Security Directory

Globalhosting.sk is operated by Global Services Slovakia s.r.o., a small Slovak company founded in 2004 specializing in web hosting and internet marketing services. The company offers domain registration, web hosting, email services, FTP and shell accounts, databases, and administration. The website content is basic but relevant, targeting businesses seeking comprehensive internet solutions in Slovakia. The technical infrastructure is simple, relying on standard HTML, CSS, and JavaScript, hosted likely by Websupport based on nameserver data. No modern CMS or frameworks are detected, and mobile optimization is basic. Security posture is moderate with some input validation on forms but lacks HTTPS confirmation and security headers. Privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site is functional but would benefit from improved security, privacy compliance, and modern technical enhancements.

Globalweb.sk is a Slovak website representing a professional web content management system (WCM) solution under development by Global Services Slovakia s.r.o., a small technology company founded in 2004. The company offers IT services including web design, marketing, and consulting, targeting businesses seeking CMS and WCM solutions. The website currently serves as a placeholder with basic information and links to related business domains within the same group. Technically, the website is built with simple HTML and CSS, hosted on Websupport servers. It lacks modern frameworks, mobile optimization, and advanced SEO features. No analytics or tracking scripts are present, indicating minimal digital maturity. The absence of HTTPS and security headers reduces the security posture. Contact information is clearly provided, but no privacy or cookie policies are implemented, which is a compliance gap. From a security perspective, the site shows basic hygiene but lacks critical protections such as SSL/TLS encryption and security headers. No forms or user input fields are present, reducing attack surface. The WHOIS data is consistent and transparent, supporting legitimacy. Overall, the site is safe with no adult or questionable content but requires improvements in security and compliance to meet modern standards. The overall risk is moderate due to missing HTTPS and privacy policies. Strategic recommendations include implementing SSL, adding privacy and cookie policies, enhancing security headers, and improving mobile and SEO optimization to increase trust and compliance.

C

CEUR Workshop Proceedings

ceur-ws.org

55

CEUR-WS.org is a well-established academic open-access publishing platform specializing in computer science and information systems workshop proceedings. Operated by volunteers under the auspices of RWTH Aachen University, it provides free online access to scientific papers and maintains a recognized ISSN publication series. The website hosts a large volume of proceedings with detailed editorial and submission information, targeting researchers and academic workshop organizers. Technically, the site uses basic HTML and CSS, hosted by Sun SITE Central Europe, with moderate performance and basic mobile optimization. Security posture is moderate with domain transfer protections but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic, relying on legal disclaimers without explicit GDPR adherence or cookie policies. Overall, the domain registration is consistent and legitimate, reflecting a stable and trustworthy academic service.

The Berchtesgadener Land Bahn website serves as the official online presence for a regional railway operator in Germany, providing schedules, ticketing information, and news updates related to the Freilassing to Berchtesgaden rail line. The business recently transitioned operations to Bayerische Regiobahn, indicating a shift in operational control. The website targets local passengers and public transport users, offering essential travel information and partner links. Technically, the site is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in moderate performance and limited mobile optimization. Security posture is weak, with no HTTPS enforcement or security headers detected, and no visible privacy or cookie policies, which poses compliance and trust concerns. Overall, the site is functional but lacks modern security and privacy best practices, limiting its digital maturity and user trust.

The website pag-apartments.info serves as a regional accommodation portal focused on the Island Pag area in Croatia, offering listings of private apartments, rooms, and houses for vacationers. It facilitates direct booking with accommodation owners and targets tourists seeking lodging options on the island. The business model is a niche hospitality listing platform with a small market presence. Technically, the site is built with legacy HTML and CSS, lacking modern frameworks or CMS, and shows poor mobile optimization and accessibility. Security posture is weak, with no HTTPS detected and absence of security headers or privacy policies. No contact information or incident response details are provided, limiting trust and compliance. Overall, the site is functional for its purpose but requires significant improvements in security, privacy, and technical modernization to enhance user trust and compliance.

D

Dizajn Studio Novalja

novalja.info

33

Novalja.info is a regional tourism portal dedicated to providing comprehensive information and direct booking options for private accommodation on the island of Pag, Croatia, focusing on the city of Novalja and surrounding destinations. The website offers a variety of services including accommodation listings, live web cameras, weather forecasts, ferry schedules, and local news, targeting tourists and visitors planning their holidays. The business operates as a small-sized entity with a long-standing presence since 2005, managed by Dizajn Studio Novalja. Technically, the website relies on legacy technologies such as an outdated jQuery version and lacks HTTPS, which impacts its security posture and user trust. The site uses Google Analytics and Tag Manager for visitor tracking but does not provide visible privacy or cookie policies, indicating limited privacy compliance. Security-wise, the absence of HTTPS and modern security headers, combined with outdated libraries, exposes the site to potential vulnerabilities. Overall, the website is functional and content-rich but requires significant improvements in security and privacy to meet modern standards.

