Security Directory

P

Prometeus

iperweb.com

44

IperWeb is a small, established hosting provider founded in 1997, offering a variety of hosting solutions including cloud infrastructure, virtual private servers, and business web hosting. The company emphasizes customer satisfaction, performance, and scalability. The website is professionally designed with clear navigation and relevant content targeting businesses and individuals seeking reliable hosting services. Technically, the site uses standard web technologies including jQuery and Flickity for UI components, and employs Google Analytics and Piwik for visitor tracking. However, there is no visible cookie consent mechanism, and privacy policies are hosted on a related domain rather than the main site. Security posture is moderate; the domain is protected with clientTransferProhibited status but lacks DNSSEC and visible security headers. WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, supporting legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

The domain webb.se is registered since 2001 and is currently protected behind a Cloudflare security challenge page (Turnstile captcha), which blocks direct access to website content. Due to this, no business information, contact details, or policies are publicly accessible. The website appears to rely on Cloudflare for security and bot mitigation. The WHOIS data is consistent and indicates a legitimate registration with no privacy protection, suggesting transparency in ownership. However, the lack of accessible content and policies limits the ability to assess the business model, services, or compliance posture. The technical infrastructure is modern in terms of security tooling but lacks visible SEO and accessibility features. Overall, the site is currently inaccessible for full analysis and scores low on content quality and privacy compliance.

L

Lichterwelt Magdeburg – Eröffnung am 20. November 2025

lichterwelt-magdeburg.de

43

The website www.lichterwelt-magdeburg.de serves as the official online presence for the Lichterwelt Magdeburg, a large-scale public Christmas and winter lighting event in Magdeburg, Germany. The event features over a million LEDs illuminating the city with artistic light installations, free to the public from November 20, 2025, to February 2, 2026. The site targets local residents and tourists interested in cultural and festive events, providing event details, highlights, maps, and social media links. The business model focuses on event promotion and enhancing regional tourism appeal. Technically, the website is built on TYPO3 CMS, employing modern web standards including responsive design, optimized images, and JavaScript-based interactive elements such as countdown timers and image galleries. It integrates Matomo Analytics and Facebook Pixel for visitor tracking, alongside a GDPR-compliant cookie consent mechanism powered by Klaro. The site demonstrates good mobile optimization and SEO practices but lacks explicit security headers and detailed security or incident response policies. From a security perspective, the site uses HTTPS and implements cookie consent, indicating awareness of privacy regulations. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. No forms collecting personal data were detected, reducing immediate data protection risks. The WHOIS data shows a legitimate domain setup with UI-DNS name servers and no privacy protection masking, consistent with the event's public nature. Overall, the website is professionally designed and trustworthy, with moderate technical sophistication and good privacy compliance. The absence of contact emails or phone numbers is a minor limitation for direct communication. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and compliance.

C

Collectivité européenne d'Alsace

bas-rhin.fr

68

The Collectivité européenne d'Alsace (CeA) is a regional government entity serving the Alsace region in France. The website provides comprehensive information about public services, social aid, cultural events, transport, environment, and citizen engagement initiatives. It targets residents, professionals, and associations within the region, positioning itself as the authoritative source for regional governance and services. The business model is governmental, focusing on public administration and community support. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of FontAwesome icons and the OreJime library for cookie consent management. Matomo analytics is used for user tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for government domains, and no suspicious patterns were found. Overall, the security posture is solid but could benefit from additional header configurations and a published security policy. The overall risk assessment is low, with a trustworthy and professional web presence that aligns with the organization's public service mission. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

