Security Directory

O

OverDrive, Inc.

overdrive.com

75

OverDrive, Inc. operates a leading digital content distribution platform that partners with thousands of libraries, schools, and organizations to provide free access to ebooks, audiobooks, and streaming media. Their flagship apps such as Libby, Kanopy, and Sora facilitate easy access to digital reading and educational content for a broad audience including library patrons, students, and educators. The company holds a strong market position as a global leader in digital library services. Technically, the website employs modern JavaScript libraries, video embedding via Wistia, and uses Sentry for error monitoring, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive privacy and cookie policies that demonstrate good privacy compliance and user consent mechanisms. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and published incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional presentation and external trust signals. Overall, OverDrive.com presents a secure, professional, and user-friendly platform with strong business credibility in the education sector. Strategic improvements in security policy transparency and WHOIS data availability would further enhance trust and compliance.

E

Espresso News

espressonews.bg

40

Espresso News is a small regional online news media outlet focused on delivering news and event coverage for the western region of Sofia and surrounding municipalities in Bulgaria. The website provides categorized news content, community information, and reporter workshops, targeting local residents and Bulgarian-speaking audiences interested in regional developments. The business model is primarily advertising-supported, leveraging Google Adsense and Google Analytics for monetization and user tracking. Technically, the website uses a modern but basic technology stack including jQuery, Bootstrap, Font Awesome, and Google services. The site is mobile optimized with good navigation and content structure, though it lacks advanced CMS indicators and some accessibility features. Performance is moderate with standard web technologies. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No privacy or cookie policies are present, indicating gaps in GDPR compliance. No vulnerability disclosure or incident response contacts are provided. The site does not expose sensitive data and uses common third-party scripts responsibly, but improvements in security headers and privacy transparency are recommended. Overall, the website is functional and professional for its regional news purpose but should enhance privacy compliance and security posture to improve trust and regulatory adherence.

S

Stadtbibliothek Neuss

stadtbibliothek-neuss.de

56

Stadtbibliothek Neuss is a public library serving the community of Neuss, Germany, providing a wide range of cultural and educational services including reading promotion, workshops, makerspace, and a library of things. The website is built on WordPress and uses modern web technologies such as jQuery, Slick Slider, and Google reCAPTCHA to enhance user experience and security. The site demonstrates good accessibility and mobile optimization, supported by certifications like BIK - WCAG-konform and TÜV Süd. Security posture is solid with HTTPS and bot protection, though it lacks some advanced security headers and explicit security policies. Overall, the site is trustworthy, professional, and well-suited for its public service role.

K

KX Personal GmbH / Karriere Hamburg

karriere-hamburg.de

67

Karriere Hamburg, operated by KX Personal GmbH, is a well-established online job portal focused on the Hamburg metropolitan region. It offers a comprehensive platform for job seekers and employers, featuring job listings, apprenticeships, dual study programs, internships, and career advice. The site maintains a strong regional presence and partners with reputable local media such as the Hamburger Morgenpost (MOPO), enhancing its market position and trustworthiness. The content is professionally curated, targeting both candidates and employers in Hamburg and surrounding areas. Technically, the website employs a modern yet somewhat dated technology stack including jQuery 2.2.4, Foundation 5.5.3, and Splide.js for UI components. Hosting is provided by SchlundTech, a German hosting provider, ensuring regional compliance and performance. The site is mobile-optimized with good SEO practices and a clear navigation structure, although accessibility features are basic. Cookie consent mechanisms and privacy policies are implemented in compliance with GDPR. From a security perspective, the site uses HTTPS and has implemented cookie consent banners, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The WHOIS data is consistent with the business profile, showing no suspicious patterns or privacy protection that would raise concerns. Overall, Karriere Hamburg presents a secure, professional, and user-friendly platform for regional employment services. Strategic improvements in security headers, incident response transparency, and enhanced accessibility could further strengthen its security posture and user trust.

M

Ministerium fuer Inneres und Kommunales NRW

polizei.nrw

70

The website polizei.nrw is the official online presence of the Police of North Rhine-Westphalia, operated by the Ministry of the Interior and Municipal Affairs of NRW, Germany. It provides comprehensive information including press releases, crime prevention tips, traffic safety, and career opportunities. The site targets citizens, media, and stakeholders interested in police work and public safety in NRW. It holds a strong market position as a trusted government source with consistent branding and high content quality. Technically, the site is built on Drupal 10 with modern JavaScript libraries such as Splide for carousels and Shariff for social sharing. It uses Matomo analytics with DoNotTrack enabled, reflecting a privacy-conscious approach. The site is mobile-optimized and accessible, with features for easy language and sign language support. Performance is moderate, with room for improvement in security headers and DNSSEC. Security posture is good with HTTPS enforced and no visible vulnerabilities. However, security headers like CSP and X-Frame-Options are not detected and could be added. Privacy compliance is strong with a clear privacy policy and GDPR adherence, though a cookie consent mechanism is missing. Contact information is present but no direct emails or incident response contacts are found. Overall, the site is professional, trustworthy, and well-maintained, suitable for its government function. Recommendations include enhancing security headers, enabling DNSSEC, and implementing cookie consent to further improve compliance and security.