N

Novalja Tourist Board

tz-novalja.hr

43

The website tz-novalja.hr represents the official Tourist Board of the town of Novalja, Croatia, focusing on promoting local tourism, accommodation, and travel information. It serves as a regional informational portal targeting tourists and visitors interested in Novalja and the island of Pag. The business operates as a local government entity with a small organizational size and a long-established presence since 2003. The site content is primarily in Croatian with some English references, providing basic tourism-related information and contact details. From a technical perspective, the website uses basic HTML, CSS, and JavaScript without modern CMS or frameworks. The site lacks mobile optimization and accessibility features, and performance is moderate. There is no evidence of advanced analytics or tracking technologies, which limits data-driven insights but also reduces privacy concerns. The site redirects visitors to a related tourism site after a short delay. Security posture is weak, with no visible HTTPS enforcement, security headers, or privacy and cookie policies. No forms or user data collection mechanisms are present, reducing attack surface but also limiting user engagement. The WHOIS data is consistent and trustworthy, indicating a legitimate domain with a long history aligned with the business purpose. Overall, the website is functional for basic tourism information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust, user experience, and regulatory adherence.

K

Komunalije d.o.o. Novalja

komunalije-novalja.hr

42

Komunalije d.o.o. Novalja is a municipal utility company serving the Novalja area on the island of Pag, Croatia. The company provides essential services such as water supply, sewage management, and public procurement transparency. The website serves as an information portal for residents and businesses, offering news updates, service pricing, and contact information. The business operates as a local public utility with a focus on community service and compliance with local regulations. Technically, the website uses legacy technologies including an outdated jQuery version, and lacks modern mobile optimization and advanced security headers. While HTTPS is assumed, no explicit security policies or incident response contacts are published. Privacy compliance is partially addressed with a privacy policy page but lacks cookie consent mechanisms. Overall, the site is functional and trustworthy but would benefit from modernization and enhanced security practices.

M

Môj Kúrenár

moj-kurenar.sk

44

Môj Kúrenár is a small local heating service provider based in Bratislava, Slovakia, specializing in heating installation and repair services. The website is built on WordPress using Elementor and the GeneratePress theme, indicating a modern and maintainable technical infrastructure. The site is mobile-optimized and presents professional content relevant to its target audience. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and incident response information. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and credible but would benefit from enhanced privacy and security measures.

SpeedWeb.cz is a small Czech-based technology company specializing in the development and hosting of client-server web applications, with a focus on VIP hosting programs and e-commerce solutions tailored for customers who rely on internet activities for their business or livelihood. Their offerings include custom e-shop development, web hosting, and a proprietary POS and accounting system (PES) included in their monthly subscription. The website targets entrepreneurs and small businesses seeking stable, fast, and visually appealing web solutions. Technically, the site is built with basic HTML, CSS, and JavaScript, without modern CMS or frameworks, and uses third-party live chat services (Tawk.to) for customer support. Performance is fast, but mobile optimization and accessibility are basic. Security posture shows some awareness with the use of vulnerability scanning seals and live chat scripts, but lacks critical security headers and explicit HTTPS enforcement details. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is functional and business-focused but would benefit from enhanced security and compliance measures.

O

Ondřej Firla

ondrejfirla.eu

43

Ondřej Firla operates a professional web and graphic design business based in Olomouc, Czech Republic, with over 10 years of experience. The website showcases services including responsive web design, e-commerce solutions, custom CMS development, SEO optimization, and graphic design such as logos and corporate identity materials. The business targets local companies and individuals seeking quality digital and print design services. Technically, the site uses a custom CMS built on PHP with NETTE framework, JavaScript, and MySQL, hosted by WEDOS Internet, a.s. The site is mobile optimized and integrates Google Analytics and Google Tag Manager for tracking. Security posture is moderate with HTTPS enabled and reCAPTCHA on forms, but lacks important security headers and privacy compliance elements. No privacy or cookie policies are present, which is a compliance gap. The domain registration is consistent with the business history and shows no suspicious patterns. Overall, the site is professional and functional but could improve in security and privacy compliance.

CzechWinter.com is a niche online portal dedicated to providing accommodation listings and skiing information for tourists interested in the Czech mountain regions. The website offers direct contact to houseowners for cottages, apartments, and hotels, focusing on winter lodging and skiing activities. The business appears to be a small, regionally focused hospitality service provider established around 2008, with a modest online presence and monetization through Google AdSense advertising. From a technical perspective, the website uses basic HTML, CSS, and JavaScript with no modern frameworks or CMS detected. Hosting is provided by a Czech hosting provider as indicated by the nameservers. The site lacks HTTPS enforcement and modern security headers, which lowers its security posture. Mobile optimization and accessibility are minimal, and SEO practices are basic. There is no evidence of privacy or cookie policies, nor GDPR compliance mechanisms. Security-wise, the absence of HTTPS and security headers, combined with no visible privacy or cookie policies, indicates a low maturity level in security and compliance. No contact information or incident response channels are provided, which could hinder user trust and regulatory compliance. However, no malicious or adult content is detected, and the domain registration data is consistent and legitimate. Overall, the website serves its niche purpose but requires significant improvements in security, privacy compliance, and technical modernization to enhance trustworthiness and user experience.

