Security Directory

P

PENTA CZ

penta.cz

60

PENTA CZ operates as a Czech Republic-based e-commerce retailer specializing in a broad range of products including household goods, garden supplies, tools, and electronics. The website offers a loyalty program and expert advice, targeting both consumers and businesses. The platform is well-structured with extensive product categories, indicating a mature retail operation with a medium-sized market presence. Technically, the website employs modern JavaScript libraries such as jQuery and integrates Google Tag Manager, Google Analytics, and reCAPTCHA for analytics and security. Cookie consent mechanisms are implemented, reflecting awareness of privacy regulations. However, the absence of a visible privacy policy and security headers suggests areas for improvement in compliance and security hardening. Security posture is moderate with HTTPS enabled and use of reCAPTCHA, but lacks visible security headers and vulnerability disclosure mechanisms. The WHOIS data is unavailable, likely due to privacy protection, which limits domain trust assessment. Overall, the site appears legitimate and professionally maintained but would benefit from enhanced transparency and security practices. Strategic recommendations include publishing comprehensive privacy and security policies, implementing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

V

VUCH s.r.o.

vuch.cz

62

VUCH s.r.o. operates a Czech-based e-commerce platform specializing in colorful and original fashion accessories including handbags, backpacks, wallets, and other fashion items. The company targets primarily women seeking unique and playful designs, positioning itself as a well-known brand in the Czech retail market with a decade of experience. The website is professionally designed with good navigation and mobile optimization, supporting a positive user experience. Technically, the site employs modern JavaScript libraries and tracking technologies, including Google Tag Manager, Facebook Pixel, TikTok Pixel, and Microsoft Clarity, indicating a mature digital marketing strategy. Security posture is solid with HTTPS enforced and appropriate security headers, though the absence of a public security policy and incident response contacts suggests room for improvement. The lack of WHOIS data is a concern for domain legitimacy but does not currently undermine the evident business operations. Overall, the site is trustworthy, GDPR compliant, and safe for general audiences.

G

GREJT s.r.o.

grejt.sk

54

GREJT s.r.o. operates an established e-commerce platform in Slovakia, specializing in consumer electronics, household appliances, smart home devices, and related products. The website presents a professional and user-friendly interface with clear navigation and comprehensive product categories. The company targets general consumers in Slovakia, offering fast delivery and customer support services. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and integrates marketing and analytics tools such as Facebook Pixel and Google Analytics. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, the website demonstrates a mature digital presence with good business credibility and trust indicators.

A

Alensa Medical s.r.o.

alensa.cz

60

Alensa Medical s.r.o. operates www.alensa.cz, a Czech Republic-based e-commerce platform specializing in contact lenses, lens solutions, sunglasses, and prescription glasses. The company targets consumers seeking optical products with a promise of fast delivery and a wide product range. The website is professionally designed with consistent branding and clear navigation, supporting a medium-sized retail business model focused on the Czech market. Technically, the website employs modern analytics and marketing technologies including Google Tag Manager, Google reCAPTCHA, Facebook Pixel, Visual Website Optimizer, and PostHog analytics. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Security is robust with HTTPS enforced and use of anti-bot measures, but lacks explicit security headers and documented security policies. The security posture is good, with no detected vulnerabilities or blocking mechanisms. However, the absence of visible privacy and cookie policies reduces compliance confidence. WHOIS data is unavailable due to CZ NIC privacy norms, but the website's business information is consistent and trustworthy. Overall, the site is safe for general audiences and professionally managed. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, improving accessibility, and maintaining transparency in data protection practices to strengthen user trust and regulatory compliance.

A

Ad Alliance GmbH

winario.de

61

winario.de is an official online sweepstakes platform affiliated with major German TV channels RTL and VOX, operated by Ad Alliance GmbH. It offers users free participation in TV-related contests and votings, providing chances to win cash prizes, trips, and electronics. The platform targets a general German-speaking audience interested in TV sweepstakes and interactive contests. Technically, the site employs modern JavaScript libraries including jQuery and Swiper.js, integrates Google Tag Manager for analytics, and uses Sourcepoint for GDPR-compliant consent management. Hosting is managed via EuroDNS nameservers, indicating a professional infrastructure. Security posture is solid with HTTPS enforced and consent mechanisms in place, though explicit security headers and incident response information are not clearly presented. Privacy compliance is strong with dedicated privacy and cookie policies accessible. Business credibility is high due to official affiliations and consistent branding. Overall, the website is well-designed, user-friendly, and trustworthy, with no signs of blocking or malicious content.

