Security Directory

K

Kreditz

kreditz.com

76

Kreditz is a Sweden-based fintech company specializing in open banking and PSD2 data analytics to facilitate intelligent credit and risk decisions. Their offerings include consumer and business account certificates, leveraging consent-based data and AI technology to improve credit decisioning processes. The company targets financial institutions and businesses requiring advanced credit risk insights, positioning itself as a leader in the open banking data space. Technically, the website is built on modern frameworks such as React.js, hosted on AWS infrastructure, and integrates multiple marketing and analytics tools including HubSpot, Google Analytics, Hotjar, and LinkedIn Insight. Security posture is strong with HTTPS enforcement, domain registration protections, and cookie consent management via Cookiebot, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, Kreditz demonstrates a mature digital presence with good privacy compliance and professional branding, though improvements in transparency around security policies and terms of service would enhance trust further.

S

Showpad

showpad.com

86

Showpad is a well-established enterprise SaaS company founded in 2005, specializing in sales enablement solutions that combine content management, sales readiness, buyer engagement, and AI-powered intelligence. The recent merger with Bigtincan positions Showpad as a leader in the revenue effectiveness platform market, serving over 2,000 sales organizations globally. Their platform integrates with over 75 third-party services, enhancing workflow flexibility and customer engagement. Technically, the website is built on WordPress and leverages modern marketing and analytics technologies such as Google Tag Manager, Marketo, Microsoft Clarity, and Cloudflare Bot Management. The site is well optimized for performance, mobile responsiveness, accessibility, and SEO, reflecting a mature digital infrastructure. From a security perspective, Showpad employs HTTPS with strong SSL configuration, security headers, bot management, and cookie consent mechanisms. While DNSSEC is not enabled, the overall security posture is strong with no visible vulnerabilities or exposed sensitive data. The company maintains a responsible disclosure page, indicating incident response readiness. Overall, Showpad demonstrates a high level of business credibility, technical sophistication, and privacy compliance. The website content is professional, trustworthy, and safe for general audiences, with strong trust signals including customer testimonials and industry awards. Strategic recommendations include enabling DNSSEC, publishing a security.txt file, and enhancing visibility of incident response contacts to further strengthen security and compliance.

DALTEN media s.r.o. operates the website realitnibalicek.cz, offering a comprehensive package of services tailored for real estate agencies, brokers, and developers in the Czech Republic. Their offerings include a popular real estate portal RealityMIX.cz, real estate software iRest.cz, and various web presentation services for properties, agencies, and brokers. The company leverages over 20 years of experience and maintains a strong market presence with partnerships across multiple related domains. Technically, the website employs modern JavaScript libraries, Google Fonts, and a cookie consent management system, ensuring a responsive and user-friendly experience across devices. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent, though explicit security headers and incident response policies are not published. Overall, the site is professional, trustworthy, and well-optimized for its target audience.

D

DALTEN media s.r.o.

rmixmls.cz

54

RMIX MLS is a Czech Republic-based B2B platform designed to serve real estate agents by providing a comprehensive Multiple Listing Service (MLS) ecosystem. The platform enables agents to share property listings, including public and non-public offers, and facilitates collaboration to accelerate property sales and rentals. The business is operated by DALTEN media s.r.o., a company with over 20 years of experience in real estate software development, positioning RMIX MLS as a credible and established player in the Czech real estate market. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content tailored to its target audience of real estate professionals. Technically, the website employs modern JavaScript libraries including jQuery and Google Tag Manager for analytics and marketing purposes. It uses HTTPS with good SSL configuration and implements a comprehensive cookie consent mechanism compliant with GDPR. However, the site lacks explicit security headers and a dedicated security policy page, which are areas for improvement. The contact information is clearly presented, including phone, email, physical address, and a contact form, enhancing business credibility. From a security perspective, the site demonstrates good practices such as encrypted connections and consent-based tracking, with no visible vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the business information, showing consistent registration details and domain age appropriate for the company's founding year. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, RMIX MLS presents a trustworthy and professional online presence with solid technical and privacy compliance foundations. Strategic enhancements in security headers and incident response disclosures would further strengthen its security posture and trustworthiness.

