Security Directory

C

Concrete Pump Repair South

concretepumpssouth.com

62

Concrete Pump Repair South is a specialized service provider focused on concrete pump repair and parts distribution, particularly Schwing OEM parts. The company operates as a Small Line Dealer and satellite CPR Repair center in the Southeastern United States, emphasizing quality and customer support. The website is professionally designed using the Squarespace platform, featuring clear navigation and responsive design, though it lacks explicit contact details and privacy-related policies. Technically, the site benefits from HTTPS and HSTS, ensuring secure connections, but could improve by adding additional security headers and privacy compliance features. The absence of WHOIS data reduces domain trustworthiness, suggesting recent registration or privacy protection, which should be monitored. Overall, the site presents a credible business front but requires enhancements in privacy, contact transparency, and security best practices to strengthen trust and compliance.

K

Inbound marketing - Síla příběhu, který prodává

kodo.cz

63

The website kodo.cz is a Czech inbound marketing service provider focused on helping small and medium honest businesses, farms, and local producers leverage internet marketing to grow their operations. The company appears to have been established since 2006, indicating a mature presence in the local market. The website uses modern frontend technologies such as React and service workers, hosted behind Cloudflare DNS, suggesting a reasonable level of technical maturity. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are important for compliance and trust. The security posture is moderate with HTTPS implied but missing advanced security headers and vulnerability disclosures. Overall, the website is professional and well-designed but could improve in privacy compliance and security transparency to enhance trust and regulatory adherence.

W

WTWH Media, LLC

rd100conference.com

59

The R&D 100 Awards Banquet website represents a well-established and prestigious innovation awards program managed by WTWH Media, LLC. The site serves as a hub for event information, registration, and showcasing finalists and winners, targeting R&D professionals and technology innovators. The business model revolves around event organization and media publishing, with a strong market position as a recognized awards program in the technology sector. Technically, the site is built on WordPress using Elementor and Yoast SEO, providing a modern and responsive user experience with embedded multimedia content. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though security headers and explicit security policies are absent. Privacy compliance is partial, with a comprehensive privacy policy linked externally but no cookie consent mechanism on-site. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not detract from the site's professional presentation and business credibility. Overall, the site is a reliable and professional platform for the R&D 100 Awards community.

P

Professional Headshot

professional-headshot.com

63

Professional Headshot is a technology-driven company specializing in AI-generated professional headshots designed to enhance corporate and personal branding. Positioned as a leading AI headshot generator, it offers users the ability to upload photos and select from various styles to create high-quality profile images quickly and conveniently. The business targets professionals seeking to elevate their online presence on social media and professional platforms. The website demonstrates a modern technical infrastructure leveraging Next.js, React, and multiple analytics and advertising tools, reflecting a mature digital presence. Security posture is strong with HTTPS and security headers implemented, though the absence of explicit privacy and terms policies and missing WHOIS data present areas for improvement. Overall, the platform is professional, user-friendly, and trustworthy, with recommendations to enhance compliance and transparency.

W

Wedding Photo Dress

weddingphotodress.com

62

Wedding Photo Dress is a technology-driven company specializing in AI-generated wedding and corporate profile photos. Their platform leverages advanced AI to provide users with realistic and customizable headshots and wedding photo dress try-ons, targeting individuals and professionals seeking high-quality digital images for social media and branding. The company positions itself as a leader in AI photography solutions with a focus on ease of use and innovation. Technically, the website is built on modern frameworks such as Next.js and React, incorporating Google Fonts, Font Awesome, and multiple analytics and advertising tools including Google Analytics, Microsoft Clarity, and Google Adsense. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data, but lacks several security headers and visible security policies. The absence of WHOIS data raises some concerns about domain registration transparency, although the professional presentation and active social media presence mitigate some risks. Overall, the site presents a moderate risk profile with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, enhancing security headers, and clarifying incident response procedures to build greater trust and compliance.

I

Interior AI Designs

interioraidesigns.com

65

Interior AI Designs is a technology-driven company specializing in AI-powered interior and exterior design visualization tools. Positioned as a leading AI interior designer and virtual staging platform, it targets homeowners, real estate professionals, and entrepreneurs seeking innovative design solutions. The website showcases a professional and modern digital presence with strong branding and positive user feedback, indicating a solid market position in the AI design space. The technical infrastructure leverages modern web frameworks such as Next.js and React, combined with Google Fonts and Font Awesome for UI, and integrates analytics and advertising tools like Google Analytics, Microsoft Clarity, and Google Adsense. The site is mobile-optimized and demonstrates good SEO practices, though some performance optimizations could be enhanced. Security posture is generally strong with HTTPS enforced and no visible sensitive data exposure. However, the absence of explicit security headers and formal privacy and terms policies indicates room for improvement in compliance and security best practices. The WHOIS data is unavailable, which slightly reduces trust but does not negate the professional appearance and functionality of the site. Overall, the website presents a low to moderate risk profile with recommendations to improve privacy compliance, security headers, and WHOIS transparency to enhance trust and regulatory adherence.