A

AGRI-PRECISION s.r.o.

agri-plan.cz

56

AGRI-PRECISION s.r.o. operates the AGRI-PLAN website, offering specialized software for planning agricultural land block operations and machinery navigation. The company targets agricultural businesses primarily in the Czech Republic, providing tools to optimize economic and ecological farming practices in compliance with local legislation. The website is professionally designed with clear navigation, multimedia content, and multilingual support (Czech and English). The business model is SaaS-based, focusing on niche agricultural technology solutions. Technically, the site uses modern JavaScript libraries, Google Analytics, Microsoft Clarity, and reCAPTCHA for bot protection. The site is mobile-optimized and SEO-friendly, though accessibility could be improved. Security posture is good with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit security policies. WHOIS data is unavailable, which reduces transparency but the website's professional presentation and contact details support legitimacy.

cloud19 web solutions & services is a small Austrian company specializing in professional, customized websites for small and medium-sized enterprises, startups, and sole proprietors. With over 20 years of experience, the company offers fixed-price business websites, CMS development primarily using Plone CMS, and hosting services. Their market position is strengthened by personalized customer service, award-winning expertise, and a focus on transparency and no binding contracts. Technically, the website is built on a modern stack including Python, Plone CMS, PostgreSQL, Docker, and Bootstrap, with privacy-conscious analytics via Matomo. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be managed within their own infrastructure, ensuring control and reliability. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected and could be improved. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website and business present a trustworthy, professional image with clear contact information and transparent service offerings. The lack of WHOIS data due to privacy protection limits domain trust analysis but is justified for this business type. Strategic recommendations include enhancing security headers and continuous monitoring of third-party components.

Rohberg is a small Swiss technology company specializing in web solutions using Plone CMS, Python, React, and Svelte. The company offers comprehensive services including website creation, backend and frontend development, app integration, and customized search functionalities. The business targets creative professionals and organizations primarily in Zurich, emphasizing collaborative and modern web development approaches. The website reflects a professional and consistent brand image with active community involvement in the Plone ecosystem. Technically, the website is built on a modern stack with Plone as the CMS, leveraging Python and popular frontend frameworks. It uses privacy-conscious analytics (Matomo) alongside Google Tag Manager. The site is mobile-optimized and well-structured, though some accessibility features could be improved. Performance is moderate, with good SEO and meta tag usage. From a security perspective, the site uses HTTPS with no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and published security policies. Privacy compliance is limited due to missing privacy and cookie policies and no consent mechanisms. Contact information is available via a contact page but lacks direct email or phone contacts on the main site. Overall, Rohberg's website demonstrates a solid technical foundation and credible business presence with room for improvement in privacy compliance and security best practices. The risk level is low, with no critical issues detected.

E

Enfold Systems

enfoldsystems.com

58

Enfold Systems is a specialized technology company focused on providing solutions and services around the Plone open-source content management system. Their offerings include software products, hosting, consulting, and support tailored to organizations seeking robust CMS solutions. The company has a long-standing presence since 2004 and positions itself as a premier Plone expert with a strong emphasis on open-source technologies and client partnerships. Technically, the website is built on the Plone CMS platform and leverages modern web technologies such as jQuery, RequireJS, Bootstrap, and Google Fonts. The site is mobile-optimized and demonstrates good design quality and user experience. Hosting and DNS services involve Cloudflare and Squarespace Domains, providing a reliable infrastructure. Google Analytics is used for visitor tracking, though no explicit cookie consent mechanism is implemented. From a security perspective, the site uses HTTPS with a valid SSL configuration and domain status protections to prevent unauthorized changes. However, it lacks DNSSEC and security headers, which are recommended to enhance security posture. No privacy or cookie policies are present, indicating gaps in privacy compliance. Contact information is limited to a contact form without direct emails or phone numbers, which may affect user trust and accessibility. Overall, the website is professional, trustworthy, and technically sound but would benefit from improved privacy compliance, enhanced security headers, and clearer contact information to strengthen its security and compliance posture.

W

WirtschaftsEntwicklungsGesellschaft Bochum mbH

parken-in-bochum.de

45

The website 'Parken in Bochum' is operated by the WirtschaftsEntwicklungsGesellschaft Bochum mbH and serves as an informational portal for parking facilities and services in the city of Bochum, Germany. It provides real-time parking availability, details on parking lots, parking ticket machines, and smart parking registration. The site targets residents and visitors seeking convenient parking solutions in Bochum. The business model is focused on public service and parking management, positioning itself as a key local resource for transportation-related information. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Swiper, Popper.js, and Tippy.js, along with Google Maps API integration for interactive maps. The site is mobile-optimized, accessible, and includes SEO best practices. It employs Matomo analytics with a cookie consent mechanism, reflecting a commitment to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent. However, it lacks explicit security headers and does not publish a security policy or incident response contact details. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and legitimate, supporting trustworthiness. Overall, the website is professional, trustworthy, and provides valuable services to its audience. Strategic improvements include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

W

Wirtschaftsförderung Bochum WiFö GmbH

bochum-startup.de

47

Bochum Startup is a regional economic development initiative operated by Wirtschaftsförderung Bochum WiFö GmbH, focused on supporting startup founders and entrepreneurs in Bochum, Germany. The website offers comprehensive services including consulting, workshops, community events, and growth programs such as the WERK X incubator. The organization positions itself as a trusted partner throughout the startup journey, emphasizing competence, community, and regional focus. Technically, the website is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery, Swiper, and Featherlight for interactive features. It employs Matomo analytics for privacy-conscious user tracking and integrates Google reCAPTCHA for form security. The site is mobile-optimized, accessible, and performs moderately well, with a consistent and professional design. From a security perspective, the site uses HTTPS with excellent SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's business claims, indicating a legitimate and trustworthy domain. Overall, Bochum Startup presents a professional, secure, and privacy-conscious online presence suitable for its public sector economic development role. Strategic improvements could include adding formal security policies and enhancing security headers to further strengthen its security posture.

