Security Directory

G

Getaround

getaround.com

75

Getaround is a well-established peer-to-peer carsharing platform founded in 2003, offering instant car rentals with app-based unlocking technology and trip liability insurance included. The company targets consumers and car owners in the United States, positioning itself as a market leader with a strong digital presence and high user ratings. Their business model leverages proprietary cloud and in-car Connect® technology to enable contactless carsharing experiences. Technically, the website employs a modern tech stack including JavaScript frameworks, Google Tag Manager, Stripe for payments, and Mapbox for mapping, hosted behind Cloudflare for performance and security. The site is mobile-optimized, fast, and accessible with good SEO practices. Security posture is strong with HTTPS enforcement, clientTransferProhibited domain status, and cookie consent mechanisms, though DNSSEC is not enabled and explicit security policies are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and privacy standards, with no signs of malicious activity or content safety concerns.

D

Die Österreichische Postbus Aktiengesellschaft

postbus.at

65

Die Österreichische Postbus Aktiengesellschaft ist das größte Busunternehmen in Österreich und Teil der ÖBB-Personenverkehrs AG. Mit einem umfangreichen Fuhrpark und fast 4.000 Mitarbeitern befördert Postbus jährlich über 200 Millionen Reisende, vor allem im ländlichen Raum, und bietet vielfältige Dienstleistungen wie Regionalverkehr, Shuttle-Services und Busvermietung an. Die Website präsentiert sich professionell, mit klarer Navigation und gut strukturierten Inhalten, die auf Deutsch und Englisch verfügbar sind. Technisch nutzt die Seite moderne Webstandards und Matomo Analytics für datenschutzfreundliches Tracking. Die Sicherheitslage ist solide mit HTTPS und keiner erkennbaren Schwachstelle, jedoch fehlen einige Sicherheitsheader und eine explizite Cookie-Zustimmung, was die Datenschutzkonformität beeinträchtigen könnte. Insgesamt ist die Website vertrauenswürdig und gut positioniert, mit klaren Partner- und Tochtergesellschaftsbeziehungen. Es wird empfohlen, die Datenschutz- und Sicherheitsmaßnahmen weiter zu verbessern, insbesondere durch die Implementierung eines Cookie-Banners und die Veröffentlichung einer Sicherheitsrichtlinie.

R

Rail & Drive

railanddrive.at

66

Rail & Drive is a mobility service operated under the Austrian Federal Railways (ÖBB) umbrella, offering integrated travel solutions combining rail journeys with car rentals at multiple locations across Austria. The service targets both private customers and companies, providing flexible vehicle options, fair pricing based on usage, and 24/7 support. The website is professionally designed with consistent branding and clear navigation, supporting user registration, booking, and information dissemination. Technically, the site uses modern web components and JavaScript frameworks, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are missing. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the domain registration and WHOIS data align well with the business claims, indicating a trustworthy and legitimate operation.

O

Oberösterreichischer Verkehrsverbund

ooevv.at

60

Oberösterreichischer Verkehrsverbund (OÖVV) operates as the regional public transportation authority for Upper Austria, providing comprehensive services including timetable information, ticket sales, real-time travel updates, and mobile applications for route planning and ticket purchasing. The website is professionally designed, multilingual, and targets public transport users within the region and visitors. It maintains a strong market position as a key regional transport provider with a large user base. Technically, the site is built on TYPO3 CMS, employs modern JavaScript libraries, and integrates analytics via Matomo, reflecting a mature digital infrastructure with good performance and accessibility. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, though a dedicated security policy and incident response contact are absent. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Overall, the website is trustworthy, user-friendly, and well-maintained, supporting the organization's mission to facilitate public transportation in Upper Austria.

D

domainname.de

lake-cup.de

58

The website ts.domainname.de/lake-cup.de serves as a professional domain brokerage landing page offering the premium domain lake-cup.de for sale. The business operates as a domain broker with a history dating back to 2005, providing secure and fast domain transfers with escrow payment processing. The platform targets individuals and businesses interested in acquiring premium domains, emphasizing trust and security through verified domain badges and multiple payment options. Technically, the site employs modern web technologies including Bootstrap 5, FontAwesome, and Google reCAPTCHA to ensure usability and spam protection. The site is mobile optimized and presents a clear, professional user experience. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing. Privacy compliance is adequate with a comprehensive privacy policy and terms of service linked, but lacks a cookie consent mechanism. WHOIS data is privacy protected under DENIC, typical for domain brokers, and no suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained, suitable for its domain brokerage business model.

S

Spielzeugschachtel

spielzeugschachtel-graz.at

48

Spielzeugschachtel is a well-established Austrian retail and e-commerce business specializing in high-quality, pedagogically valuable toys and educational materials for children. With a history spanning approximately 60 years, the company emphasizes sustainability, professional advice, and a curated selection of brands. The website reflects a solid market position targeting parents, educators, and childcare providers, offering both online shopping and expert consultation. Technically, the site is built on the Shopware platform, utilizing modern web technologies and providing a good mobile experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements in security headers and explicit privacy policies are recommended. Overall, the site is professional, trustworthy, and safe for general audiences.

