Security Directory

C

COLA Land Group

pauldirmeyer.com

57

The website represents the COLA Land Group, an academic research group affiliated with George Mason University, focusing on land-atmosphere interactions in the physical climate system. The site provides information about the research group, its members, projects, publications, and teaching activities. The business model is academic and educational, targeting researchers, students, and the scientific community. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies. It is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and comprehensive SEO features. Security posture is adequate with HTTPS enforced but lacks security headers and privacy compliance documentation. WHOIS data is missing or unavailable, which reduces domain trustworthiness but the university affiliation and professional presentation mitigate concerns. Overall, the site is professional and trustworthy but would benefit from enhanced privacy, security, and compliance features.

Z

ZS Hořovice

zs-horovice.cz

52

The website www.zs-horovice.cz represents a local sports facility, specifically the ice stadium in Hořovice, Czech Republic. The site provides basic information about the stadium's location and purpose but lacks detailed business or contact information. It is built on the Wix platform, indicating a moderate level of digital maturity with standard web technologies and hosting. The technical infrastructure is typical for Wix sites, with no advanced frameworks or custom backend detected. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of explicit security headers and privacy policies limits compliance and trust. The lack of WHOIS data due to privacy protection or unregistered domain status reduces the domain's trustworthiness. Overall, the site serves informational purposes for a small local entity but requires improvements in transparency, privacy compliance, and security best practices to enhance credibility and user trust.

STŘELA Žebrák, z.s. is a Czech non-profit association founded in 2019, dedicated to educational and leisure activities for children and youth, focusing on athletics, tourism, and summer camps. The organization maintains a strong local community presence with multiple social media channels and partnerships with regional entities. The website serves as an information hub for their activities, events, and registration forms, reflecting a clear mission to engage youth in meaningful activities. Technically, the website employs modern front-end technologies including Tailwind CSS and jQuery, hosted likely by WEDOS, a Czech hosting provider. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. SEO practices are adequately implemented with proper meta tags and descriptive content. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit security policies. No forms on the main page reduce attack surface, but cookie consent mechanisms are missing, which is a GDPR compliance gap. WHOIS data is transparent and consistent with the organization's profile, supporting legitimacy. Overall, the website is trustworthy and professionally maintained, with room for improvement in security hardening and privacy compliance. The risk level is low given the non-commercial nature and limited data collection, but enhancing security policies and cookie management would strengthen compliance and user trust.

The website www.vojujezd-brdy.cz serves as an informational portal focused on tourism, hiking, cycling, and local history related to the former military area Brdy in the Czech Republic. It targets tourists and outdoor enthusiasts seeking less crowded natural areas. The site provides detailed descriptions of trails, accommodation options, and local services, monetized primarily through Google Adsense advertising. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, Google Fonts, and integrates Google Analytics and a consent management platform to comply with privacy regulations. The website is accessible without WAF or security challenges, but lacks explicit privacy and terms of service pages, and does not provide direct contact information, which limits user trust and compliance transparency. Security posture is moderate with HTTPS enabled but missing security headers. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is functional and relevant for its niche audience but could improve in privacy transparency, security best practices, and contact availability.

E

European Business Enterprise, a.s.

statnisprava.cz

58

The website statnisprava.cz is a Czech government-related public service portal operated by European Business Enterprise, a.s. It provides comprehensive information on government offices, job vacancies, tenders, insolvencies, and related public services. The site targets a broad audience including citizens seeking official information and services. Technically, the site uses IBM Domino backend technology with a frontend built on HTML5, Bootstrap, jQuery, and Font Awesome, delivering a responsive and navigable user experience. Security posture is moderate with HTTPS usage and no visible sensitive data exposure, but lacks advanced security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces trust but the business information and content quality support legitimacy. Overall, the site is professional, content-rich, and serves an essential government function with room for security and privacy improvements.

O

Olivova dětská léčebna o.p.s.

olivovna.cz

53

Olivova dětská léčebna o.p.s. is a well-established non-profit pediatric healthcare organization based in Říčany u Prahy, Czech Republic. Founded in 1896, it provides comprehensive inpatient treatment and rehabilitation services for children aged 1 to 18 years, fully covered by public health insurance. The organization focuses on treating respiratory and musculoskeletal diseases, childhood obesity, and related conditions, emphasizing prevention and follow-up care. The website reflects a professional and trustworthy presence with clear service offerings and engagement channels for parents, children, and medical professionals. Technically, the website is built on the SKY:CMS platform and employs modern web technologies including asynchronous JavaScript loading, Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism compliant with GDPR. However, explicit security headers are not fully implemented, and no dedicated security or incident response policies are published. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data due to privacy protection slightly reduces transparency but is understandable for a healthcare non-profit. Overall, the site demonstrates a mature digital presence with good privacy compliance and user engagement, though improvements in security headers and incident response transparency are recommended. The risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing compliance and security.