Sportska Hrvatska is a Croatian non-profit association established in 2006 focused on promoting sports news. The website serves as a basic informational portal with minimal content, providing contact details, statutory documents, and organizational information. The market position is niche and local, targeting sports enthusiasts and stakeholders in Croatia. The business model is centered on association activities rather than commercial services. Technically, the website is simple, built with basic HTML and hosted behind Cloudflare DNS, but lacks modern CMS or frameworks. Performance and mobile optimization are basic, with limited SEO due to noindex directives. Security posture is weak, with no visible HTTPS confirmation, no security headers, and no privacy or cookie policies, indicating low maturity in security and compliance. Overall, the site is functional but minimalistic, with room for significant improvements in security, privacy, and user experience.

Prima Computers, operated by SOS PC, s.r.o., is a small Slovakian technology retail and service business specializing in computer hardware sales and servicing. The company has a long-standing presence since 2003 and operates an online e-shop through a partner platform. The website provides basic information about their services, partnerships, and promotional offers but lacks comprehensive contact details and formal policies. Technically, the site is built using an older proprietary website builder and relies on deprecated Flash technology, which negatively impacts security and user experience. No modern analytics or tracking tools are detected, and no privacy or cookie policies are present, indicating limited GDPR compliance. Security posture is moderate with DNSSEC enabled and domain registration consistent with business claims, but the absence of HTTPS enforcement and security headers is a concern. Overall, the website is functional but requires modernization and improved compliance to enhance trust and security.

Z

Zdenek Hošinský - netlogix.cz

netlogix.cz

41

Netlogix.cz is a Czech freelance web design and programming business operated by Zdenek Hošinský, offering a broad range of digital services including web design, online applications, e-shops, SEO, and graphic design. The website presents a professional portfolio and detailed service descriptions targeting small to medium businesses primarily in the Příbram region. The business has been active since 1999, emphasizing personalized and comprehensive web solutions. Technically, the site uses standard web technologies such as HTML, CSS, JavaScript, and jQuery, with Google Analytics for visitor tracking. However, there is no evidence of a CMS or advanced frameworks, and mobile optimization is basic. Security posture is moderate with no visible HTTPS or security headers detected in the provided data, and no privacy or cookie policies are present, indicating compliance gaps. The WHOIS data is missing, which reduces domain trustworthiness and raises questions about domain registration legitimacy. Overall, the site is functional and professional but would benefit from enhanced security, privacy compliance, and technical modernization.

Kami účto s.r.o. is a small Czech Republic based accounting and tax advisory service provider established in 2008. The company offers key services including bookkeeping, payroll management, tax evidence, representation before authorities, and tax consulting primarily targeting local businesses and entrepreneurs. The website content is professional and relevant to the finance sector but lacks modern design and mobile optimization. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking, hosted by Active24. Security posture is moderate with no visible HTTPS confirmation or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional but requires improvements in security, privacy compliance, and user experience to enhance trust and professionalism.

The website at jmfworld.org presents minimal accessible content, primarily embedding an external iframe from a third-party domain with obfuscated tracking parameters. The domain is registered with Network Solutions, LLC since 2000, indicating a long-standing registration; however, the website itself lacks substantive business information, contact details, or user-facing content. The technical infrastructure is basic, with no CMS or modern frameworks detected, and the site shows signs of ad-serving or tracking behavior through embedded pixels and iframes. Security posture is weak, with no DNSSEC, no security headers, and basic SSL configuration. Privacy compliance is poor, with no visible privacy or cookie policies, and no GDPR indicators. Overall, the site appears to be low quality, with limited trustworthiness and professionalism.

V

VR Bank Westküste

vrbank-westkueste.de

66

VR Bank Westküste is a regional cooperative bank serving the Westküste area in Germany. The website presents the bank's services and cooperative values, targeting local customers seeking banking and financial products. The site is professionally designed with consistent branding and uses modern web technologies including Angular Material and Adobe marketing tools. The technical infrastructure is supported by the hosting provider 'atruvia', indicating a stable and professional setup. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are not evident. Privacy compliance is basic, with cookie consent but no visible privacy policy or terms of service in the analyzed content. Overall, the website is trustworthy and suitable for its business purpose, though improvements in transparency and security documentation are recommended.

Schacht & Brederlow GmbH is a small German company specializing in bathroom design and craftsmanship services, as indicated by their partnerships with related design entities. The website is minimalistic, primarily showcasing logos and images with limited textual content. The technical infrastructure is basic, relying on simple HTML and CSS without modern frameworks or CMS detected. There is no evidence of advanced analytics or tracking technologies. Security posture is weak, with no detected HTTPS enforcement or security headers, and no cookie consent mechanisms. Privacy policy is present but basic, and no contact information is directly available on the main page. Overall, the website serves as a simple informational portal with limited digital maturity and security measures.