WISS is a Czech-based company currently preparing a new website, as indicated by the 'coming soon' placeholder page. The site provides direct contact information for key company personnel including management, sales, and service technicians, suggesting a service-oriented business model likely focused on technical or industrial sectors. However, the lack of detailed business descriptions or marketing content limits insight into their market position or scale. Technically, the website is minimalistic, built with basic HTML and CSS, and optimized for mobile devices. There is no evidence of advanced frameworks, CMS, or analytics tools. The absence of HTTPS and security headers indicates a low security posture, and no privacy or cookie policies are present, which raises compliance concerns. The external background image is hosted on a related Polish domain, indicating some cross-border digital asset usage. Security-wise, the site lacks fundamental protections such as SSL/TLS encryption and security headers, and no incident response or vulnerability disclosure information is provided. The WHOIS data is unavailable, which reduces domain trustworthiness and complicates legitimacy verification. Contact details are transparent, which partially mitigates trust concerns. Overall, the website is in an early stage of deployment with significant gaps in security, compliance, and content. Strategic improvements in HTTPS implementation, policy publication, and domain registration transparency are recommended to enhance trust and compliance.

P

PROIZS

proizs.cz

48

PROIZS.cz operates as a specialized e-commerce platform providing professional equipment primarily for emergency services such as firefighters and rescuers. The website offers a comprehensive catalog of products including firefighting gear, rescue tools, protective clothing, and accessories, targeting emergency responders and related professionals in the Czech Republic. The business model focuses on retail sales supported by workshops, training, and customer engagement through newsletters and loyalty programs. The company maintains partnerships with recognized brands enhancing its market position in the niche emergency equipment sector. Technically, the website is built on a custom CMS with a modern tech stack including jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA for security. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and anti-bot measures in place, though it lacks some HTTP security headers which could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security-wise, the site shows good practices such as encrypted connections and consent mechanisms but could enhance its defenses by implementing additional security headers and publishing incident response information. No vulnerabilities or malware indicators were found. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional content and clear contact information mitigate concerns. Overall, PROIZS.cz presents a trustworthy and professional online presence with a clear focus on emergency service equipment retail. Strategic improvements in security headers and WHOIS transparency would further strengthen its credibility and security posture.

The website deva-fm.cz currently displays a 403 Forbidden error page, indicating that access to the content is restricted or blocked. Due to this, no meaningful business or service information is available from the site itself. The domain is registered since 1999 with a reputable Czech registrar and uses name servers associated with websupport.cz, suggesting a legitimate hosting setup. However, the lack of accessible content and absence of privacy, cookie, or contact information severely limits the ability to assess the business or security posture comprehensively. Technically, the site uses basic HTML and CSS with Google Fonts, but no advanced frameworks or analytics are detected. Security headers and policies are not present in the HTML content, and no forms or data collection mechanisms are visible. Overall, the site appears to be either under maintenance, restricted by access controls, or misconfigured, resulting in a poor user experience and low trustworthiness.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual public website. This page is generated locally by the Chrome browser to indicate an error or offline status and includes the offline dinosaur game code. There is no business-related content, metadata, or contact information available. The page lacks privacy, cookie, and terms of service policies, and no external links or social media references are present. The technical infrastructure is limited to client-side JavaScript for the game, with no server-side or hosting information. Security posture is minimal due to the nature of the page being a local error display, with no HTTPS or security headers applicable. Overall, this is not a public-facing website and cannot be assessed for business or security credibility.

U

UTILO KG

utilo.eu

47

UTILO KG, led by DI Christian Osterrieder-Schlick, is a specialized web development and software consultancy firm based in Salzburg, Austria. With over 20 years of experience, the company offers bespoke web applications, custom software solutions, and certified expert witness services for IT projects. The website showcases a professional portfolio with detailed client projects, emphasizing long-term collaborations with notable clients such as SPAR, Brantner Gruppe, and Salzburg AG. The business model focuses on delivering tailored digital solutions and expert legal consulting in IT, targeting businesses and organizations requiring high-quality, technically sound web and software services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and frameworks like Bootstrap and Grails. It integrates CMS Joomla for content management and uses Docker microservices for some client projects. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with minimal user tracking via UMAMI Analytics, reflecting a moderate digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms, representing an area for improvement. The business credibility is high, supported by clear contact information, professional content, and trust indicators such as certifications and client references. Overall, UTILO KG presents a trustworthy and professional digital presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and establish a vulnerability disclosure or incident response channel.

