenstein law. The site offers comprehensive search capabilities including full text, titles, abbreviations, and legal reference numbers, with a focus on accuracy and official information dissemination. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with Matomo analytics integrated for user behavior tracking. The site is served over HTTPS with good SSL configuration, ensuring secure data transmission. The design is professional and consistent with government branding, optimized for mobile devices with basic accessibility features. From a security perspective, the site enforces HTTPS and secure form submissions but lacks advanced security headers and published security policies. There is no cookie consent mechanism despite the use of analytics, which may present minor privacy compliance gaps. No vulnerabilities or suspicious content were detected, and the domain registration aligns well with the official government entity, indicating high legitimacy. Overall, the website is a trustworthy and authoritative source for Liechtenstein legal information, with recommendations to enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

Études is a small architectural firm based in the Czech Republic, founded in 2018, focusing on innovative and sustainable architectural solutions. The company offers a range of services including renovation, restoration, consulting, project management, and digital engagement through an app and newsletter. The website is built on WordPress and hosted by a Czech hosting provider, reflecting a moderate level of technical maturity with good mobile optimization and accessibility. However, the site lacks critical privacy and security policies, contact information, and security headers, which impacts its overall security posture. No evidence of analytics or advertising tools was found, indicating minimal user tracking. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in privacy compliance, security best practices, and contact transparency are recommended to enhance trust and compliance.

N

NetzWerkstatt GmbH & Co. KG

flensburg.digital

55

The website is a government-operated citizen portal for Flensburg, Germany, designed to provide digital administrative services and accessibility features to its users. It is powered by TYPO3 CMS and integrates Matomo analytics with a clear cookie consent mechanism, reflecting a commitment to user privacy and accessibility. The portal targets local citizens, offering a range of accessibility adjustments to support users with disabilities, indicating a strong focus on inclusivity. Technically, the site employs modern web technologies and frameworks, including TYPO3 CMS and JavaScript-based accessibility tools. The site appears well-structured, mobile-optimized, and accessible, though some performance and security headers could be improved. The absence of explicit privacy policies and contact information slightly detracts from the overall compliance and trustworthiness. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and incident response contacts. The WHOIS data is unavailable due to privacy protection, which is justifiable given the governmental nature of the site. No vulnerabilities or suspicious patterns were detected, and the site does not appear to be blocked by any WAF or security mechanism. Overall, the site presents a professional and trustworthy digital government service with good accessibility and privacy practices but would benefit from enhanced transparency in privacy policies and security disclosures.

The website 'Buhlmann Port' presents a minimalistic virtual tour experience primarily in German. The business overview is limited to the virtual showroom concept with no detailed company information or services described. The site appears to target a general audience interested in virtual tours but lacks clear business model or market positioning details. Technically, the site uses basic HTML, CSS, and JavaScript with some preloading optimizations and mobile viewport settings, indicating moderate digital maturity. However, the absence of CMS or advanced frameworks suggests a simple infrastructure. Security posture is weak due to missing HTTPS confirmation, lack of security headers, and no visible privacy or cookie policies. The WHOIS data is notably absent, raising concerns about domain legitimacy and registration status. Overall, the site is functional but lacks critical trust and compliance elements, posing risks for user trust and regulatory adherence.

S

Skylark Energy Solutions

skylark-energy.com

56

Skylark Energy Solutions is a small, US-based company founded in 2024, specializing in providing consulting and product solutions to electric utilities, with a focus on grid-enhancing technologies and asset monitoring. The company offers expert consulting services and specialized hardware and software products to support reliable infrastructure in the energy sector. The website is professionally designed using Squarespace, featuring clear navigation and mobile optimization, but lacks detailed business contact information and formal privacy or security policies. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating good baseline security practices. However, the absence of additional security headers and privacy compliance features suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which raises concerns about domain legitimacy and registration consistency. Overall, the website presents a credible business front but requires enhanced transparency and compliance documentation to improve trust and security posture.

T

Technisches Betriebszentrum AöR

tbz-flensburg.de

52

The Technisches Betriebszentrum Flensburg is a municipal service provider focused on environmental management, waste disposal, city maintenance, and infrastructure services for the city of Flensburg, Germany. The website presents a professional and comprehensive digital presence, offering detailed information about services, current news, and educational programs. The company maintains active communication channels including phone, email, and social media, enhancing accessibility for residents. Technically, the website is built on the gradwerk CMS 6 platform, utilizing modern web standards such as HTML5, CSS3, and JavaScript. It features responsive design and accessibility considerations, with a cookie consent mechanism compliant with GDPR. Performance is moderate with preloading of resources and optimized images. From a security perspective, the site enforces HTTPS and implements cookie consent management. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the municipal identity, supporting legitimacy. Overall, the site is trustworthy, well-maintained, and suitable for its public service role. Strategic improvements in security transparency and incident response readiness would further enhance its posture.