E

:: ERLEBE DEINEN MARKT ::

erlebedeinenmarkt.org

44

The website erlebedeinenmarkt.org serves as a promotional platform for the "Erlebe Deinen Markt" campaign, which supports and celebrates local weekly markets primarily in Germany and Europe. The campaign emphasizes fresh produce, community engagement, and cultural experiences, involving around 400 markets and international participation. The site content is informative and targeted at consumers interested in local market culture and events. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in moderate performance and poor mobile optimization. Security posture is weak due to lack of DNSSEC, security headers, and no visible HTTPS enforcement details. Privacy compliance is minimal as no privacy or cookie policies are present. Business credibility is moderate, supported by the campaign's longevity and partnerships, but contact information is not explicitly provided. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

The Major Cities Public Finance Project website serves as an academic and governmental platform focused on the comparative study of financing major cities internationally. It is affiliated with reputable institutions such as Fundació Carles Pi i Sunyer, the Barcelona City Council, and Universitat Pompeu Fabra, indicating a non-profit research orientation. The site provides informational content and an interactive map (using deprecated Flash technology) to support its mission of fostering information exchange among participating cities. Technically, the website is basic and outdated, relying on legacy Flash content and lacking modern web development practices such as mobile responsiveness and accessibility features. There is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating low digital maturity and compliance with current web standards. From a security perspective, the site shows weaknesses including the use of deprecated technologies and absence of visible security best practices. The malformed WHOIS data limits the ability to verify domain legitimacy fully, although the external links to credible institutions lend some trust. No contact information or incident response channels are provided, which reduces transparency and user trust. Overall, the website is functional for informational purposes but requires significant modernization and security improvements to meet current standards and enhance trustworthiness.

I

Indexa GmbH

indexa.de

39

Indexa GmbH is a German-based company specializing in wireless security technology products including alarm systems, video surveillance, and smoke detectors. With over 25 years of experience, they target small to medium-sized properties and businesses, offering certified and modular security solutions. Their product portfolio includes GSM-enabled cameras, digital wireless video door intercoms, and VdS-certified smoke detectors, positioning them as a trusted provider in the security technology sector. The website content is detailed and technical, aimed at customers seeking reliable and affordable security systems. Technically, the website uses outdated HTML frameset technology and lacks modern web standards such as responsive design and security headers. There is no visible HTTPS enforcement or privacy and cookie policies, which impacts the site's security and compliance posture. Social media presence is established on major platforms, enhancing brand visibility. Overall, the site reflects a small but established business with solid product offerings but requires modernization and improved security and privacy compliance.

ABP a.s. Praha is a Czech architectural and construction project design company established in 2005. The company offers comprehensive services including project design, documentation, and legislative process support for various building types such as administrative, residential, transportation, and industrial structures. Their market position appears to be that of a small, specialized local firm serving clients requiring detailed project execution documentation and regulatory compliance assistance. Technically, the website is built using outdated technology (Microsoft FrontPage 4.0) with static HTML content, lacking modern web standards, mobile optimization, and accessibility features. There is no evidence of HTTPS or security headers, which negatively impacts the security posture. The site does not provide privacy or cookie policies, nor does it offer contact information or interactive forms, limiting user engagement and trust. Overall, the website reflects a basic online presence with significant room for modernization and security improvements.

The website www.vhs.cloud presents minimal accessible content, primarily consisting of an iframe loading a session-specific page. The domain is registered since 2016 with a reputable registrar and shows no signs of privacy protection or suspicious activity. However, the lack of visible business information, contact details, privacy policies, and terms of service limits the ability to fully assess the business or compliance posture. Technically, the site uses basic web technologies including jQuery and custom JavaScript, but lacks modern frameworks or CMS indications. Security posture is weak due to absence of security headers and DNSSEC, and no clear HTTPS enforcement information is available. Overall, the site appears to be a small-scale or internal service with limited public-facing content.

The domain planebasin.com currently serves as a placeholder or service domain used by Admiral, a company providing copyright access control and privacy consent management services for digital publishers. The website content is limited to a 404 Not Found error page with informational text describing the domain's purpose and security/privacy practices. There is no active business website or user-facing content available. The technical infrastructure is hosted on Google Cloud Platform in Europe, with standard encryption and certificate rotation practices. However, DNSSEC is not enabled, and no advanced security headers are detected. The domain is relatively new, created in March 2023, consistent with a new service deployment. Security posture is moderate but limited by the lack of visible security headers and absence of a vulnerability disclosure policy. Privacy compliance is basic, with no cookie consent mechanism but clear statements about GDPR compliance and no third-party cookies. Overall, the website lacks business credibility signals such as contact information, terms of service, or marketing content, resulting in a low AI score and limited trustworthiness.