D

Die Mediation

die-mediation.de

57

Die Mediation is a German professional media company specializing in mediation, conflict resolution, and communication. The website serves as a Fachmagazin (specialist magazine) offering subscriptions, single issues, books, and articles, targeting professionals and individuals interested in mediation. The business operates a Shopware-based e-commerce platform with a clear focus on content delivery and sales of related products. The company appears to be a small-sized entity founded around 2014, with a consistent brand presence and a well-structured website offering clear navigation and relevant content.

T

Thermik Gerätebau

thermik.de

44

Thermik Gerätebau is a German manufacturing company specializing in temperature limiters and PTC thermistors, positioning itself as a world market leader in this niche. The website reflects a professional B2B focus with a broad product portfolio and international reach, supported by multiple language options. Technically, the site uses modern JavaScript libraries and a reputable consent management platform (Usercentrics) to ensure GDPR compliance. Security posture is solid with HTTPS and secure form handling, though explicit security headers and incident response information are absent. Overall, the site is well-designed, mobile-optimized, and trustworthy, with clear contact channels and certifications that reinforce its credibility.

P

Pfannenberg Group Holding

pfannenberg.com

51

Pfannenberg Group Holding operates a professional website focused on manufacturing products and solutions for thermal management, process cooling, and signaling technology. The company targets industrial and manufacturing sectors with a B2B business model and maintains a consistent brand presence across multiple international language versions. The website is built on TYPO3 CMS, leveraging modern web technologies and providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy. However, the absence of WHOIS registration data introduces some uncertainty regarding domain legitimacy. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and clearer contact information.

E

E. Dold & Söhne GmbH & Co. KG

dold.com

52

E. Dold & Söhne GmbH & Co. KG is a medium-sized German manufacturer specializing in components for safe automation, functional and electrical safety, and intelligent drive technology. The company holds a leading position in Europe for safety switching devices, safety relays, electronic housings, and safety switches. Their website is professionally designed, providing detailed product information and multiple contact channels, targeting industrial customers and automation professionals. Technically, the site employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and CSRF protections, though some security headers could be improved. Privacy compliance is robust with clear cookie consent and a comprehensive privacy policy. However, the absence of WHOIS data for the domain raises concerns about domain registration legitimacy, slightly impacting business credibility. Overall, the website presents a trustworthy and professional digital presence for an established industrial manufacturer.

SICK is a globally recognized enterprise specializing in the production of sensors and sensor solutions for industrial automation. Their website reflects a professional and enterprise-grade digital presence, targeting industrial clients and businesses requiring advanced automation technologies. The company positions itself as a leader in sensor intelligence with a clear focus on B2B manufacturing sectors. Technically, the website is built using modern frameworks such as Angular and employs structured data (JSON-LD) for enhanced SEO. The site demonstrates good mobile optimization, accessibility, and performance characteristics. Analytics and tracking are managed via Tealium, indicating a mature approach to data collection and marketing. From a security perspective, the site uses HTTPS and asynchronous script loading, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data limits domain registration trust analysis, but the website's professional branding and content strongly suggest legitimacy. Overall, the website is well-designed and secure, with minor gaps in privacy compliance and domain registration transparency. Strategic recommendations include enhancing security headers, publishing clear privacy and security policies, and verifying domain registration details for improved trust.

W

Weidmüller

weidmuller.es

71

Weidmüller is a well-established enterprise specializing in industrial connectivity, automation, and digitalization solutions. The website presents a comprehensive product catalog and service offerings targeting industrial customers and partners, primarily in Spain but with a global presence indicated by multiple localized domains. The business model is B2B, focusing on manufacturing and technology sectors with a strong emphasis on innovation and digital services such as the easyConnect platform. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and OneTrust for cookie consent, ensuring compliance with privacy regulations such as GDPR. The site is well-structured, mobile-optimized, and provides a professional user experience with clear navigation and rich content. Security posture is strong with HTTPS enforcement and security headers, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business credibility.

E

EATON

eaton-somerinca.com

60

EATON is a small business focused on residential electricity products and services, including surge protectors and electrical circuit protection, primarily targeting the Venezuelan market. The website is professionally designed using GoDaddy Website Builder and features multimedia content such as embedded Vimeo videos. The company maintains a social media presence on Instagram and LinkedIn, enhancing its market visibility. The business model centers on product distribution and electrical services for residential customers, positioning itself as a trusted local provider in the energy sector. Technically, the website employs modern JavaScript features and is hosted on GoDaddy infrastructure. While the site is mobile-optimized and offers a good user experience, it lacks advanced SEO and accessibility features. Performance is moderate, with no critical errors or broken elements detected. However, the absence of security headers and DNSSEC indicates room for improvement in security hardening. From a security perspective, the site uses HTTPS but does not implement key security headers such as Content-Security-Policy or HSTS. No privacy or cookie policies are present, which raises compliance concerns, especially regarding GDPR. Contact information is limited to an email address, with no phone or physical address provided. No incident response or vulnerability disclosure information is available, limiting transparency in security matters. Overall, the website is functional and professional but requires enhancements in privacy compliance and security best practices to reduce risk and build greater trust with users. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, enabling DNSSEC, and providing clearer contact and incident response information.

