Security Directory

B

blindekuh

blindekuh.ch

51

blindekuh is a well-established Swiss hospitality and cultural foundation operating unique dark restaurants in Zürich and Basel. The business offers immersive dining experiences, events, courses, and gift vouchers, positioning itself as a pioneer in the niche dark restaurant market. The website reflects a mature digital presence built on Drupal 10, with modern UI/UX and compliance with privacy regulations. Security posture is strong with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-optimized for users.

P

Pavlovín, spol. s r.o.

pavlovin.cz

39

Pavlovín, spol. s r.o. is a Czech winery based in Velké Pavlovice, specializing in producing and retailing high-quality wines from the South Moravia region. The company operates multiple wine shops across the Czech Republic and offers wines through an e-commerce platform. Their business model focuses on retail sales, wholesale to restaurants and wine bars, and hosting wine tasting events. The website reflects a mature digital presence with a professional design and consistent branding, targeting wine consumers and hospitality businesses. Technically, the site uses a variety of JavaScript libraries and tracking tools, including Google Analytics and Google Ads, indicating a moderate level of digital marketing sophistication. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. The absence of WHOIS data reduces domain registration trust, but the website content and business information appear legitimate and professional. Overall, the site is well-structured and user-friendly, with an appropriate age verification mechanism for alcohol-related content.

O

Ohlmann Group

ohlmanngroup.com

67

Ohlmann Group is a well-established marketing and advertising agency based in Dayton, Ohio, with a history spanning over 75 years. The company offers a comprehensive range of marketing services including strategy, digital marketing, branding, media buying, and public relations. Their market position is strong regionally, supported by multiple industry awards and client testimonials. The website reflects a professional and consistent brand image targeting business clients seeking integrated marketing solutions. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates various marketing and analytics tools such as Google Tag Manager and Koi Marketing Automation. Hosting is provided by MediaTemple, and the site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed. From a security perspective, the site uses HTTPS and domain status locks but lacks DNSSEC and security headers. There is no visible security or incident response policy, and no cookie consent mechanism is present, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

V

Virgin Hotels Las Vegas

virginhotelslv.com

63

Virgin Hotels Las Vegas is a lifestyle-focused hospitality brand operating an upscale hotel, casino, and entertainment venue in Las Vegas, affiliated with Hilton's Curio Collection. The website provides comprehensive information about accommodations, dining, entertainment, and events, targeting leisure and business travelers seeking a modern Vegas experience. The business model centers on hospitality services combined with casino gaming and live entertainment, positioning itself as a premium player in the Las Vegas market. Technically, the website is built on WordPress with a modern tech stack including Google Tag Manager, Adobe DTM, and various tracking pixels, indicating a mature digital marketing infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with fast loading times and professional design. Security posture is good with HTTPS enforced and secure forms, though DNSSEC is not enabled and Content-Security-Policy headers are missing, representing areas for improvement. Privacy compliance is basic but present with privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with strong business credibility and marketing sophistication.

L

Lia Rumantscha

liarumantscha.ch

52

Lia Rumantscha is a well-established Swiss public institution dedicated to the promotion and preservation of the Rumantsch language and culture. Founded in 1919, it offers a variety of services including language courses, cultural projects, financial support for initiatives, and translation services. The website reflects a strong cultural mission with clear communication and engagement with its target audience, including families, youth, and the Rumantsch-speaking community. Technically, the site is built on Drupal CMS with modern libraries such as Bootstrap and Swiper.js, and it employs Matomo for privacy-conscious analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers could enhance protection. Overall, the website is professional, trustworthy, and compliant with privacy regulations.

B

Bahnmuseum Albula AG

bahnmuseum-albula.ch

69

Bahnmuseum Albula AG operates a specialized railway museum in Bergün/Bravuogn, Switzerland, focusing on the heritage of the Rhätische Bahn. The museum offers exhibitions, special events, a shop, and a buffet, targeting tourists, railway enthusiasts, and local visitors. The website is built on Drupal 10 and integrates modern web technologies such as Vue.js and Google Tag Manager for analytics. The site is well-designed, mobile-optimized, and accessible, providing a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policies are lacking. Contact information is clearly presented, and the WHOIS data confirms the legitimacy and consistency of the domain registration. Overall, the website reflects a professional and trustworthy institution with room for improvement in privacy and security disclosures.

H

Hartzell Aerospace Welding

hartzellaerospacewelding.com

50

Hartzell Aerospace Welding is a specialized aerospace manufacturing company focusing on aviation exhaust systems and custom metal fabrication. It operates as part of the Hartzell Aviation family, which includes several subsidiaries and partner companies. The website presents a professional image with consistent branding and clear market positioning as a world leader in aircraft exhaust and engine mounts. The target audience includes aviators, aircraft owners, and aviation industry professionals. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses Google Analytics for tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS and Cloudflare DNS, but lacks DNSSEC and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. Overall, the site is trustworthy and professionally maintained, but could improve transparency on privacy and security policies.