Svazek obcí mikroregionu Kněževes is a small regional municipal association in the Czech Republic focused on promoting local culture, tourism, and community information. The website provides detailed content about local history, events, and official notices, targeting residents and visitors interested in the Kněževes microregion. The business model is non-profit and government-oriented, with a clear focus on community engagement and cultural heritage. Technically, the website uses a custom CMS with JavaScript libraries such as jQuery and Highslide for interactive content. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO practices. Cookie consent is implemented, indicating some privacy awareness, but there is room for improvement in security headers and explicit privacy policies. Security posture is moderate; HTTPS is used but no security headers were detected in the provided data. No vulnerabilities or exposed sensitive data were found, but the absence of WHOIS data reduces transparency and trust. The site lacks explicit contact information and security incident response details, which could be improved to enhance user trust and compliance. Overall, the website is functional and professional for its purpose but would benefit from enhanced security practices, clearer privacy and contact information, and improved transparency regarding domain registration details.

DSO Český kras – Pláně is a small, non-profit regional municipal association in the Czech Republic focused on environmental protection and coordinated governance among member municipalities. The website serves as an official communication platform providing access to documents, news, and contact information for local residents and stakeholders. The technical infrastructure is based on the vismo CMS platform, utilizing standard web technologies including HTML5, CSS3, JavaScript, and Google reCAPTCHA for form security. The site is mobile-optimized with basic accessibility and SEO features. Security posture is adequate with HTTPS enforced and spam protection via reCAPTCHA, but lacks advanced security headers and explicit incident response policies. Privacy compliance is basic with privacy and cookie policies present but no active cookie consent mechanism. Overall, the website is trustworthy and professionally maintained, reflecting its official governmental role.

The website www.karlstejnsko.info serves as the official tourism portal for the Karlštejnsko region in the Czech Republic, providing comprehensive information on accommodation, dining, attractions, events, and services for visitors. It targets tourists, families, and seniors seeking cultural and natural experiences in the region. The site is well-structured with clear navigation and multilingual support, although it lacks some modern features such as mobile optimization and advanced SEO techniques. Technically, the site uses legacy JavaScript libraries like jQuery and Highslide, with custom scripts for UI elements and cookie consent. Security posture is moderate, with HTTPS assumed but no visible security headers or explicit privacy policies, which reduces trust and compliance confidence. The WHOIS data is unavailable or malformed, limiting domain legitimacy verification. Overall, the site is functional and informative but would benefit from enhanced security and privacy practices.

C

Computer Sweden Recruitment

computerswedenrecruitment.se

66

Computer Sweden Recruitment is a specialized recruitment firm focusing on IT and technology sectors, operating under the umbrella of Foundry, a leading tech media and marketing group. The company leverages its strong market position and network to provide recruitment services for IT managers and specialists. The website is professionally designed, mobile-optimized, and hosted on a modern platform (Teamtailor) with good technical infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data for the domain is a notable concern but does not detract significantly from the overall legitimacy given the professional content and known parent company. Strategic recommendations include improving transparency on security policies and verifying domain registration details.

A

Asociace pracovníků pedagogicko-psychologických poraden, z.s.

apppp.cz

55

The website www.apppp.cz represents the Asociace pracovníků pedagogicko-psychologických poraden, z.s., a professional association dedicated to supporting and developing pedagogical-psychological counseling services in the Czech Republic. The site targets specialists and professionals in the educational counseling sector, providing information about the association, its mission, and contact avenues primarily through a contact form. The business model is non-profit and focused on professional development and collaboration within the education sector. The website is well-branded and content is relevant and professionally presented in Czech language. Technically, the website is built on the Webnode platform, leveraging AWS Cloudfront CDN for hosting static assets, and uses standard web technologies including HTML5, CSS, and JavaScript. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. HTTPS is enforced, ensuring secure communication. However, no advanced security headers were detected, and privacy compliance is limited by the absence of a dedicated privacy policy page. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent mechanisms in place. The lack of security headers and absence of direct contact emails or phone numbers for security or incident response reduces the overall security maturity. WHOIS data is unavailable, likely due to privacy protection or domain registration issues, which slightly impacts trustworthiness but does not contradict the professional nature of the site content. Overall, the website is a credible and professional platform for a small non-profit educational association, with room for improvement in privacy compliance, security headers, and transparency of contact information. Strategic recommendations include adding a privacy policy, implementing security headers, and providing direct contact details for enhanced trust and compliance.

Society for All (SOFA) is a Czech non-profit organization dedicated to supporting vulnerable populations, particularly children, through education, mental health initiatives, and expert partnerships. The website presents a professional and content-rich platform focused on advocacy, training, and online counseling services. The organization targets educators, social workers, parents, and professionals involved in child welfare and education within the Czech Republic. Technically, the website uses modern web standards including Bootstrap and Google Fonts, offering good mobile responsiveness and user experience. However, there is a lack of visible privacy and cookie policies, and no direct contact emails or phone numbers are provided, relying mainly on an online contact form. Security posture is moderate with HTTPS implied but missing explicit security headers and vulnerability disclosure mechanisms. WHOIS data is unavailable, which raises concerns about domain registration transparency. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security practices.