W

WGV Recycling GmbH

wgv-quarzbichl.de

43

WGV Recycling GmbH operates as a regional waste management and recycling service provider for the Landkreis Bad Tölz – Wolfratshausen area in Germany. The company offers a comprehensive range of waste collection services including biotonne, papiertonne, restabfalltonne, and packaging waste, alongside managing recycling centers and specialized waste treatment facilities such as biogas and composting plants. The website reflects a well-structured and professional digital presence, targeting local residents and businesses with clear service information and contact options. Technically, the website is built on WordPress 6.8.1 using the Customizr Pro theme, enhanced with common plugins like Contact Form 7 and GTranslate for multilingual support. The site demonstrates good mobile optimization and moderate performance, though there is room for improvement in accessibility and security header implementation. Hosting appears to be managed through your-server.de, consistent with the domain's nameservers. From a security perspective, the site enforces HTTPS and uses validated contact forms, but lacks some recommended security headers and a cookie consent mechanism, which are important for GDPR compliance. No explicit vulnerabilities or exposed sensitive data were detected in the provided content. Certifications such as Entsorgungsfachbetrieb and Qualitätsmanagement add to the trustworthiness of the business. Overall, the website is safe, professional, and credible with a strong focus on regional waste management services. Strategic enhancements in privacy compliance and security headers would further strengthen its posture and regulatory adherence.

Kreiswirtschaftsbetrieb Salzlandkreis operates as a municipal waste disposal specialist company serving the Salzlandkreis district in Germany. The website provides comprehensive information about waste collection, container services, hazardous waste disposal, and recycling centers, targeting local residents and businesses. The business is positioned as a government-operated entity with a clear public service mandate. Technically, the website is built using Incomedia WebSite X5 Pro with jQuery and Modernizr libraries, hosted likely on commercial servers associated with kasserver.com. The site is mobile-optimized with good navigation and content quality. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, though improvements in privacy compliance and security headers are recommended.

L

Landratsamt Altötting

lra-aoe.de

58

Landratsamt Altötting operates as the official local government authority for Landkreis Altötting in Germany, providing a comprehensive range of public services, information, and administrative support to residents, businesses, and visitors. The website serves as a central portal for accessing online services, news updates, forms, and contact information, reflecting a strong commitment to transparency and community engagement. The site is well-positioned as a trusted government resource within its regional jurisdiction.

de lege data is a specialized German-language blog providing comprehensive legal analysis and updates on data protection, privacy, and GDPR-related topics. The website serves data protection professionals, legal experts, and companies seeking detailed insights into European data protection law. It is positioned as a niche expert resource with high-quality content authored by Carlo Piltz. Technically, the site runs on WordPress with common web technologies like jQuery and Modernizr, hosted on German infrastructure. The site is accessible, mobile-optimized, and well-structured, though it lacks explicit cookie consent mechanisms and visible contact information. Security posture is moderate with no detected advanced security headers or incident response contacts. Overall, the site is trustworthy and professional but could improve in security best practices and privacy compliance transparency.

L

Lausitzer Seenland

lausitzerseenland.de

48

Lausitzer Seenland is a regional tourism website promoting a young holiday region located between Dresden and Berlin in Germany. The site offers comprehensive information on outdoor activities such as cycling, skating, water sports, and cultural experiences, alongside accommodation and activity booking services. The business operates as a regional tourism authority, targeting families, tourists, and outdoor enthusiasts. The website is well-structured with clear navigation and good content quality, supporting a positive user experience. Technically, it employs modern JavaScript libraries like Swiper and jQuery UI, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but cookie consent is missing. The domain registration data is consistent and trustworthy, aligning with the website's regional focus. Overall, the site is professional, trustworthy, and suitable for general audiences seeking tourism information.

W

Wohnungsgenossenschaft Duisburg-Mitte eG

wgd-mitte.de

59

Wohnungsgenossenschaft Duisburg-Mitte eG is a well-established housing cooperative based in Duisburg, Germany, with a history spanning over 125 years. The organization focuses on providing affordable, needs-based housing, modernizing properties with energy-efficient solutions, and fostering social engagement within the community. Their services include rental housing, guest apartments, repair services, and social programs, targeting local residents and cooperative members. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, ensuring good mobile responsiveness and user experience. However, there is no indication of a CMS, suggesting a custom-built or static site. Performance is moderate with room for optimization. SEO and accessibility are basic to good but could be improved further. From a security perspective, the site uses HTTPS but lacks visible security headers and a vulnerability disclosure policy. No cookie consent mechanism is present, which is a compliance gap under GDPR. The WHOIS data aligns well with the business claims, indicating legitimacy and consistent domain registration practices. Overall, the website is trustworthy and professional but would benefit from enhanced security measures, privacy compliance improvements, and formalized policies to strengthen user trust and regulatory adherence.

A

Adami

adami.fr

69

Adami is a French collective management organization dedicated to supporting artists-interpreters through rights management, financial aid, and career support. The website is professionally designed, multilingual (French and English), and targets artists and project holders in the cultural and media sectors. The business model revolves around collective rights management and funding artistic projects, positioning Adami as a key player in the French artistic ecosystem. Technically, the site is built on WordPress with modern JavaScript libraries and includes analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a published security policy and incident response details suggests room for improvement. The lack of WHOIS data limits domain trust verification, but the professional presentation and official social media presence support legitimacy. Overall, the site is safe, compliant with GDPR, and well-structured, serving its audience effectively.