S

Stadt Zittau

zittau.de

58

The website zittau.de serves as the official digital presence of the city of Zittau, Germany. It provides comprehensive information and services related to tourism, culture, citizen services, education, and economic development. The site targets residents, tourists, and businesses within the Dreiländerregion, offering event calendars, administrative resources, and city news. The business model is that of a government portal, focusing on public service and information dissemination. Technically, the site is built on Drupal CMS, employs Matomo for privacy-respecting analytics, and uses modern web technologies such as FontAwesome and CookiesJSR for cookie management. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or exposed sensitive data were found. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. Business credibility is high given the official nature of the site and consistent branding. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility, making it a trustworthy and professional municipal website.

H

Hartzell Aviation

hartzellaviation.com

51

Hartzell Aviation is a prominent aviation company that unites leading general aviation manufacturers, suppliers, and service providers under a family of brands. With a rich heritage dating back to the Wright Brothers era and subsidiaries founded as early as 1917, the company focuses on innovation, quality, and performance in the general aviation sector. Their services span advanced aircraft propeller design, engine accessories, aerospace welding, and maintenance, repair, and overhaul (MRO) operations. The website reflects a professional and consistent brand image targeting aviation professionals and aircraft operators worldwide. Technically, the website is built on WordPress with modern plugins for SEO and analytics, hosted behind Cloudflare DNS. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and DNSSEC implementation. The site uses HTTPS and has a cookie consent mechanism aligned with GDPR requirements, although a dedicated privacy policy page was not found in the provided content. From a security perspective, the site benefits from HTTPS and domain transfer protection but could improve by enabling DNSSEC and adding security headers. No critical vulnerabilities or WAF blocks were detected. Contact information is clearly presented, including phone numbers and a contact form with anti-spam measures. Social media presence on major platforms adds to trustworthiness. Overall, Hartzell Aviation's website is a well-structured, professional platform that effectively communicates its business and brand values. Enhancements in privacy policy visibility and security headers would further strengthen its compliance and security posture.

F

Festina

festina.cz

46

Festina.cz is the official Czech Republic distributor and retailer of Festina brand watches, offering a wide range of products including men's, women's, and children's watches, as well as smartwatches and chronographs. The website presents a professional and consistent brand image with detailed product collections and authorized dealer information. Technically, the site is built on a commercial CMS (Incomedia WebSite X5 Pro) with modern JavaScript libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and explicit privacy and cookie policies, which are compliance gaps. Overall, the site is safe, trustworthy, and suitable for general audiences, but could improve privacy compliance and contact transparency.

The website lotus-hodinky.cz represents Janeba Time, s.r.o., a small retail business specializing in Lotus brand watches and jewelry, part of the Festina Group. The site targets consumers interested in modern and hybrid watches, smartwatches, and jewelry, offering authorized dealer information and service details. The business maintains a consistent brand presence with professional multimedia content and clear product portfolios. Technically, the site is built on Incomedia WebSite X5 Pro CMS, leveraging modern JavaScript libraries and Google Analytics for user tracking. Cookie consent is implemented with a clear mechanism, supporting GDPR compliance. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No direct contact information or terms of service pages were found, which could be enhanced for better user trust and compliance. The domain registration data is consistent with the business profile, indicating legitimacy and stable operation since 2015.

HUKR spol. s r.o. is a small Czech company specializing in the sale, service, and restoration of classic and veteran cars, primarily Toyota, Lexus, and Hyundai brands. Established in 1994, the company has a strong local presence in Brno and offers specialized veteran car renovation services with over two decades of experience. The website provides basic business information and contact details but lacks modern digital maturity features such as privacy policies, HTTPS, and advanced security measures. The technical infrastructure relies on basic HTML, CSS, and JavaScript libraries like jQuery and Modernizr, with no detected CMS or advanced frameworks. Security posture is weak due to missing HTTPS and security headers, and privacy compliance is minimal with no cookie or privacy policies. Overall, the website serves its purpose as a business brochure but requires significant improvements in security and compliance to meet modern standards.

R

Radio New Zealand

radionz.co.nz

63

Radio New Zealand (RNZ) is New Zealand's public broadcaster, providing comprehensive news, current affairs, and audio content including podcasts and documentaries. The website serves a broad New Zealand audience interested in national and international news, cultural programming, and specialist audio features. RNZ holds a leading market position as a trusted public media entity with a large content offering and consistent branding. Technically, the RNZ website employs a modern SPA architecture with extensive use of JavaScript frameworks and libraries such as D3.js and Observable Plot for data visualization. It integrates advanced monitoring and analytics tools including New Relic, Google Tag Manager, Chartbeat, and Nielsen, indicating a mature digital infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices. From a security perspective, the site enforces HTTPS and uses several security best practices, though explicit security headers like Content-Security-Policy are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of visible privacy and cookie policies, as well as lack of explicit security incident contact information, suggests room for improvement in privacy compliance and incident response readiness. Overall, RNZ's website is professionally designed, content-rich, and technically sound, reflecting its status as a major public broadcaster. The lack of WHOIS data is consistent with .nz domain registry policies and does not detract from the site's legitimacy. Strategic recommendations include enhancing privacy disclosures, security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

A

American Planning Association

planning.org

69

The American Planning Association (APA) operates planning.org as the leading membership organization for professional planners in the United States. The website serves as a comprehensive resource hub offering membership services, professional certification (AICP), publications, conferences, career resources, and policy advocacy. APA holds a strong market position as the largest and most authoritative planning organization, targeting planners, students, employers, and government officials. The website's content is rich, professionally presented, and well-structured to support its diverse audience. Technically, the site employs a modern tech stack including Bootstrap, jQuery, HubSpot marketing tools, and integrates multiple analytics and advertising platforms. The site is mobile-optimized and accessible, with good SEO practices.