B

B im Beckmannshof

b-im-beckmannshof.de

44

B im Beckmannshof is a small hospitality business operating a restaurant and event venue in Germany, specializing in regional and reinterpreted German cuisine. The website is professionally designed using WordPress and Elementor, featuring a modern and responsive layout with clear navigation. The business targets local and regional customers seeking dining and event rental services. Technically, the site uses a standard WordPress stack with popular plugins and libraries such as JetEngine, Swiper.js, and Matomo for analytics, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses Cookiebot for GDPR-compliant cookie consent management, but lacks explicit security headers and published security policies. No contact emails or phone numbers were found in the provided content, which may impact user trust and business credibility. Overall, the website is functional and professional but could improve in privacy transparency and security best practices.

A

Akademisches Förderungswerk, A. ö. R.

q-we.st

47

Q-West Bochum is a campus gastronomy service operated by the Akademisches Förderungswerk, serving students and staff at Ruhr-Universität Bochum. The website presents a clear business model focused on providing lunch, dinner, coffee, and snacks with special pricing for students and apprentices. The business is positioned as a medium-sized hospitality service embedded within an educational environment, emphasizing quality, variety, and convenience. Technically, the site uses WordPress CMS with jQuery and Matomo analytics, providing a moderate performance and good mobile optimization. The presence of an OpenTable reservation widget enhances user experience. Security posture is adequate with HTTPS and privacy-conscious analytics, but lacks advanced security headers and formal security policies. Privacy compliance is good with a GDPR-compliant privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its target audience and business goals.

B

BAföG Digital

bafoeg-digital.de

66

BAföG Digital is the official German government platform enabling students and trainees to apply online for BAföG educational funding. It is a joint offering by the federal government and the German states, providing a secure, accessible, and user-friendly digital service. The platform supports application submission, status tracking, and offers additional services such as a BAföG calculator and a dedicated mobile app. The website is well-branded with official logos and consistent messaging, targeting students and their families in Germany.

E

EVici webdesign s.r.o.

upgates.cz

44

Upgates is a Czech-based SaaS e-commerce platform provider offering customizable online shops tailored to business needs without requiring additional module purchases. With over 15 years of market presence and more than 4200 customers, it holds a leading position in the Czech and Slovak e-commerce market. The platform supports multistore, multilingual capabilities, integrated payment gateways, and advanced marketing tools, catering to businesses aiming for local and international expansion. Technically, the website employs modern web technologies including Bootstrap Icons, jQuery, Google Tag Manager, and Facebook Pixel, alongside a proprietary CMS built on the Nette Framework. The site is well-optimized for mobile devices, fast loading, and includes comprehensive SEO and accessibility features. Security measures include HTTPS enforcement, reCAPTCHA v3 integration, and a detailed cookie consent mechanism. While the website demonstrates strong security practices and privacy compliance, the absence of WHOIS registration data reduces transparency regarding domain ownership and age. No critical vulnerabilities or security issues were detected in the visible content. The site integrates multiple advertising and analytics services with user consent mechanisms, reflecting a mature digital marketing strategy. Overall, Upgates presents a professional, trustworthy, and technically sound e-commerce platform with room for improvement in domain registration transparency and advanced security headers. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and establishing a vulnerability disclosure program.

Ú

Úspěšný web s.r.o.

uspesnyweb.cz

64

Úspěšný web s.r.o. is a Czech Republic based small technology company specializing in custom web solutions including web presentations, e-commerce shops, and CRM systems. Founded in 2015, the company has established a solid local market presence with a portfolio of diverse clients across various industries. Their website demonstrates a professional and modern digital presence with clear navigation, responsive design, and comprehensive service offerings. The technical infrastructure leverages modern JavaScript frameworks, SVG graphics, and integrates Google Tag Manager and analytics tools with privacy-conscious consent mechanisms. Security posture is good with HTTPS enforced, CAPTCHA on forms, and GDPR compliance evident, though explicit security policies and headers could be enhanced. Overall, the website is trustworthy, well-branded, and aligns with the company’s business claims and WHOIS data, indicating a legitimate and credible business operation.

K

Kudy z nudy

kudyznudy.cz

63

Kudy z nudy is a well-established Czech tourism portal operated under the auspices of CzechTourism, the official Czech tourism board. The website provides comprehensive information and inspiration for trips, cultural events, and activities throughout the Czech Republic, targeting families, tourists, and cultural enthusiasts. It serves as a key digital platform for promoting Czech tourism with a strong market position supported by government backing. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery, Google Tag Manager, and reCAPTCHA integrated for security and analytics. The site is mobile-optimized, accessible, and SEO-friendly, offering a professional user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and anti-bot measures in place, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the site is trustworthy, professional, and safe for general audiences.

Střední Čechy filmová kancelář operates as a regional film office providing location and production support services for filmmakers in Central Bohemia, Czech Republic. The website serves as an informational and contact portal, offering news, location listings, filmographies, and contact details for film production inquiries. The organization targets film producers and related professionals seeking filming locations and support in the region. The business model is service-oriented, facilitating film production logistics and location scouting. Technically, the website is built on the Public4u CMS platform and utilizes common JavaScript libraries such as jQuery and jQuery UI. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced. The site lacks advanced analytics or tracking scripts, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS and includes anti-spam measures on its contact form. However, no security headers were detected, and there is no visible privacy or cookie policy, which are compliance gaps. The absence of WHOIS data reduces transparency and trustworthiness. Overall, the security posture is moderate but could benefit from improvements in headers, policies, and vulnerability disclosures. The overall risk is moderate with no critical security issues detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and reduce risk. The website is professionally presented with clear contact information and active social media presence, supporting business credibility.