Winamax operates a professional online sports betting platform targeting the German market, offering a wide range of sports and leagues for betting, including live betting and VIP programs. The website is well-branded, consistent, and provides a good user experience with modern technical infrastructure including React and jQuery, hosted on AWS. Security posture is strong with HTTPS and implied security headers, though explicit privacy and terms of service documents were not found in the provided content. The platform uses cookie consent mechanisms and tracking tools such as Google Analytics and Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate and trustworthy, catering to adult users interested in sports betting.

T

Transtech

transtech.pt

33

Transtech is a Portuguese technology-focused company specializing in qualification, digitalization, innovation, and technological development projects. The website presents a professional and consistent brand image targeting businesses interested in technological innovation and digital transformation. The technical infrastructure uses modern front-end technologies such as Google Fonts, FontAwesome, and popular JavaScript libraries for UI components, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information, which are recommended for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

W

Württembergische Landesbibliothek

wlb-stuttgart.blog

57

The Württembergische Landesbibliothek operates a blog website focused on sharing knowledge, cultural events, and academic lectures related to the library and its services. The site targets a general audience interested in cultural and educational content, primarily in the German language. The institution holds a regional government position in Stuttgart, Germany, providing public access to information and cultural resources. The website content dates back to 2020, indicating an established digital presence. Technically, the website is built on WordPress CMS, utilizing the Yoast SEO plugin for search engine optimization and jQuery for client-side scripting. The site demonstrates good mobile optimization and a moderate performance profile. SEO practices are well implemented with proper meta tags and structured data using JSON-LD schema.org vocabulary. However, accessibility features are basic, and no advanced performance or hosting details are evident. From a security perspective, the site uses HTTPS as implied by canonical URLs, but no explicit security headers were detected in the provided data. There is no visible cookie consent mechanism, which is a GDPR compliance gap. No forms or user data collection points were found on the homepage, reducing attack surface. The absence of WHOIS data reduces domain trustworthiness, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website presents a low-risk profile with good content quality and business credibility. Strategic improvements include implementing security headers, adding cookie consent for privacy compliance, and publishing security policies to enhance trust and compliance posture.

A

Aflac

aflac.com

73

Aflac is a leading supplemental insurance provider in the United States, offering a broad portfolio of insurance products including accident, cancer, critical illness, dental, life, Medicare supplement, pet, hospital, and disability insurance. The company targets individuals, families, business owners, brokers, and agents, positioning itself as a market leader in supplemental insurance coverage. The website reflects a mature, enterprise-level business with consistent branding, comprehensive product information, and clear segmentation for different customer types. Technically, the website employs modern web technologies such as jQuery, RequireJS, and asynchronous script loading, alongside integrations with analytics (Dynatrace, Tealium) and chatbot services (Sutherland AI, Pega). The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses best practices like asynchronous script loading and cookie consent mechanisms. However, explicit security headers (CSP, HSTS) are not evident, and no public security or incident response policies are found. The WHOIS data is unavailable, which is unusual but the website's professional presentation and legal disclosures support its legitimacy. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations including GDPR. Recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust further.

The website sicher-melden.de serves as an informational landing page for a digital whistleblowing reporting platform operated by otris software AG. The platform enables anonymous reporting for companies via secure, cloud-based technology. The site targets corporate clients seeking compliant whistleblowing solutions and positions itself as a neutral authority in this niche. The business model is primarily B2B SaaS focused on compliance and risk management services. Technically, the site is simple and lightweight, built with standard HTML and CSS, and hosted behind Cloudflare DNS services which provide performance and security benefits. The site is mobile responsive and accessible at a basic level but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from Cloudflare's infrastructure but lacks explicit security headers and published security or incident response policies. No forms or direct data collection occur on this page, reducing attack surface. Contact information is clearly provided, but cookie consent mechanisms and privacy policy details are minimal. Overall, the security posture is moderate but could be improved with enhanced headers and transparency. The overall risk is low given the nature of the site as an informational platform without direct user data collection. Strategic recommendations include implementing security headers, publishing detailed privacy and security policies, and adding cookie consent mechanisms to improve compliance and trust.