E

eVision Technologies Ltd.

ev-portal.com

61

The website common.ev-portal.com hosts a professional B2B platform named PowerTask B2B, developed by eVision Technologies Ltd. The platform focuses on spare parts management software, offering services such as creation and management of spare parts catalogues, sales catalogues, electronic parts catalogs, order and stock management, and technical documentation support. The site supports multiple languages, indicating an international target audience primarily in the B2B sector for spare parts and technical documentation management. The business model revolves around providing software solutions to streamline spare parts sales and management processes. Technically, the website employs modern web technologies including Modernizr and jQuery, and supports Progressive Web App (PWA) features for enhanced user experience on mobile devices. The site is served over HTTPS, ensuring encrypted communication. However, no advanced security headers were detected in the provided data, and there is no visible privacy or cookie policy on the login page. The site demonstrates good design quality, mobile optimization, and basic accessibility features, but could improve SEO and security configurations. From a security perspective, the platform uses secure form inputs and includes a password recovery mechanism. The absence of explicit security headers and privacy policies represents a moderate risk. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data for the subdomain common.ev-portal.com is unavailable, which is expected as it is a subdomain, not a registered domain. This does not negatively impact the legitimacy of the main domain or the business. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but requires improvements in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and providing clear contact and incident response information.

TERO MUSIC is a Thai music label specializing in artist creation, music rights management, and event promotion. The website showcases a variety of artists, music releases, videos, and upcoming events, targeting Thai music fans and industry participants. The company appears to be a medium-sized entity founded in 2021 with a consistent brand presence and active social media engagement. Technically, the site uses a modern tech stack including jQuery, Bulma CSS, Owl Carousel, and Google Analytics, hosted with Cloudflare DNS and registered via GoDaddy. The website is moderately optimized for mobile and SEO but lacks advanced accessibility features. Security posture is basic with no DNSSEC, no visible security headers, and no HTTPS enforcement details provided. Privacy and cookie policies are absent, indicating compliance gaps with GDPR and other privacy regulations. Overall, the site is professional and content-rich but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

U

UniCredit Factoring Czech Republic and Slovakia, a. s.

unicreditfactoring.cz

72

UniCredit Factoring Czech Republic and Slovakia, a. s. is a financial services company specializing in factoring and financing solutions for businesses primarily in the Czech Republic and Slovakia. The website presents a professional image with clear branding and structured data confirming company identity and contact information. The business targets companies needing receivables financing and supplier financing services. Technically, the site uses modern JavaScript libraries including jQuery and Google reCAPTCHA, and implements a cookie consent mechanism via Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages limits full compliance transparency. Security posture is moderate with HTTPS enforced but lacking explicit security headers. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, the site is functional, secure, and business-appropriate but could improve in privacy and security documentation.

The website www.oberhausen.de serves as the official digital portal for the city of Oberhausen, Germany, providing residents and visitors with comprehensive information on city life, public services, tourism, and cultural events. The site is well-structured with clear navigation and a focus on accessibility and user experience. It employs modern web technologies including Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management, reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enforced and privacy-conscious analytics, though explicit security policies and contact information for incident response are not evident in the provided content. Overall, the site demonstrates a professional and trustworthy presence consistent with a municipal government entity.

U

UniCredit Leasing

ucleshop.cz

69

UniCredit Leasing operates an e-commerce platform focused on selling used vehicles from leasing contracts and providing leasing services, primarily targeting individuals and businesses in the Czech Republic. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence aligned with the parent company UniCredit. The technical infrastructure leverages modern JavaScript libraries, Google reCAPTCHA for bot protection, and Cookiebot for consent management, indicating a commitment to user experience and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly visible. The absence of WHOIS data limits domain trust verification but the overall site content and branding suggest legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact information visibility to strengthen trust and compliance.

U

UniCredit Fleet Management

unicreditfleet.cz

74

UniCredit Fleet Management CZ operates as a specialized leasing and fleet management service provider under the UniCredit Group umbrella, targeting business clients in the Czech Republic. The company offers operational leasing, fleet management, and sales of nearly new and used vehicles, positioning itself as a reliable and flexible partner in the fleet management sector. The website content is professionally presented in Czech, with clear navigation and consistent branding aligned with the parent group. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google reCAPTCHA and Cookiebot for security and privacy compliance. However, the absence of a visible privacy policy and WHOIS registrant data slightly reduces trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers and published incident response information. Overall, the website is functional and business-appropriate but would benefit from enhanced transparency and security best practices.

U

UniCredit Pojišťovací makléřská, spol. s. r. o.

unicreditbroker.cz

73

UniCredit Pojišťovací makléřská, spol. s. r. o. operates as an insurance brokerage service primarily serving the Czech and Slovak markets. The company offers insurance products related to financed items and other insurance services, targeting both individual and corporate clients. The website reflects a professional and consistent brand image aligned with the UniCredit group, indicating a stable market position within the finance sector. The digital presence is supported by modern web technologies and compliance with privacy regulations, including GDPR. Technically, the site uses contemporary JavaScript libraries and cookie consent management tools, ensuring a user-friendly and compliant experience. Security posture is adequate with HTTPS enforcement and use of reCAPTCHA, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, well-structured, and compliant with relevant privacy standards, though direct contact information is not prominently displayed. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type.