The Centro Nacional de Informação e Arbitragem de Conflitos de Consumo (CNIACC) is a Portuguese national center dedicated to consumer conflict resolution through information, mediation, and arbitration services. It operates primarily in regions not covered by other dispute resolution entities, serving consumers and companies across Portugal. The website reflects a government/non-profit organization with a clear mission and multiple partner affiliations, positioning itself as a trusted authority in consumer arbitration. Technically, the website employs a traditional tech stack including jQuery, Modernizr, and Swiper.js, with Google Analytics for user tracking. While the site is functional and well-structured, it uses an outdated jQuery version and lacks some modern security headers and cookie consent mechanisms. Security posture is generally good with HTTPS enforced, but improvements are recommended in security headers and privacy compliance. Overall, the site is professional, trustworthy, and serves its target audience effectively.

O

Okidoki Kommunikation AB

transportportal.se

51

Transportportal.se is a Swedish transport research portal operated by or affiliated with Okidoki Kommunikation AB and the Swedish National Road and Transport Research Institute (VTI). It aggregates and provides access to multiple transport research resources including catalogs, databases, and knowledge centers focused on public transit and transport research in Sweden. The portal targets researchers, transport professionals, and stakeholders within the Swedish transport sector. The website is well-branded, consistent, and offers good content quality with clear navigation and relevant resources. Technically, the site uses modern JavaScript libraries such as Modernizr and Masonry for UI enhancements and is hosted on Azure cloud infrastructure, as indicated by DNS records. The site is mobile-optimized and performs moderately well, though accessibility and SEO optimizations are basic. No CMS or advanced frameworks are detected, suggesting a custom or lightweight implementation. From a security perspective, the site lacks DNSSEC and security headers, and no cookie consent mechanism is present, indicating gaps in GDPR compliance and security best practices. The domain registration is consistent and legitimate, with no privacy protection, and the domain age aligns with the business history. No forms or user input fields reduce attack surface, and no vulnerabilities or exposed sensitive data were found in the HTML content. Overall, the website is a credible and professional resource for transport research in Sweden but would benefit from enhanced security headers, GDPR compliance improvements, and cookie consent implementation to strengthen its security posture and privacy compliance.

A

Austroads

austroads.com.au

63

Austroads is a government-related organization focused on supporting efficient, reliable, and safe road transport across Australia and New Zealand. It provides authoritative guidance, research, and standards covering drivers, vehicles, road safety, infrastructure, environment, and transport operations. The website serves government agencies, transport authorities, health professionals, and industry stakeholders with comprehensive resources including guides, publications, data services, and training programs. The organization holds a leading market position as a collaborative body for road transport standards in the region. Technically, the website is built on the Squiz Matrix CMS platform and leverages modern web technologies such as jQuery, Google Analytics, Google Tag Manager, Hotjar, and DataTables. It uses Cloudflare for DNS and likely CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. From a security perspective, the website enforces HTTPS and employs secure forms with validation. However, it lacks DNSSEC, a published security policy, incident response contacts, and a cookie consent mechanism, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is registered by the Department of Finance, consistent with its government affiliation, and domain status codes indicate protection against unauthorized changes. Overall, Austroads presents a trustworthy, professional, and authoritative online presence with a strong business credibility and technical foundation. Strategic improvements in privacy compliance and security transparency would further enhance its posture and user trust.

D

Drupal ᐬrts

drupalarts.cz

51

Drupal Arts is a specialized Drupal web development service provider based in the Czech Republic, established in 2017. The company offers a range of Drupal-related services including custom web development, Drupal maintenance (servis), UX design, and e-commerce solutions. Their website positions them as experts motivated by professional work with lasting value, targeting businesses and individuals seeking Drupal expertise. The site features client testimonials from reputable organizations, enhancing trust and credibility. Technically, the website is built on Drupal 7, utilizing common web technologies such as jQuery, Bootstrap, and Google Analytics. Hosting is provided by Active24, consistent with the domain registrar information. The site is mobile-optimized with good SEO practices but lacks advanced accessibility features. Performance is moderate, with asynchronous loading of analytics scripts. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers and explicit security policies. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. User tracking is moderate via Google Analytics and Tag Manager, but no cookie consent mechanism is implemented. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the website is professional and trustworthy but requires improvements in privacy compliance and security best practices to enhance its security posture and regulatory adherence.