The website webnem.cz is operated by DALTEN media s.r.o. and offers specialized web presentation services for real estate properties, enabling clients to create dedicated websites for individual properties with marketing and SEO benefits. The business targets real estate professionals and property sellers primarily in the Czech Republic, leveraging over 20 years of experience and partnerships with multiple real estate platforms. Technically, the site uses modern JavaScript libraries including jQuery and Google Analytics, with a responsive design optimized for mobile devices. Security posture is solid with HTTPS enforced and consent-based cookie management, though some security headers are missing. Privacy compliance is evident through GDPR consent mechanisms and a linked privacy policy hosted on a partner site. Contact information is comprehensive and prominently displayed. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

DALTEN media s.r.o. operates the Web Makléře platform, providing real estate agents in the Czech Republic with customizable personal websites integrated with their RealityMIX.cz profiles. The service offers fast setup, professional templates, and hosting, targeting real estate professionals seeking to enhance their online presence. The company leverages over 20 years of experience in real estate software development and maintains partnerships with major real estate portals, positioning itself as a trusted provider in the local market. Technically, the website uses modern JavaScript libraries, Google Fonts, and cookie consent management, with responsive design and moderate performance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though security headers could be improved. Privacy compliance is good, linking to a GDPR-compliant privacy policy on a partner domain. Contact information is clear and comprehensive. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

D

DALTEN media s.r.o.

irest.cz

54

iRest.cz is a Czech Republic based SaaS provider offering comprehensive real estate management software tailored for real estate agencies and brokers. The company, DALTEN media s.r.o., founded in 2006, positions itself as an established player with over 250 agencies using its platform. The website presents tiered subscription models with clear pricing and features, emphasizing efficiency and cost savings for clients. The business model focuses on software subscriptions integrated with real estate listing portals and web presentation services. Technically, the website employs modern JavaScript frameworks, asynchronous script loading, and responsive design, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site is professional, trustworthy, and compliant with GDPR through linked policies. Recommendations include enhancing security headers, publishing terms of service, and formalizing incident response contacts to improve trust and compliance.

R

Reimo

reimo.com

61

Reimo operates an established e-commerce platform specializing in camping accessories, motorhome parts, and camper van materials primarily targeting camping enthusiasts and vehicle owners in Germany. The website is built on the Shopware platform and demonstrates a good level of digital maturity with responsive design, multi-language support, and integration of customer review widgets. Security posture is adequate with HTTPS enforcement and CSRF protections, though some security headers and explicit policies are missing. The absence of WHOIS registration data is a concern but does not currently undermine the professional presentation and trust signals on the site. Overall, the business appears credible with room for improvement in privacy and security transparency.

The website gubagoo.io is currently inaccessible, returning a 403 Forbidden error page with no visible content, metadata, or interactive elements. This prevents a comprehensive analysis of the site's content, privacy policies, security posture, and business operations. The domain is registered to Gubagoo Inc., a US-based technology company founded in 2015, with a consistent and legitimate WHOIS record. Hosting appears to be on Amazon AWS infrastructure, but no further technical details or technologies can be confirmed due to the blocked content. Security posture cannot be fully assessed; however, the lack of accessible content and security headers is a concern. No privacy or cookie policies, contact information, or social media links are present, indicating poor transparency and user engagement on the website. Overall, the site currently provides no usable information or services to visitors, resulting in a low AI score and high risk for user trust and engagement.

The website www.customerconnections.io is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any meaningful content. The WHOIS data is unavailable, showing only registry policy text, indicating privacy protection or query failure. No business, contact, or compliance information is present on the site. The technical infrastructure relies on Cloudflare services for security and performance, but no further details about the underlying platform or CMS can be determined. The security posture cannot be fully assessed due to the lack of accessible content and metadata. Overall, the site appears to be protected by strong WAF mechanisms but lacks transparency and publicly available information, which limits trust and credibility assessments.

The analyzed website is a login portal for a service branded as iCC, likely related to Interact Cloud Control or a similar business platform. The page is minimalistic, focused solely on user authentication, with no additional business or policy information presented. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, and ASP.NET Core (.NET 6.0), indicating a contemporary development stack. The site is accessible without any web application firewall or security challenge blocking, allowing full content analysis. Security measures include the use of anti-forgery tokens and password input best practices, but lack visible security headers and privacy policies, which are areas for improvement. The absence of WHOIS data for the subdomain is typical and does not indicate risk, but limits domain trust assessment. Overall, the site is functional but basic in content and security posture.

The website www.glassolutions.es is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) challenge page employing Turnstile captcha and browser verification. This security mechanism prevents direct access to the site's content, resulting in no visible business information, metadata, or contact details. The domain's WHOIS data is unavailable due to Red.es restrictions on .es domains, limiting the ability to verify domain registration details and legitimacy. Analytics scripts from Google Tag Manager and Google Analytics 4 are present, with references to multiple Saint-Gobain group domains, suggesting affiliation or partnership. However, no direct business description or services are accessible. The technical infrastructure relies on Cloudflare for security and hosting, but no further CMS or platform details are discernible. The security posture cannot be fully assessed due to lack of accessible content and headers. Privacy and cookie policies are not found, indicating potential compliance gaps. Overall, the site is currently blocked from analysis, and the risk assessment is limited by this inaccessibility.