O

Obecní úřad Dolní Břežany

dolnibrezany.cz

51

The website dolnibrezany.cz serves as the official online presence of the municipal government of Dolní Břežany, Czech Republic. It provides residents and visitors with comprehensive information about local governance, community events, public notices, and essential contact details. The site is well-structured, with clear navigation and a focus on public service, targeting local citizens and stakeholders. The business model is governmental, focusing on transparency and community engagement rather than commercial activities. Technically, the website employs a modern yet straightforward technology stack including HTML5, CSS3, JavaScript, and the vismo CMS platform. It integrates Google Analytics for visitor insights and Google reCAPTCHA for form security. The site is mobile-optimized and accessible, with good SEO practices and performance. Privacy compliance is evident through cookie consent mechanisms and a published privacy policy. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms, but lacks explicit advanced security headers and a published security or incident response policy. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with a municipal entity. Overall, dolnibrezany.cz is a trustworthy, well-maintained municipal website with good content quality and technical implementation. Strategic improvements could include enhanced security headers, a dedicated security policy, and vulnerability disclosure information to further strengthen its security posture and user trust.

L

LAPP Cables Middle East FZE

e-lapp-me.com

60

LAPP Cables Middle East FZE operates as a regional distributor and manufacturer representative for LAPP Group, specializing in industrial cable and connectivity solutions. The company offers a range of branded products targeting industrial and commercial customers in the Middle East. The website is built on the Shopify platform, leveraging modern e-commerce technologies and analytics tools to support its digital presence. While the site demonstrates good design quality, clear navigation, and consistent branding, it lacks explicit privacy and cookie policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS and form protection via hCaptcha, but could be improved with additional security headers and published security policies. Overall, the domain registration and website content align well, indicating a legitimate and professional business presence.

A

Arrow Cables

arrowcables.com

57

Arrow Cables is a small manufacturing sector business based in Israel specializing in the distribution and supply of various industrial cables including optical, three-phase, and electrical cables. The company targets industrial and commercial customers within Israel, positioning itself as a supplier of quality cable products. The website is professionally designed using the Wix platform, featuring Hebrew language content and structured data that provides basic business contact information. Technically, the site uses modern web technologies and is hosted on Wix, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and some JavaScript hardening, but lacks important security headers and formal privacy or cookie policies. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site itself appears trustworthy and professional. Overall, the site demonstrates a functional digital presence but requires improvements in compliance and security transparency.

LAPP is a globally recognized enterprise specializing in cable and connection technology, offering a comprehensive product portfolio exceeding 40,000 items. The company targets industrial and commercial customers worldwide, positioning itself as a leading supplier in its sector. The website reflects a professional B2B business model with regional subsidiaries and partner sites supporting global operations. Technically, the site is built on a modern Angular framework with SAP Spartacus storefront, ensuring good mobile optimization, accessibility, and SEO. Security posture is adequate with HTTPS enforced, though explicit security headers and cookie consent mechanisms are absent, representing areas for improvement. The WHOIS data for the domain is unavailable, which slightly impacts trust but does not overshadow the professional presentation and global footprint. Overall, the website is secure, compliant, and professionally maintained, supporting LAPP's market position effectively.

E

Energy Power Solution

eps.uz

57

Energy Power Solution is an engineering company and reliable distributor specializing in pump and electrical equipment, operating since 2014 in Uzbekistan. The company offers engineering services, equipment distribution, service center support, project implementation, and sub-factory operations. Their market position is supported by over 200 projects and partnerships with reputable brands such as Grundfos, Danfoss, ABB, WEG, and WIKA. The website reflects a medium-sized enterprise with a professional online presence built on the Tilda CMS platform, optimized for mobile and desktop users. Technical infrastructure leverages Tilda's CDN and form services, ensuring moderate performance and basic accessibility. Security posture is adequate with HTTPS and secure form handling but lacks advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvements. Overall, the site is trustworthy and business-focused with clear contact mechanisms but should enhance privacy compliance and security best practices to strengthen user trust and regulatory adherence.

The website intek-ca.com is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block page. This prevents any meaningful content or business information from being retrieved or analyzed. The domain is registered with Cloudflare, Inc. since 1999, indicating a potentially established entity, but no registrant or business details are publicly available. The site lacks any visible privacy, cookie, or terms of service policies, and no contact information or forms are present. Technically, the site is hosted behind Cloudflare, but no further technology stack or CMS details can be determined due to the block. Security posture cannot be fully assessed, but the absence of DNSSEC and security headers is noted. Overall, the site’s digital maturity and compliance posture cannot be evaluated accurately under current conditions.