S

Středočeská centrála cestovního ruchu, p. o.

strednicechy.cz

65

The website www.strednicechy.cz serves as the official regional tourism portal for Central Bohemia, Czech Republic. It provides comprehensive information about nature, cultural heritage, events, and travel experiences in the region. The site targets tourists and visitors interested in exploring Central Bohemia's attractions and offers services including event calendars, travel tips, and a Convention Bureau for business events. The site is well-branded and consistent with official regional tourism entities, enhancing its credibility. Technically, the website is built on WordPress with modern plugins and libraries such as WPML for multilingual support, Google Analytics, Hotjar, and Microsoft Clarity for analytics and user behavior tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some lazy loading images show errors that should be addressed. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, but additional security headers could be implemented to strengthen defenses. Privacy compliance is well-handled with a cookie consent mechanism and a clear cookie policy page, indicating GDPR awareness. Contact information is clearly provided, including email, phone, and physical address, supporting business credibility. However, WHOIS data is missing, which reduces trust from a domain registration perspective and warrants further verification. Overall, the website is a professional, secure, and user-friendly platform for regional tourism promotion, with minor technical and security improvements recommended to enhance trust and performance.

K

Kipaş Textiles

kipastextiles.com

62

Kipaş Textiles is a large-scale textile manufacturing company based in Turkey, operating as a subsidiary of Kipaş Holding. The company boasts the largest fully integrated textile production facility in Europe, offering a wide range of products including yarns, fashion textiles, deco, technical textiles, and fiber production. The website reflects a professional corporate presence with clear segmentation of business areas and a focus on B2B clients in the textile industry. Technically, the website is built on WordPress using the Enfold theme, with standard modern web technologies and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with presence of cookie and KVKK policies but no active consent mechanism. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

Vibes Vision is a small Czech-based creative agency specializing in personal brand building, creative audio-video content production, and custom web development services. The company targets individuals and businesses seeking to establish authentic and visually compelling brands. Their market position is niche, focusing on bespoke solutions and consulting services. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, GSAP, and other popular libraries, indicating a mature digital infrastructure. The site is mobile optimized and implements GDPR and cookie consent mechanisms, reflecting good privacy compliance. Security posture is strong with HTTPS enforced and a Content Security Policy header present, though additional security headers and incident response information could enhance their security maturity. Overall, the website is professional and trustworthy, but the lack of WHOIS data raises questions about domain registration legitimacy. Strategic recommendations include improving security headers, adding explicit contact information, and implementing a vulnerability disclosure policy.

C

COMPUTER HELP, spol. s r.o.

computerhelp.cz

55

COMPUTER HELP, spol. s r.o. is a Czech Republic based IT company founded in 1993, providing comprehensive IT services including software development, IT training, software and hardware sales, and technical support. The company holds multiple certifications and partnerships with major vendors such as Microsoft, ESET, Adobe, and HPE, positioning itself as a trusted mid-sized player in the Czech IT market. Their website is professionally designed, mobile optimized, and offers clear navigation and rich content relevant to their business. Technically, the site runs on WordPress with modern frameworks and integrates Google Tag Manager, reCAPTCHA, and GDPR-compliant cookie management. Security posture is good with HTTPS and anti-bot measures, though it lacks some security headers and explicit incident response information. WHOIS data is unavailable, which slightly impacts trust but the visible business information and certifications support legitimacy. Overall, the website and business demonstrate a mature digital presence with room for security and transparency improvements.

H

Hlavní město Praha

praha.eu

60

The website praha.eu serves as the official portal for the City of Prague, providing comprehensive information and services related to city administration, transportation, culture, environment, and public services. It targets residents, visitors, and businesses, positioning itself as a key government resource. The site leverages modern web technologies including Liferay CMS and React, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR and cookie consent mechanisms in place. Overall, the site demonstrates a mature digital infrastructure suitable for a large government entity.

K

krajská správa a údržba silnic středočeského kraje

ksus.cz

45

The website ksus.cz represents the Krajská správa a údržba silnic Středočeského kraje, a governmental entity responsible for road safety and maintenance in the Central Bohemia region of the Czech Republic. Established in 2011, it manages over 8,600 kilometers of secondary and tertiary roads, serving as a critical infrastructure authority. The site targets local residents, road users, and stakeholders requiring information about road conditions, reporting issues, and organizational transparency. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by plugins such as Rank Math SEO and Complianz GDPR for privacy compliance. The site demonstrates moderate performance and good mobile optimization, with structured data enhancing search engine visibility. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found in the analyzed content. While privacy and cookie policies are comprehensive and GDPR compliant, the site lacks explicit terms of service, security policies, and incident response contact information. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security posture. The domain registration data aligns well with the entity's public nature and founding date, supporting legitimacy. Overall, ksus.cz is a professionally maintained governmental website with good content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and security culture.