CATIOAPPS is a newly established technology company (founded in 2023) specializing in AI-powered API services for photo shoot generation and image processing. Their platform offers developers and businesses easy integration of AI features through pre-set prompts and models, eliminating the need for complex prompt engineering or image storage management. The company positions itself as a niche provider in the AI API market with clear subscription-based pricing plans and a focus on rapid integration. Technically, the website is built using modern web technologies including JavaScript and CSS, with indications of Laravel framework usage on the backend. Hosting and DNS services are provided by IONOS SE and Cloudflare respectively. The site demonstrates good performance, mobile optimization, and basic SEO practices, though accessibility features are minimal. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and important security headers. There is no visible security policy or incident response contact information published, and no cookie consent mechanism is implemented, which may impact privacy compliance. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, CATIOAPPS presents a professional and functional online presence suitable for its business model, but should improve privacy compliance and security posture to enhance trust and regulatory adherence.

C

CiTTi Magazine

cittimagazine.co.uk

51

CiTTi Magazine is a specialized online media publication focused on city transport and traffic innovation news, providing insights into urban mobility technologies and policies. The website offers a range of content including news articles, digital magazines, webinars, and events, targeting professionals and stakeholders in the transportation sector. The site is built on WordPress with modern plugins and design frameworks, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages detected. WHOIS data for the queried subdomain is unavailable, limiting full domain trust verification. Overall, the site is professional and trustworthy within its niche, with room for enhanced transparency and security documentation.

Primatour s.r.o. is a Slovak travel agency based in Trnava, offering a wide range of holiday packages including last minute deals, exotic vacations, family and adult-only hotels, and cruises. The company emphasizes 20 years of experience and positions itself as a trusted provider in the Slovak travel market. Their website is well-structured, professionally designed, and targets Slovak-speaking travelers seeking vacation options. The business model revolves around travel package sales and customer service with a strong digital presence including social media and newsletter marketing. Technically, the website leverages modern web technologies such as jQuery, Bootstrap, and Slick Slider, integrated with a specialized travel agency system (CeSYS). It uses CDN-hosted assets and includes marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Mailchimp. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the business claims, supporting legitimacy and trustworthiness. Overall, Primatour's website demonstrates a solid digital maturity level with good privacy compliance and business credibility. Strategic improvements could focus on enhancing security headers, incident response transparency, and accessibility features to further strengthen their security posture and user trust.

2

2123design s.r.o.

2123design.cz

41

2123design s.r.o. is a Czech Republic based graphic design company established in 2005, specializing in visual styles, illustrations, and typesetting for print media such as books and brochures. The company targets both small and large businesses and organizations, offering a unique combination of graphic design, illustration, and typesetting services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site uses legacy technologies such as jQuery 1.11.3 and Google Maps API loaded over HTTP, which pose security risks. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Security posture is moderate with no visible security headers or incident response information. Overall, the domain registration data supports the legitimacy and longevity of the business.

S

SEATAC

seatacsolutions.ca

58

SEATAC is a specialized Technology Access Centre based in Nova Scotia, Canada, focused on advancing ocean innovation through applied research and development services. It operates as a small entity connected with the Nova Scotia Community College and serves primarily small and medium-sized companies in the ocean technology sector. The website presents a professional image with clear branding and consistent messaging about its mission and services. Technically, the site is built on WordPress using the Divi theme, leveraging common web technologies such as jQuery and MediaElement.js, and integrates Google Fonts and Yoast SEO for enhanced user experience and search optimization. Security posture is adequate with HTTPS enabled and domain transfer protections in place, though improvements such as DNSSEC and security headers are recommended. Privacy compliance is partial, with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is trustworthy and well-positioned within its niche, with room for enhancements in security and privacy practices.

L

Landesverband der Kita- und Schulfördervereine Berlin-Brandenburg e.V.

lsfb.de

47

The Landesverband der Kita- und Schulfördervereine Berlin-Brandenburg e.V. operates as a regional non-profit association supporting daycare and school support organizations in the Berlin-Brandenburg area. The website serves as an informational and advocacy platform targeting parents, educators, and affiliated support groups. The organization positions itself as a key regional player in educational support, focusing on community engagement and resource provision. Technically, the website is built on WordPress CMS with modern frameworks such as Bootstrap and Elementor, hosted by Alfahosting. It employs HTTPS for secure communication and integrates Google Analytics for visitor tracking. Accessibility is enhanced by a dedicated accessibility tool, and cookie consent mechanisms are implemented, reflecting a moderate level of digital maturity. From a security perspective, the site benefits from HTTPS and updated software components but lacks explicit privacy policies, terms of service, and incident response contacts. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and compliance. Security headers are partially implemented, and no WAF or blocking mechanisms interfere with accessibility. Overall, the website is professionally designed and functional with good content relevance and user experience. However, to enhance trust and compliance, the organization should publish comprehensive privacy and security policies and provide clear contact channels for security incidents.