R

Race to Chicago | New Board Game by Jim Westergren

racetochicago.com

48

The website 'Race to Chicago' is dedicated to promoting a new board game by Jim Westergren but is currently inactive and serves primarily as a placeholder with a newsletter subscription form. The business appears to be a small-scale project or startup with minimal digital presence and no active content or contact information. Technically, the site is built using the N.nu website builder platform, hosted with Cloudflare DNS, and uses HTTPS. However, it lacks modern security headers and DNSSEC, and no privacy or cookie policies are present, indicating low compliance maturity. The security posture is basic with standard domain protections but missing important headers and policies. Overall, the site has low content quality and poor user experience, with no evident business credibility signals or trust indicators.

C

Codalex AB

luris.org

57

Luris.org is a website dedicated to promoting a newly created strategy card game called Luris, developed by Jim Westergren and associated with Codalex AB. The site provides detailed information about the game's concept, rules, and strategy, targeting general audiences interested in family-friendly and accessible card games. The business is small and newly founded in 2023, with a niche market position in the card game industry. Technically, the website is built using standard HTML, CSS, and JavaScript, hosted via Cloudflare with DNS services also provided by Cloudflare. The site is mobile optimized and offers a good user experience with clear navigation and professional design. However, it lacks advanced SEO and accessibility features.

C

Codalex AB

clesto.com

49

Clesto.com is a niche website dedicated to promoting and providing access to the Clesto board game, a simplified and engaging chess variant themed around jungle animals. The site offers educational content including rules, videos, notation, and an online play option, targeting children, teens, and adults interested in strategy games. The business behind the site is Codalex AB, a small entity with a domain registration dating back to 2006, indicating a stable online presence. Technically, the website is built on a simple HTML/CSS/JavaScript stack with Google Fonts and hosted behind Cloudflare DNS services. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced technical frameworks or CMS beyond the N.nu generator. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, representing a compliance gap with GDPR and other privacy regulations. No contact or incident response information is provided, limiting transparency. The presence of a third-party tracking script (Redistats) indicates moderate user tracking without clear privacy disclosures. Overall, the website is functional and trustworthy with a good business credibility score but requires improvements in privacy compliance and security best practices to enhance user trust and regulatory adherence.

C

Codalex AB

thespacewar.com

54

The Space War website represents a small indie gaming company, Codalex AB, offering a free-to-play strategic 2-player card game accessible via web browsers. The business model focuses on skill-based gameplay without pay-to-win elements, targeting competitive card game enthusiasts. The site provides community engagement through multiple social media channels and offers a seamless user experience with responsive design and fast performance. Technically, the site is built with standard web technologies and hosted behind Cloudflare DNS, but lacks advanced security headers and formal privacy or cookie policies, which are compliance gaps. The domain registration is consistent and legitimate, supporting the business's credibility. Security posture is moderate with HTTPS enabled but could be improved by adding DNSSEC and security headers. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

C

Codalex AB

advinsula.com

56

Advinsula.com is the official website for a niche indie browser-based MMORPG game developed by Jim Westergren under Codalex AB. The game offers a unique daily decision-based adventure experience with AI-generated content, targeting casual and mobile gamers interested in fantasy role-playing. The website is well-designed with consistent branding and clear content describing the game mechanics, creator background, and registration process. Technically, the site uses modern web standards, Cloudflare DNS, and a custom font, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and form protections, but lacks DNSSEC and security headers, and no privacy or cookie policies are published, indicating compliance gaps. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the site is professional and trustworthy but would benefit from improved security headers and privacy compliance documentation.

B

Bonnier News AB

sydsvenskan.se

72

Sydsvenskan.se is a leading regional news website serving the Skåne and Öresund regions in Sweden, operated by Bonnier News AB. The site provides continuous news coverage and targets a broad general audience in its region. It operates on a business model combining subscription services and advertising revenue, positioning itself as a key media player in the Swedish regional news market. Technically, the website employs modern web technologies including JavaScript frameworks, consent management via Didomi, and integrates advertising and analytics platforms such as Google Tag Manager and Rubicon Project. The site is well-optimized for mobile and desktop platforms, with good SEO and accessibility features.