S

Sekurit Service

sekurit-service.com

67

Sekurit Service operates as a specialized supplier of automotive glass products, tools, and related services, primarily targeting the German automotive aftermarket and professional sectors. The website is well-structured, professionally designed, and integrates modern e-commerce and e-business functionalities, including VIN search and order management. The company is a subsidiary of Saint-Gobain, a reputable multinational, which strengthens its market position and credibility. Technically, the site leverages SAP Commerce Cloud, Google Tag Manager, and Dynatrace for analytics and performance monitoring, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be enhanced. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trust due to the professional presentation and parent company association. Strategic recommendations include improving security headers, maintaining compliance documentation, and enhancing transparency around domain registration.

Chryso España is a specialized provider of chemical additives and solutions for the construction industry, focusing on improving concrete and building materials. The company operates primarily in Spain and is part of the larger Sika AG group, positioning itself as a reputable player in the manufacturing sector. The website reflects a professional B2B business model targeting construction professionals and concrete producers. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics tools such as HubSpot and Google Tag Manager, indicating a mature digital presence. Security-wise, the site enforces HTTPS, employs standard security headers, and implements GDPR-compliant privacy and cookie policies, although it lacks a dedicated security policy or incident response page. Overall, the website is trustworthy, well-structured, and safe for general audiences, with no signs of blocking or WAF interference.

The website saint-gobain-sekurit.com is currently inaccessible beyond a Cloudflare security challenge page, which prevents direct content analysis. The domain is registered to Nameshield SAS with name servers under saint-gobain.com, indicating it belongs to the Saint-Gobain corporate group. Due to the WAF challenge, no business content, policies, or contact information are accessible. The site uses Google Tag Manager and Google Analytics 4 for tracking, but no privacy or cookie policies are visible. The domain age and registration data support legitimacy, but the lack of accessible content limits the ability to assess the website's full business and security posture.

D

Distriplac

distriplac.com

71

Distriplac is a Spanish company specializing in the distribution of construction materials, particularly for interior conditioning, drywall, and ceilings. The company positions itself as a leader in its niche market, targeting construction professionals and contractors. The website is built on the Magento e-commerce platform, leveraging modern JavaScript libraries such as RequireJS and jQuery, and integrates analytics and user behavior tracking tools like Google Tag Manager and Hotjar. A cookie consent mechanism is implemented via Cookiebot, indicating attention to privacy compliance. Security posture is generally good with HTTPS enabled, but lacks some security headers and explicit security policies. The absence of WHOIS data for the domain raises concerns about domain registration transparency, though the website itself appears professional and trustworthy. Overall, the site demonstrates moderate digital maturity with room for improvement in security and compliance documentation.

I

Incusa

incusa.es

62

Incusa is a medium-sized manufacturing company specializing in the extraction and commercialization of high-purity feldspar and silica sand, serving industrial sectors such as ceramics, glass, foundry, and construction. The company operates internationally, distributing products in over 20 countries and is a subsidiary of the Saint-Gobain Group, indicating a strong market position and reputable backing. The website reflects a professional digital presence built on WordPress with Elementor, optimized for SEO and mobile responsiveness. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks explicit privacy and security policy pages and security headers, which are recommended for compliance and enhanced protection. Overall, the website is trustworthy and well-structured, supporting the company's industrial business model and international reach.

Saint-Gobain Weber España operates as a leading provider of industrial mortars and construction solutions in Spain, specializing in products such as ceramic tile adhesives, thermal insulation systems (SATE), continuous flooring, and technical mortars. The company is part of the global Saint-Gobain group, which enhances its market position and trustworthiness. The website is professionally designed, content-rich, and targets construction professionals, architects, and contractors with comprehensive product information, tools, and services. Technically, the site is built on Drupal CMS, employs modern analytics and consent management tools, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though additional security headers could improve defenses. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is privacy protected but domain registration details and website content align with a legitimate, active business. Overall, the site demonstrates a mature digital presence suitable for a large enterprise in the manufacturing and construction sector.