6

6th River

6thriver.cz

61

6th River operates as a science and technology park based in Plzeň, Czech Republic, offering rental spaces, consulting services, and facilities to support innovation and business development. The organization positions itself as a regional hub for scientific and technological advancement, supported by European Union co-financing for multiple projects. The website is professionally designed, bilingual (Czech and English), and targets businesses and organizations seeking development support in the Plzeň region. Technically, the website is built on WordPress with modern frontend technologies such as Swiper.js and LazyLoad.js, and it uses Yoast SEO for optimization. The site is served over HTTPS with a valid SSL certificate, ensuring secure communications. Mobile optimization and SEO practices are good, though accessibility features are basic. No major performance issues were detected. From a security perspective, the site enforces HTTPS but lacks important security headers and visible security or privacy policies, which are compliance gaps. No forms or data collection mechanisms were found on the homepage, reducing immediate risk exposure. The absence of WHOIS data for the domain is a concern, as it reduces trust and transparency regarding domain ownership and legitimacy. Overall, the website is safe, professional, and trustworthy in content and presentation but would benefit from improved privacy compliance and domain registration transparency to enhance its security posture and business credibility.

T

Taneční Akademie Plzeň

tanecniakademieplzen.cz

50

Taneční Akademie Plzeň is a small local dance academy based in the Czech Republic, focused on providing dance training and activities primarily for children and youth. The website presents the academy's founder and main trainer, Alena Hadravová, and highlights the academy's values such as passion, joy, and communication. The business model revolves around offering dance courses and team activities within the Plzeň region. The website is built on WordPress, hosted by Wedos, and uses common web technologies including jQuery and Google Fonts. The site is moderately optimized for mobile devices and has a professional design with clear navigation.

N

Norlengs

norlengs.com

64

Norlengs operates the MV Ulla Rinman, an ice-strengthened research vessel chartered for scientific expeditions, environmental research, and educational field courses in the Arctic. The company targets universities, NGOs, and creatives seeking a mobile basecamp for Arctic exploration. The website is professionally designed using Squarespace, featuring clear navigation, rich content about research capabilities, and a gallery showcasing the vessel and expeditions. Technical infrastructure includes HTTPS with HSTS, Google Analytics, and reCAPTCHA for form security. However, the absence of a privacy policy, terms of service, and explicit contact details limits privacy compliance and business credibility. WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the site demonstrates moderate digital maturity with room for improvement in compliance and transparency.

O

Oshkosh AeroTech

oshkoshaerotech.com

65

Oshkosh AeroTech is a specialized provider of ground support equipment and comprehensive airport solutions, leveraging the strength and legacy of its parent company, Oshkosh Corporation. The company focuses on delivering technology-driven products and aftermarket customer care to airports, airlines, ground handlers, and military clients. Their product portfolio includes electric ground support equipment, gate equipment, defense aviation ground equipment, and airport operational services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the website is built on the HubSpot CMS platform, utilizing modern JavaScript libraries such as Swiper.js and jQuery, and integrates Google Tag Manager and HubSpot Analytics for tracking. Hosting is managed via AWS infrastructure, ensuring reliable performance and scalability. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, the site enforces HTTPS and employs domain status locks to prevent unauthorized changes. However, it lacks DNSSEC and explicit security headers, and does not provide visible security policies or incident response information. Privacy compliance is partial, with a comprehensive privacy policy linked to the parent company but no cookie consent mechanism detected. Contact information is primarily via web forms, with no explicit emails or phone numbers listed. Overall, the website demonstrates a solid business credibility and technical foundation but could improve in privacy compliance and security transparency to enhance trust and regulatory adherence.

M

MAXIMETAL

maximetal.com

61

MAXIMETAL is a Canadian manufacturing company specializing in custom fire apparatus and utility trucks with over 40 years of industry experience. The company serves major fire departments and utility companies across Canada and the United States, leveraging partnerships with industry leaders such as Oshkosh Corporation and Pierce Manufacturing. Their website reflects a mature business with a clear market position and professional branding. Technically, the website is built on WordPress with modern plugins and technologies including Google Analytics, reCAPTCHA, and SEO optimizations. The site is mobile-friendly and provides a good user experience with clear navigation and relevant content. Security practices include HTTPS enforcement and CAPTCHA on forms, though some security headers are missing. The security posture is generally strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS registration data introduces some uncertainty about domain registration legitimacy, which slightly impacts trust. Overall, MAXIMETAL presents a credible and professional online presence with solid business and technical foundations. Strategic recommendations include enhancing security headers, verifying domain registration details, and adding explicit security policies to further strengthen trust and compliance.