W

WINTERHELLER management GmbH

winterheller.com

47

WINTERHELLER management GmbH is a well-established Austrian company specializing in leadership coaching, seminars, online courses, and related products such as books and podcasts. The company is led by Manfred Winterheller, an internationally recognized speaker and bestselling author with a strong reputation in the leadership and personal development market. The business model combines live events, digital education, and product sales targeting executives and professionals seeking to enhance their leadership skills. Technically, the website is built on a modern stack including Bootstrap, JavaScript libraries like Flickity, and uses WordPress as the CMS. It leverages third-party services for fonts and newsletter management (Mailjet). The site is mobile-optimized, well-structured, and provides a professional user experience with clear navigation and rich content. From a security perspective, the site uses HTTPS with good SSL configuration but lacks DNSSEC and explicit security headers. There is no visible cookie consent mechanism, and no detailed security or incident response policies are published. The contact form is secured with required fields, and no sensitive data is exposed in the HTML. The WHOIS data confirms a long-standing domain registration consistent with the business history, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Recommendations include enabling DNSSEC, adding cookie consent for GDPR compliance, implementing security headers, and publishing security policies to further strengthen the security posture and compliance.

A

ASFINAG

asfinag.at

73

ASFINAG is a large Austrian company responsible for the planning, construction, operation, and toll collection on Austria's motorways and expressways. It serves as a reliable, innovative, and sustainable mobility partner connecting regions and people in the heart of Europe. The company offers key services including toll and vignette sales, traffic management, infrastructure construction and maintenance, parking and resting facilities, and career opportunities. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it uses modern JavaScript frameworks such as Vue.js and is hosted on Azure CDN, ensuring fast performance and good accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the company's identity, indicating legitimacy and trustworthiness.

D

Dachverband Wiener Sozialeinrichtungen

dachverband.at

52

Dachverband Wiener Sozialeinrichtungen operates as a central communication and networking platform for approximately 100 member organizations in Vienna's social economy, including mobile and stationary care, disability work, homelessness, refugee aid, and addiction services. The organization collaborates closely with the City of Vienna to provide social services and fosters innovation, standard development, and social policy contributions. The website reflects a medium-sized non-profit entity with a clear focus on social impact and community engagement. Technically, the website is built on WordPress 6.8.2, utilizing modern JavaScript libraries such as Swiper.js for interactive sliders and Cookiefox for cookie consent management. The site is mobile-optimized, accessible according to WCAG 2.0 standards, and demonstrates good SEO practices. Performance is moderate, with no critical technical debt or vulnerabilities detected in the visible code. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy with consistent registrant information matching the organization's Austrian non-profit identity. Overall, the website presents a professional, trustworthy, and well-maintained digital presence suitable for its target audience. Strategic recommendations include enhancing security headers, publishing security policies, and considering vulnerability disclosure mechanisms to further strengthen trust and compliance.

The website www.alkoholmetr.eu provides an online tool for calculating residual blood alcohol content using an algorithmic approach. It targets general users interested in estimating their blood alcohol levels and promotes related alcohol tester devices via an associated e-shop. The site is primarily in Czech with an English version available, serving a niche market in the Czech Republic. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, Google Analytics, and Google Fonts. However, it relies on deprecated Flash technology for its main calculator application, which impacts modern usability and security. Security posture is basic with no visible security headers or cookie consent mechanisms, and WHOIS data is unavailable due to EURid privacy policies, limiting transparency. Overall, the site is functional and provides useful informational services but would benefit from modernization and improved security and privacy compliance.

L

Lekton Genossenschaft

lekton.net

46

Lekton Genossenschaft is a small cooperative based in Austria specializing in graphic design, web design, and software development with a strong focus on data visualization and accessibility. The company serves a niche market including public institutions such as the City of Vienna and private clients, offering tailored digital solutions and creative services. Their website showcases a professional portfolio of projects and detailed team member profiles, reflecting a mature and collaborative business model. Technically, the website is built using modern JavaScript frameworks including Vue.js and D3, hosted by Hetzner Online GmbH, and demonstrates good mobile optimization and accessibility standards. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in compliance and security transparency.

The website nbrm.mk is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to its content. This prevents extraction of business, contact, or policy information. The domain is registered since 2008 with a reputable registrar and uses Cloudflare for DNS and security, indicating a legitimate and established entity likely related to the National Bank of the Republic of Macedonia. The technical infrastructure leverages Cloudflare's security and performance services, but no CMS or other platform details are discernible due to the content block. Security posture cannot be fully assessed, but the presence of Cloudflare WAF and Turnstile indicates a proactive security approach. However, the lack of accessible privacy, cookie, or terms policies and absence of contact information reduces transparency and compliance visibility. Overall, the site is safe with no adult or explicit content detected, but the analysis is limited by the WAF challenge.

The website infinity-bitwave.com is currently a parked domain with no legitimate business content or services offered. It primarily serves as an advertising landing page with embedded third-party ad networks and search widgets. The domain is very recently registered (October 2024) by a registrar company, indicating it is not yet developed into an operational business site. The lack of contact information, privacy and cookie policies, and security best practices further diminish its credibility. Technically, the site uses basic HTML and JavaScript with Google Adsense and related ad services, but lacks HTTPS enforcement and security headers, exposing it to potential risks. Overall, the site is low trust and low value from a business and security perspective.