P

Paneles ACH

panelesach.com

65

Paneles ACH is a Spanish manufacturing company specializing in metal sandwich panels with rock wool, offering acoustic and fire protection solutions. The company positions itself as a leader in its sector, targeting industrial and construction markets. The website is professionally designed using WordPress and Elementor, with multilingual support and cookie consent mechanisms in place. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is strong with HTTPS and security headers, but lacks explicit security policies and incident response contacts. Privacy compliance is partial, with cookie consent but no visible privacy policy or terms of service pages.

E

Ecophon

ecophon.com

66

Ecophon is a global manufacturer and marketer of acoustic ceiling tiles and wall absorber systems designed to enhance wellbeing and performance in work environments. The company positions itself as a leader in acoustic solutions with a strong brand promise focused on the positive impact of sound on people. The website is professionally designed, mobile-optimized, and uses modern technologies including Episerver CMS, Google Tag Manager, and Azure Application Insights for analytics and performance monitoring. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and detailed privacy policy. However, the absence of WHOIS registration data for the domain www.ecophon.com is a notable anomaly that warrants further investigation to confirm domain legitimacy. No direct contact emails or phone numbers are found on the main page, which may impact user trust and accessibility. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but explicit security policies and incident response information are missing. Overall, the website demonstrates a mature digital presence with good privacy and security practices but could improve transparency and contact accessibility.

The website cdn-convertus.com is currently inaccessible due to an Access Denied error likely caused by Cloudflare's Web Application Firewall (WAF) or security settings. This prevents any meaningful content, metadata, or business information from being retrieved or analyzed. The domain is registered with Amazon Registrar, Inc. since 2021 and uses Cloudflare DNS, which is consistent with modern hosting and security practices. However, the lack of accessible content severely limits the ability to assess the company's business model, services, or market position. Technically, no information about the technology stack, CMS, or performance can be determined. Security posture cannot be evaluated beyond the presence of Cloudflare protection. Overall, the site appears to be either under strict security controls or misconfigured, resulting in a poor user and analytical experience.

S

Swiss Casinos

swisscasinos.ch

10

Swiss Casinos operates a professional online casino platform targeting adult users primarily in Switzerland and other allowed countries. The website offers localized content in multiple languages and supports the Swiss Franc currency. The platform leverages modern JavaScript technologies and third-party analytics and marketing tools to deliver a responsive and engaging user experience. While the site enforces HTTPS and uses security analytics, it lacks explicit privacy and terms of service pages and does not implement a cookie consent mechanism, which are areas for improvement. No direct contact information or security incident response details are provided, which could impact user trust and compliance. Overall, the site demonstrates a solid technical foundation and business credibility within the online gambling sector.

M

mycasino

mycasino.ch

65

mycasino.ch is the largest online Swiss casino platform offering a wide range of gambling services including slots, roulette, blackjack, live casino, and jackpots. The website targets adult users interested in online gambling within Switzerland and positions itself as a safe and fair gaming environment with attractive bonuses. The partnership with Grand Casino Luzern further strengthens its market presence. Technically, the site is built on modern web technologies such as React and Next.js, with performance and mobile optimization well implemented. Security posture is good with HTTPS and error monitoring via Sentry, though explicit security headers and privacy policies are lacking. Overall, the site is professional and trustworthy but could improve transparency on privacy and security policies.

J

jackpots.ch

jackpots.ch

69

jackpots.ch is Switzerland's first legal online casino, offering a wide range of casino games with attractive welcome bonuses and promotions. The platform targets Swiss adult players and operates under a Swiss gambling license, positioning itself as a pioneer in the regulated Swiss online gambling market. The website is professionally designed with excellent user experience and mobile optimization, reflecting a mature digital presence. Technically, jackpots.ch leverages modern web technologies including React, Google Tag Manager, Hotjar, and reCAPTCHA v3, hosted on Amazon CloudFront CDN, ensuring fast performance and scalability. Security measures are robust, with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities. Privacy compliance is strong, featuring GDPR-compliant privacy and cookie policies with user consent mechanisms. WHOIS data confirms the legitimacy of the domain registration, consistent with the business claims and appropriate domain age. Overall, jackpots.ch demonstrates a high level of professionalism, security, and compliance, making it a trustworthy platform in the Swiss online gambling sector.

N

Next.js Weekly

nextjsweekly.com

60

Next.js Weekly is a niche newsletter service providing curated weekly content focused on the Next.js ecosystem, including news, tutorials, projects, and tools. The service targets Next.js developers and technology enthusiasts seeking to stay updated with minimal fluff. The website is professionally designed using modern web technologies such as Next.js and React, delivering a fast, mobile-optimized, and accessible user experience. The technical infrastructure appears modern and well-implemented, with no major performance or usability issues detected. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie policy or GDPR-specific indicators. Business credibility is supported by testimonials and consistent branding, though no direct contact information or detailed company data is provided. Overall, the website is trustworthy and professional but could improve privacy and security transparency.