F

FUNK eyewear

funk.de

71

FUNK eyewear is a German-based eyewear manufacturer and retailer operating both physical optical stores and an online e-commerce platform. Established in 2004, the company emphasizes traditional craftsmanship and sustainability by recycling acetate materials in-house. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party marketing and analytics tools. The site is well-designed with good mobile optimization and clear navigation, targeting a general audience interested in quality eyewear products. However, the absence of explicit privacy policy and terms of service pages, as well as missing direct contact information, slightly detracts from the overall user trust and compliance posture. Security-wise, the site uses HTTPS and domain transfer protections but lacks DNSSEC and security headers, indicating room for improvement in hardening the security posture. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website presents a professional and trustworthy front with moderate technical maturity and compliance gaps that should be addressed.

E

ezra. Opferberatung Thüringen

opferhilfe-thueringen.de

57

ezra. Opferberatung Thüringen is a specialized non-profit organization providing counseling and support services to victims of right-wing, racist, and antisemitic violence in the German state of Thüringen. The organization targets affected individuals, their relatives, and witnesses, offering victim assistance, incident documentation, and a victim aid fund. The website is professionally designed, multilingual, and well-structured, reflecting a clear mission and strong regional presence. It is supported by official funding bodies and partners, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress, hosted by Raidboxes, and uses common plugins and libraries such as Contact Form 7 and Font Awesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the site is trustworthy and serves an essential social function with a strong regional focus.

Blickpunkt α is a German-language website focused on modern beauty and cosmetics products, targeting a general audience interested in skincare and innovative beauty trends. The site presents itself as a niche player in the retail cosmetics sector, offering high-quality products and content related to beauty. The technical infrastructure is based on WordPress with the Astra theme and Ultimate Addons for Gutenberg, hosted on servers associated with kasserver.com. The website is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Business credibility is moderate but would benefit from clearer contact information and trust signals. Overall, the site is safe for general audiences and does not contain adult or explicit content.

Accelerator.net presents a minimalistic website with very limited content, primarily a heading and a brief tagline describing a "Lightning-fast global delivery network." The domain is well-established, created in 2004, and registered through Amazon Registrar, Inc., indicating a legitimate registration history. However, the website lacks essential business information, contact details, privacy policies, and security disclosures, which limits its credibility and user trust. The technical infrastructure appears basic, leveraging Google Fonts and AWS DNS services, but lacks modern SEO, accessibility, and security enhancements. Security posture is minimal with no detected security headers or DNSSEC enabled, and no evidence of privacy or cookie compliance mechanisms. Overall, the site is accessible without WAF or blocking mechanisms but requires significant improvements in content, security, and compliance to meet professional standards.

N

NKRF

nkrf.no

59

NKRF is a well-established Norwegian professional association specializing in municipal auditing and control, founded in 1945. The organization provides a range of services including courses, conferences, publications, and professional resources targeted at municipal auditors and public sector professionals. The website reflects a mature digital presence with consistent branding and relevant content tailored to its audience. Technically, the site uses modern web technologies such as Craft CMS, Google Analytics, and Material Design Icons, and is optimized for mobile and accessibility. Security posture is solid with HTTPS and IP anonymization in analytics, though it lacks some security headers and a cookie consent mechanism. The absence of WHOIS data is typical for .no domains and does not detract from the site's legitimacy. Overall, NKRF's website is professional, trustworthy, and serves its niche audience effectively.

N

Norwegian University of Science and Technology

ntnu.edu

69

The Norwegian University of Science and Technology (NTNU) operates a comprehensive and professionally designed website serving students, researchers, and the academic community. The site offers detailed information on study programs, research initiatives, student life, and institutional resources, positioning NTNU as a leading educational institution in Norway. The digital infrastructure leverages modern technologies including Liferay CMS, Bootstrap, and various analytics tools, reflecting a mature and well-maintained technical environment. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be enhanced. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and user-centric design.