I

Ingenta

ingenta.com

61

Ingenta is a UK-based company specializing in business publishing software and publishing technology solutions. Their offerings include intellectual property systems, rights and royalty management, and content publishing platforms, targeting media companies, publishers, and content creators globally. The company positions itself as a world-leading provider with a strong focus on configurable software and professional services to support complex business environments. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and SEO-friendly, though some accessibility features could be improved. Security-wise, the site enforces HTTPS and uses reCAPTCHA for forms but lacks explicit security headers and a visible cookie consent mechanism. WHOIS data is unavailable, which slightly impacts trust but the professional web presence and contact information support legitimacy. Overall, Ingenta presents a credible and professional digital footprint with room for enhanced security and privacy compliance.

A

ACC

bestofcontent.be

52

Bestofcontent.be is a professional website dedicated to organizing and promoting the Best of Content Awards (BOCA) in Belgium, focusing on recognizing excellence in content marketing strategies and craftsmanship. The platform targets content marketing professionals, agencies, and brands seeking recognition for their marketing efforts. The business operates as a niche award organizer with a small but focused market presence, leveraging partnerships with ACC Belgium and other industry players. Technically, the website is custom-built with modern HTML5, CSS3, and JavaScript technologies, hosted via OVH, and demonstrates good mobile optimization and user experience. However, it lacks visible CMS signatures and advanced technical frameworks. Security posture is moderate, with cookie consent mechanisms in place and use of Facebook Pixel for tracking, but missing explicit security headers and incident response information. Privacy compliance is strong due to linked comprehensive policies hosted on ACC Belgium's domain. Overall, the website is trustworthy, professional, and safe for general audiences, with no adult or questionable content detected.

E

eViz s.r.o.

penziony.cz

47

Penziony.cz is an established Czech online platform specializing in affordable accommodation listings including pensions, hotels, apartments, and cottages. Operated by eViz s.r.o., it targets travelers seeking budget-friendly lodging options across the Czech Republic. The website offers extensive listings with direct contact details to properties, facilitating user bookings and searches. Technically, the site is built on WordPress using the WP Rentals theme, integrating modern JavaScript libraries such as jQuery, Bootstrap, Algolia Places, and Mapy.cz APIs for enhanced user experience and search functionality. Security-wise, the site employs HTTPS and nonce tokens for form submissions, indicating a baseline security posture; however, it lacks comprehensive security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism, which may pose GDPR compliance risks. The absence of WHOIS data limits domain trust assessment, but the website content and business information appear professional and trustworthy. Overall, Penziony.cz presents a solid digital presence in the hospitality sector with room for improvement in privacy and security transparency.

F

Federace klubů historických vozidel ČR z. s.

testovanihv.cz

31

The website www.testovanihv.cz serves as the online information system for the Federation of Historic Vehicle Clubs of the Czech Republic (FKHV). It provides a platform for vehicle owners to submit applications for historic vehicle testing, facilitating the certification process for historic authenticity. The site targets historic vehicle enthusiasts and club members within the Czech Republic, operating as a non-profit entity. The business model focuses on community service and regulatory compliance within the historic vehicle sector. The website content is professionally presented, with clear instructions, contact information, and relevant resources such as video tutorials and downloadable terms of service.

V

VR Cars

vrcars.eu

55

VR Cars is a specialized Latvian company focused on designing and manufacturing the VR FOX military vehicle, tailored for special forces and intelligence service needs. The company leverages extensive experience in suspension engineering and racing car development to deliver a niche product with advanced off-road capabilities and compliance with NATO standards. Their digital presence includes a professional website with multimedia content and active social media channels, supporting their market positioning as a small but innovative manufacturer in the defense transportation sector. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Swiper, and AOS, with good mobile optimization and SEO practices. Security-wise, the site enforces HTTPS and uses Google Recaptcha for form protection, but lacks visible HTTP security headers and explicit security or incident response policies. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and a consent mechanism aligned with GDPR requirements. Overall, the website presents a moderate security posture and good business credibility, though improvements in security headers and transparency policies are recommended.

M

Město Modřice

mesto-modrice.cz

56

Město Modřice operates an official municipal website serving residents and visitors with comprehensive local government information, news, events, and public services. The site is built on Drupal 7 and integrates modern web technologies including Google Analytics and Microsoft Clarity for user behavior insights. GDPR compliance and cookie consent mechanisms are implemented, reflecting adherence to privacy regulations. However, the absence of WHOIS data limits domain registration trust verification. Security posture is moderate with HTTPS enabled but lacks important security headers and uses an outdated jQuery version, which could pose risks. Overall, the website is professional, content-rich, and trustworthy as a government portal but would benefit from enhanced security practices and domain registration transparency.

The website apartman-medulin.cz represents a small hospitality business specializing in vacation apartment rentals in Medulin, Croatia. It targets tourists seeking comfortable and modern accommodation near the sea and local attractions. The site provides detailed descriptions of the apartments and the surrounding area, emphasizing the natural beauty and amenities of Medulin. The business appears to be locally focused with a clear service offering in the hospitality sector. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Contact Form 7, with jQuery and Owl Carousel for interactive elements. The site is mobile optimized and loads with moderate performance. However, there is a lack of advanced SEO and accessibility features, and no evident analytics or marketing tools are integrated. From a security perspective, the site uses HTTPS, which is a positive indicator. However, no security headers are detected, and there is no visible privacy or cookie policy, which are important for GDPR compliance and user trust. The absence of WHOIS data reduces domain trustworthiness and raises concerns about domain registration transparency. Overall, the website is functional and provides relevant content for its target audience but lacks in privacy compliance and security best practices. Strategic improvements in these areas would enhance trust and legal compliance.