The website www.reactiveconf.com currently displays a Squarespace expired account placeholder page, indicating that the domain is either unregistered or the hosting account has expired. No business-related content, contact information, or policies are available, making it impossible to assess the company's operations, market position, or services. The technical infrastructure is limited to Squarespace hosting with no active content or security configurations visible. The security posture is poor due to lack of HTTPS information, security headers, or privacy compliance indicators. Overall, the site is inaccessible and does not provide any meaningful information for analysis.

F

Future Frontend

futurefrontend.com

44

Future Frontend is a specialized conference series focused on frontend development, targeting senior developers and designers interested in emerging trends. The business operates primarily through annual events held in Finland, with workshops and networking opportunities. The website reflects a niche, quality-oriented event organizer with a clear focus on community and knowledge sharing. Technically, the site is built with modern web standards, leveraging Cloudflare for hosting and CDN, and uses JavaScript libraries such as Leaflet for maps. The site is performant, mobile-optimized, and SEO-friendly, though accessibility is basic. Security posture is solid with HTTPS and domain transfer protections, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with no signs of malicious activity or content safety concerns.

T

Two Inc

two.inc

73

Two Inc is a leading B2B payments platform specializing in providing instant net terms credit and Buy Now Pay Later (BNPL) solutions to business customers. The company leverages advanced credit and fraud engines to enable merchants to increase sales, improve average order values, and reduce risk. Their market position is strong, supported by partnerships with major financial institutions such as Santander, Allianz, ABN AMRO, and Visa. The platform offers a suite of products including Guest Checkout, Trade Accounts, Risk-as-a-Service, and Instalments, targeting B2B merchants and buyers primarily in the finance and retail sectors.

P

Pearl Group

pearlgroup.no

66

Pearl Group is a Nordic technology company specializing in SAP and Hybris business system solutions, positioning itself as the largest SAP partner in the Nordic region. The website reflects a professional B2B service provider targeting businesses seeking rapid and secure implementation of new business systems. The company leverages HubSpot CMS and integrates multiple marketing and analytics tools to support its digital presence. The technical infrastructure is modern with standard libraries and tracking technologies, though some security best practices such as security headers and explicit privacy policies are lacking. The website is secured with HTTPS and employs a cookie consent mechanism, indicating awareness of privacy compliance, albeit with room for improvement. Overall, the security posture is solid but could benefit from enhanced transparency and formalized security policies. The domain WHOIS data is privacy protected, which is typical for business websites, and no suspicious indicators were found. Strategic recommendations include publishing comprehensive privacy and security policies, adding security headers, and providing clear contact information to enhance trust and compliance.

R

Rittler & Co Werbeagentur Graz

werbe-agentur-graz.at

68

Rittler & Co Werbeagentur Graz is a well-established full-service marketing and advertising agency based in Graz, Austria, with over 20 years of experience. They specialize in brand positioning, branding, corporate websites, online shops, and digital marketing strategies. The agency serves businesses seeking comprehensive marketing solutions with a focus on clear strategy, strong creative execution, and measurable results. Their market position is reinforced by multiple industry awards and a strong portfolio of clients. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries like jQuery and Owl Carousel, and implements cookie consent mechanisms. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security posture is solid with HTTPS and no exposed sensitive data, but lacks explicit security policies or incident response information. Overall, the website reflects a professional and credible business with a high level of trustworthiness.

E

eurotransport

eurotransport.de

55

Eurotransport is a well-established German media portal specializing in commercial vehicles and logistics. The website offers a broad range of content including news articles, vehicle tests, industry reports, videos, podcasts, and an e-commerce shop targeting professionals in the transport and logistics sectors. The business model revolves around media publishing and product sales, supported by subscription services and advertising partnerships. The site is hosted on AWS infrastructure and leverages modern web technologies such as React and Next.js, with integration to Shopify for e-commerce functionalities. Social media presence is active on Facebook, Twitter, and YouTube, enhancing audience engagement. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is professional, trustworthy, and serves a niche market effectively.