T

Thomas-Krenn.AG

thomas-krenn.com

52

Thomas-Krenn.AG is a European-based technology company specializing in customized server and IT system solutions for professional applications. The company offers a wide range of products including rack servers, tower systems, workstations, industrial systems, and storage solutions, targeting businesses and IT professionals. Their business model focuses on B2B e-commerce combined with personalized consulting and support services, positioning them as a trusted provider in the server hardware market. The website reflects a mature digital presence with comprehensive product information, clear navigation, and professional design. Technically, the website employs modern web technologies such as Handlebars.js for templating, SwiperJS for sliders, and Salesforce Live Agent for live chat support. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. Security measures include HTTPS enforcement, CSRF tokens in forms, and inferred security headers, contributing to a strong security posture. However, explicit security policies and incident response information are not published, representing an area for improvement. The WHOIS data is notably absent or inaccessible, which raises some concerns about domain registration transparency. Despite this, the website's professional content, detailed legal pages, and active customer support channels suggest legitimate business operations. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, Thomas-Krenn.AG demonstrates a solid business and technical foundation with good security practices. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and improving domain registration transparency to enhance trust and compliance.

P

Portugal Empreende 4.0

ptempreende40.pt

50

Portugal Empreende 4.0 is a Portuguese business ecosystem platform focused on Industry 4.0 entrepreneurship. The website serves as a hub for businesses and entrepreneurs interested in the digital transformation and industrial innovation within Portugal. The platform positions itself as a niche player supporting Industry 4.0 initiatives, targeting Portuguese companies and stakeholders in manufacturing and technology sectors. The website content is professionally presented with a consistent brand identity and good user experience, although it lacks explicit contact and policy information. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Google Fonts and icon libraries, delivering moderate performance and good mobile optimization. Security posture is limited due to missing security headers and absence of privacy or cookie policies, which impacts compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. WHOIS data confirms the domain is registered since 2019 with consistent registrant information matching the website's Portuguese business focus, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Catrapum

catrapum.com

48

Catrapum is a Portuguese e-commerce business specializing in the sale of used auto parts for major automotive brands such as Volkswagen, Audi, Toyota, and Mazda. The website offers a catalog of used parts, enabling vehicle owners and drivers to find reliable components for their vehicles. The business appears to be small-sized and focused on the transportation sector, with a market position as a specialized supplier of used auto parts. The website is professionally designed with good content quality and consistent branding, targeting Portuguese-speaking customers primarily, with an English language option available. Technically, the website uses standard web technologies including jQuery and implements HTTPS for secure communication. It employs Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. However, there is a lack of advanced security headers and no visible privacy or terms of service policies, which are areas for improvement. From a security perspective, the site enforces HTTPS but lacks important security headers and detailed privacy compliance documentation. No critical vulnerabilities were detected in the visible content, but the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The cookie consent mechanism is present, supporting GDPR compliance to some extent. Overall, while the business and website present a professional front with relevant services, the missing WHOIS data and limited privacy/security policies suggest a moderate risk profile. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

K

Mapa kriminality v Benešově – MěP Benešov

kriminalita-city.cz

53

The website www.kriminalita-city.cz serves as an official municipal crime mapping and public safety information portal for the city of Benešov, Czech Republic. It provides residents and visitors with an interactive map detailing various categories of offenses and municipal police activities. The site is built on WordPress and leverages modern JavaScript libraries such as Leaflet for mapping. While the site is functional and provides relevant local information, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is readily available. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the content and linked municipal domains suggest official use. Security posture is moderate with HTTPS enabled but missing security headers and policies. Overall, the site is a useful public service tool but requires improvements in compliance and security transparency.