T

TodaysWeb Ltda.

todaysweb.com

50

TodaysWeb Ltda. is a small technology company specializing in website development and digital marketing services, targeting business clients seeking to increase their online presence and success. The company emphasizes results and has a history dating back to 1999 through its founder, Jim Westergren, with notable media coverage enhancing its credibility. The website is professionally designed with consistent branding and clear navigation, supporting its market position as an established player in the web development sector. Technically, the site uses standard web technologies including HTML5, CSS3, Google Fonts, and JavaScript, hosted on the N.nu platform. While performance and mobile optimization are moderate, SEO practices appear well implemented. Security posture is average with HTTPS implied but lacking explicit security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site provides clear contact information and trust signals such as client testimonials and media references. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

K

Kurz-URLs & QR-Codes - sicher & datenschutzfreundlich

kurzelinks.de

60

Kurzelinks.de is a German-based URL shortening and QR code generation service emphasizing privacy and security. The platform offers a variety of features including multilinks, email links, password protection, link expiration, and deactivation capabilities. It operates with a focus on data protection, malware and phishing scanning, and user control over shortened URLs. The website is primarily in German and targets a general audience seeking secure and privacy-friendly link management solutions. Technically, the site uses a traditional jQuery-based stack with custom JavaScript and CSS, delivering moderate performance and basic mobile optimization. Security posture is solid with HTTPS enforcement and privacy features like referrer removal, though it lacks some advanced security headers and explicit security policies. Contact is primarily via a contact form and an abuse email address, with no direct phone numbers or social media links evident. Overall, the site is trustworthy, professional, and well-aligned with GDPR requirements, though it could improve cookie consent and security header implementation.

3

3x7.de ✂ datenschutzfreundliche Kurz-URLs & QR-Codes

3x7.de

10

3x7.de is a German-based privacy-friendly URL shortening and QR code generation service. It offers users the ability to shorten long URLs, create multi-link lists, email links, and generate QR codes, with additional features such as password protection, malware and phishing checks, and optional link deactivation. The service is accessible 7 days a week and emphasizes data protection and user privacy, operating from Germany with a focus on GDPR compliance. The website is primarily in German and targets users seeking secure and privacy-conscious link shortening solutions. Technically, the website employs a modern JavaScript stack including jQuery and jQuery UI, with custom scripts for interaction and QR code generation. Hosting is inferred to be with netcup, a German hosting provider, based on DNS nameservers. The site uses HTTPS and includes CSRF tokens in forms, indicating attention to security. However, some security headers are missing, and cookie consent mechanisms are not present, which could be improved for full GDPR compliance. Mobile optimization and accessibility are basic but functional. From a security perspective, the site enforces HTTPS, offers malware and phishing protection on shortened URLs, and provides options to remove referrer information and password-protect links. There is an abuse reporting page, but no explicit security policy or vulnerability disclosure program is published. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, 3x7.de presents a trustworthy and privacy-conscious service with a solid technical foundation and good business credibility. Strategic improvements in security headers, cookie consent, and published security policies would enhance its compliance and security posture further.

0

Kurzlinks & QR-Codes erstellen

0cn.de

62

0cn.de is a German-based URL shortening and QR code generation service focused on privacy and security. It offers features such as malware and phishing link checks, password protection, link expiration, and deactivation links. The service targets general users seeking secure and privacy-friendly short URLs. The website is professionally designed with clear navigation and good content relevance. Technically, it uses a custom platform with jQuery and JavaScript libraries, delivering moderate performance and basic mobile optimization. Security posture is strong with HTTPS enforcement and link safety features, though some security headers and explicit policies are missing. Privacy compliance is good with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is supported by consistent WHOIS data and transparent service offerings.

O

Kurzlinks mit Phishing- & Malware-Schutz

ogy.de

62

ogy.de is a German-based URL shortening service focused on providing secure, privacy-friendly short links with integrated phishing and malware protection. The service offers a variety of features including multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-structured, primarily in German, and targets general internet users and businesses seeking safe link shortening solutions. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, but does not rely on a CMS. Security is well considered with HTTPS, CSRF tokens, and malware checks, though some security headers are missing. Privacy compliance is strong with a comprehensive privacy policy, but lacks a cookie consent mechanism. Contact is available via a contact form and an abuse reporting page. Overall, the site is professional, trustworthy, and well-positioned in its niche.

K

Kurzlinks.de

kurzlinks.de

10

Kurzlinks.de is a German-based URL shortening service focused on privacy and security. It offers users the ability to shorten long URLs with added features such as malware and phishing protection, optional password protection, and dereferrer functionality to enhance user privacy. The service also provides additional utilities including multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-positioned in the niche market of privacy-conscious URL shorteners, targeting general internet users who value data protection and security. Technically, the site employs modern JavaScript libraries like jQuery and jQuery UI, with a custom or unknown CMS. The site is moderately optimized for performance and mobile use, with good SEO practices and basic accessibility features. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and offers several security features for links, but lacks explicit security headers and a published security policy. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism is present. Contact is primarily via a contact form and an abuse reporting email. Overall, the site is trustworthy, secure, and professional, with room for improvement in security headers, cookie consent, and direct contact information visibility.