R

ruhr-concept KG

presse-service.de

57

ruhr-concept KG operates the website presse-service.de, a specialized press service portal established since 1995, targeting municipalities, associations, publishers, parties, companies, media offices, and hotel chains in Germany. The platform facilitates active press work by distributing press releases and media to editorial offices, subscribers, and readers. The website demonstrates a good level of content quality and professional design, with a strong focus on accessibility, integrating an advanced accessibility tool to support various user needs. Technically, the site is built on ASP.NET with Bootstrap and jQuery, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy but would benefit from enhanced security and compliance documentation.

L

Elixir | PC Game Launcher

ln.onl

59

Elixir.games appears to be a technology-focused website offering a PC game launcher platform aimed at gamers. The site is minimalistic with limited content and lacks detailed business or contact information. The technical infrastructure includes modern web fonts and JavaScript but lacks advanced frameworks or CMS indications. Security posture is weak due to missing HTTPS verification, absence of security headers, and no visible privacy or cookie policies. The WHOIS data is unavailable or malformed, indicating privacy protection or data access issues, which reduces trustworthiness. Overall, the site is functional but lacks maturity in security, compliance, and business transparency.

B

BAVARIA Bratislava s.r.o.

bavariabratislava.sk

10

BAVARIA Bratislava s.r.o. operates as an authorized BMW dealership and service center located in Bratislava, Slovakia. The company offers a comprehensive range of BMW vehicles including new and used cars, alongside financial services, servicing, and original accessories. Positioned as the largest and most modern BMW showroom in Slovakia, it targets BMW customers seeking premium automotive products and services. The website reflects a professional and consistent brand image aligned with BMW standards. Technically, the website is built on the siteLAB CMS platform and incorporates modern JavaScript libraries such as Swiper.js and Owl Carousel for UI components, along with Google reCAPTCHA for form security and Facebook SDK for customer chat integration. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and integrates anti-bot measures via reCAPTCHA. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

L

Liftago

liftago.sk

69

Liftago is a Czech Republic-based transportation company specializing in taxi rides and courier deliveries, operating across 15 cities. The company offers services via a mobile app and website, targeting both consumers and businesses seeking reliable on-demand transportation solutions. The website is professionally designed, mobile-optimized, and provides clear information about services, privacy, and terms. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and Cookiebot for consent management, hosted likely on Cloudflare infrastructure ensuring good performance and security. Security posture is strong with HTTPS enforcement, comprehensive cookie consent, and security headers, though no explicit security policy or incident response contacts are published. Overall, Liftago presents a trustworthy and professional digital presence with moderate to high maturity in technical and privacy compliance aspects.

The domain centotag.io is registered to Media Group Denmark ApS, a Danish company established in 2020. The website currently hosts only a placeholder page provided by Simply.com, indicating that the domain is parked or not actively used for business purposes. There is no business description, services, or contact information available on the site. The technical infrastructure is minimal, with basic HTML, CSS, and JavaScript, and DNS hosted via Cloudflare. No CMS or advanced frameworks are detected. Security posture is weak due to lack of visible HTTPS enforcement, security headers, and privacy policies. No analytics or tracking scripts are present, indicating minimal data collection or user tracking. Overall, the website lacks content, trust signals, and compliance documentation, resulting in a low trust and security score.

Noembed.com is a specialized technology service providing a unified oEmbed proxy API that simplifies embedding content from a wide range of supported sites, including those without native oEmbed support. The service targets developers and web integrators who require consistent embeddable content responses. The business operates as a small entity with open source code hosted on GitHub and is supported by a community of users and contributors. The website is professionally designed with clear navigation and good content relevance, though it lacks formal privacy and cookie policies. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, and is hosted on the Fastly CDN platform, ensuring good performance and reliability. Google Analytics is used for visitor tracking, but no advanced frameworks or CMS are detected. Mobile optimization and accessibility are basic but adequate for the target audience. From a security perspective, the domain registration is consistent and legitimate, registered with Gandi SAS since 2011, with clientTransferProhibited status enabled. However, DNSSEC is not enabled, and the website lacks security headers and formal security policies. No forms or sensitive data collection mechanisms are present, reducing attack surface. Privacy compliance is weak due to missing policies and cookie consent mechanisms. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected but would benefit from improved privacy compliance and security hardening. Strategic recommendations include enabling DNSSEC, adding privacy and cookie policies, implementing security headers, and publishing incident response and vulnerability disclosure information.