V

VIDIA-DESIGN s.r.o.

zijushandicapem.cz

43

Žiju s handicapem is a Czech Republic-based non-profit portal dedicated to supporting people with disabilities (OZP) by providing informational articles, job offers, community blogs, and sponsorship opportunities. The website is operated by VIDIA-DESIGN s.r.o., which appears as the author and creator of the site. The portal targets disabled individuals and their families, aiming to improve quality of life and social inclusion through content and community engagement. Technically, the website uses a modern JavaScript stack including jQuery, Modernizr, and NetteForms, with integration of Google Tag Manager and Facebook SDK for analytics and social media. The site is served over HTTPS and includes a cookie consent mechanism compliant with GDPR principles, offering granular cookie control in multiple languages. However, the site lacks advanced security headers such as CSP and HSTS, which could improve security posture. Security-wise, the site shows basic good practices like HTTPS and secure login forms but misses important headers and explicit privacy and terms of service pages. The WHOIS data for the domain is missing, which reduces transparency and trustworthiness from a domain registration perspective. Despite this, the site links to reputable partners and sponsors, and no suspicious or adult content is present. Overall, the site is a well-structured, content-rich portal serving a niche community with moderate technical maturity and security posture. Strategic improvements in security headers, privacy policy publication, and domain registration transparency would enhance trust and compliance.

A

ASPEKTA Trading s.r.o.

aspekta.cz

49

ASPEKTA Trading s.r.o. is a well-established family-owned automotive dealership and service company based in Plzeň, Czech Republic, operating since 1990. The company specializes in authorized sales and servicing of Hyundai, Mazda, Fiat, Fiat Professional, and Jeep vehicles, targeting both personal and corporate customers. Their business model includes new and used car sales, vehicle servicing, financing, insurance, and additional services such as vehicle wrapping and extended warranties. The company maintains a strong local market position with multiple showrooms and a reputation for personalized customer care. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with good mobile optimization and SEO practices. The site features a comprehensive cookie consent mechanism and privacy policy, demonstrating GDPR compliance. However, some security best practices such as HTTP security headers are not evident, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and publicly available security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The website content is professional, safe, and free from adult or questionable material. Overall, the website presents a credible and professional business presence with room for improvement in security posture and transparency regarding domain registration details. Strategic recommendations include enhancing HTTP security headers, publishing security policies, and improving WHOIS transparency to strengthen trust and compliance.

U

UniCredit Leasing

unicreditleasing.cz

73

UniCredit Leasing is a financial services company operating in the Czech Republic, specializing in vehicle and equipment financing through leasing and loans. The website presents a professional image with clear branding consistent with the UniCredit Group, offering services such as operativní leasing, finanční leasing, and insurance brokerage. The target audience includes both individual and corporate clients seeking financing solutions. Technically, the website uses modern JavaScript libraries including jQuery, Modernizr, and Google reCAPTCHA, and implements GDPR-compliant cookie consent via Cookiebot. However, the absence of WHOIS data and registrant information reduces trustworthiness from a domain registration perspective. Security posture is generally good with HTTPS and reCAPTCHA, but lacks explicit security headers and published security policies. Contact information and privacy policy pages are not found in the provided content, which are areas for improvement.

C

CFPE Europe

cfp-e.com

54

CFPE Europe is a federation representing commercial film producers associations across 21 European countries, encompassing over 900 independent production companies. The organization serves as a collective voice and support network for the advertising production industry in Europe, providing resources, advocacy, and organizing industry events such as summits. The website reflects a professional and consistent brand image, targeting industry stakeholders and members of national associations. Technically, the site is built on WordPress and employs modern web technologies including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. Security-wise, the website enforces HTTPS and avoids exposing sensitive data, but lacks some recommended security headers and visible privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing or unavailable, which is inconsistent with the active and professional nature of the website and reduces domain trustworthiness. Overall, the site is functional, professional, and serves its business purpose well, but could enhance privacy compliance and security posture.

Collata.site is a specialized website builder and content management system tailored specifically for public libraries. The platform offers a comprehensive suite of tools including event and space reservation systems, book lists, blogs, accessibility features, and digital signage. The business targets small to medium-sized public libraries, providing both a hosted SaaS edition and an open-source community edition, positioning itself as a niche player in the education technology sector. The website content is professionally designed, consistent in branding, and rich in relevant information, supported by client logos from various public libraries, which enhances trust and credibility. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and Font Awesome. It integrates Google Translate for multilingual support and uses legacy Google Analytics for tracking. The site appears mobile-optimized and accessible, with features supporting WCAG compliance. However, there is no evidence of advanced security headers or DNSSEC, and the domain uses privacy protection services, which is common for small tech companies. From a security perspective, the site uses HTTPS and has a clientTransferProhibited domain status, but lacks visible security headers like CSP or HSTS. The use of legacy analytics scripts and absence of privacy and cookie policies indicate gaps in privacy compliance. No incident response or vulnerability disclosure information is present. Overall, the security posture is moderate but could be improved with better headers, updated analytics, and explicit privacy documentation. The overall risk assessment suggests a legitimate, niche-focused business with good technical and content quality but with room for improvement in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, enabling DNSSEC, adding security headers, updating analytics tools, and providing clear incident response contacts to enhance trust and compliance.

E

EPOSINT AG Technische Kunststoffbeschichtungen

eposint.ch

55

EPOSINT AG is a Swiss-based company specializing in technical plastic coatings for surface protection across various industries worldwide. Positioned as an innovation leader in Switzerland, the company offers a broad range of coating services including anti-adhesive, anti-slip, chemical protection, electrical insulation, corrosion protection, and wear protection. The business operates primarily in the manufacturing sector with a B2B model, supported by a professional website built on Contao CMS and enhanced with modern JavaScript libraries. The company is part of the larger ADELHELM group, which includes several subsidiaries across Europe and North America. Technically, the website demonstrates a solid digital infrastructure with HTTPS enforced, use of Matomo analytics for privacy-conscious tracking, and structured data for SEO. The site is mobile-optimized with good navigation and content quality. Security posture is good with secure forms and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. Overall, the website and business present a trustworthy and professional image with strong market positioning in the technical coatings industry. The domain registration data aligns well with the business claims, supporting legitimacy. There are no indications of blocking or WAF interference, allowing full content accessibility and analysis. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving visible anti-bot measures on forms to further strengthen security and trust.