H

HUSS-VERLAG GmbH

logistra.de

54

LOGISTRA is a specialized German logistics industry magazine operated by HUSS-VERLAG GmbH, targeting logistics, warehouse, and fleet management professionals. The website offers news, expert articles, event information, product recommendations, and job listings, positioning itself as a reputable media source in the transportation and logistics sector. The digital infrastructure is built on Drupal 9, integrating modern web technologies including Google reCAPTCHA, Google Publisher Tags for advertising, and a GDPR-compliant consent management platform. Analytics are handled via Matomo, ensuring moderate user tracking with privacy considerations. Security posture is solid with HTTPS enforced and anti-bot measures in place, though explicit security headers and policies are not fully documented. The absence of a visible privacy policy and terms of service is a notable gap. Overall, the site is professional, content-rich, and well-branded, serving a medium-sized enterprise audience in Germany.

V

Verband Deutscher Brieftaubenzüchter e.V.

dbtv1884.de

44

The Verband Deutscher Brieftaubenzüchter e.V. operates a well-structured and content-rich website serving the German pigeon breeding community. The site provides comprehensive information about the association, its services, and related activities such as the Taubenklinik and publications. The technical infrastructure is based on Joomla CMS with modern plugins and a responsive design, ensuring good user experience across devices. Security posture is solid with HTTPS enforced and a GDPR-compliant cookie consent mechanism, though some security headers and explicit policies could be improved. Overall, the website reflects a legitimate, established non-profit association with a strong market position in its niche. Strategic recommendations include enhancing security headers, publishing incident response policies, and expanding transparency around data protection.

P

PMGi - Agentur für intelligente Medien GmbH

pmgi.de

55

PMGi - Agentur für intelligente Medien GmbH is a German full-service media agency specializing in graphic design, web development, automated typesetting, publishing services, printing production, and marketing. As a creative division of the larger Print Media Group with approximately 500 employees, PMGi serves businesses seeking comprehensive media and publishing solutions. Their website reflects a professional and well-structured digital presence with detailed service offerings and client trust indicators such as a carousel of reputable client logos. Technically, the website is built on WordPress using modern plugins like Yoast SEO and Contact Form 7, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the website is trustworthy, compliant with GDPR, and provides clear contact channels.

T

Tauben-Shop

tauben-shop.de

48

Tauben-Shop is a German e-commerce retailer specializing in products for pigeons, ornamental birds, and breeders. The website offers a variety of health products, accessories, and event tickets catering to a niche market of bird enthusiasts and breeders. The site is built on the Shopware CMS platform and hosted on servers associated with matrix3.de, a German hosting provider. The website is well-branded and provides a good user experience with clear navigation and mobile optimization. However, it lacks explicit privacy, cookie, and terms of service pages, which are critical for compliance and user trust. Security-wise, the site uses HTTPS and SSL certificates, but additional security headers and policies are not evident.

H

HUSS VERLAG GmbH

transport-online.de

55

Transport-online.de is a professional German-language media portal operated by HUSS VERLAG GmbH, specializing in transport and logistics industry news, analysis, and resources. The website targets transport entrepreneurs, freight forwarders, and logistics service providers, offering biweekly publications, newsletters, job listings, and event information. The platform holds a strong market position within its niche, supported by a consistent brand presence and comprehensive industry coverage. Technically, the website is built on Drupal 9 CMS, utilizing modern web technologies including Matomo analytics for privacy-conscious tracking, Google reCAPTCHA for form security, and a Consent Management Platform to comply with GDPR. The site demonstrates good mobile optimization and SEO practices, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and employs standard security measures but lacks explicit security headers and a published security policy or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy and terms of service pages. Overall, the website is trustworthy and professional with a solid business model and technical foundation. Strategic improvements in privacy transparency, security headers, and contact information would enhance compliance and user trust.

S

SIXT

sixt.de

72

SIXT is a well-established global car rental and mobility service provider headquartered in Germany, offering premium vehicles and a wide range of services including car rental, car subscription, car sharing, and chauffeur services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses modern frameworks such as React and integrates a consent management platform to comply with privacy regulations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies could be improved. Privacy compliance is partially addressed via cookie consent but lacks visible privacy policy and terms of service links in the provided content. Overall, the site is trustworthy and professional, serving a broad audience including business and leisure customers worldwide.

O

OPEL Automobile GmbH

opel.de

10

Opel Automobile GmbH operates a professional and comprehensive automotive website targeting both private and business customers in Germany. The site offers vehicle configuration, test drive booking, and sales of new and used vehicles, including electric and hybrid models. The company is positioned as a major player in the transportation sector, supported by its parent company Stellantis. Technically, the website leverages Adobe Experience Manager, Google Tag Manager, and Dynamic Yield for content management, analytics, and personalization, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR consent mechanisms in place, although explicit security headers and detailed security policies are not evident. Overall, the website is well-designed, mobile-optimized, and trustworthy, with room for improvement in privacy policy visibility and security disclosures.