Ö

ÖBB (Österreichische Bundesbahnen)

wegfinder.at

67

wegfinder.at is a comprehensive mobility platform operated under the auspices of ÖBB, Austria's national railway company. The website offers an integrated app solution for booking and managing various transportation modes including trains, buses, taxis, carsharing, bikesharing, and e-scooters across Austria. The platform is positioned as a leading mobility aggregator with strong regional partnerships, providing users with seamless route planning, ticketing, and vehicle rental services. Technically, the site employs modern web technologies such as Bulma CSS, Font Awesome, and Matomo analytics, ensuring a responsive and user-friendly experience across desktop and mobile devices. Security posture is strong with HTTPS enforcement and security headers, though some GDPR compliance aspects like explicit cookie consent could be improved. Overall, the domain registration and WHOIS data align well with the business claims, supporting the legitimacy and trustworthiness of the site.

B

BEDEA, spol. s.r.o.

bedea.cz

55

BEDEA, spol. s.r.o. is a Czech Republic-based private security and detective agency offering a range of services including property and personal protection, detective work, cash transport, CCTV systems, and canine services. The company holds certifications from the Czech Association of Private Security Services and has a National Security Authority clearance for confidential level operations. Their market position is that of a small, established local security provider with partnerships such as the "KRUH – zásahová služba" project, indicating active engagement in the security sector. The website content is primarily in Czech and targets local businesses and individuals seeking security services. Technically, the website uses basic web technologies including jQuery 3.3.1 and CSS, with a cookie consent banner implemented for compliance. However, there is no evidence of modern CMS usage or advanced frameworks. The site shows moderate performance and basic mobile optimization. SEO and accessibility features are present but minimal. No social media or direct contact information is provided on the site, which limits user engagement and trust. From a security perspective, the site lacks visible HTTPS enforcement and security headers in the provided data, which are critical for protecting user data and ensuring secure communications. The cookie consent mechanism is a positive compliance indicator, but the absence of privacy and terms of service pages is a compliance gap. WHOIS data is unavailable, which raises concerns about domain registration legitimacy and reduces trustworthiness. No vulnerabilities or malware indicators were detected in the content. Overall, the website presents a legitimate business with a clear service offering but has notable gaps in security posture, privacy compliance, and transparency. Strategic improvements in HTTPS implementation, security headers, privacy documentation, and contact information publication are recommended to enhance trust and compliance.

The website inquirygrid.com appears to be a newly registered domain (March 2023) with minimal content primarily consisting of an embedded iframe from an external source. There is no visible business branding, contact information, or policy documentation on the site. The technical infrastructure is basic, with no CMS or modern frameworks detected, and the site lacks standard security headers and DNSSEC. The presence of tracking pixels and obfuscated iframe parameters suggests a focus on data collection or advertising rather than user engagement or service provision. Security posture is weak due to missing headers and DNSSEC, and privacy compliance is poor with no policies found. Overall, the site presents a low trust profile with limited business credibility and poor content quality.

S

Sonnleitner Holzhausbauwerke GmbH & Co. KG

sonnleitner.de

49

Sonnleitner Holzhausbauwerke GmbH & Co. KG is a well-established Bavarian company specializing in ecological and healthy wooden house construction. With over 50 years of experience and more than 3,600 projects completed, the company offers custom wooden houses, modular buildings, commercial and multi-family wooden constructions, and interior design services. Their focus on sustainable materials, premium quality, and healthy living environments positions them as a regional leader in the wooden house market. The website is professionally designed, content-rich, and provides clear contact information and social media presence, enhancing business credibility. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, and the Contao CMS platform. It features responsive design and good SEO practices. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing or not detected, which could be improved to enhance compliance and security posture. The security posture is moderate with HTTPS implied but no visible security headers or incident response information. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent from the provided data. Privacy compliance is adequate with a comprehensive privacy policy but lacks a cookie consent mechanism. Business credibility is high due to clear company information, certifications, and customer testimonials. Overall, the website is a strong digital asset for Sonnleitner, supporting their market position and customer engagement. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen their security and compliance stance.

The website alkohol-testr.cz operates as an e-commerce platform specializing in the sale of alcohol testers, drug tests, and related accessories primarily targeting consumers and businesses in the Czech Republic. It offers a range of products from home-use devices to professional and corporate-grade alcohol testers, along with calibration and servicing options. The site is supported by clear contact information and partnerships with related e-commerce sites, indicating a niche but established market presence. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and integrates third-party services such as Google Analytics and Zopim Live Chat. The site uses HTTPS, ensuring encrypted communication, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. The site’s design and navigation are basic but functional, with moderate mobile optimization. From a security perspective, the site shows a reasonable posture with no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data for the domain reduces transparency and trustworthiness. No incident response or security policy information is published, which could be improved to enhance user confidence. Privacy compliance is partial, with no explicit cookie consent or detailed privacy policy disclosures. Overall, the site presents a moderate risk profile with good business credibility but some gaps in transparency and privacy compliance. Strategic improvements in security headers, privacy mechanisms, and domain registration transparency would strengthen its trust and compliance standing.