phpBB.de is a German-language community and support platform dedicated to the phpBB open-source forum software. It provides users with downloads, documentation, support forums, and community engagement tools. The site is hosted by Linevast.de and uses the phpBB software with custom styling and standard web technologies such as jQuery and Font Awesome. The platform targets phpBB users and developers primarily in Germany and offers a comprehensive resource for forum setup and troubleshooting. Technically, the website employs a standard phpBB stack with modern JavaScript libraries and is moderately optimized for performance and mobile use. However, there is room for improvement in security practices, including the implementation of HTTP security headers and enhanced privacy controls. The site uses session IDs in URLs and lacks explicit cookie consent mechanisms, which could be improved for GDPR compliance. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of security headers and vulnerability disclosure mechanisms indicates a moderate security posture. The WHOIS data is partially consistent with the hosting and domain usage, supporting legitimacy but lacking detailed registrant information. Overall, phpBB.de is a trustworthy and well-maintained community resource with good business credibility and content quality. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance its security posture and user trust.

phpBB Limited operates the phpBB website, providing free and open source forum software widely recognized as a leading solution in the online community space. The website offers downloads, extensions, styles, and extensive community support, positioning itself as a mature and trusted platform for forum administrators and developers. The business model centers on open source distribution supported by community engagement and sponsorships. Technically, the site uses modern web technologies including jQuery, Google Analytics, and the Symfony framework, hosted by OSUOSL, ensuring reliable infrastructure and moderate performance with good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable, which slightly reduces trust but does not undermine the legitimacy given the active community and sponsorships. Overall, the site is professional, trustworthy, and well-positioned in its niche.

M

Museum Manufactory

museum-manufactory.com

51

Museum Manufactory is a French company specializing in the design and realization of innovative exhibition spaces and multimedia interactive mediation devices. With over 25 years of experience, it serves both public and private clients internationally, offering turnkey project services including consulting, project management, design, and innovation. The website is professionally designed, bilingual (French and English), and optimized for SEO and accessibility. Technically, it is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, hosted likely by Amenworld. Security posture is good with HTTPS and cookie consent mechanisms, though DNSSEC is not enabled and no explicit security.txt or incident response policies are found. The domain registration is privacy protected but consistent with the business location and claims. Overall, the website presents a trustworthy and professional digital presence.

O

Omnicado s.r.o.

omnicado.com

70

Omnicado s.r.o. operates a sophisticated e-commerce integration platform designed to streamline omnichannel selling and marketplace management for businesses primarily in Central and Eastern Europe. The company targets a broad audience including e-shops, distributors, manufacturers, and agencies, offering services such as product data synchronization, order management, and logistics support through modules like Omnicado Expedition. Their market position is supported by over 250 connected clients and extensive integration with popular marketplaces and e-commerce platforms. Technically, the website is built on Webflow CMS and leverages modern technologies including Google Tag Manager, Meta Pixel, Hotjar, and Cloudflare Turnstile captcha for security and analytics. The site demonstrates excellent performance, mobile optimization, and SEO practices, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and bot protection mechanisms in place, though explicit security headers could be more visible. While the website content and business presence are professional and trustworthy, the absence of WHOIS registration data for the domain www.omnicado.com raises concerns about domain legitimacy and ownership transparency. This inconsistency warrants further verification to ensure full trustworthiness. Overall, the site presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing formal security and incident response policies, and resolving domain registration transparency issues to bolster trust and compliance.

The Havanna-Initiative website serves as a non-profit advocacy platform focused on ending the blockade against Cuba. It provides news, calls to action, press information, and contact options primarily through a contact form. The organization appears to be small and Germany-based, founded in 2020, with a clear mission targeting activists and supporters of Cuba. The website uses WordPress CMS with common web technologies such as jQuery and Font Awesome, hosted by Cronon GmbH. The technical infrastructure is moderate in performance and basic in mobile optimization and accessibility. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers, and no explicit security or incident response policies are published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is functional but basic in design and content quality, with moderate trustworthiness and no detected adult or explicit content.

teleSUR is a Latin American media organization providing news, multimedia content, and live streaming services primarily in Spanish. The website demonstrates a mature digital presence with a WordPress CMS, integration of multiple advertising and analytics platforms, and structured data for SEO. The site is well-designed with good navigation and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and explicit privacy policies are lacking. WHOIS data is unavailable, which raises some legitimacy concerns but the accessible content and professional presentation mitigate immediate risks. Overall, the site serves a broad Spanish-speaking audience interested in regional and global news.