O

OptoNet Communication, spol. s r.o.

optonet.cz

46

OptoNet Communication, spol. s r.o. is a Czech-based technology company specializing in internet connectivity, server hosting, cloud services, and optical infrastructure. Established in 2005, the company operates a modern data center in the Vysočina region and offers services targeting residential, corporate, and government clients. The website reflects a mature business with a clear market position in telecommunications and IT infrastructure services. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Font Awesome, hosted on Websupport infrastructure, and built on the VOX.AREA CMS platform. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, but lacks some advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy, supporting the company's credibility and market presence.

S

SILKO s.r.o.

silko-ji.cz

49

SILKO s.r.o. is a Czech Republic-based small enterprise specializing in thin-layer road surface modifications, maintenance, and repairs. Established in 1995, the company offers a range of services including micro-surfacing, slurry seal, patchmatic repairs, bituminous surfaces, and road cleaning. The company holds an ISO 9001:2016 quality certification, indicating a commitment to quality management. The website presents a professional image with clear service descriptions and contact information, targeting municipalities and contractors in the transportation sector. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and the Nette framework, providing a responsive and user-friendly experience. However, the site lacks advanced SEO and accessibility features and does not display privacy or cookie policies, which are important for compliance and user trust. No forms or email contacts are present, limiting direct user engagement. From a security perspective, the site uses HTTPS but lacks visible security headers and vulnerability disclosures. The absence of WHOIS data due to privacy protection reduces transparency but is common for small businesses. No WAF or blocking mechanisms were detected, and the site content is safe with no adult or questionable material. Overall, SILKO s.r.o. maintains a moderate digital maturity with room for improvement in privacy compliance, security hardening, and transparency. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

Švejk restaurant is a prominent Czech gastronomic franchising chain operating over 50 locations, specializing in traditional Czech cuisine and beverages. The business model centers on franchising, catering, and providing gastronomic services, targeting a broad general audience interested in authentic Czech dining experiences. The website reflects a professional and consistent brand image with clear navigation and relevant content, supporting its market position as a leading hospitality franchise in the Czech Republic. Technically, the site employs a modern tech stack including jQuery, Foundation framework, and Google Analytics for tracking, with good mobile optimization and SEO practices. However, the absence of WHOIS data and explicit privacy policies introduces transparency concerns. Security posture is moderate with cookie consent implemented but lacking visible security headers and unknown SSL configuration. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures.

I

Inspired Flight Technologies

inspiredflight.com

60

Inspired Flight Technologies is a U.S.-based manufacturer specializing in American-made commercial drones designed for industrial and government applications. The company emphasizes compliance with NDAA and Green UAS certifications, positioning itself as a trusted provider in the drone technology sector. Their product lineup includes medium and heavy-lift drones, payloads, and software solutions, complemented by pilot training and customer support services. The website reflects a professional and consistent brand image targeting government and commercial clients. Technically, the website employs a modern technology stack including jQuery, Modernizr, Slick Carousel, and Fancybox, supported by Google Tag Manager and analytics tools. The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit cookie consent mechanisms. No vulnerability disclosure or incident response information is provided. The absence of WHOIS data reduces trust in domain legitimacy, though the website content and partner ecosystem suggest a legitimate business. Overall, the website presents a solid business presence with room for improvement in privacy compliance and security best practices. Strategic enhancements in security headers, cookie consent, and transparency around incident response would strengthen trust and compliance.

F

FERRING Slovakia s.r.o.

ferring.sk

54

FERRING Slovakia s.r.o. operates as a specialized biopharmaceutical company focusing on reproductive medicine, maternal health, gastroenterology, and urology. The company positions itself as a leader in these healthcare sectors, providing innovative therapeutic solutions and supporting families and patients. The website reflects a professional and consistent brand image with clear business descriptions and contact information. Technically, the site uses a custom CMS with modern JavaScript libraries such as jQuery, Swiper.js, and Google Maps API, hosted by HostCreators. The site is mobile-optimized and performs moderately well. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security policies and incident response contacts. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

Tifon.hr is the official website of Tifon, a Croatian fuel retail company and member of the MOL Group, a leading integrated gas and oil group in Central Europe. The company offers high-quality fuels, business and prepaid fuel cards, convenience store services under the Fresh Corner brand, and other related services. The website targets both business customers and individual consumers in Croatia, providing detailed information about products, services, and corporate information. The site is professionally designed, mobile-optimized, and includes modern web technologies such as jQuery, Bootstrap, and Google Analytics for tracking and performance. From a technical perspective, the website uses Joomla CMS and integrates multiple JavaScript libraries and Google services for analytics and tag management. The site is served over HTTPS with a valid SSL configuration, ensuring secure communication. Accessibility features and cookie consent mechanisms are implemented, reflecting compliance with GDPR and user privacy standards. However, explicit security headers and a dedicated security policy page are not found, which could be improved to enhance security posture. Security-wise, the site demonstrates good practices such as HTTPS enforcement and cookie consent with detailed categories including necessary, functional, and targeting cookies. Google reCAPTCHA is used to protect forms from abuse. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain is longstanding and consistent with the business claims, registered under a Croatian registrar appropriate for the domain. Overall, Tifon.hr presents a trustworthy and professional online presence for a regional energy company. The site is secure, privacy-conscious, and well-structured, though it could benefit from enhanced security documentation and incident response transparency. The business is well-positioned in the Croatian energy market as part of the MOL Group, with clear branding and service offerings.