A

Adelhelm Unternehmensgruppe

adelhelm.de

50

Adelhelm Unternehmensgruppe is a medium-sized German company specializing in functional surface coatings for a wide range of industries worldwide. The company operates multiple subsidiaries and offers a broad portfolio of coating technologies including non-stick, chemical protection, and custom tailored solutions. Their market position is that of an established global supplier with a strong industrial B2B focus. The website is built on the Contao CMS platform and uses modern web technologies such as jQuery and Matomo analytics, hosted on Schlundtech infrastructure. Security posture is solid with HTTPS enforced and anti-spam measures in place, though visible cookie consent and explicit security policies are lacking. Overall, the site is professional, well-structured, and trustworthy, supporting the company’s business credibility effectively.

M

Městské kulturní středisko Klatovy

klatovskyzpravodaj.cz

59

The website www.klatovskyzpravodaj.cz serves as a local cultural news and event calendar platform for the city of Klatovy, Czech Republic. Operated by Městské kulturní středisko Klatovy, it provides residents and visitors with timely information about cultural events, cinema screenings, and community news. The site targets a general audience interested in local culture and entertainment. The business model focuses on community engagement and information dissemination rather than commercial transactions. Technically, the website employs a traditional web stack with jQuery 2.1.4, jQuery UI, Masonry layout, and other JavaScript libraries. It integrates Google Analytics for visitor tracking and implements a cookie consent banner, indicating some level of privacy compliance. The site appears moderately optimized for mobile devices and SEO, with a clear navigation structure and relevant meta tags. From a security perspective, the site lacks visible security headers and uses an outdated jQuery version, which could pose vulnerabilities. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact information suggest a legitimate local cultural institution. No forms collecting personal data were detected on the homepage, and no explicit security or incident response policies are published. Overall, the website is functional and serves its community purpose well but would benefit from enhanced security measures, updated technology, and improved transparency regarding domain registration and security policies.

K

Knihomola

knihomola.sk

44

Knihomola.sk is a Slovak-based online platform dedicated to aggregating quality book reviews from Slovak and Czech bloggers, readers, and reviewers. Established in 2017, it serves a niche audience passionate about literature, offering book discovery, blog hosting, and a widget for embedding book reviews. The website maintains a consistent brand presence and targets readers seeking curated literary content. Technically, the site employs a modern tech stack including jQuery, Bootstrap, Owl Carousel, Google Analytics, and Facebook SDK, hosted on Webglobe servers. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks advanced security headers and published security policies. No critical vulnerabilities or suspicious content were detected, and WHOIS data confirms domain legitimacy and consistency. Overall, the site is professional, trustworthy, and well-positioned within its niche.

B

Bohemiasoft s.r.o.

zombeek.cz

50

Zombeek.cz is a Czech-based online platform operated by Bohemiasoft s.r.o. that provides users with a free, easy-to-use website builder featuring responsive templates, drag-and-drop editing, and e-shop integration. The platform targets individuals and small businesses seeking to quickly create professional websites without technical expertise. The website demonstrates a solid technical infrastructure leveraging modern web technologies and third-party services such as Google reCAPTCHA and analytics tools. Security posture is generally strong with HTTPS enforcement and anti-bot measures, though some security headers are missing and no formal security policy is published. Privacy compliance is well addressed with clear cookie consent mechanisms and GDPR-aligned privacy policies. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Overall, Zombeek.cz presents a professional and trustworthy service with room for improvement in security transparency and domain registration clarity.

I

Institute of Canadian Agencies

theica.ca

61

The Institute of Canadian Agencies (ICA) is a well-established industry association founded in 1905, serving Canadian marketing and communication agencies. The organization focuses on advocacy, industry events, research, training, and member services to strengthen the Canadian agency sector. The website reflects a professional and consistent brand presence targeting agencies, clients, future talent, and Canadian market stakeholders. Technically, the site uses modern web technologies including Bootstrap 5, jQuery, and Cloudfront CDN for media delivery, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. Contact information is available via a contact form but no direct emails or phone numbers are published. Overall, the domain registration is legitimate with privacy protection justified for this business type. The site is safe, professional, and trustworthy with room for enhancements in security and privacy compliance.

K

KONZULTA Brno, a.s.

infokanal.cz

59

InfoKanál is a Czech Republic-based communication platform designed to provide municipalities and citizens with targeted and current information. The platform targets local governments, mayors, and citizens, offering a comprehensive communication channel that integrates modern communication methods. The website reflects a professional presence with clear branding and contact information, including mobile app availability on official app stores, indicating a focus on accessibility and user engagement. Technically, the website employs common frontend technologies such as jQuery, Bootstrap, Modernizr, and jQuery UI, supporting responsive design and moderate performance. While the site uses HTTPS, no explicit security headers were detected in the provided data, and no advanced security policies or incident response information are publicly available. The site respects user privacy by avoiding tracking cookies and providing a clear cookie consent mechanism. From a security perspective, the absence of WHOIS data raises concerns about domain registration legitimacy, although the website itself appears trustworthy and professionally maintained. No vulnerabilities or security issues were identified in the content or scripts. Privacy compliance is well addressed with a privacy policy and cookie consent banner. Overall, the site demonstrates a moderate security posture but would benefit from enhanced security headers and transparency around incident response. The overall risk assessment is moderate with recommendations to verify domain registration status, implement security headers, and publish security policies to improve trust and compliance.