F

Freundschaftsgesellschaft BRD-Kuba e.V.

fgbrdkuba.de

64

Freundschaftsgesellschaft BRD-Kuba e.V. is a well-established non-profit solidarity organization founded in 1974, focusing on fostering relations and support for Cuba within Germany. The website serves as an informational platform targeting individuals and groups interested in solidarity activities. Technically, the site is built on WordPress using the Divi theme and enhanced with the Rank Math SEO plugin, hosted likely by 1&1 IONOS. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration, though it lacks some security headers and formal privacy and cookie policies. Security posture is moderate with room for improvement in transparency and incident response readiness. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

AlwaysInDemand.com is a specialized educational and career awareness platform focused on promoting HVAC industry careers and providing scholarship opportunities through the HVAC HERO Scholarship program. The website is operated by the EGIA Foundation, a non-profit entity, and targets students and individuals interested in entering the HVAC trade. The platform offers resources, a trade school directory, and scholarship application information, positioning itself as a niche resource in the energy and education sectors. Technically, the website is built on WordPress and leverages common web technologies such as jQuery, Google Analytics, and Facebook Pixel for tracking and analytics. Hosting appears to be on Amazon AWS infrastructure, indicated by the DNS servers. The site is mobile optimized with good SEO practices and structured data implementation, although accessibility features are basic. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections such as clientDeleteProhibited status. However, it lacks DNSSEC and security headers like CSP or HSTS, which are recommended for enhanced security. No privacy or cookie policies are explicitly presented, and no consent mechanisms are detected, which may pose compliance risks. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the website is professionally designed and trustworthy with moderate security posture and some compliance gaps. Strategic improvements in privacy policy publication, cookie consent, and security header implementation would enhance the site's security and compliance standing.

A

Autodesk

autodesk.co.uk

73

Autodesk is a globally recognized leader in 3D design, engineering, and entertainment software, serving professionals across architecture, engineering, construction, manufacturing, and media industries. The company operates a sophisticated digital presence with a modern technology stack including Adobe Experience Manager CMS, advanced analytics, and performance monitoring tools. The website demonstrates excellent design quality, mobile optimization, and SEO practices, reflecting Autodesk's enterprise-grade digital maturity. Security posture is strong with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not prominently published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Autodesk's website reflects a high level of professionalism, trustworthiness, and business credibility consistent with its market position.

The EGIA Foundation is a U.S.-based non-profit organization established in 2017, dedicated to strengthening the HVAC industry workforce by providing scholarships, training, research, and recruitment resources. The foundation targets young people pursuing HVAC careers, contractors, educators, corporations, and nonprofits, positioning itself as a key player in HVAC workforce development. The website reflects a professional and consistent brand with clear messaging and a focus on community and industry collaboration. Technically, the site is built on WordPress with WooCommerce and uses modern analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the foundation.

HVAC Distributor University is a specialized educational platform launched in late 2024, focused on providing training and development resources for HVAC distributors and their sales teams. The platform offers a variety of services including online courses, live training sessions, resource libraries, and membership packages. It is affiliated with EGIA, a recognized industry association, which enhances its credibility and market positioning. The website is professionally designed with clear navigation and relevant content tailored to its niche audience. Technically, the site is built on WordPress, hosted by Nexcess, and uses modern web technologies such as jQuery and FontAwesome. While performance and mobile optimization are good, there is room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced, but the absence of DNSSEC and security headers slightly reduces the overall security score. Privacy compliance is partial; a comprehensive privacy policy is linked but no cookie consent mechanism is present. Contact information is clearly provided, including phone, email, and physical address, supporting business credibility. Overall, the website presents a trustworthy and professional front for its business model, with minor technical and compliance enhancements recommended.

V

VisualCraft GmbH

visualcraft.ch

55

VisualCraft GmbH is a small, professional design and multimedia studio based in Bern, Switzerland, specializing in UX/UI design, branding, graphic design, photography, videoproduction, and motion design. The company targets businesses and organizations seeking high-quality digital experiences and brand presentation. Their website showcases a well-structured portfolio and clear service offerings, positioning them as a niche creative agency in the Swiss market. Technically, the website is built on WordPress using Elementor and integrates modern web technologies such as Lottie animations and Google Analytics, reflecting a mature digital infrastructure. Security-wise, the site employs HTTPS with strong SSL configuration and security headers, although it lacks a dedicated security policy or incident response information. Privacy compliance is well addressed with GDPR-compliant privacy and cookie policies, including a consent mechanism. Overall, the website demonstrates high professionalism, good technical implementation, and solid business credibility, with minor areas for improvement in security transparency and accessibility.

S

SWISS ELEMENTIC

swisselementic.com

56

SWISS ELEMENTIC operates an innovative Drive-in Boatwash service in Switzerland, offering boat hull cleaning up to 16 meters in length directly in the water. The company positions itself as a pioneer in the Swiss market with a focus on ecological and efficient boat maintenance, reducing the need for harmful antifouling paints and improving fuel efficiency. Their business model includes direct service offerings with booking and subscription options, targeting boat owners seeking convenient and environmentally friendly cleaning solutions. The website is professionally designed using WordPress with modern page builders and includes multilingual support, social media integration, and a cookie consent mechanism, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. No privacy policy or terms of service documents were found, which is a compliance gap. Overall, the domain registration is consistent with the business timeline and shows no suspicious patterns, supporting legitimacy.

D

Duotones LLC

duotones.ch

49

Duotones LLC is a specialized UX and interaction design agency based in Bern, Switzerland, founded in 2016. The company focuses on delivering user experience design, interaction, and interface design services for digital media and products such as web and app design. Their client portfolio includes reputable Swiss organizations like Swisscom, PostFinance, and Universität Zürich, positioning them as a trusted player in the Swiss UX market. The website reflects a professional and consistent brand image with comprehensive service offerings including innovation workshops, digital transformation consulting, and prototyping. Technically, the website is built on WordPress 5.8.12 with modern JavaScript libraries such as Three.js and GSAP, and uses Yoast SEO for optimization. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR. Google Analytics and Google Tag Manager are used for analytics with IP anonymization enabled. Performance is moderate with good SEO and basic accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers are not explicitly detected, and no formal security or incident response policies are published. Privacy compliance is strong with clear privacy and cookie policies. Contact is primarily via a contact form, with no direct email or phone numbers publicly listed. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance, suitable for its business domain. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the security and user experience posture.