D

Demers Ambulances

demers-ambulances.com

56

Demers Ambulances is a well-established manufacturer specializing in innovative and ergonomic ambulances designed for EMS and fire services. With a history dating back to 1960 and backed by parent company JB Poindexter & Co., Demers positions itself as a trusted partner delivering high-quality, safety-focused ambulance solutions. The website reflects a professional digital presence with detailed product information, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

B

BME Fire Trucks

bmefire.com

57

BME Fire Trucks is a specialized manufacturer focused on wildland firefighting apparatus, targeting fire departments and emergency services. The website presents a professional and consistent brand image with clear business focus on transportation and fire truck manufacturing. Technically, the site is built on WordPress with WooCommerce and Elementor, leveraging modern web technologies and performance optimizations such as NitroPack. The security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, though the website content and structure suggest a legitimate business. Overall, the site is functional and professional but would benefit from enhanced transparency and security practices.

K

Klaus Obermaier Design

klaus-obermaier.de

49

Klaus Obermaier Design is a small German-based graphic and web design service provider, focusing on creative and cultural economy sectors. The website presents a professional image with clear branding and consistent content tailored to businesses and individuals seeking design services. The technical infrastructure is based on WordPress CMS, utilizing plugins such as Real Cookie Banner for GDPR compliance and Google Fonts for typography. Hosting is provided by kasserver.com, indicating a stable and reliable environment. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though additional security headers could enhance protection. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a good balance of professionalism, compliance, and technical implementation, suitable for its business scope.

M

Masuria Industry

masuriaindustry.com

51

Masuria Industry is a medium-sized manufacturing company based in Poland, specializing in OEM manufacturing services including metal, wood, and plastic processing. With 25 years of experience and a presence in 23 countries, the company offers precision manufacturing solutions such as powder coating, laser cutting, CNC metal spinning, and CAD design. The website reflects a professional digital presence built on WordPress with modern plugins and technologies. The company maintains active social media profiles and provides clear contact information. Technically, the website is well-structured and mobile-optimized, though some security best practices like DNSSEC and security headers could be improved. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks a visible privacy policy or terms of service. Overall, the security posture is good but could benefit from enhanced transparency and formal policies.

S

SCHWING Stetter Ostrava s.r.o.

schwing.sk

41

SCHWING Stetter Ostrava s.r.o. is a medium-sized manufacturing company specializing in concrete pumps, mixers, and related machinery, serving primarily the construction and industrial sectors in the Czech Republic and Slovakia. The company offers a comprehensive product range, including auto pumps, mixers, stationary pumps, and recycling equipment, supported by after-sales services such as spare parts, consulting, and training. Their market position is that of an established regional player with a strong brand presence and certifications. The website is built on WordPress using the Enfold theme and Avia framework, incorporating modern web technologies such as jQuery and Google reCAPTCHA for security. The site is mobile-optimized, SEO-friendly, and provides clear navigation and professional content. Security posture is good with HTTPS enforced, security headers present, and secure forms, though it lacks explicit vulnerability disclosure and incident response information. Overall, the website is trustworthy, professional, and compliant with GDPR and cookie regulations, making it a reliable digital presence for the company.

W

Wild Media GmbH

wildmedia.eu

56

Wild Media GmbH is a German-based full-service marketing and advertising agency located in Bad Kissingen. The company offers a wide range of services including marketing, web design, print, film production, audio, photography, and event entertainment. Their website is professionally designed using Joomla CMS and incorporates modern web technologies and frameworks such as Bootstrap, Font Awesome, and LayerSlider. The site is mobile optimized and includes GDPR-compliant cookie consent via Usercentrics. Contact information is clearly provided, enhancing business credibility. Security posture is adequate with HTTPS enabled, though some security headers and policies could be improved. Overall, the website reflects a legitimate and professional small business with a solid digital presence.

M

Masuria Living

masurialiving.com

10

Masuria Living is a Polish company specializing in the manufacturing and retail of premium outdoor grills, fire pits, and related accessories. Founded in 2020, the company emphasizes quality craftsmanship with products made in the EU, supported by design awards and certifications. Their website is multilingual and professionally designed, targeting consumers interested in outdoor cooking and garden products. Technically, the site is built on WordPress with Oxygen builder, integrating modern analytics and live chat tools, and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC are missing. No critical vulnerabilities or privacy compliance issues were detected. Overall, the domain registration and website content are consistent and trustworthy, positioning Masuria Living as a credible medium-sized manufacturer and retailer in their niche.

B

Bell & Hurry

bellhurry.com

70

Bell & Hurry is a specialized design consultancy focused on creating digital products and services primarily for the finance, insurance, telecommunications, and energy sectors. The company positions itself as an expert partner to improve business and customer experience in these industries. Their website reflects a professional and modern digital presence, leveraging Webflow for content management and integrating advanced analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot for privacy compliance and user insights. The site is well-structured, mobile-optimized, and provides a comprehensive cookie consent mechanism, demonstrating a commitment to GDPR compliance. However, the absence of publicly available WHOIS registration data and lack of explicit contact information or security policies slightly reduce the overall trustworthiness from a security and compliance perspective. The website's security posture is strong with HTTPS enforced and no visible vulnerabilities, but could benefit from additional explicit security headers and published incident response contacts. Overall, Bell & Hurry presents a credible and professional digital front with room for improvement in transparency and security documentation.