P

PROGLAS

proglas.cz

55

PROGLAS is a non-profit, non-commercial Christian radio station based in the Czech Republic, targeting informed families and the Christian community. The website serves as a digital platform for broadcasting, audio archives, news, and cultural programming, supported primarily through listener donations and fundraising campaigns. The station emphasizes a family-friendly and faith-based approach without advertising interruptions. Technically, the website is built on the Vizus CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though accessibility features could be improved. Performance is moderate, with a clean and professional design. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces trust slightly but may be due to registry privacy policies. Overall, PROGLAS presents a trustworthy and professional online presence for a niche non-profit media entity. Strategic improvements in privacy policy visibility, security headers, and WHOIS transparency would enhance its security posture and compliance standing.

Dev.java is an official Oracle-backed platform dedicated to Java developers, offering a comprehensive suite of tutorials, news, videos, downloads, and community resources. The website serves as a central hub for Java programming education and engagement, targeting developers globally. The platform benefits from Oracle's strong market position and branding, reinforcing its credibility and trustworthiness in the technology sector. Technically, the site employs modern web technologies including Bootstrap, Algolia search, and privacy-conscious analytics, hosted on Oracle Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as DNSSEC and enhanced security headers could further strengthen defenses. Privacy compliance is well addressed through links to Oracle's comprehensive privacy and terms policies, though explicit cookie consent mechanisms are absent. Overall, the site presents a professional, trustworthy, and content-rich experience for its audience.

The website stech.cz is currently a parked domain with minimal content indicating that the domain is for sale. There is no active business presence or detailed company information on the site. The domain was registered in late 2019 and uses parking name servers, consistent with a domain resale or parking business model. The site lacks privacy policies, contact information, and any substantive content, which limits its utility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with multiple external ad and tracking scripts from third-party domains. There is no evidence of HTTPS or security headers, which poses security risks. Overall, the site is low in professionalism and business credibility, serving primarily as a placeholder for domain sale.

Komunitní centrum Voticka is a small non-profit community center based in the Czech Republic, focused on providing social services and community support within the Voticko microregion. The website presents a clear description of its mission, services, and ongoing EU-funded projects, targeting local residents and clients of care homes. The business model is centered on social service provision and community engagement, supported by public funding and grants. Technically, the website is built on a CMS platform (likely Contao), uses modern web fonts, and is hosted on a Czech hosting provider. The site is mobile responsive with good design and navigation, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Contact information is limited to a phone number, with no email or physical address provided. No forms or tracking scripts are present, indicating minimal data collection and user tracking. WHOIS data aligns well with the website's claims, showing a domain registered in 2021 with a Czech registrar and hosting provider, supporting legitimacy. Overall, the website is functional and trustworthy but could improve compliance and security practices.

P

POŽÁRY.cz

pozary.cz

50

POŽÁRY.cz is a specialized Czech media portal dedicated to firefighting news, emergency interventions, firefighting technology, education, and community engagement. It serves firefighters, emergency responders, and the general public interested in fire safety within the Czech Republic. The website offers news articles, podcasts, an e-shop, and discussion forums, supported by numerous industry partners and sponsors. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and Matomo analytics, with a responsive design optimized for mobile devices. Security practices include HTTPS usage and secure cookie settings, though the absence of explicit security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, which reduces domain registration transparency but does not detract from the professional presentation and trust signals on the site. Overall, POŽÁRY.cz is a credible and well-maintained media platform with moderate technical maturity and a solid business presence in its niche.