Tuning.as is a Czech Republic-based niche online portal focused on automotive tuning, accessories, and related entertainment content. It combines editorial articles, classifieds (tuning bazar), and an e-commerce shop offering various car tuning products such as xenon lights, alcohol testers, antiradars, and travel luggage. The site targets automotive enthusiasts and hobbyists interested in tuning and car customization. The business operates as a small-sized entity with a history dating back to 2009, maintaining a moderate market position within the Czech automotive tuning community. Technically, the website uses legacy technologies including Flash and an outdated jQuery version, which impacts performance and security. The site is not mobile optimized and has basic SEO and accessibility features. Security posture is moderate with HTTPS enabled but lacks modern security headers and advanced protections. Privacy compliance is basic, with a cookie consent banner and terms of service present but no detailed privacy or security policies. Contact information is available via email but no phone numbers or physical addresses are provided. Overall, the site is functional and content-rich but requires modernization and security improvements to enhance trust and user experience.

The website alkohol-test.eu operates as a specialized e-commerce platform focused on the sale of branded alcohol testers and related accessories, including drug tests. It targets both individual consumers and businesses requiring reliable alcohol and drug testing solutions. The site demonstrates a niche market position with detailed product offerings, references to media test results, and partnerships with recognized suppliers, indicating a credible and established business presence primarily in the Czech Republic. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and integrates third-party services such as Google Analytics and Zopim live chat for user engagement and analytics. The site is served over HTTPS, ensuring basic transport security, but lacks advanced security headers and cookie consent mechanisms, which are important for compliance and enhanced security posture. From a security perspective, the site shows moderate maturity with no evident blocking or WAF challenges, but improvements are needed in privacy compliance, security headers, and form protections. The absence of a privacy policy and cookie consent banner represents a compliance gap under GDPR regulations. WHOIS data is unavailable due to EURid privacy policies, but the website content and contact information support legitimacy. Overall, the website is functional, professionally presented, and trustworthy for its business domain, but should prioritize enhancing privacy compliance and security best practices to reduce risk and improve user trust.

The website www.alkohol-tester.biz operates as a specialized e-commerce platform focused on selling branded and certified alcohol testers and drug testing devices primarily to consumers and small to medium businesses in the Czech Republic and Slovakia. It offers a broad product range with detailed descriptions, calibration services, and customer support, positioning itself as a trusted niche retailer with over 3000 units sold. The business emphasizes product authenticity and after-sales service, including calibration and repair. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Analytics, and Zopim live chat. However, it still contains deprecated Flash content and lacks modern security headers, which could impact user experience and security. The site is accessible over HTTPS but does not provide a comprehensive privacy policy, though it has a cookie consent mechanism. Contact information is clearly presented, enhancing business credibility. WHOIS data is completely missing, which reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional and content-rich but would benefit from technical and security improvements.

N

Nové české online casino

rcguru.cz

53

The website rcguru.cz operates as a Czech language online casino review and bonus information platform targeting players interested in Czech online casinos. It provides detailed reviews of top 10 casinos, payment methods, bonus explanations, and user testimonials. The business model appears to be affiliate or informational, focusing on guiding users to various casino platforms. Technically, the site uses standard web technologies with Cloudflare DNS, structured data for SEO, and a responsive design optimized for mobile. Security posture is moderate with no detected WAF or blocking, but lacks explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. WHOIS data shows inconsistencies, notably a domain creation date in the future relative to content publication, which raises legitimacy concerns. Overall, the site is functional and professional but would benefit from enhanced security and compliance transparency.

I

Ideenreich Websolutions GmbH

web-ideenreich.at

52

Ideenreich Websolutions GmbH is a small Austrian technology company specializing in digital transformation through custom web applications, data analysis, and market research services. The company targets businesses seeking to digitize processes and leverage data insights, positioning itself as a trusted regional provider with a portfolio of reputable clients. The website reflects a professional and consistent brand image with clear service offerings and client trust indicators. Technically, the site is built on WordPress with modern frameworks like Vuetify and uses GDPR-compliant cookie management and analytics tools such as Fathom and Matomo. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital presence suitable for its business scope.

H

Hill & Knowlton

hkstrategies.com

79

Hill & Knowlton is a well-established global communications and public relations agency with a domain registered since 1995, indicating a long-standing presence in the industry. The website serves primarily business and corporate clients, offering services in public relations, communications consulting, and strategic communications. The site uses modern web technologies including Nuxt.js and Cloudflare DNS, with accessibility features implemented via a third-party accessibility app. However, the website content is basic with minimal metadata and lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with HTTPS enabled and domain transfer protections in place, but DNSSEC is not enabled and security headers are not evident in the provided data. Overall, the website is professional but could improve in privacy compliance and transparency.