K

Katholische Studierendengemeinde Edith Stein

ksg-berlin.de

44

KSG Edith Stein Berlin is a Catholic student community organization based in Berlin, Germany, focused on providing spiritual guidance, social events, and advisory services to students. The website serves as a hub for community engagement, event announcements, and contact information, targeting students and university communities in Berlin. The organization operates as a non-profit entity with a clear mission to support student life through faith-based and social activities. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery and Google Fonts. It is hosted on NSHost2 name servers and employs HTTPS for secure communication. The site demonstrates good digital maturity with mobile optimization, clear navigation, and integration of social media channels. Security posture is solid with HTTPS and secure form handling, though it lacks advanced security headers and explicit security policies. Privacy compliance is evident with a privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, serving its community effectively.

S

solidpixels.

lokalove.cz

57

Lokálové.cz is a Czech platform dedicated to promoting local food producers and sustainable agriculture. It offers consumers access to stories, maps, and recipes related to local products, while providing producers with membership and collaboration opportunities. The website is professionally designed, mobile-optimized, and uses modern web technologies including solidpixels CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. Security posture is generally good with HTTPS and secure forms, but lacks advanced security headers and incident response information. Privacy and cookie policies are missing, which is a compliance gap. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site serves a niche market with a focus on quality and sustainability in local food production.

The website tcu.sk represents a Slovak non-profit educational initiative organizing the 'Týždeň celoživotného učenia' (Lifelong Learning Week), an event aimed at promoting lifelong learning across Slovakia. It targets a broad audience including individuals of all ages and educational institutions, providing lectures, workshops, and discussions to foster educational engagement. The event has a long-standing tradition with 25 years of history, positioning it as a recognized educational awareness platform in Slovakia. Technically, the website is built on a modern stack likely involving Ruby on Rails with Turbolinks, and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by a Slovak hosting provider (websupport.sk), and the site uses HTTPS with DNSSEC enabled, indicating a secure baseline. The site is mobile optimized with good navigation and content quality, although some accessibility and SEO improvements could be made. From a security perspective, the site implements HTTPS and CSRF protections but lacks several recommended HTTP security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a cookie consent banner is present, no privacy policy or terms of service were found, which is a notable compliance gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is legitimate, secure, and professionally presented, with minor areas for improvement in privacy disclosures and security hardening. The domain registration data aligns well with the website's purpose and geographic focus, supporting trustworthiness.

S

Síť aktérů pro domov, z.s.

sad-cr.cz

48

Síť aktérů pro domov, z.s. is a small non-profit organization based in the Czech Republic focused on homelessness and housing issues. The website serves as a platform for expert discussions and advocacy in this social domain. The organization appears to be a recognized thematic leader in its field, founded in 2017, with a clear mission to address homelessness through professional discourse. Technically, the website is built on WordPress using the Divi theme, incorporating Google Analytics and Tag Manager for visitor tracking. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and comprehensive SEO optimization. Security posture is minimal with no detected security headers or explicit security policies, and privacy compliance is poor due to the absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced security and compliance measures.

K

koalice Za snadné dárcovství

snadnedarcovstvi.cz

42

The website 'koalice Za snadné dárcovství' represents a Czech non-profit coalition focused on advancing individual fundraising through relationship-based donor engagement. It serves as a platform for non-profit organizations to collaborate, educate, and overcome obstacles in the donation process. The site positions itself as a key player in the Czech fundraising ecosystem, targeting non-profit organizations and fundraising professionals. Technically, the website is built on WordPress using Elementor and several common plugins, delivering a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance documentation, which are areas for improvement. Overall, the site appears legitimate and trustworthy, though the absence of WHOIS data limits domain registration transparency.

G

Gemeinschaft Immanuel

immanuel-online.de

48

Gemeinschaft Immanuel is a small German Catholic charismatic lay community focused on promoting Christian unity, evangelization, and renewal of church and society. Their website serves as a hub for community information, events, and outreach to various age groups including families, youth, and seniors. The organization operates as a non-profit with a clear mission and active event calendar. Technically, the site is built on WordPress with common plugins such as Events Manager and Slider Revolution, hosted likely by Your-Server.de. The site is mobile optimized and well structured, though some improvements in accessibility and SEO could be made. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks security headers and formal policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional for its community purpose.