C

Compagnia Italiana Oftalmologica S.c.a.r.l.

cioitalia.com

46

Compagnia Italiana Oftalmologica (C.I.O.) is a small-sized Italian company specializing in the distribution of ophthalmologic products and equipment. Established in 2003, the company operates primarily in the healthcare sector, targeting ophthalmologists and eye care professionals. Their website presents basic information about their services, brands, and distributors, with a focus on regional market presence in Italy. The business model centers on product distribution and brand representation within the ophthalmology field. Technically, the website uses a custom CMS with common JavaScript libraries such as jQuery, Modernizr, Bootstrap, and CKEditor. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. There is no evidence of modern frameworks or platforms, and no structured data markup is present. From a security perspective, the website lacks visible HTTPS enforcement confirmation and security headers, and DNSSEC is not enabled for the domain. No explicit security or incident response policies are published. Privacy compliance is minimal, with only a basic privacy policy PDF linked and no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional but basic, with moderate trustworthiness and some security and privacy gaps. Strategic improvements in security posture, privacy compliance, and technical modernization would enhance the company's digital maturity and risk profile.

優

優視德股份有限公司

coneyecrystal.com.tw

44

優視德股份有限公司 is a Taiwan-based company specializing in the supply and distribution of high-quality ophthalmic microsurgical instruments and related medical equipment. The company targets ophthalmic surgeons and healthcare providers, offering a range of products including intraocular lenses, ophthalmic and dental equipment, surgical instruments, and consumables. Their website is bilingual (Traditional Chinese and English) and provides detailed product information, event news, and contact details, positioning them as a specialized supplier in the healthcare sector within Taiwan and Asia. Technically, the website employs common JavaScript libraries such as jQuery, Modernizr, WOW.js, and Slick Carousel, alongside Google Analytics for user tracking. The site is moderately optimized for performance and mobile devices, with a clear navigation structure and professional design. However, it lacks advanced CMS indicators and detailed hosting information. From a security perspective, the website uses HTTPS as implied by Open Graph tags but lacks visible HTTP security headers and cookie consent mechanisms. No explicit security or incident response policies are published, and no vulnerability disclosure or data protection officer information is available. The use of Google Analytics indicates moderate user tracking without clear privacy compliance beyond a basic privacy policy. Overall, the website is functional, professional, and trustworthy for its business domain but would benefit from enhanced security practices, privacy compliance improvements, and clearer incident response information to strengthen its security posture and regulatory adherence.

U

UASNL

uasnl.eu

42

UASNL is a European network representing Dutch Universities of Applied Sciences, focusing on applied research and innovation to address regional and global challenges. The organization operates as a non-profit entity advocating for the interests of applied sciences universities in Europe. Their website reflects a professional and consistent brand image, targeting policy makers, entrepreneurs, citizens, and industry leaders interested in applied research collaborations and innovation. Technically, the website is built on WordPress with modern technologies including jQuery, Modernizr, and the Yoast SEO plugin. It uses HTTPS with a good SSL configuration and integrates Google Analytics for user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site enforces HTTPS but lacks some security headers and cookie consent mechanisms, which are recommended for full compliance with EU privacy regulations. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by EURid, which is common for .eu domains and justified for this type of organization. Overall, the website demonstrates a solid security posture with room for improvement in privacy compliance and security policy transparency. The overall risk is low, with recommendations to enhance privacy compliance by implementing cookie consent, publishing terms of service, and adding security headers. These steps will improve trust and regulatory adherence, supporting the organization's credibility and operational security.

R

RIBA Journal

ribaj.com

64

RIBA Journal is a professional media publication focused on architecture and design, targeting architects and industry professionals. The website provides architecture news, design articles, and industry insights, positioning itself as an established magazine in the architecture media sector. Technically, the site uses modern JavaScript libraries and cookie consent management tools, with moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks explicit security headers and a published privacy policy. The site employs extensive analytics and marketing tracking services, including Google Analytics, Facebook Pixel, and Hotjar, with a comprehensive cookie consent mechanism. However, the absence of WHOIS data raises concerns about domain legitimacy, warranting further verification. Overall, the site is professional and trustworthy in content but requires improvements in transparency and security practices.

B

Beiersdorf

8x4.de

60

The website www.8x4.de is a professionally designed brand site for 8X4 deodorants, a product line under the Beiersdorf company. It targets German-speaking consumers with product information, marketing content, and social media engagement. The site demonstrates a mature digital presence with modern JavaScript libraries, consent management, and tracking tools integrated. The technical infrastructure is stable, hosted on professional nameservers, and employs HTTPS with good SSL configuration. Security posture is solid but could be improved by adding explicit security headers and incident response information. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and consent mechanism. Business credibility is high due to consistent branding, official social media links, and alignment with the Beiersdorf parent company. Overall, the site is safe, trustworthy, and suitable for general audiences.