The website switchadhub.com appears to be a newly registered domain with minimal content primarily consisting of embedded iframes and tracking pixels. There is no visible business information, contact details, or privacy and cookie policies, indicating a lack of transparency and professionalism. The domain is registered with EurotrashNames.com LLC, a registrar of questionable reputation, and the domain age is less than one year, which is inconsistent with an established business presence. Technically, the site uses basic HTML and JavaScript but lacks modern security practices such as HTTPS enforcement and security headers. The presence of tracking pixels without consent mechanisms raises privacy concerns. Overall, the site appears to be an ad-serving or intermediary platform rather than a fully developed business website.

Děti Země is a Czech non-profit environmental organization focused on protecting nature and human living environments, emphasizing regional work and advocacy. The website serves as an informational platform presenting news, campaigns, and organizational programs. The technical infrastructure is basic, relying on traditional HTML, CSS, and JavaScript without modern CMS or frameworks, and lacks mobile optimization. Security posture is weak with no visible HTTPS enforcement or security headers, and privacy compliance is lacking due to absence of privacy and cookie policies. Contact information is limited to an email address and a Facebook page, reflecting a small-sized NGO profile. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

Wide Pixel Games is a small indie game development company specializing in retro-style pixel art games. The website primarily serves as a portfolio and gateway to external sales platforms and social media channels. The business appears niche-focused with a modest online presence and limited direct content on the site itself. Technically, the website is simple, using basic HTML and CSS without advanced frameworks or CMS. Performance and mobile optimization are basic but functional. Security posture is minimal with no detected security headers or DNSSEC enabled, and no privacy or cookie policies present, indicating limited compliance with modern privacy standards. The domain registration is consistent and legitimate, supporting the business's credibility. Overall, the site is safe with no adult or questionable content detected, but lacks comprehensive privacy and security features.

Baltic Earth is an international scientific research initiative focused on understanding the Earth system of the Baltic Sea region to support sustainable management against climate and environmental challenges. The website serves as an archive of content until January 2020, directing users to a new site for updated information. The initiative collaborates with reputable institutions such as Helmholtz-Zentrum Geesthacht and HELCOM, publishing scientific assessments and organizing events. Technically, the website is built with legacy HTML and CSS, lacks modern CMS or frameworks, and shows limited mobile optimization and accessibility. Security posture is basic with no visible HTTPS confirmation or security headers, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. Overall, the site is trustworthy and safe, but somewhat outdated and lacking in modern web practices.

Laddobar.cz is a small personal or studio website operated by Ladislav Pelcl, focusing on web hosting and web development services. The site is currently in a development phase with minimal content and references to an older website and a related hosting business. The domain is well-established, created in 2002, indicating a long-term presence in the web hosting space. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS, security headers, and privacy policies. No analytics or advertising tools are detected, and the site content is safe for general audiences. Overall, the site demonstrates moderate trustworthiness but requires significant improvements in security and privacy compliance to enhance credibility and user trust.

V

Vojenské Historické Sdružení Brdy

vhsb.cz

42

The website www.vhsb.cz represents the Vojenské Historické Sdružení Brdy, a small community organization dedicated to preserving and sharing the military history of the Brdy region in the Czech Republic. The site offers historical articles, photo galleries, and information about local events, targeting military history enthusiasts and the local community. The business model appears to be non-profit or community-driven with a niche focus. Technically, the website is built on IceCMS, a less common content management system, and uses standard HTML and CSS. The site is accessible with HTTPS enabled but lacks modern security headers and advanced technical features. Mobile optimization and accessibility are basic, and SEO practices are minimal. There are no analytics or tracking scripts detected, indicating a low level of user tracking. From a security perspective, the site has a basic security posture with HTTPS but lacks security headers and formal privacy or cookie policies, which are critical for GDPR compliance. No contact information or incident response details are provided, limiting transparency and user trust. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy and reduces overall trustworthiness. Overall, the website is functional and provides relevant content for its audience but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and meet modern standards.

C

Toulky Českem

ceskem.cz

51

The website 'Toulky Českem' is a small-scale informational portal dedicated to showcasing historical and cultural sites across the Czech Republic. It provides photographic galleries, brief descriptions, and mapping of various locations, targeting general audiences interested in Czech heritage and tourism. The site has been operational since 2008, indicating a stable presence in its niche. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, hosted via Czech providers. Performance and mobile optimization are basic but functional. Security posture is weak, with no visible HTTPS enforcement or security headers, and no published privacy or cookie policies, which impacts compliance and trust. Advertising is present via the Sklik network, but no advanced analytics or tracking services are detected. Overall, the site is safe, with no adult or questionable content.