E

European Compost Network

compostnetwork.info

53

The European Compost Network (ECN) operates as a membership organization representing bio-waste organizations, plant operators, researchers, policy makers, and consultants across 27 European countries. It serves as a key network advocating for sustainable bio-waste management and composting practices, offering certification services (ECN-QAS), policy advocacy, and dissemination of research and market development information. The website is well-structured, content-rich, and targets professionals and stakeholders in the bio-waste and environmental sustainability sectors. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, Bootstrap, and various plugins for downloads, events, newsletters, and GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in security headers and incident response documentation are recommended. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. No WHOIS data is publicly available, indicating privacy protection which is justified for this type of organization. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a trustworthy and professional digital presence for ECN, with strong business credibility and compliance with privacy regulations. Strategic improvements in security transparency and contact information availability would further enhance trust and resilience.

T

Tourism Development Association Pardubicko – Czech Gingerbread Heart

topardubicko.cz

36

The website represents the Tourism Development Association Pardubicko – Czech Gingerbread Heart, a regional tourism promotion entity focused on the Pardubicko area in the Czech Republic. It offers tourist information, downloadable promotional materials, and collaborates with CzechTourism to provide travel inspiration. The site targets tourists interested in cultural heritage, local cuisine, and family-friendly activities. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and includes a cookie consent mechanism and Google Analytics for tracking. The site is mobile responsive and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is unavailable, which reduces domain trust but the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

D

Designwerk

designwerk.com

49

Designwerk is a medium-sized company specializing in electromobility solutions, including electric vehicle manufacturing, energy storage, and charging infrastructure. The company targets businesses and organizations interested in sustainable energy and transportation solutions, positioning itself as a niche player in the energy and transportation sectors. The website is professionally designed using WordPress and the Avada theme, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website presents a professional business front but requires improvements in security and compliance to enhance trustworthiness.

A

Asociace Hospicu

asociacehospicu.cz

47

Asociace Hospicu is a Czech non-profit association dedicated to supporting, advocating, and improving the quality of hospice and palliative care organizations. Founded in 2005, it serves as a national body promoting dignified end-of-life care and societal awareness. The website is built on WordPress using the Divi theme, featuring a professional design and clear navigation, with active social media channels on Facebook, LinkedIn, and Instagram. Technically, the site uses modern web technologies but lacks advanced security headers and privacy compliance mechanisms. HTTPS is properly configured, ensuring secure connections. However, the absence of privacy and cookie policies, terms of service, and explicit contact information limits its compliance and user trust aspects. Overall, the site reflects a mature organization with a solid digital presence but would benefit from enhanced security and privacy practices.

K

Komorní filharmonie Pardubice

kfpar.cz

67

Komorní filharmonie Pardubice is a leading professional chamber orchestra based in the Pardubice region of the Czech Republic. It specializes in classical music performances, organizing subscription concert series, educational programs, and participating in regional and international festivals. The orchestra holds a significant cultural role in its region and maintains a professional online presence with clear information about concerts, tickets, and educational offerings. The website is well-structured, mobile-optimized, and includes social media integration and user engagement features such as newsletter subscription and client zone login. Technically, the website employs modern web technologies including Google reCAPTCHA for form security, lazy loading for images, and uses Google Fonts and CDN services for performance optimization. The site is hosted on a custom CMS platform developed by eBRÁNA s.r.o. Security measures include HTTPS enforcement and CAPTCHA protection, though additional HTTP security headers could enhance the security posture. Privacy and cookie policies are clearly presented with user consent mechanisms, indicating good compliance with GDPR requirements. Security-wise, the site shows a moderate security maturity level with no evident vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain raises concerns about domain registration transparency. No explicit security policy or incident response information is provided, which could be improved to enhance trust and preparedness. Overall, the website is professional, trustworthy, and serves its cultural mission effectively. Strategic recommendations include improving security headers, publishing incident response and security policies, and verifying domain registration details to strengthen legitimacy and trust.

E

EGRANT – Systém pre správu žiadostí o dotácie a granty

egrant.sk

51

EGRANT is a Slovak-based platform focused on managing applications for subsidies and grants, serving organizations or entities involved in grant applications. The website is built on WordPress using the Elementor page builder, leveraging modern web fonts and JavaScript libraries such as Swiper.js for UI components. The technical infrastructure reflects a moderate level of digital maturity with good mobile optimization and basic SEO features. However, the site lacks visible privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The WHOIS data confirms a well-established domain with consistent registration details, supporting the legitimacy of the business. Overall, the security posture is weak due to missing security best practices, and privacy compliance is minimal. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

V

VR-EASY Marketing

faszination-tegernsee-schliersee.de

56

VR-EASY Marketing operates the website faszination-tegernsee-schliersee.de, offering immersive 360° virtual tours and panoramas focused on the Tegernsee and Schliersee regions in Germany. The business targets tourists, local hotels, and destination marketing organizations by providing high-quality virtual tour creation and marketing consulting services. The website is well-structured, content-rich, and professionally presented in German, with clear contact information and legal disclosures. Technically, the site uses modern web technologies including krpano for panorama viewing, Google Maps API, and Google Analytics with IP anonymization, hosted on servers indicated by the mga-intermedia.com nameservers.