D

DESIGN FESTIVAL BERN

designfestival.ch

41

Design Festival Bern is a well-established cultural event organizer focused on design exhibitions, conferences, workshops, and open studios in Bern, Switzerland. Celebrating its 10-year anniversary in 2025, it targets creatives, design professionals, and cultural enthusiasts. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, it is built on WordPress with Elementor and integrates modern tools such as Google Analytics, reCAPTCHA, and MailerLite for marketing and security. The site is secured with HTTPS and includes GDPR-compliant privacy and cookie policies, although explicit security policies and incident response information are absent. Overall, the website demonstrates a mature digital presence with moderate to good performance and security posture.

A

Appinium | Salesforce Video Solutions

appinium.com

69

Appinium is a specialized technology company offering a native Salesforce enterprise content enablement platform focused on video and multimedia tracking across marketing, sales, service, and learning domains. The company positions itself as a niche leader integrating deeply with Salesforce to provide actionable insights and engagement tracking. The website reflects a professional B2B SaaS business model targeting enterprises leveraging Salesforce for content distribution and enablement. Technically, the site is built on WordPress with modern JavaScript libraries and integrates analytics and user engagement tools such as Google Analytics, Hotjar, and Qualified chat. Security posture is solid with HTTPS enforced and reCAPTCHA protecting forms, though formal security policies and headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR considerations. Overall, the domain registration and website content are consistent and trustworthy, supporting a high legitimacy score.

B

Bestsport, a.s.

o2arena.cz

72

O2 arena, operated by Bestsport, a.s., is a premier multifunctional venue and convention center located in Prague, Czech Republic. It offers a diverse program of cultural and sporting events and provides rental spaces for various types of events. The venue is well-positioned in the hospitality and entertainment sectors, supported by a strong brand presence and partnerships with reputable companies including its parent company PPF Group. The website reflects a mature digital infrastructure built on WordPress, leveraging modern JavaScript libraries and analytics tools to deliver a fast, accessible, and user-friendly experience. Privacy compliance is robust with a detailed cookie consent mechanism and a comprehensive privacy policy. Security posture is strong with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Overall, the domain appears legitimate despite the absence of WHOIS data, likely due to privacy protection, and the site maintains high trust and professionalism.

C

cleverdigital.

cleverdigital.de

49

cleverdigital is a small, full-service online agency based in Essen, Germany, founded in 2021. The company offers a range of digital marketing services including web design, SEO, SEA, and social media marketing, targeting businesses seeking to improve their online presence and increase revenue. The website is professionally designed using WordPress with the Avada theme and incorporates modern technologies such as Yoast SEO and WPRocket for optimization. The technical infrastructure is solid with good mobile optimization and SEO practices. Security posture is good with HTTPS enforced and standard security headers present, though no explicit security or incident response policies are published. Overall, the website and domain registration are consistent and legitimate, reflecting a trustworthy small digital agency.

M

Musterhaus.net GmbH

musterhaus.net

10

Musterhaus.net GmbH operates a comprehensive and well-established online house building portal primarily targeting German-speaking customers in Germany, Austria, and Switzerland. The website offers extensive resources including over 2,600 houses, 350 building companies, and 46 model house parks, along with free catalog requests and detailed guides. It holds a strong market position as Germany's largest independent house building portal, supported by multiple awards and positive customer ratings. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Schema Premium, ensuring good SEO and structured data presence. The site uses jQuery, Bootstrap, and Flickity for UI components, delivering a responsive and user-friendly experience. Performance is moderate with good mobile optimization and accessibility. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The WHOIS data for the domain is missing or not publicly available, which raises concerns about domain registration legitimacy despite the professional appearance and business presence. Overall, Musterhaus.net presents a trustworthy and professional service for house building customers but should address privacy compliance and domain registration transparency to enhance trust and security further.

H

Hundeurlaub: Dein Urlaub mit Hund in Ferienwohnung oder Ferienhaus - Hundeurlaub.de

hundeurlaub.de

61

Hundeurlaub.de is a specialized online portal focused on providing dog-friendly holiday accommodations, primarily in Germany and other European countries. The platform offers over 6,500 listings of holiday apartments and houses where dogs are welcome, targeting dog owners and families planning vacations with their pets. The website includes travel tips and regional information to assist users in planning their trips. Technically, the site uses Joomla CMS with modern frameworks like Bootstrap and jQuery, hosted on Amazon AWS infrastructure. It incorporates a cookie consent mechanism and Google Tag Manager for analytics and marketing purposes. Security posture is adequate with HTTPS enforced, though some security headers could be improved. No privacy policy or terms of service were detected in the provided content, which is a compliance gap. Overall, the website is professional, user-friendly, and trustworthy, with a clear niche market position.