K

KZ-Gedenkstätte Husum-Schwesing | Erinnern und Handeln

kz-gedenkstaette-husum-schwesing.de

39

The website kz-gedenkstaette-husum-schwesing.de serves as an informational and memorial platform dedicated to the Husum-Schwesing concentration camp history. It targets a general audience interested in historical remembrance and education. The site operates on WordPress using the Divi theme and integrates OpenStreetMap for location services. The technical infrastructure is standard for small non-profit organizations, with moderate performance and basic mobile optimization. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain WHOIS data is limited, showing only name servers from a hosting provider, with no detailed registrant information, which slightly reduces trust but is not uncommon for small organizations. Overall, the site is functional and professional but lacks advanced security and compliance features.

S

Swiss Life Deutschland

swisslife.de

69

Swiss Life Deutschland operates as a leading insurance and financial advisory provider in Germany, offering comprehensive insurance, pension plans, and financial consulting services. The website reflects a mature enterprise-level business with a strong market position and a clear focus on serving private and corporate clients. The content is professionally crafted in German, targeting the German market with consistent branding and trust indicators such as ISO certifications and GDPR compliance. The business model centers on insurance and holistic financial planning, supported by a well-established parent company, Swiss Life Holding AG.

M

Montano Real Estate GmbH

montano.eu

56

Montano Real Estate GmbH is a specialized investment and asset management company focused on the German commercial real estate market. Founded in 2013, it offers tailored investment products and manages assets exceeding 1.6 billion euros, targeting institutional investors seeking secure and high-yield opportunities. The company emphasizes sustainable value creation and maintains partnerships with major players such as Carlyle Group and Beyond Real Estate Holding. The website is professionally designed with good navigation and mobile optimization, utilizing modern web technologies like Bootstrap and jQuery. However, it lacks explicit privacy and cookie policies, security headers, and visible contact information, which are areas for improvement. The domain registration is consistent with the business claims, indicating legitimacy and trustworthiness.

E

European Southern Observatory

eso.org

65

The European Southern Observatory (ESO) is a leading intergovernmental organization dedicated to astronomical research and the operation of world-class ground-based observatories in the Southern Hemisphere. The website serves as a comprehensive portal for scientific discoveries, public outreach, educational resources, and detailed information about ESO's telescopes and instruments. It targets a broad audience including researchers, educators, students, and astronomy enthusiasts worldwide. The business model is non-profit and government-oriented, focusing on advancing astronomy and related technologies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Matomo analytics for privacy-conscious visitor tracking. It is hosted on CDN77, ensuring fast content delivery and good performance. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and multilingual support. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms aligned with GDPR. While explicit security headers like Content-Security-Policy are not confirmed, best practices are largely followed. No vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy or vulnerability disclosure program is noted. Overall, the website presents a low-risk profile with strong trust indicators and professional content. The lack of WHOIS data limits domain registration insights but does not detract from the site's legitimacy. Strategic recommendations include enhancing security header implementation, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen trust and compliance.

A

Adldinger Unternehmensgruppe

adldinger.de

51

Adldinger Unternehmensgruppe is a German construction and real estate company focused on building with tradition and solutions for the future. The website presents a professional and consistent brand image targeting general public and business clients in the real estate sector. The technical infrastructure is modern, leveraging Webflow CMS, JavaScript libraries such as Swiper.js, and third-party services like Cookiebot for cookie consent and Google Analytics for user tracking. Hosting is provided by rzone.de, consistent with the domain's WHOIS data. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of explicit security headers and privacy policy pages indicates room for improvement. The website is accessible without WAF or security challenges, and no suspicious WHOIS patterns were detected, supporting the domain's legitimacy. Overall, the site scores moderately high in business credibility and technical implementation but should enhance privacy compliance and security best practices.

K

Kieler Nachrichten

kn-online.de

59

Kieler Nachrichten is a well-established regional news media organization based in Germany, focusing on delivering comprehensive news coverage for Kiel and the surrounding Schleswig-Holstein region. The website offers a broad range of content including politics, sports, culture, and lifestyle, supported by digital services such as e-paper, podcasts, and newsletters. It operates under the umbrella of the RedaktionsNetzwerk Deutschland, indicating a strong partnership network and market presence. Technically, the site leverages modern web technologies including React and implements consent management mechanisms to comply with GDPR requirements. The security posture is solid with HTTPS enforced and standard security practices observed, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a high level of professionalism and trustworthiness suitable for its audience and business model.

K

KAARISMA Recruitment GmbH

kaarisma-blue.de

61

KAARISMA BLUE Recruitment is a specialized recruitment agency based in Germany focusing on placing Servicetechniker and industrial technical professionals. The company positions itself as a modern headhunting service with a strong emphasis on matching candidates and employers harmoniously, particularly in sales and technical roles. Their business model revolves around active process support until successful hiring, targeting companies seeking qualified service technicians. The website content is professional, well-branded, and clearly communicates their value proposition. Technically, the site uses Kirby CMS and Matomo analytics, indicating a moderate level of digital maturity with some privacy-conscious tracking. Security posture is adequate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is accessible, trustworthy, and serves its business purpose effectively.