K

klein•wenner

kleinwenner.eu

60

klein•wenner is a small, multicultural law firm specializing in business law with an international reach, formed by the merger of KGA Avocats and Wenner. The website presents a professional image with a clear focus on business law services targeting international clients and business professionals. The firm positions itself as a multicultural entity with expertise in business law, although detailed business information such as founding year or company size is not explicitly provided. The website is built on WordPress using the Divi theme, incorporating SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The technical infrastructure is standard for a professional service website, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and some privacy mechanisms like cookie consent in place, but lacks advanced security headers and explicit privacy or security policies. No contact information or incident response details are found, which limits direct communication channels for security or business inquiries. Overall, the website is professional and safe but could improve in transparency and security best practices.

S

SCHWING Stetter

schwing-stetter.fr

42

SCHWING Stetter is a well-established French company specializing in the manufacturing, transport, and fabrication of concrete machinery and equipment. With a history dating back to 1985 and a domain registered since 1998, the company holds a solid market position in the construction and industrial equipment sector. Their key offerings include concrete batching plants, mixers, pumps, and recycling stations, supported by after-sales services and spare parts. The website targets construction professionals and businesses, providing detailed product information and service options. Technically, the website is built on WordPress with modern plugins and optimizations, hosted by OCI CLOUD, ensuring a reliable digital presence. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, although some security headers could be improved. Overall, the site demonstrates good content quality, professional design, and compliance with privacy regulations, supporting a trustworthy business image.

Ø

Økologisk Norge

okologisknorge.no

55

Økologisk Norge is a Norwegian non-profit organization dedicated to promoting organic agriculture, biodiversity, and sustainable food practices. The website serves as an educational and community platform offering resources for organic farmers, schools, and consumers interested in organic products. It has an established presence since 2010 and targets a Norwegian audience with content primarily in Norwegian. The organization encourages membership and supports various organic initiatives including school gardens and events like ØKOUKA. Technically, the website employs modern tracking and marketing tools such as Google Tag Manager, Facebook SDK, and Mailchimp, indicating a moderate level of digital maturity. The site is mobile-optimized with good navigation and SEO practices, although no explicit CMS or hosting provider information is detected. Cookie consent is implemented via a third-party service, but explicit privacy and terms of service pages are missing. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent with the organization's identity and domain age is appropriate, supporting legitimacy. Overall, the website is professional and trustworthy with good content quality and business credibility. However, it would benefit from enhanced privacy compliance, explicit security policies, and improved security headers to strengthen its security posture and regulatory adherence.

Craftverk Digital's website is currently under construction, displaying only a placeholder message with no substantive content or business details. The site uses WordPress with the Impreza theme and WPBakery page builder, hosted likely by WebSupport based on nameservers. Basic security features such as HTTPS and DNSSEC are enabled, but no privacy, cookie, or terms of service policies are present, nor is there any contact information or forms. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and legitimacy. Overall, the website is in an early stage of development with minimal digital maturity and poor content quality.

K

Katholische Studierende Jugend

ksjberlin.de

45

KSJ Berlin is a non-profit youth organization focused on engaging students and young people in Berlin through volunteer activities, school participation, and societal involvement. The organization operates as part of the Catholic youth umbrella (BDKJ) but is inclusive of all beliefs. Their website provides information about membership, events, and community platforms such as a Discord server. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Fonts, and is hosted with domain control services. It is mobile optimized and includes SEO best practices. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of youth in Berlin.

P

PMG Holding

holdingpmg.com

52

PMG Holding operates as a physical supplier of marine bunker fuels in the Black Sea region, offering products such as Marine Bunker Fuel Oil and Marine Gasoil. Additionally, the company engages in global cargo trading, positioning itself as a niche player in the energy and transportation sectors. The website is professionally designed using the Wix platform, featuring structured data for local business identification and basic SEO metadata. Technical infrastructure relies on Wix's hosting and content management services, with Google Tag Manager integrated for analytics. Security posture is moderate, with HTTPS implied but lacking explicit security headers and policies. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is minimal, limited to a phone number in structured data. The domain WHOIS data is unavailable, raising concerns about domain registration legitimacy. Overall, the website presents a professional front but requires improvements in compliance, security transparency, and domain legitimacy verification.