F

FUNKE Digital Investments

funkedigitalinvestments.de

39

FUNKE Digital Investments operates as the investment arm of the FUNKE Digital GmbH, a family-run media group based in Germany. The company focuses on Buy & Build investment strategies targeting profitable digital companies primarily in the D/A/CH region, specializing in sectors such as Digital Publishing, Classifieds & Marketplaces, and Digital Marketing. Their business model emphasizes long-term partnerships, leveraging their expertise, network, and media reach to support sustainable growth of portfolio companies. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Revolution Slider, hosted on Hetzner servers. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and published security policies or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website presents a professional and trustworthy image aligned with its business focus. The main risks relate to privacy compliance and security best practices, which should be addressed to enhance trust and regulatory adherence.

N

Next Generation Solution, s.r.o.

ngs.cz

42

Next Generation Solution, s.r.o. is a Czech Republic based full-service digital agency specializing in digital marketing, creative concepts, online advertising, websites, mobile applications, social media, and content creation. The company targets businesses seeking sophisticated digital solutions and has a portfolio of notable clients such as Pepsi, Škoda, and Mastercard, indicating a solid market position within the technology and marketing sector. The website is professionally designed with multimedia content and clear navigation, reflecting a mature digital presence. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, FontAwesome, and Google Analytics, demonstrating a good level of digital maturity. The site is mobile optimized and uses lazy loading for performance. However, there is no detected CMS or hosting provider information. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the website uses HTTPS and includes Google Tag Manager and Analytics scripts, but lacks explicit security headers and privacy/cookie policies, which are compliance gaps. No forms are present on the main page, reducing attack surface. WHOIS data is not publicly available, likely due to privacy protection, which is common and justified for this business type. Overall, the security posture is moderate but could be enhanced with better policy disclosures and security headers. The overall risk assessment is low to moderate with no critical vulnerabilities detected. Strategic recommendations include implementing privacy and cookie policies with consent mechanisms, adding security headers, and enhancing accessibility. These improvements will strengthen compliance, user trust, and security posture.

A

ALTOBELLI | Werbung mit Amore!

altobelli.agency

55

ALTOBELLI is a creative agency based in Germany specializing in emotional brand communication and marketing services. Founded in 2020, the agency positions itself as a partner for businesses seeking impactful and heartfelt advertising solutions. Their key services include campaigning, brand design, content production, social media marketing, and digital marketing. The website reflects a professional and modern digital presence, leveraging WordPress with advanced plugins like Slider Revolution and Elementor for rich multimedia content and user experience. The agency showcases a portfolio of notable clients and integrates social media channels to enhance engagement. Privacy and cookie compliance are well implemented, with clear consent mechanisms in place. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Overall, ALTOBELLI presents a trustworthy and credible business profile with a strong focus on creative excellence and client collaboration.

G

Global-Tickets by TD Entertainment C.V.

global-tickets.com

67

Global-Tickets by TD Entertainment C.V. is a well-established e-commerce platform specializing in the sale of motorsport event tickets and related travel packages, focusing on Formula 1, MotoGP, and DTM events worldwide. With over 25 years of experience and a large customer base exceeding 850,000 satisfied clients, the company holds a strong market position supported by official partnerships with numerous racing circuits and high customer trust ratings on platforms like Trustpilot and Google. The website offers a comprehensive and user-friendly shopping experience, including VIP and group event options, with a focus on secure payment and insured ticket delivery. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and integrates multiple tracking and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Usercentrics for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a professional and accessible user experience. Security practices include HTTPS encryption, secure payment processing, and ticket insurance, although explicit security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Business credibility is reinforced by transparent company information, multiple trust indicators, and consistent WHOIS data matching the business claims. Overall, Global-Tickets presents a trustworthy, professional, and secure platform for motorsport ticket sales, with recommendations to enhance security headers and publish dedicated security policies to further strengthen their security posture.

H

HamburgerTRAUER

hamburgertrauer.de

60

HamburgerTRAUER operates a regional obituary and grief support website focused on the Hamburg area, providing users access to local obituary ads, memorial pages, grief advice, and related services. The platform is closely associated with the reputable Hamburger Abendblatt and FUNKE Medien Hamburg, enhancing its market credibility and regional relevance. The website offers a comprehensive suite of services including obituary search, ad placement, grief counseling, and a directory of funeral-related service providers, targeting individuals dealing with bereavement in the Hamburg region. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, Swiper.js for carousels, and integrates Google Tag Manager and Snowplow Analytics for tracking and data collection. Consent management is implemented via Consentmanager.net, ensuring GDPR compliance. The site is hosted on secure infrastructure with HTTPS enforced and uses multiple authoritative name servers, indicating a stable hosting environment. From a security perspective, the site demonstrates good practices such as HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit incident response contacts and a security.txt file, which could enhance its security posture. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, HamburgerTRAUER presents a trustworthy, professional, and well-maintained online presence with a clear business focus and solid technical and security foundations. It is suitable for general audiences seeking obituary and grief-related services without any adult or questionable content.

O

Opinary

opinary.com

69

Opinary is a technology company founded in 2014 that specializes in interactive polling tools designed to engage audiences and provide data-driven insights for global brands and premium publishers. Their platform enables brands to reach over 125 million users through interactive voting tools embedded within a network of respected publishers. The company operates primarily in the technology and media sectors, targeting B2B clients such as advertisers and publishers. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support.