V

Vavada com

euroutconference.org

52

The website rencontresmusicalesirlandaisestocane.com is an online casino promotional platform primarily targeting Russian-speaking users. It offers information about bonuses, promo codes, free spins, and various casino games including slots, live games, tables, and tournaments. The site also promotes sports betting bonuses and maintains an active presence on social media platforms such as Telegram, Instagram, VK, and YouTube. The business model revolves around online gambling with incentives to attract and retain players. The domain WHOIS data shows a suspicious future creation date, which raises concerns about the legitimacy or accuracy of the registration information. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Cloudflare DNS services. The site is mobile-optimized and has good SEO practices but lacks explicit privacy, cookie, and terms of service policies. Security posture is moderate with HTTPS enabled but missing important security headers and DNSSEC.

The analyzed website appears to be inaccessible or blocked, as the content is a Chrome internal error page (chrome-error://chromewebdata/). The domain name and page title suggest adult content, but no actual business or content data is available. The technical infrastructure is limited to Chromium offline error page scripts, with no external links, metadata, or business information. Security posture is weak due to lack of HTTPS and security headers. Privacy and compliance policies are absent. Overall, the site lacks professionalism and trust indicators, and the content is not accessible for meaningful analysis.

The website xenony.in is currently a parked domain page with no active business content or services offered. It primarily serves as a placeholder indicating the domain may be for sale, with advertising scripts and links to domain resale services. The technical infrastructure relies on basic HTML, CSS, and JavaScript with third-party advertising and tracking integrations, hosted via Amazon Cloudfront CDN. There is no evidence of a content management system or advanced frameworks. Security posture is weak, lacking HTTPS enforcement and security headers, and no privacy or cookie consent mechanisms are implemented. Business credibility is low due to absence of contact information, company details, or trust signals. Overall, the site is minimal and not professionally maintained, serving only as a domain parking page.

E

Erste banka Crna Gora

erstebank.me

57

Erste banka Crna Gora is a prominent financial institution serving the Montenegrin market with a broad range of retail banking services including accounts, cards, loans, savings, investments, and digital banking platforms. The website reflects a mature digital presence with a professional design, clear navigation, and mobile responsiveness, supporting a positive user experience for its target audience. Technically, the site leverages modern web technologies and integrates analytics and chat services to enhance customer engagement. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers and incident response information are not publicly disclosed. The WHOIS data is incomplete, limiting domain trust assessment, but overall the site demonstrates legitimacy and professionalism. Strategic recommendations include enhancing transparency around security policies and improving WHOIS data availability.

B

Banka Sparkasse

sparkasse.si

62

Banka Sparkasse is a well-established Slovenian retail banking institution, part of the Erste Bank Group with over 200 years of tradition. The website targets individual consumers in Slovenia, offering personal banking and financial advisory services. The business model focuses on providing tailored financial solutions with a strong emphasis on customer trust and stability. Technically, the site uses a modern CMS platform (GEM) with a solid tech stack including JavaScript, Google Tag Manager, and Cookiebot for privacy compliance. The site is mobile optimized and performs moderately well. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

E

Erste Bank Hungary Zrt.

erstebank.hu

65

Erste Bank Hungary Zrt. operates as a major retail banking institution in Hungary, offering a comprehensive range of financial products including loans, bank accounts, cards, electronic banking, and investment services. The website reflects a mature digital presence with clear navigation, professional design, and a focus on customer engagement through digital services and security awareness. Technically, the site uses a proprietary CMS and framework (GEM), integrates modern analytics and privacy management tools, and is hosted on Erste Group's CDN infrastructure. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit incident response contacts and vulnerability disclosure policies are not publicly detailed. Overall, the site demonstrates high business credibility and compliance with GDPR, serving a broad retail customer base effectively.

B

BCR | Banca Comerciala Romana

bcr.ro

67

BCR (Banca Comerciala Romana) is a leading Romanian bank offering a comprehensive range of retail banking services including digital banking via its George platform, credit cards, personal and mortgage loans, savings, and investment products. The website reflects a mature digital presence with consistent branding and a user-friendly interface targeting individual consumers in Romania. Technically, the site leverages modern JavaScript frameworks, Google Analytics, Tag Manager, and Visual Website Optimizer for analytics and marketing, supported by a custom Erste Group CMS framework. Security posture is strong with HTTPS enforced, use of reCAPTCHA, and cookie consent mechanisms, although explicit security headers could be more visible. The domain WHOIS data is privacy protected as per ROTLD policy, which is justified for a financial institution. Overall, the site is professional, trustworthy, and compliant with GDPR and privacy standards.

E

Erste Bank

erstebank.at

61

Erste Bank is a leading Austrian financial institution offering modern retail banking services including current accounts, internet banking, savings, credit, investment, and pension products. The website targets private customers in Austria, providing comprehensive information and digital banking solutions such as the George banking platform. The site demonstrates a mature digital infrastructure with a proprietary CMS (GEM), modern web technologies, and structured data for SEO. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are not publicly evident in the provided content. Privacy and cookie policies are not clearly found, indicating room for improvement in compliance transparency. Overall, Erste Bank's website is professional, trustworthy, and well-optimized for user experience and accessibility.