The website brdy.info is an amateur, community-driven informational portal dedicated to the natural and cultural beauty of the Brdy, Křivoklátsko, and Český Kras regions in Czechia. It provides extensive regional content divided into multiple chapters, supported by user contributions such as photos and texts. The site targets general audiences interested in regional nature and history, operating as a small-scale informational resource without commercial focus. Technically, the site uses basic HTML, CSS, and JavaScript with Google Custom Search and Adsense integration. The site is mobile-optimized with moderate performance but lacks advanced technical frameworks or CMS. Security posture is minimal, with no detected security headers or HTTPS verification in the provided data, and no privacy or cookie policies, indicating compliance gaps. WHOIS data is unavailable due to TLD restrictions and privacy protections, which is common for .info domains but reduces transparency. Overall, the site is functional and relevant for its niche but would benefit from improved security and compliance measures.

The website www.e-deska.cz provides an electronic official notice board software solution primarily targeted at Czech municipalities or administrative bodies. The service offers intuitive document posting, automatic archiving, and scheduling capabilities for official documents, supporting multiple file formats. The business model appears to be software provision, with free offerings for clients whose websites are managed by the provider. The website content is basic and primarily informational, with limited interactive features beyond a login form for administrative access. From a technical perspective, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site lacks mobile optimization and accessibility features, and performance is moderate. There is no evidence of HTTPS enforcement or advanced security headers, which weakens the security posture. The login form is present but lacks visible security enhancements such as CSRF tokens. Security evaluation reveals significant gaps including absence of HTTPS, missing security headers, and no visible privacy or cookie policies, indicating poor compliance with GDPR and modern security standards. The WHOIS data is unavailable, which raises concerns about domain legitimacy and trustworthiness. However, the website content is safe, non-adult, and focused on government-related software services. Overall, the site scores low to moderate on AI scoring metrics due to technical and security deficiencies. Strategic recommendations include implementing HTTPS, adding security headers, improving privacy compliance, enhancing login security, and modernizing the technical stack to improve trust and user experience.

The website represents a small non-profit cultural association named 'kleinkunst und Kulturverein Werne a.d. Lippe e. V.', focused on promoting local arts and cultural events in Werne, Germany. The site offers information about events, concerts, cinema, and community activities, targeting local culture enthusiasts. The business model is community-oriented, relying on event hosting and cultural promotion without commercial sales. Technically, the website is built using older technology (iWeb 3.0.4) with basic HTML, CSS, and JavaScript, lacking modern responsive design and accessibility features. The site does not demonstrate advanced SEO or performance optimization and appears to have moderate loading performance. Security posture is weak, with no evidence of HTTPS enforcement or security headers, and no visible incident response or security policies. Privacy compliance is minimal, with a basic privacy and terms page but no cookie consent mechanism. Overall, the site is functional for its purpose but requires modernization and security improvements.

TreeTop GbR is a small German company specializing in IT and media production services, including software development for Apple Macintosh and Linux/UNIX platforms, technical documentation, and media production such as graphic, audio, and video content. The company targets businesses and professionals requiring tailored IT and media solutions. The website presents detailed service offerings but lacks modern web features and comprehensive contact or policy information. Technically, the site is basic with no detected CMS or advanced frameworks, and mobile optimization is poor. Security posture is weak due to lack of HTTPS and security headers, and no privacy or cookie policies are present, indicating limited GDPR compliance. Overall, the site is functional but would benefit from modernization and improved security and privacy practices.

LAURYN v.o.s. is a Czech company specializing in the development and implementation of information systems tailored for spa, rehabilitation, and healthcare facilities. Their key offerings include the IS L-BIS and IS R-PLAN software suites, designed to support operational and clinical workflows in these specialized sectors. The company positions itself as a niche provider with a focus on the Czech healthcare market, emphasizing quality and service support. The website content is primarily in Czech and targets healthcare institutions such as spas, sanatoria, and rehabilitation centers. From a technical perspective, the website employs basic web technologies including HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The hosting appears to be managed through Czech providers, consistent with the company's location. However, the site shows limited mobile optimization and accessibility features, and lacks modern frameworks or CMS platforms. Performance is moderate, with no critical errors detected. Security posture is currently weak due to the absence of HTTPS enforcement and missing security headers. While email obfuscation is implemented via JavaScript, there is no visible privacy or cookie policy, which raises compliance concerns especially under GDPR. No incident response or vulnerability disclosure information is provided. The domain registration data aligns well with the business profile, showing a consistent and legitimate presence since 2011. Overall, the website is functional and provides clear business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and protect user data effectively.

Groupe Solice operates as a business group associated with companies in the energy sector, linking to partners such as Inpal Energies, Wannitube, and Effical. The website is minimalistic, serving primarily as a portal linking to partner sites rather than providing detailed business information or services directly. The domain is well-established since 2005 and registered with a reputable French registrar, OVH, indicating legitimacy and consistency with the French market focus. Technically, the website is very basic, consisting mainly of a single HTML page with an image map linking to partner domains. There is no evidence of modern web technologies, CMS usage, or analytics tools. The site lacks mobile optimization, accessibility features, and SEO best practices, which limits its digital maturity and user experience. From a security perspective, the site does not present any advanced security measures such as security headers or privacy policies. There is no visible HTTPS enforcement data, but given the hosting provider, it is likely available though not confirmed. The absence of privacy and cookie policies indicates non-compliance with GDPR requirements. No contact or incident response information is provided, which reduces transparency and trust. Overall, the website poses a low risk in terms of content safety as it contains no adult or questionable content. However, the minimal content and lack of compliance documentation reduce its credibility and professional appearance. Strategic improvements in security posture, privacy compliance, and content quality are recommended to enhance trust and user engagement.