M

Městské muzeum Horažďovice

muzeumhd.cz

60

Městské muzeum Horažďovice is a municipal cultural institution providing exhibitions, events, and visitor services focused on the local history and culture of Horažďovice, Czech Republic. The website serves as an information portal for visitors, featuring event calendars, exhibition details, and contact information. The museum is affiliated with the local municipality, enhancing its credibility and community role. Technically, the website uses a traditional tech stack including jQuery, jQuery UI, and Unite Gallery, with Google Tag Manager for analytics and marketing. The site is mobile optimized and offers a cookie consent mechanism, indicating some level of privacy compliance. Security posture is moderate with no visible critical vulnerabilities but lacks advanced security headers and explicit security policies. WHOIS data is missing, which reduces domain trustworthiness from a registration perspective but does not necessarily indicate malicious intent given the municipal nature of the site. Overall, the website is functional, informative, and trustworthy for its intended audience.

O

O2 Czech Republic a.s

o2media.cz

52

O2 Media is a marketing and advertising service leveraging unique customer data from the O2 telecommunications operator in the Czech Republic. The website presents various data-driven advertising solutions such as call-me-back SMS, direct email marketing, RTB segments, localization messaging, and retargeting. The business operates as part of O2 Czech Republic a.s, with a domain registered since 2014, indicating a stable presence in the market. Technically, the website uses modern JavaScript libraries, Google Analytics, Hotjar, and a consent management platform to comply with GDPR requirements. However, explicit privacy policies and terms of service are not found on the site, which is a compliance gap. Security posture is good with HTTPS and consent management but lacks visible security headers and incident response information. Overall, the site is professional but could improve transparency and security practices.

A

Akzente4you - Marion Sieber - Webdesign- / Internet Agentur in Offenburg

akzente4you.de

57

Akzente4you is a small, regionally focused internet agency based in Offenburg, Germany, specializing in web design, web development, SEO, and e-commerce solutions primarily for small businesses. The company offers fixed-price packages and personalized consulting services, positioning itself as a cost-effective and professional partner for local enterprises. The website reflects a mature digital presence built on WordPress with modern technologies and a clear focus on user experience and mobile responsiveness. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some advanced security headers and policies could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, with clear contact information and partner links enhancing credibility.

A

Akzente4you - Marion Sieber - Webdesign- / Internet Agentur in Offenburg

kuscheluniversum.de

48

Akzente4you is a small, professional internet agency based in Offenburg, Germany, specializing in web design, web development, SEO, and e-commerce solutions primarily for small businesses in the local region. The company offers fixed-price website packages and personalized consulting services, emphasizing responsive and modern website design. Their market position is that of a trusted local service provider with a focus on affordability and quality. Technically, the website is built on WordPress with a modern theme and plugins, including cookie consent management, and is hosted likely by 1&1 IONOS. The site is mobile-optimized and SEO-friendly, with structured data and social media integration. Security posture is good with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Recommendations include enhancing security headers, publishing security policies, and adding a vulnerability disclosure mechanism.

G

Global Legal Chronicle

globallegalchronicle.com

47

Global Legal Chronicle is a specialized media platform focused on delivering legal and financial news globally, targeting legal professionals and business stakeholders. The website operates on a subscription-based model with premium content gated behind membership tiers, supplemented by advertising revenue. Technically, the site is built on WordPress with a modern tech stack including Google Analytics and multiple ad networks, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS and consent management but lacks advanced security headers and DNSSEC. Privacy compliance is partial with cookie consent but missing explicit privacy and terms policies. Overall, the domain is legitimate with consistent WHOIS data and a mature registration history. Strategic improvements in privacy transparency and security policies would enhance trust and compliance.

T

Top Escape Rooms Project

terpeca.com

62

The Top Escape Rooms Project is a niche community-driven platform dedicated to recognizing and awarding the best escape rooms worldwide. It leverages the expertise of experienced escape room enthusiasts to curate annual awards and provides tools such as a room finder and voter portal to engage its audience. The website presents a professional and consistent brand image with good content quality and user experience, targeting escape room players, owners, and designers globally. Technically, the website employs modern web technologies including Bootstrap, Google Fonts, and Google Tag Manager for analytics. The domain is registered with a reputable registrar and uses Google Domains for DNS, though DNSSEC is not enabled. The site is mobile optimized and has a moderate performance profile. However, it lacks explicit privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the domain is locked against unauthorized transfer or deletion, but the absence of DNSSEC and security headers indicates room for improvement. No sensitive data exposure or vulnerabilities were detected in the content. The site uses Google Tag Manager for tracking but does not provide cookie consent mechanisms, which may pose compliance risks. Overall, the website is a credible and professional platform with a solid business model and community focus. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and reduce risk.

Nadácia Doprastav is a Slovak non-profit foundation established in 2006 by the construction company Doprastav, a.s. The foundation focuses on social and community support activities. The website serves as an informational portal presenting the foundation's mission, activities, and legal information. It is positioned as a small but established entity within the transportation and non-profit sectors in Slovakia. Technically, the website uses standard web technologies such as jQuery, Bootstrap, and Google Analytics, hosted on a Slovak hosting provider. The site is accessible, with basic mobile optimization and navigation clarity, but lacks advanced SEO and accessibility features. Security posture is moderate with no visible security headers and no explicit incident response or vulnerability disclosure information. Privacy compliance is addressed with a GDPR page and cookie consent banner, though no detailed privacy policy or terms of service pages are evident. Overall, the website is functional and trustworthy but could benefit from enhanced security practices and richer content.