The website www.odtahova-sluzba-nonstop.cz represents a small Czech towing service company named Pištora, offering vehicle towing and related automotive services primarily in Prague and across the European Union. Their key offerings include 24/7 towing for vehicles and other loads up to 6 tons, insurance coverage for transported items, vehicle storage, and assistance with vehicle registration and repairs. The business targets vehicle owners and automotive service clients in need of reliable towing and transport solutions. Technically, the website uses legacy JavaScript libraries such as Prototype.js and Scriptaculous, along with Lightbox for image galleries, and integrates Google Analytics for visitor tracking. The site lacks modern CMS indications and shows basic design and navigation quality. Mobile optimization and accessibility are minimal, and no HTTPS enforcement or security headers were detected in the provided content, indicating a need for security improvements. From a security perspective, the absence of HTTPS and security headers, lack of privacy and cookie policies, and missing WHOIS registration data raise concerns about the website's security posture and trustworthiness. While the content is legitimate and relevant to the business, the lack of compliance with privacy regulations and security best practices exposes the site to potential risks. Overall, the website is functional and provides relevant business information but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user safety.

S

Smyčcový orchestr Jeseník

soj.cz

47

Smyčcový orchestr Jeseník is a well-established cultural and educational organization based in Jeseník, Czech Republic, focused on string orchestra music education and performances primarily for children and youth. The website serves as an informational and community platform, providing details about the orchestra, related music schools, events, and contact information. The organization has a strong local presence with a history dating back to 1984 and domain registration since 2001, indicating a stable and credible operation. Technically, the website is built on the Noteo Engine CMS, uses standard web technologies including jQuery and FontAwesome, and is hosted by REG-GRANSY. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks several important HTTP security headers such as CSP, HSTS, and X-Frame-Options, which are recommended to enhance protection against common web threats. Privacy compliance is limited due to the absence of a dedicated privacy policy and terms of service pages, though cookie consent is present. Overall, the website is professional and trustworthy but would benefit from improved security and privacy documentation to align with best practices.

Berghof Automation and Control Solutions operates a website that serves as a Matomo analytics platform login portal, indicating a focus on automation and control technologies with integrated analytics capabilities. The company appears to be established since 2012, with a medium-sized presence in the technology sector. The website primarily serves business users and administrators managing analytics data. Technically, the site uses Matomo analytics with JavaScript and PHP technologies, hosted under a domain registered with RegistryGate GmbH. The site is secured with HTTPS and has domain transfer protections in place, but lacks advanced DNS security features such as DNSSEC. Security posture is moderate with room for improvement in security headers and explicit policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the website is functional but minimalistic, focusing on analytics login rather than public-facing content.

DER PUNKT GmbH operates a cooking-themed media website featuring a 2020 cookbook and related video content showcasing recipes by various contributors. The site targets a general audience interested in cooking and recipe media, providing downloadable content and video links primarily hosted on YouTube. The business model centers on content presentation and community engagement rather than direct e-commerce or service sales. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and integrates Google Analytics for user tracking. Cookie consent is managed via Klaro, indicating attention to privacy compliance. Hosting is provided by kasserver.com, a known hosting provider. Security posture is moderate with no HTTPS or security headers explicitly detected in the provided data, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is basic but present, with a privacy policy linked on the parent company site and a cookie consent banner implemented. Overall, the site is professionally designed with good user experience and content relevance but lacks explicit contact information and terms of service pages, which could improve business credibility and compliance.

D

DER PUNKT GmbH

richmedia-plus.de

42

DER PUNKT GmbH is a well-established advertising and design agency based in Karlsruhe, Germany, founded in 1999. The company offers a broad range of services including marketing, corporate design, web design, print media, database solutions, presentations, video production, and mobile app development. With a medium-sized team of approximately 26 employees, DER PUNKT serves both medium-sized businesses and large corporations, positioning itself as a leading agency in the Southwest German market. Their client portfolio includes major brands such as Adidas, BASF, Lufthansa, and Mercedes-Benz, underscoring their strong market presence and credibility. Technically, the website is built on modern web standards using HTML5, CSS3, JavaScript, and jQuery, with TYPO3 as the CMS platform. The site integrates Google Analytics and Google Tag Manager for analytics and tracking, and employs Klaro for cookie consent management, demonstrating a mature digital infrastructure. The site is mobile-optimized and features good SEO and accessibility practices, although accessibility could be further enhanced. From a security perspective, the website uses HTTPS with a strong SSL configuration and implements cookie consent mechanisms aligned with GDPR requirements. However, there is no publicly available formal security policy or incident response information, and security headers are not explicitly detected. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data aligns well with the business claims, showing consistent domain registration since 1999, reinforcing the legitimacy of the entity. Overall, DER PUNKT GmbH presents a professional, trustworthy, and compliant online presence with strong business credibility and a solid technical foundation. Strategic improvements could include publishing formal security policies, adding vulnerability disclosure mechanisms, and enhancing accessibility and security headers to further strengthen their security posture and compliance.