ISOBRUGG - Stahlmantelrohr GmbH is a German manufacturing company specializing in steel jacket pipes. The website content is minimal and primarily structured using outdated framesets created with Microsoft FrontPage 12.0, indicating a lack of recent modernization. The business appears to target industrial clients requiring steel piping solutions, but the website provides very limited information and no direct contact details or policies. Technically, the site lacks modern web standards, mobile optimization, and accessibility features, resulting in a poor user experience and low SEO effectiveness. Security posture is weak due to absence of visible HTTPS enforcement, security headers, and privacy compliance documentation. WHOIS data is consistent with a legitimate German business domain, but the overall digital maturity is low. Strategic improvements are needed to enhance security, compliance, and user engagement.

T

Tønder Kommune

toender.dk

69

Tønder Kommune operates as the official municipal government website for the Tønder region in Denmark, providing residents and stakeholders with access to municipal services, public information, and citizen support. The website is positioned as a local government authority, serving a medium-sized audience within the government sector. The digital presence is built on modern web technologies including Nuxt.js, with a focus on accessibility, mobile optimization, and SEO best practices. The site implements a comprehensive cookie consent mechanism aligned with GDPR requirements, reflecting a mature approach to privacy compliance. However, the absence of WHOIS data limits the ability to fully verify domain registration legitimacy. Security posture is moderate, with HTTPS implied but lacking explicit security headers and published security policies. Overall, the website presents a professional and trustworthy interface suitable for its governmental role.

F

Ferienwetter24

ferienwetter24.de

8

Ferienwetter24.de is a German-language website providing weather forecasts and related weather information, primarily targeting holiday and vacation weather in Germany. The site offers services such as weather prognoses and radar imagery, catering to a general audience interested in planning their holidays with accurate weather data. The business model appears to be advertising-supported, leveraging Google Adsense and Google Analytics for monetization and user tracking. The website is hosted on German infrastructure, consistent with its target market and language.

D

DeepL

deepl.com

74

DeepL is a leading technology company specializing in AI-powered language translation services. Their flagship product, DeepL Translator, offers highly accurate translations for individuals, teams, and enterprises, supported by additional tools such as DeepL Write and DeepL Voice. The company targets a broad audience including businesses requiring localization, legal, marketing, and customer service solutions. The website demonstrates a mature digital presence with modern technologies like React and Gatsby, optimized for performance and mobile use. Security posture is strong with HTTPS enforcement and standard security headers, though explicit incident response and vulnerability disclosure information are not publicly available. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, DeepL presents a professional, trustworthy, and technically sound online presence.

I

i+m NATURKOSMETIK BERLIN

iplusm.berlin

54

i+m NATURKOSMETIK BERLIN is a small German company specializing in natural, fair, organic, and vegan cosmetics. The website serves as an e-commerce platform targeting consumers interested in ethical and natural skincare products. The business appears to be well-established with a domain age since 2014, consistent with its market presence. Technically, the website is built on WordPress, utilizing Yoast SEO for optimization and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, though accessibility features could be improved. Security posture is basic with HTTPS enabled but lacking DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from improved security and privacy practices.

The website formulare-bfinv.de serves as the official online portal for the German Federal Finance Administration, providing electronic access to tax and customs forms. It is positioned as a government service platform facilitating seamless and barrier-free interaction between citizens, businesses, and federal authorities. The site prominently features links to the Bundesfinanzministerium and Bundeszollverwaltung, reinforcing its official status and trustworthiness. From a technical perspective, the website employs basic HTML and CSS technologies without advanced frameworks or CMS detected. The site is moderately optimized for performance and accessibility, with specific mention of barrier-free usage for visually impaired users. However, there is room for improvement in mobile responsiveness, SEO metadata, and modern security practices such as implementing security headers and cookie consent mechanisms. Security posture is adequate but could be enhanced by adding HTTPS verification, security headers, and explicit incident response policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy present, but cookie management is lacking. Overall, the site demonstrates high business credibility as an official government resource but could benefit from technical and security enhancements. Strategically, the site should focus on improving technical infrastructure, enhancing security best practices, and increasing transparency around privacy and incident response to maintain trust and compliance in the evolving regulatory landscape.

E

ee-hub

ee-hub.de

54

ee-hub.de is a professional platform focused on the renewable energy sector, providing industry news, event management, and educational content primarily targeting energy professionals in Germany. The website leverages modern web technologies including Laravel and the Statamic CMS, hosted on DigitalOcean infrastructure, and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced, though improvements in security headers and explicit cookie consent mechanisms are recommended. Privacy policies and terms of service are present and comprehensive, supporting GDPR compliance. Overall, the site presents a trustworthy and professional digital presence with moderate technical maturity and good user experience.