T

Transparentné účty

transparentneucty.sk

55

The website 'Transparentné účty' serves as a public transparency portal focused on displaying transparent bank accounts, primarily for Slovakian public or governmental entities. It provides users with the ability to search accounts by name or IBAN and view current balances, supporting financial transparency initiatives. The site targets the general public interested in oversight of public funds. Technically, the site employs modern frontend technologies such as Bootstrap 4, jQuery, and Modernizr, ensuring a responsive and user-friendly experience, though accessibility features are basic. Security-wise, the site uses HTTPS and implements a cookie consent banner, but lacks published privacy policies, terms of service, or incident response information, which are critical for compliance and trust. Overall, the site is functional and moderately secure but would benefit from enhanced privacy and security documentation.

V

VAPE GmbH

hisvape.net

36

hisVape is a small e-commerce retailer specializing in electronic cigarettes, e-liquids, aromas, and self-mixer supplies primarily targeting German-speaking adult consumers in Austria and surrounding regions. The website is built on the Shopware CMS platform and employs modern web technologies including Google reCAPTCHA for form security and an age verification modal to comply with youth protection laws. The business has been established since 2011, consistent with the domain registration data. The site currently displays a message indicating the shop is permanently closed but remains accessible for existing customers to manage orders. Technical infrastructure is moderate with good mobile optimization and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and CAPTCHA protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Business credibility is supported by consistent branding, customer review pages, and a ticket-based contact form, though no direct phone or email contacts are published. Overall, the site is moderately trustworthy but could improve in security and privacy transparency.

V

Verbraucherzentrale Sachsen

verbraucherzentrale-sachsen.de

58

Verbraucherzentrale Sachsen is a well-established regional consumer protection organization in Germany, providing comprehensive advice, information, and advocacy services primarily to consumers in the Sachsen region. Their website is professionally designed using Drupal 10, featuring extensive content on topics such as energy, finance, health, and legal consumer rights. The organization maintains a strong digital presence with social media channels and partner sites. Technically, the site uses modern web technologies and is mobile-optimized, though there is room for improvement in security headers and privacy compliance mechanisms. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks explicit incident response and cookie consent features. Overall, the site is trustworthy, professional, and serves its target audience effectively.

V

Verbraucherzentrale Saarland

vz-saar.de

57

Verbraucherzentrale Saarland is a regional consumer protection organization in Germany providing comprehensive advice, education, and advocacy services to consumers in Saarland. The website is well-structured, professionally designed, and offers a wide range of consumer-related information and services including energy consulting, debt counseling, and legal support. The organization targets a broad audience including vulnerable groups such as refugees, seniors, and students. Technically, the site is built on Drupal 10 with modern web technologies and integrates Matomo analytics for user tracking. Security posture is moderate with room for improvement in security headers and explicit cookie consent mechanisms. Overall, the site is trustworthy and aligns with GDPR compliance through a comprehensive privacy policy.

V

Verbraucherzentrale Rheinland-Pfalz e.V.

verbraucherzentrale-rlp.de

59

Verbraucherzentrale Rheinland-Pfalz e.V. is a well-established non-profit consumer advice organization serving the Rheinland-Pfalz region in Germany. The website offers comprehensive information and services including independent consumer counseling, energy advice, educational programs, and barrier-free access to information. It targets a broad audience including consumers, students, parents, seniors, and refugees. The organization maintains a strong regional presence with multiple consulting offices and partnerships with related consumer protection portals. Technically, the website is built on Drupal 10, uses modern web technologies, and is hosted likely on German Telekom infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and some security headers, but lacks explicit cookie consent and published security policies. Overall, the site is professional, trustworthy, and serves its public service mission effectively.

V

Verbraucherzentrale Nordrhein-Westfalen

verbraucherzentrale.nrw

64

Verbraucherzentrale Nordrhein-Westfalen is a prominent non-profit consumer protection organization serving the German state of North Rhine-Westphalia. The website offers extensive consumer advice, educational resources, legal support, and various projects focused on energy, environment, digital world, and health. It maintains a strong market position as a trusted regional consumer advocate with a large network of local advisory offices and online services. Technically, the site is built on Drupal 10 with modern web technologies, optimized for mobile and accessibility, and integrates analytics and marketing tools such as Matomo and Newsletter2Go. Security posture is adequate with HTTPS usage and no visible sensitive data exposure, though security headers and explicit cookie consent mechanisms could be improved. WHOIS data is privacy protected, which is typical and justified for such an organization. Overall, the website is professional, trustworthy, and well-maintained, serving a broad audience including consumers, educators, and vulnerable groups.

V

Verbraucherzentrale Bremen

verbraucherzentrale-bremen.de

58

Verbraucherzentrale Bremen operates as an independent consumer advice and advocacy organization serving the Bremen and Bremerhaven regions in Germany. The website offers comprehensive information, consultation services, and various projects focused on consumer protection, energy advice, legal matters, and education. It maintains a strong market position as a trusted non-profit entity with active community engagement and multiple partnerships. Technically, the site is built on Drupal 10 with modern libraries and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and privacy-conscious analytics, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is professional, trustworthy, and well-aligned with its mission, with no signs of malicious activity or content safety concerns.