K

Kurzlink.ch - sichere Kurz-URLs und QR-Codes

kurzlink.ch

65

Kurzlink.ch is a Swiss-based URL shortening and QR code generation service emphasizing security and privacy. The platform offers free services including link shortening, multilink creation, email link generation, and QR code factory features, alongside enterprise SaaS solutions, browser extensions, and mobile apps. The service targets general internet users primarily in Switzerland and German-speaking regions, positioning itself as a secure and privacy-conscious alternative in the URL shortener market. The website content is professional, well-structured, and consistent with the brand's security focus.

J

j0b.de

j0b.de

10

j0b.de operates as a specialized URL shortening service primarily targeting job-related content such as job offers and company profiles. The service emphasizes privacy and security by incorporating malware and phishing checks, referrer removal, and optional password protection for shortened links. The platform offers additional features including multilink creation, email links, QR code generation, and API access, positioning itself as a niche player in the URL shortener market with a focus on secure and privacy-friendly link management. The website is hosted and operated from Germany, aligning with GDPR compliance and data protection standards. Technically, the website employs modern JavaScript libraries including jQuery and jQuery UI, with a clean HTML5 structure and CSS styling. While no CMS or major frameworks are detected, the site demonstrates moderate performance and basic mobile optimization. SEO practices are adequately implemented with proper meta tags and descriptive content. However, accessibility features are basic and could be improved. Security-wise, the site enforces HTTPS, uses CSRF tokens in forms, and offers security features like password protection and malware scanning. Nonetheless, it lacks explicit security headers and a formal security policy or vulnerability disclosure program. The security posture is solid but could be enhanced by implementing additional HTTP security headers and providing clearer incident response contacts. Privacy compliance is good with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a notable gap. No direct contact emails or phone numbers are visible on the main page, which may affect user trust and support accessibility. No advertising or tracking scripts are detected, indicating a privacy-conscious approach. Overall, j0b.de presents a trustworthy and professional service with a clear business focus and good technical foundation. Strategic improvements in security headers, privacy consent mechanisms, and contact transparency would further strengthen its security and compliance posture.

B

Babsi

bab.si

58

Babsi operates a privacy-focused URL shortening service based in Germany, offering secure short links with phishing and malware protection. The service includes features such as multi-link lists, email links, QR code generation, and enterprise solutions. The website is well-structured, primarily in German, targeting general users seeking safe and privacy-friendly URL shortening. Technically, the site uses a modern JavaScript stack with jQuery and related libraries, hosted by OVH, a reputable provider. Security practices include HTTPS enforcement, CSRF protection, and link safety checks, though some security headers and cookie consent mechanisms are missing. The domain registration is consistent and appropriate for the business age, enhancing trustworthiness. Overall, Babsi presents a reliable and professional service with room for improvement in privacy compliance and security transparency.

M

Modifinder AB

mansgullberg.com

44

Måns Gullberg operates as an SEO expert and entrepreneur primarily through his company Modifinder AB, founded in 2013. The business focuses on providing affordable and quality search engine optimization services to Swedish companies, with a strong track record of success and client satisfaction. The website presents a professional image with clear business information, social media presence, and published SEO-related content, positioning the company as a credible player in the Swedish SEO market. Technically, the website is built on a modern stack including HTML5, CSS3, and JavaScript, with integration of Google Analytics and Tag Manager for tracking. The site is mobile optimized and accessible, with good SEO practices implemented. Security-wise, HTTPS is enforced, but the site lacks advanced security headers and published security policies. The absence of privacy and cookie policies is a notable compliance gap. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site scores well on content and technical implementation but needs improvements in privacy compliance and domain registration transparency.

T

TodaysWeb Ltda.

todaysweb.se

46

TodaysWeb Ltda. is a Swedish-based technology company specializing in SEO and web development services, primarily serving as a subcontractor to SEO firms and clients who require advanced digital marketing and system development solutions. The company has a strong market position in Sweden, consistently ranking in the top 3 for SEO-related keywords on Google. Founded in 1999 by Jim Westergren, TodaysWeb has established credibility through media mentions and a professional online presence. The company also operates a charity initiative in Bolivia, reflecting corporate social responsibility. Technically, the website is built with standard web technologies including HTML5, CSS, and JavaScript, and uses external resources such as Google Fonts and a third-party analytics service. The site is accessible, well-structured, and optimized for SEO, though mobile optimization and accessibility could be improved. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. WHOIS data for the domain www.todaysweb.se is missing, which raises concerns about domain registration legitimacy and trustworthiness. Overall, the website is professional and trustworthy in content but would benefit from enhanced security and compliance transparency.