H

HADO-SPORT

hado-sport.de

36

HADO-SPORT is a small German sports retail business specializing in branded products for table tennis, tennis, and football. The website provides basic information about the company, its services, and brand partnerships, targeting sports enthusiasts and clubs. The technical infrastructure is simple, relying on standard HTML, CSS, JavaScript, and Google Analytics for tracking. Hosting is provided by domainFACTORY. Security posture is basic with no advanced headers or policies detected, and privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the website is functional but could benefit from modernization and improved compliance.

The website 'LitVideo Trailer-Datenbank' operated by qub media GmbH provides a niche service focused on the online distribution of book trailers for publishers, authors, bloggers, and online shop operators. The platform aims to enhance marketing efforts by integrating video content to increase user engagement and conversion rates. The business model centers on providing a specialized media service within the German market, targeting a small-sized company profile with consistent branding and a clear service offering. Technically, the website employs a basic but functional technology stack including HTML, CSS, JavaScript with jQuery, and Google Analytics for tracking. Hosting appears to be managed via generic German hosting providers as inferred from the nameservers. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or modern frameworks were detected. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, despite using Google Analytics, which raises privacy compliance concerns. HTTPS status and SSL configuration could not be confirmed from the data provided. No incident response or security policies are published, and no forms or input fields were detected to assess input security. The WHOIS data is structured and publicly available, with no privacy protection, supporting legitimacy, though the domain status 'connect' is unusual. Overall, the website is functional and serves its business purpose but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and user experience. Strategic recommendations include implementing HTTPS with strong SSL, adding security headers, deploying cookie consent mechanisms, and publishing clear security and incident response policies.

B

BALTEX (The Baltic Sea Experiment)

baltex-research.eu

8

The BALTEX website represents a scientific research project focused on the Baltic Sea's hydroclimate and environmental systems. It serves as an archival resource for the project which was active primarily from 1993 to 2012, now succeeded by Baltic Earth. The site provides access to publications, project information, and links to partner organizations. The target audience includes researchers, environmental scientists, and policy makers interested in regional climate and water management. Technically, the website is built on legacy technologies such as Adobe GoLive with basic HTML and CSS, lacking modern CMS or responsive design. Security posture is weak with no visible HTTPS enforcement or security headers, and no interactive forms to assess input security. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism. Overall, the site is trustworthy as an archival scientific resource but requires modernization and security improvements to meet current standards.

JWP.com is a minimalistic website primarily serving as a login portal for users with credentials. The site lacks public-facing business descriptions or detailed service information, indicating it is likely an internal or restricted access platform. The domain is long-established, dating back to 1996, which suggests a mature presence, although no registrant organization details are publicly available. The hosting is provided by DreamHost, and the domain is registered through Epik LLC without DNSSEC enabled. Technically, the website uses basic HTML, CSS, and JavaScript with a PHP backend for form submission. There is no evidence of modern frameworks or CMS usage. The site shows basic design and accessibility but lacks mobile optimization and advanced SEO features. Security posture is weak, with no HTTPS enforcement visible in the provided data, no security headers, and no anti-CSRF or CAPTCHA protections on the login form. Privacy and cookie policies are absent, and no analytics or marketing tools are detected. Overall, the security posture is below average, with critical recommendations including enabling HTTPS, adding security headers, and implementing protections against automated login attacks. The site content is safe for general audiences, with no adult or questionable content detected. Contact information is limited to an obfuscated email address ([email protected]) and a login form, with no phone numbers or physical addresses provided. The overall risk assessment indicates a low trustworthiness level due to minimal content, lack of security best practices, and absence of compliance documentation. Strategic improvements in security, privacy compliance, and content transparency are recommended to enhance business credibility and user trust.

I

The Musician's Room

in2guitar.com

55

The website in2guitar.com, titled 'The Musician's Room', is a small niche educational platform focused on music recording and guitar-related content. It provides informational resources and a blog aimed at musicians and guitar enthusiasts. The site has been active since 2004, indicating a long-standing presence in its niche. However, the website is basic in design and functionality, lacking modern web technologies and mobile optimization. Technically, the site is static HTML with minimal JavaScript, hosted via IONOS SE. There is no evidence of a CMS or advanced frameworks. Performance is moderate but mobile and accessibility features are poor. SEO is basic with minimal meta tags and no structured data. The site uses a third-party web hit counter for visitor tracking. From a security perspective, the site lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. No privacy, cookie, or terms of service policies are present, indicating poor compliance with GDPR and other privacy regulations. No contact information or incident response channels are provided, limiting user trust and support options. Overall, the website poses a low security risk due to limited data collection but suffers from poor security posture and privacy compliance. Strategic improvements in HTTPS implementation, privacy policies, and contact transparency are recommended to enhance trust and compliance.