V

Verbraucherzentrale Berlin

verbraucherzentrale-berlin.de

56

Verbraucherzentrale Berlin is a well-established consumer advice and advocacy organization serving the Berlin region. The website offers comprehensive information and services across multiple consumer-related sectors including energy, health, digital literacy, and finance. It targets a broad audience including vulnerable groups such as refugees and seniors. The organization operates multiple projects and provides educational events, consultations, and publications. Technically, the site is built on Drupal 10 with modern web technologies and integrates Matomo analytics for user tracking. The site is mobile-optimized and accessible with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. Privacy compliance is good with a clear GDPR privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves as a key regional resource for consumer protection.

L

Landratsamt Lichtenfels

landkreis-lichtenfels.de

45

The website www.lkr-lif.de is the official online presence of the Landkreis Lichtenfels government authority in Bavaria, Germany. It provides comprehensive information about the district, public administration services, news, events, and contact options for residents and visitors. The site targets local citizens, businesses, and tourists, offering a variety of online services and resources. The business model is that of a government service provider, focusing on transparency and accessibility of administrative functions. Technically, the website employs a mature technology stack including jQuery, Bootstrap 3, ExtJS, and Klaro for cookie consent management. It uses Recon CMS as its content management system and leverages CDN services from regiogate.net. The site is moderately optimized for performance and mobile devices, with basic accessibility and SEO features implemented. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the website's governmental nature. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website demonstrates a good level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. However, improvements could be made by adding security headers, publishing security policies, and enhancing mobile optimization. The site is safe for general audiences with no adult or questionable content.

V

Verbraucherzentrale Bundesverband

verbraucherzentrale.de

58

Verbraucherzentrale.de is the official portal for the Verbraucherzentrale Bundesverband and its regional consumer centers across Germany. It provides comprehensive consumer protection services including advice, education, political advocacy, complaint handling, and legal actions. The website is well-structured, professionally designed, and targets German consumers seeking trustworthy information on finance, energy, health, environment, travel, and contracts. The organization holds a strong market position as a leading non-profit consumer protection entity in Germany. Technically, the site is built on Drupal 10 with modern JavaScript libraries and is optimized for mobile and accessibility. It uses Matomo for privacy-conscious analytics and integrates newsletter services. Hosting is via DomainControl nameservers, and the site employs HTTPS, although explicit security headers were not detected in the provided data. Privacy compliance is strong with a clear GDPR-compliant privacy policy, but no explicit cookie consent mechanism was found. Security posture is good but could be improved by adding security headers and publishing incident response or security policies. No vulnerabilities or suspicious content were detected. The domain WHOIS data is limited but consistent with a legitimate organization. Overall, the site is trustworthy, professional, and serves its mission effectively.

L

Landratsamt Lichtenfels

lkr-lif.de

45

The website www.lkr-lif.de serves as the official digital presence of the Landkreis Lichtenfels government authority in Bavaria, Germany. It provides comprehensive information about the district's administration, public services, news, events, and online forms. The site targets residents, local businesses, and visitors seeking government-related information and services. The business model is that of a public sector entity focused on transparency and citizen engagement. Technically, the site employs a mature technology stack including jQuery, Bootstrap 3, ExtJS, and Klaro for cookie consent, hosted likely on regiogate.net infrastructure. The CMS appears to be Recon CMS, a specialized content management system. Performance is moderate with basic mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy policy and cookie consent banner. WHOIS data is minimal but consistent with a legitimate government domain. Overall, the site is professional, trustworthy, and safe for general audiences. Recommendations include enhancing security headers, publishing security policies, and improving mobile and accessibility features to strengthen the security posture and user experience.

The website www.miteinander-im-quartier.de is an official German government platform supporting the cross-departmental strategy 'Soziale Stadt - Nachbarschaften stärken, Miteinander im Quartier' under the Federal Ministry for Housing, Urban Development and Building. It provides comprehensive information about model programs, community projects, events, and resources aimed at strengthening neighborhoods and social cohesion. The site targets government officials, urban planners, social workers, and the general public interested in urban development. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries including Modernizr, and integrates Matomo analytics for privacy-conscious user tracking. It is hosted on agenturserver infrastructure, with HTTPS enforced and a cookie consent mechanism implemented. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers like Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or suspicious elements were detected. The WHOIS data aligns with the hosting and website content, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve security posture and transparency.

D

DELLEMANN BESTATTUNG

bestattung-dellemann.at

50

DELLEMANN BESTATTUNG is a small, family-run funeral service provider based in Austria, offering comprehensive bereavement support including funeral arrangements, thanatology services, and a dedicated farewell room. The company positions itself as a trusted local business with a tradition of helping families during difficult times. The website is built on TYPO3 CMS and uses modern web technologies such as Bootstrap and jQuery, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and privacy-conscious analytics (Matomo with cookies disabled), but lacks some security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the site is professional and trustworthy, though improvements in privacy compliance and security policies are recommended.