T

TodaysWeb Ltda.

seo-guide.se

10

SEO-guide.se is a Swedish-language SEO educational website authored by Jim Westergren, an SEO expert since 2005. The site offers over 100 pages of SEO-related content, tutorials, and checklists aimed at helping users improve their search engine rankings. The business is operated by TodaysWeb Ltda., a small technology-focused entity with a niche market position in SEO education. The website is well-structured, mobile-optimized, and uses HTTPS, reflecting a mature digital presence. However, the absence of WHOIS data for the exact domain queried and lack of privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is generally good with no visible vulnerabilities, but security headers and incident response information are missing. Overall, the site is a trustworthy resource for SEO knowledge but would benefit from enhanced privacy compliance and clearer contact information.

J

Jim Westergren

jimwestergren.com

54

Jim Westergren's website presents a portfolio of his entrepreneurial projects primarily in the technology sector, focusing on web development, SEO tools, online games, and charitable activities. The site targets internet entrepreneurs, developers, and individuals interested in personal growth and gaming. The business model revolves around product offerings and services with a niche leadership position in Sweden for website building and SEO analytics. Technically, the site uses a custom CMS (N.nu), modern web standards, and caching technologies like Redis, delivering fast performance and good mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security headers and formal privacy or cookie policies. The absence of WHOIS data for the domain reduces trust verification, though the website content is professional and consistent. Overall, the site scores well on content quality and business credibility but needs improvements in privacy compliance and security best practices.

C

Codalex AB

codalex.com

54

Codalex AB is a newly founded Swedish family-owned technology company specializing in web services, game development, and SEO consulting. The company operates several web services including a website builder and a web analytics platform, alongside multiple game projects. The website serves as a temporary landing page providing clear business and contact information but lacks comprehensive privacy and cookie policies. Technically, the site is built with standard HTML, CSS, and JavaScript, hosted behind Cloudflare DNS services, and includes a JavaScript-based analytics tracking system. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but lacks DNSSEC and security headers. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Spektrum Gesundheit

rauszeit-im-kopf.de

46

Spektrum Gesundheit is a German interdisciplinary health platform that integrates mental, physical, and ecological health topics. It targets health professionals, urban planners, environmental scientists, educators, and decision-makers, providing scientifically grounded and practical health knowledge. The platform evolved from a mental health focus to a broader holistic health approach, emphasizing the interconnectedness of human, animal, environmental, and societal health. Technically, the website is built on the Contao Open Source CMS, uses jQuery, and is hosted on kasserver.com. It features modern web standards, responsive design, and SEO best practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR, with minimal user tracking via Matomo analytics.

H

het-menu.nl

het-menu.nl

55

Het-menu.nl is a Dutch online restaurant guide offering users the ability to search menus and prices across over 150,000 restaurants in the Netherlands. The platform targets general consumers looking for dining options and provides location-based search functionality. The website is professionally designed with consistent branding and good content quality, supporting a positive user experience. Technically, the site employs modern web technologies including JavaScript, CSS, and integrates a Consent Management Platform to ensure GDPR compliance. Analytics are conducted via Hotjar, enabling user behavior insights. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is legitimate, trustworthy, and well-positioned in its hospitality niche.

C

cilu.com is available for purchase - Sedo.com

cilu.com

71

The website is a domain parking and sales landing page hosted by Sedo.com, a well-established domain marketplace founded in 1998. It offers the domain cilu.com for purchase, targeting domain investors and buyers. The technical infrastructure includes Cloudflare DNS and hosting by World4You Internet Services GmbH, with modern JavaScript and CSS technologies. The website is accessible without WAF or security challenges and uses HTTPS with a good SSL configuration. However, it lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is minimal, with no privacy policy or terms of service found, though a cookie consent banner is present. No contact or business information is provided on the page, limiting business credibility. Overall, the site is functional but basic, with room for improvement in privacy and security practices.

C

Codalex AB

n.nu

56

N.nu is a Swedish-based technology company operating a website builder platform that enables users to create professional websites quickly and easily. Established in 2009 and operated by Codalex AB, the platform boasts over 20,000 active sites and offers features such as SEO-friendly templates, mobile responsiveness, unlimited hosting space, and integrated tools like newsletters and blogs. The business model is subscription-based with a free trial period, targeting individuals and small businesses seeking simple yet powerful website creation tools. Technically, the site uses a combination of HTML5, Bootstrap, jQuery, and tracking services like Google Analytics and Redistats, hosted with Cloudflare DNS and registered via Loopia AB. The website is well designed, mobile optimized, and SEO friendly, providing a good user experience.

B

BerlinerLuft. Technik GmbH

berlinerluft.at

50

BerlinerLuft. Technik GmbH is a German-based manufacturer specializing in ventilation, climate technology, and related industrial systems. The company offers a broad portfolio of products including fans, ventilation components, climate control devices, sound insulation systems, and process air technology. Their website reflects a mature B2B business model targeting technical building equipment professionals and industrial clients. The company maintains a consistent brand presence with multilingual support and international partner sites. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit incident response policies are absent. Overall, the domain registration aligns with the business identity, supporting legitimacy and trustworthiness.