L

Linka bezpečí, z.s.

klublinkyvbezpeci.cz

50

Klub Linky v bezpečí is a Czech non-profit organization dedicated to supporting children and young people facing difficult life situations through a free, anonymous helpline service. Established since 1994, the organization has handled over 10 million calls and provides continuous 24/7 support. The website serves as a membership club platform to keep supporters informed about risks facing youth and offers detailed anonymized stories illustrating the impact of their work. The organization is well-positioned in the Czech non-profit sector with strong government and foundation partnerships.

U

Unibind-menu | Jídelní lístky s puncem jedinečnosti

unibind-menu.sk

48

The website www.unibind-menu.sk is a small business site hosted on the Wix platform, primarily serving a Slovak audience. The site uses Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. The technical infrastructure is modern and benefits from Wix's hosting and security features, including HTTPS and security headers. However, the site lacks comprehensive business content, contact information, and privacy-related policies, which limits its credibility and user trust. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but the absence of incident response contacts and vulnerability disclosure mechanisms is a gap. Overall, the site is functional but basic, with room for improvement in privacy compliance and business transparency.

W

W.D.A. Czech, s.r.o.

wda.cz

40

W.D.A. Czech, s.r.o. operates as a specialized web design atelier based in the Czech Republic, offering premium and express web design services with over 18 years of experience. The company targets small to medium businesses and private clients, providing custom graphic design, SEO optimized HTML coding, and mobile responsive websites. Their market position is strong with a portfolio including reputable corporate clients and a money-back guarantee, reflecting high trust and professionalism. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Fonts, ensuring good mobile optimization and user experience. However, performance is moderate and accessibility is basic. Security posture is average with secure form handling but lacks critical security headers and explicit HTTPS enforcement details. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration data supports the legitimacy and long-standing operation of the business. Strategic improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance trust and compliance.

The website wnba-nbc.de is a domain parking page offering the domain for sale with categorized links to various product and information categories. It does not represent an active business or service provider but rather serves as a placeholder to monetize traffic and solicit domain sale offers. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript with a simple captcha and bot detection mechanism to prevent automated scraping. The site lacks HTTPS enforcement and security headers, which weakens its security posture. Privacy compliance is minimal, with only a basic privacy policy page and no cookie consent mechanism. Business credibility is low due to the absence of contact information, company details, or trust indicators. Overall, the site is functional but limited in content and professionalism.

W

Dive into the Arena of Excellence and Athletic Glory!

worldbowling-ninepin.org

54

The website www.worldbowling-ninepin.org is a content-focused platform dedicated to sports, fitness, competitions, and outdoor activities. It offers a variety of articles covering topics such as Olympic athlete diets, bodybuilding and mental health, unusual extreme sports, and sports betting strategies. The target audience appears to be sports enthusiasts and individuals interested in fitness and wellness. The business model is primarily informational content publishing without evident commercial or transactional features. The site demonstrates moderate technical maturity, utilizing Bootstrap 5 for responsive design and standard HTML/CSS. Performance and mobile optimization are adequate, though accessibility and SEO optimizations are basic. Security posture is moderate; HTTPS is assumed but no security headers are detected, and no privacy or cookie policies are present, indicating compliance gaps. The absence of contact information and WHOIS transparency reduces business credibility and trust. Overall, the site is functional and content-rich but lacks critical compliance and security features.

S

Služby města Pardubic a.s.

smp-pce.cz

49

Služby města Pardubic a.s. is a well-established municipal services company operating in Pardubice, Czech Republic, with over 25 years of experience. The company provides a broad range of public services including waste management, public lighting, road maintenance, green care, funeral services, and energy management. Their market position is strong locally, supported by a clear and professional web presence and active social media engagement. The website is designed to serve local residents and public institutions with relevant, accessible information and service offerings. Technically, the site uses a modern CMS platform with standard web technologies and is mobile optimized, though some improvements in accessibility and security headers could be made. Security posture is adequate with HTTPS and privacy compliance, but lacks explicit security policies or vulnerability disclosure mechanisms. Overall, the site is trustworthy and professionally maintained, reflecting the company's credibility and public service mission.