3

3sixty, s.r.o.

contractor24.eu

40

Contractor24, operated by 3sixty, s.r.o., is a Czech Republic based technology company offering an online contract management and CRM platform. The service targets freelancers, lawyers, and corporations, providing an intuitive system for creating, editing, and managing contracts with multi-user permissions and revision tracking. The website is professionally designed with clear navigation and content relevant to its business domain. Technically, the site uses legacy JavaScript libraries like jQuery 1.9.1 and integrates Google Analytics for user tracking. Security posture is moderate, supported by ISO certifications but lacking visible security headers and privacy policies. No blocking or WAF mechanisms were detected, allowing full content access.

E

EXO TECHNOLOGIES, spol. s r.o.

exohosting.cz

51

EXO TECHNOLOGIES, spol. s r.o. operates the website exohosting.cz, providing web hosting, domain registration, virtual and dedicated servers, and email hosting primarily targeting small and medium businesses and individual customers in the Czech Republic and Slovakia. The company positions itself as one of the largest domain registrars in the region with over 20 years of experience. The website is professionally designed with consistent branding and clear navigation, offering a comprehensive range of hosting-related services and customer support channels. Technically, the website employs modern web technologies including Google Analytics, jQuery, Font Awesome, and the Foundation CSS framework. It is mobile-optimized and uses HTTPS with good SSL configuration. Cookie consent mechanisms and privacy policies are implemented, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is generally good with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data reduces transparency and trust slightly, but the website content and business information support legitimacy. Advertising and tracking are conducted via reputable networks like Google Ads and Sklik with transparent consent mechanisms. Overall, the website presents a trustworthy and professional hosting service provider with room for improvement in security policy transparency and WHOIS data availability. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining regular audits of third-party scripts.

T

Top Escape Rooms Project

topescaperoomsproject.com

62

The Top Escape Rooms Project is a specialized platform dedicated to recognizing and awarding the best escape rooms globally by leveraging the expertise of experienced enthusiasts. It provides curated lists, interactive tools like the Room Finder, and a voter portal to engage the community. The project is positioned as an international authority within the niche escape room industry, serving both enthusiasts and escape room operators. The website content is well-structured, visually appealing, and rich in relevant information, including detailed descriptions and testimonials for top escape rooms.

3

3sixty, s.r.o.

netreal2.com

36

Netreal2.com is a Czech Republic-based software solution provider specializing in CRM and sales systems tailored for real estate developers focusing on family and apartment houses. The platform offers comprehensive tools for managing sales processes, client relationships, document generation, and integration with real estate portals. The company positions itself as a partner to developers, aiming to streamline administrative tasks and enhance sales efficiency. The website content is professionally presented in Czech, targeting real estate professionals and developers. Technically, the website employs legacy JavaScript libraries such as jQuery 1.9.1, alongside Google Analytics and Google Tag Manager for tracking. While the site is accessible and well-structured, it lacks modern security headers and updated libraries, which could pose risks. The absence of visible privacy and cookie policies despite tracking scripts indicates potential compliance gaps with GDPR and related regulations. Security-wise, the site demonstrates role-based access control concepts in its business logic, and the company holds ISO certifications (9001, 14001, 27001), suggesting organizational process maturity. However, the missing WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. This discrepancy between the active website and missing domain registration information is a critical risk factor. Overall, while the business offering and website content are solid and professional, the technical and security posture requires improvements, especially updating libraries, adding privacy compliance mechanisms, and clarifying domain registration status to enhance trust and reduce risk.

T

Teambreakout Hamburg

teambreakout.de

49

Teambreakout Hamburg operates as a well-established live escape game provider offering immersive indoor and outdoor escape experiences, as well as interactive crime games for home use. The company targets a broad audience including families, friends, and corporate teams, positioning itself as a leading entertainment venue in Hamburg with multiple positive customer reviews and awards. The business model centers on event-based entertainment with online ticket sales and team event hosting. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Modernizr, and integrates Google Analytics and Facebook Pixel for marketing and analytics. Hosting is provided by rzone.de, with proper HTTPS encryption and moderate performance. The site is mobile-optimized and SEO-friendly, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, uses secure forms with validation, and maintains good privacy compliance including GDPR-aligned privacy and cookie policies. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the website demonstrates a strong security posture, good privacy compliance, and high business credibility. The domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and continuous monitoring of third-party scripts.

SMS-služby s.r.o. is a specialized service provider focused on supporting municipalities, towns, and schools across the Czech Republic. As a wholly owned subsidiary of the Sdružení místních samospráv České republiky (SMS ČR), it offers professional and cost-effective services primarily in data protection (GDPR), public procurement administration, grant advisory, strategic planning, copyright management, and website auditing. The company targets public sector entities and nonprofit organizations, leveraging its affiliation with SMS ČR to maintain a trusted market position. Technically, the website is built on the WebWorks WebCreator CMS platform, utilizing modern JavaScript libraries such as jQuery and Popper.js, and includes responsive design elements for mobile optimization. The site employs HTTPS with a good SSL configuration and integrates Google Analytics for user tracking, complemented by a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data for the domain raises some concerns about registration transparency, although the website content and organizational affiliation support its legitimacy. Overall, SMS-služby s.r.o. presents a professional and trustworthy online presence aligned with its business focus. However, improvements in security header implementation, domain registration transparency, and publication of security policies would enhance its security posture and trustworthiness.