U

UNITED THEMES™

unitedthemes.com

60

UNITED THEMES™ is a small technology company specializing in WordPress theme development, particularly the Brooklyn WordPress Theme optimized for WooCommerce websites. Established in 2011 and operating under Digishark LLC, the company offers a range of digital products including prebuilt websites and website templates targeting WordPress users and WooCommerce site builders. The website demonstrates a professional design with good SEO optimization and mobile responsiveness, leveraging modern web technologies such as WordPress CMS, jQuery, and Google Analytics for tracking. Security posture is adequate with HTTPS enabled and Cloudflare DNS usage; however, there is room for improvement in DNS security and security headers implementation. Privacy and cookie policies are not found, indicating a compliance gap. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

A

Acord Comú del empleats públics de l'Administració Local de Catalunya

acordcomu2015.com

57

The website 'Acord Comú del empleats públics de l'Administració Local de Catalunya' serves as an informational portal for public employees of local government entities in Catalonia with populations under 20,000. It provides content related to employment agreements and local administration labor conditions. The site is built on the Wix platform, leveraging Wix Thunderbolt framework and standard web technologies. While the site is accessible and presents relevant content, it lacks critical privacy and contact information, which impacts user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and policies. The absence of WHOIS data raises concerns about domain legitimacy and ownership transparency, which should be addressed to improve trustworthiness and credibility.

T

Technická inspekce ČR

ticr.eu

49

Technická inspekce ČR is a Czech governmental organization responsible for the technical inspection and safety compliance of reserved technical equipment under Czech law 250/2021 Sb. The website serves as an official portal providing information, updates, and access to public databases related to technical inspections. The organization holds a key regulatory position in the Czech Republic's safety infrastructure, targeting legal entities and individual entrepreneurs involved with technical devices. Technically, the website uses legacy JavaScript libraries such as jQuery and Lightbox, with a CMS named inPage. The site is moderately optimized for performance and accessibility but lacks modern frameworks and advanced SEO features. Security-wise, the site employs HTTPS and a cookie consent mechanism with granular user controls but lacks visible HTTP security headers and explicit privacy or security policies. WHOIS data is unavailable due to EURid privacy restrictions, but the domain and content align with a legitimate government entity. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

F

Frank Bold

frankbold.legal

44

Frank Bold is a purpose-driven law firm operating primarily in the Czech Republic and other EU countries, specializing in energy law, corporate law, public law, and family law. The firm emphasizes social impact and sustainability, being the first certified B Corporation in the Czech Republic. Their client base includes businesses, municipalities, and individuals, and they maintain a professional and consistent online presence. Technically, the website is built on Drupal 7 with standard JavaScript libraries and integrates Google Analytics and Tag Manager for user tracking. The site is accessible, moderately optimized for mobile, and presents a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data, but lacks some security headers and explicit privacy consent mechanisms. WHOIS data is privacy protected, which is justified given the legal nature of the business. Overall, the website demonstrates a solid business credibility and a good security posture with room for improvement in privacy compliance and security transparency.

D

Dematis

certidemat.com

49

Certidemat is a specialized provider of electronic signature certificates compliant with eIDAS and RGS standards, primarily serving businesses and public entities in France. The company operates under the parent brand Dematis and offers digital trust services that facilitate secure electronic signatures for public procurement, legal acts, and other dematerialization processes. The website reflects a focused business model targeting compliance-driven digital certification needs within the French market. Technically, the website employs a modern technology stack including jQuery, FontAwesome, Google Fonts, and integrates third-party services such as Didomi for consent management, Tawk.to for live chat support, and Google Analytics for traffic analysis. The site is well-structured with good mobile optimization and basic accessibility features, providing a professional user experience. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, there is a lack of explicit security headers and no visible incident response or vulnerability disclosure information. The absence of WHOIS registration data is a notable concern, potentially impacting trustworthiness despite the professional presentation and active business presence. Overall, Certidemat presents a solid digital presence with good privacy compliance and business credibility, but the missing WHOIS data and limited security policy disclosures suggest areas for improvement to enhance trust and security posture.