P

Praxis für Logopädie Jennifer Groß

logo-gross.de

52

Praxis für Logopädie Jennifer Groß is a small healthcare provider specializing in speech therapy services located in Püttlingen, Germany. The website presents a professional image with clear information about their services, team, and contact details. Their market position is local and focused on patients requiring speech and language therapy, including both adults and children. The business model is service-oriented healthcare with a focus on personalized patient care. Technically, the website is built on the cm4all CMS platform hosted by Strato, using standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is moderately performant and mobile-optimized with basic accessibility features. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers are missing and no explicit security or incident response policies are published. Overall, the website is trustworthy and compliant with GDPR, providing sufficient contact and privacy information for users.

V

VisionConnect GmbH

vision-connect.de

65

VisionConnect GmbH is a well-established digital agency based in Hannover, Germany, with over 25 years of experience since its founding in 1995. The company specializes in web development, design, SEO, and digital marketing services, leveraging platforms such as TYPO3 CMS and Wordpress. Their market position is strong, supported by long-term client relationships and a comprehensive service offering that includes strategy, design, technology, and communication solutions. The website reflects a professional and trustworthy digital presence with excellent content quality and user experience. Technically, the website is built on a modern stack with TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, although some security headers could be improved. The SSL configuration is excellent, ensuring secure communications. However, there is no publicly available security policy or incident response information, which could be enhanced to improve transparency and trust. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-respecting analytics settings. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business claims, showing a domain age consistent with the company's history and no privacy protection that would obscure legitimacy. Overall, the security posture is solid but could benefit from additional security headers and published policies. The overall risk assessment is low, with the website presenting a professional, secure, and compliant digital presence. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure mechanism to further strengthen trust and security culture.

T

Kurz URLs mit Malware Schutz & Dereferrer Funktion

t1p.de

62

t1p.de is a German-based URL shortening service that emphasizes security and privacy by integrating malware and phishing protection, password protection for links, and dereferrer functionality. The service offers multiple domain options for short URLs, a browser extension, mobile app, and API access, targeting users who require safe and privacy-conscious link management. The website is well-structured, professionally designed, and provides comprehensive information about its services, including terms and privacy policies. Technically, the site uses modern JavaScript libraries such as jQuery and jQuery UI, with HTTPS enabled and CSRF protection in forms, indicating a solid technical foundation. However, some security best practices like security headers and cookie consent mechanisms are missing or not visible. The WHOIS data aligns with the website's German origin and service claims, supporting legitimacy. Overall, the site presents a trustworthy and professional service with room for improvement in privacy compliance and security hardening.

S

Sparkasse Uelzen Lüchow-Dannenberg

sparkasse-uelzen-luechow-dannenberg.de

65

Sparkasse Uelzen Lüchow-Dannenberg is a regional German savings bank offering a broad range of financial services including online and mobile banking, accounts, loans, investments, insurance, and real estate services. The website targets both private and business customers with a clear focus on accessibility and user support. The bank holds recognized certifications such as the BITV accessibility test and IHK quality seal, reinforcing its trustworthiness and market position. Technically, the website is built on Adobe Experience Manager CMS, utilizing modern web technologies like JavaScript and CSS, with good mobile optimization and accessibility features. The site employs HTTPS with a secure SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers are not detected, indicating room for security enhancements. From a security perspective, the site demonstrates good practices such as session timeout warnings and secure forms but lacks publicly available security policies or incident response contacts. No vulnerabilities or suspicious domains were found. Analytics usage includes Google Universal Analytics with moderate user tracking and privacy compliance. Overall, the website is professional, trustworthy, and well-structured, suitable for its financial services audience. Strategic improvements in security headers and incident response transparency could further strengthen its security posture.

SAFETEC IT-SYSTEME Vertriebsgesellschaft mbH is a German-based company specializing in the sales, maintenance, and support of high-performance scanners and related hardware and software solutions. Established in 1999, the company emphasizes a strong customer service culture with nationwide support technicians and flexible maintenance contracts. Their business model focuses on B2B sales and after-sales services including repairs, training, and test device loans. The website reflects a professional and consistent brand presence targeting business customers in Germany. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and MediaElement.js for enhanced user experience. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no major technical issues detected. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. However, explicit HTTP security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The domain WHOIS data is minimal but consistent with the business claims, though lacking detailed registrant information. Overall, SAFETEC presents a trustworthy and professional online presence with solid privacy and security foundations. Strategic improvements could include publishing explicit security policies, adding security headers, and implementing a vulnerability disclosure process to further enhance trust and compliance.