E

ENTSOG AISBL

entsog.eu

72

ENTSOG AISBL is a European non-profit association established in 2009 to coordinate national gas transmission system operators (TSOs) across Europe. It plays a critical role in facilitating cooperation to meet EU energy and climate goals, particularly focusing on the energy transition and net-zero decarbonisation by 2050. The organization provides key services including data transparency platforms, infrastructure mapping, network codes, and security of supply simulations. The website reflects a mature digital presence with professional design and comprehensive content targeting energy stakeholders and policy makers. Technically, the website is built on Drupal 10 with modern front-end libraries such as Bootstrap, Swiper.js, and Font Awesome. It integrates Google Tag Manager for analytics and uses Elfsight widgets for social media feeds. The site is mobile optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. The domain WHOIS data is privacy protected under EURid policy, which is justified for this type of organization. The website is trustworthy, professional, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy, and implementing a vulnerability disclosure program to further strengthen trust and security. This assessment indicates a well-established, credible organization with a strong digital footprint and a good security baseline, suitable for its role in the European energy sector.

I

InterWay, a. s.

interway.sk

66

InterWay, a. s. is a well-established Slovak IT company with over 26 years of experience providing comprehensive IT infrastructure support, cloud services, cybersecurity consulting, and web application development. The company targets both private and public sector clients, including government ministries, banks, and healthcare institutions, positioning itself as a leading IT solutions provider in Slovakia. Their business model combines service delivery with proprietary products under the WebJET and IwayCloud brands. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and Google Tag Manager, with a proprietary CMS platform (WebJET). The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Performance is moderate, with room for improvement in accessibility and security headers. Analytics usage is moderate and privacy-conscious. From a security perspective, the site uses HTTPS with good SSL configuration and employs CSRF tokens in forms. However, it lacks explicit security policies and incident response contact information, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data aligns well with the company's claims, supporting legitimacy. Overall, InterWay's website demonstrates a strong business presence and technical maturity with good privacy compliance. Strategic improvements in security policy transparency and accessibility would further enhance their security posture and user trust.

V

Výskumný ústav geodézie a kartografie v Bratislave

vugk.sk

60

Výskumný ústav geodézie a kartografie v Bratislave is a Slovak government research institute specializing in geodesy, cartography, and cadastral data services. The website serves as an official portal providing access to various cadastral and geodetic services, including electronic portals and data provision. The target audience includes government entities, professionals in geodesy, and the general public seeking cadastral information. The business model is focused on government research and public service provision, positioning the institute as an authoritative source in its sector. Technically, the website uses a custom CMS (WebJET) with common JavaScript libraries such as jQuery and Bootstrap. The site is moderately optimized for performance and mobile devices, with good accessibility and basic SEO practices. The cookie consent mechanism is implemented, reflecting awareness of GDPR requirements, although no explicit privacy policy or terms of service pages were found. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and published security policies. No incident response or vulnerability disclosure information is available. The absence of privacy and terms policies represents a compliance gap. Overall, the security posture is moderate but could be improved with standard best practices. The website is trustworthy and professional, with no adult or questionable content. Contact information is clearly provided, including phone numbers and a physical address. No social media or email contacts were found. The site is not blocked by WAF or security challenges, allowing full content access for analysis.

G

Geodetický a kartografický ústav Bratislava

gku.sk

59

Geodetický a kartografický ústav Bratislava is a Slovak government institution specializing in geodetic and cartographic services. It provides key national services including cadastral data management, electronic portals for real estate information, and spatial observation services. The website serves government agencies, municipalities, and geospatial professionals with authoritative data and services. The institution holds a strong market position as the official geodetic authority in Slovakia. Technically, the website is built on a custom CMS (WebJET) and uses common JavaScript libraries such as jQuery and Bootstrap. It is mobile-optimized and accessible, with moderate performance. SEO is basic but functional. Cookie consent and GDPR compliance mechanisms are implemented effectively, reflecting good digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, the absence of security headers and vulnerability disclosure policies indicates room for improvement. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the legitimacy of the domain as a government entity with consistent registration details. Overall, the website is professional, trustworthy, and compliant with privacy regulations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and trustworthiness further.

B

Boardroom Limited

investorserve.com.au

74

InvestorServe is a secure online portal operated by Boardroom Limited, targeting investors who need to manage their investment portfolios and access statements. The platform emphasizes security through multi-factor authentication and secure login mechanisms. The website is professionally designed with a focus on usability and investor services, reflecting a medium-sized finance sector business based in Australia. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Google Analytics, with moderate performance and good mobile optimization. Security posture is strong with HTTPS and MFA, though security headers and privacy policies are lacking. Overall, the site is trustworthy and legitimate, though improvements in privacy compliance are recommended.

E

eustream, a.s.

eustream.sk

65

EUSTREAM, a.s. operates the Slovak gas transmission system, serving as a critical energy corridor in Central Europe. The company provides natural gas transportation services interconnected with neighboring countries, focusing on safe, reliable, and ecological gas transmission. Their website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting energy market participants and stakeholders. Technically, the site uses established libraries like jQuery and Bootstrap, with a CMS platform WebJET, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS usage and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. Overall, the site demonstrates high professionalism and trustworthiness, supported by consistent WHOIS data and domain age aligning with the company's long history.