D

Dematis

e-signaturesecurisee.com

47

The website e-signaturesecurisee.com is a French-language platform offering free electronic signature and signature verification tools primarily targeted at users equipped with valid digital certificates. It is part of the Dematis group ecosystem, which provides various related digital legal and administrative services. The site is professionally designed with clear navigation and good mobile responsiveness, leveraging technologies such as Bootstrap, jQuery, and Java applets for its core functionality. However, the use of Java applets may pose compatibility and security challenges in modern environments. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and links to Dematis and partner domains support its authenticity. Privacy compliance is partially addressed with a privacy policy, but lacks cookie consent mechanisms and terms of service pages. Security posture is moderate with HTTPS implied but missing explicit security headers and policies.

E-Stockagesecurise.com is a French technology company specializing in secure electronic archiving and long-term data backup solutions. The company offers a digital safe that provides electronic sealing, signature, and proof of document integrity, targeting businesses and organizations requiring trustworthy document storage. The website is professionally designed, leveraging modern web technologies such as Vue.js and Laravel's Ziggy routing helper, indicating a mature technical infrastructure. The site is mobile-optimized and provides clear navigation and contact options, enhancing user experience. Security posture is solid with HTTPS enforced and secure form endpoints, though explicit security headers and incident response policies are absent. Privacy and legal policies are comprehensive and hosted on the parent company domain, Dematis, which also appears as the legal entity behind the service. The absence of WHOIS data for the domain reduces trust slightly, but the overall business credibility remains high due to consistent branding and partner ecosystem. Strategic improvements include adding security headers, incident response information, and cookie consent mechanisms to enhance compliance and security maturity.

G

Galileo Corporation s.r.o.

zamekkravare.cz

44

Zámek Kravaře is a cultural heritage site and tourist attraction located in the Czech Republic, operated by Galileo Corporation s.r.o. The website serves as the official portal for the castle, offering information on tours, weddings, cultural events, and visitor services. It targets tourists, families, and local visitors interested in cultural and historical experiences. The business model revolves around ticket sales, event hosting, and rentals, positioning itself as a regional cultural hub. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, with responsive design and mobile optimization. The presence of a cookie consent mechanism indicates some level of privacy compliance, though explicit privacy and terms of service pages are missing. The site uses HTTPS, but no security headers were detected in the provided data, suggesting room for improvement in security hardening. From a security perspective, the site shows moderate maturity with no obvious vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces trust and raises questions about domain registration legitimacy. The site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for improved security posture. Overall, the website is professionally designed and content-rich, providing a trustworthy user experience for its audience. Strategic improvements in security headers, privacy documentation, and domain registration transparency would enhance its credibility and compliance posture.

A

Aquapark Kravaře

aquapark-kravare.cz

53

Aquapark Kravaře is a modern recreational aquapark located in the Czech Republic, offering a variety of water attractions such as a 65-meter toboggan, wild river, whirlpool, and massage features. The facility also hosts a swimming school and provides additional wellness services like sauna and massages. The website is professionally designed with good content quality and clear navigation, targeting families and general visitors seeking leisure activities. Technically, the site uses a Webnode CMS platform, leverages AWS Cloudfront CDN for hosting, and integrates Google Tag Manager for analytics. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, impacting overall trust. Privacy policies are present and GDPR compliant, but terms of service and direct contact details are limited. Overall, the site is functional and safe for general audiences but would benefit from enhanced security practices and clearer business contact information.

V

Vonekl s.r.o.

vonekl.cz

45

Vonekl s.r.o. operates as a wholesale distributor specializing in flowers and floral accessories, targeting business customers such as florists and companies with valid business identification numbers. The company maintains a strong market position in the Czech Republic with a comprehensive product range including cut and potted flowers, decorations, and an online ordering system. Their business model focuses on B2B wholesale and value-added services such as seminars and floral competitions. Technically, the website employs modern web technologies including jQuery, Slick Carousel, and Google Tag Manager, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness. Strategic recommendations include enhancing security headers, publishing explicit security and privacy policies, and improving accessibility features to strengthen compliance and user trust.

1

14SEPTEMBRE

14septembre.fr

60

14SEPTEMBRE is an international communications consulting agency specializing in reputation management for clients in design, architecture, food, and hospitality sectors. It operates as part of the extreme Group with offices in major cities worldwide and offers a broad range of services including consulting, brand content, visual design, social media, PR, and events. The website reflects a professional and consistent brand image targeting businesses seeking to enhance their visibility and reputation. Technically, the site uses modern frameworks such as SvelteKit, integrates Google Analytics and CookieYes for consent management, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit privacy policy page was found. WHOIS data is unavailable, which slightly reduces domain trust but the overall business credibility remains high. Strategic recommendations include publishing a privacy policy, enhancing security headers, and adding incident response information to improve compliance and trust.