L

Landkreis Harburg

landkreis-harburg.de

53

Landkreis Harburg operates as a regional government authority in Germany, providing a wide range of public services including administration, social services, education, environmental management, and tourism information. The website serves residents, businesses, and visitors with comprehensive information and digital services such as online appointment booking and service portals. The site is well-structured, professionally designed, and consistent with the branding of a government entity. Technically, the site uses a custom CMS (NOLIS), modern web technologies, and includes accessibility and SEO optimizations, though some accessibility features could be improved. Security posture is strong with HTTPS, security headers, and spam protection on forms, but lacks a visible cookie consent mechanism and vulnerability disclosure policy. Overall, the website is trustworthy and fulfills its role as a government information portal effectively.

B

BerlinerLuft. Technik GmbH

berlinerluft.de

50

BerlinerLuft. Technik GmbH is a medium-sized German company specializing in the development and production of ventilation, climate technology, and industrial air systems. Their website presents a comprehensive portfolio of products and solutions targeting technical building equipment professionals and industrial clients. The company maintains a strong market position with a focus on sustainable and modular system solutions. Technically, the website is built on TYPO3 CMS, integrates Google Analytics and Tag Manager for tracking, and demonstrates good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is professional, trustworthy, and GDPR compliant, with clear contact information and international presence.

A

aminolabs.de is available for purchase - Sedo.com

aminolabs.de

71

The analyzed website is a domain sales landing page hosted on Sedo.com, a well-known domain marketplace platform. The page offers the domain aminolabs.de for purchase, targeting domain investors and buyers. The business model revolves around domain brokerage and parking services, with Sedo acting as the intermediary platform. The website content is basic, focusing on domain availability rather than detailed company information or services. Technically, the site uses modern web technologies including JavaScript modules and Cloudflare DNS for performance and security. However, advanced security headers and explicit privacy or security policies are not evident on this page. The domain registration data indicates a long-standing domain with appropriate transfer protections, consistent with legitimate domain marketplace practices. Overall, the site is functional but lacks comprehensive privacy and security disclosures.

The website www.ifem.cc is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to any meaningful content. No business information, contact details, or policies are available on the landing page. The domain WHOIS data is unavailable or not publicly accessible, preventing verification of ownership, registration dates, or legitimacy. Technically, the site uses Cloudflare's security services but lacks visible security headers or SSL configuration details. Overall, the site appears to be either under protection or not fully operational for public access, limiting any substantive analysis.

The website www.ollizilk.de is currently inaccessible due to a Cloudflare Turnstile security challenge page, which prevents access to any substantive content or business information. The domain is active and uses Jimdo name servers, suggesting it is hosted or built on the Jimdo platform. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are detectable, nor are there any contact details or business descriptions available. The technical infrastructure includes Cloudflare's security services, but no further technology stack details can be confirmed. Security posture cannot be fully assessed given the blocked content, but the presence of Cloudflare indicates some level of protection. Overall, the site cannot be properly evaluated for business credibility, compliance, or content quality at this time.

E-Werk Kulturzentrum GmbH operates a prominent cultural center in Erlangen, Germany, with over 35 years of history. The organization hosts a wide range of cultural events, concerts, and community programs, positioning itself as one of the largest cultural venues in Germany. The website reflects this focus with detailed event programming and cultural content aimed at regional and national audiences interested in arts and culture. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies and third-party services such as Cookiebot for consent management and Google/Facebook for analytics and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong, with comprehensive cookie categorization and GDPR-aligned consent. Overall, the site is trustworthy and professionally maintained, with no critical security or compliance issues detected.

R

Rockfield-Festival

rockfield-festival.de

54

Rockfield-Festival is a small regional event organizer hosting the Rockfield Festival 2024, a Woodstock-themed music festival in Ahaus, Germany. The website provides detailed event information, lineup, schedule, and contact phone number, targeting music fans and local attendees. The business model focuses on event promotion and ticket sales, leveraging social media channels for outreach. Technically, the site uses modern web technologies including React and the Chayns platform, hosted on Tobit infrastructure, delivering a moderate performance and good mobile experience. Security posture is adequate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies, indicating room for compliance improvements. Overall, the site is safe, family-friendly, and trustworthy for its purpose, though it would benefit from enhanced privacy and security disclosures.

O

Open Ground GmbH & Co. KG

wuppertal.cafe

10

Café 23 is a small hospitality business located in Wuppertal, Germany, offering a diverse selection of drinks, specialty coffees, vegetarian and vegan snacks, and hosting community events such as wine tastings and DJ nights. The business emphasizes values of tolerance, sustainability, and social justice, aiming to create a welcoming environment for all visitors. The website is bilingual (German and English), professionally designed, and provides comprehensive legal and privacy information consistent with German regulations. Technically, the site uses standard web technologies (HTML, CSS, JavaScript) with good mobile optimization and basic accessibility features. Security posture is moderate with no visible security headers or cookie consent mechanisms, but no critical vulnerabilities or exposed sensitive data were found. WHOIS data is unavailable due to TLD restrictions, but the domain expiry date and website content indicate an active and legitimate business. Overall, the site is trustworthy and well-maintained, though improvements in security headers and privacy compliance could enhance its posture.