X

xmental – Digitale Lösungen

xmental.de

46

xmental – Digitale Lösungen is a specialized TYPO3 agency based in Berlin, Germany, with a strong focus on creating barrier-free, accessible websites primarily for clients in the cultural, educational, and societal sectors. Established since 2001, the company positions itself as a reliable and experienced partner for TYPO3 web projects, emphasizing compliance with upcoming accessibility laws and standards. Their key services include consulting, design, TYPO3 development, digital accessibility, and ongoing support. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as HTML5, CSS3, Bootstrap, and jQuery. It is hosted on servers indicated by the agenturserver nameservers and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and demonstrates good SEO and accessibility practices, including a cookie consent mechanism and detailed privacy policy. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent for compliance. However, it lacks explicit security headers and a published security or incident response policy. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the business claims, showing a domain age that matches the company's stated history, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen security and trust.

L

Landkreis Lüneburg

landkreis-lueneburg.de

57

Landkreis Lüneburg operates as a regional government authority in Germany, providing a wide range of public services and information to its citizens. The website serves as a central hub for accessing administrative services, cultural information, environmental initiatives, and mobility options. It also offers online appointment booking, job application portals, and a GeoPortal for geographic information. The target audience primarily consists of residents and citizens of the Landkreis Lüneburg region. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries like Swiper.js and Odometer.js, and integrates Matomo analytics and SendinBlue marketing tools. The site is hosted via INWX, a reputable German registrar, and demonstrates good mobile optimization and accessibility features. The CMS is likely TYPO3, common for German public sector websites. From a security perspective, the site uses HTTPS with excellent SSL configuration and employs best practices such as asynchronous script loading and accessibility tools. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. Privacy and cookie policies are not clearly found, which may impact GDPR compliance. Overall, the website is professional, trustworthy, and well-structured, but could improve in privacy compliance and security transparency to enhance user trust and regulatory adherence.

F

Freie Universität Berlin

freie-universitaet-berlin.de

52

Freie Universität Berlin is a leading public university in Germany, recognized as an excellence university since 2007. It offers a broad range of academic programs across twelve faculties and three central institutes, serving students, researchers, and academic staff with a strong emphasis on international cooperation and research excellence. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support. Technically, the site is built on a Ruby on Rails framework with Infopark CMS, leveraging modern web technologies and ensuring good accessibility and SEO practices. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is evident with a comprehensive privacy policy, but cookie consent mechanisms are lacking. Overall, the site is professional, trustworthy, and well-aligned with the institution's academic mission.

The website www.campus-noster.com is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business or content information. The domain WHOIS data is unavailable, indicating the domain may be unregistered, newly registered, or protected by privacy mechanisms. Due to the lack of accessible content, no business description, contact information, or policies are present. The technical infrastructure relies on Cloudflare's security services, but no further technology or CMS details are discernible. Security posture is limited to the presence of Cloudflare's WAF, but no additional security headers or configurations are visible. Overall, the site lacks transparency and trust indicators, resulting in a low legitimacy and credibility score.

The website 'tcn-nordwest.de – Top-Deals' is a German-language deals aggregator platform presenting a variety of discounted retail products including electronics, home and kitchen items, beauty products, clothing, toys, and games. The business model appears to be affiliate marketing, leveraging Amazon product links to generate revenue. The site also indicates the domain is for sale, suggesting it may be a parked or domain sales platform. The target audience is general consumers interested in online shopping deals. Technically, the website uses standard modern web technologies such as HTML5, CSS3, JavaScript, and Google Fonts. The design is responsive and mobile-optimized with a clean layout and user-friendly navigation. However, the site lacks advanced frameworks or CMS indications and does not implement common security headers or privacy policies. The performance is moderate with basic SEO and accessibility features. From a security perspective, the site uses HTTPS (implied by URL) and employs a simple bot mitigation technique by disabling outbound links for one second. However, it lacks security headers like Content-Security-Policy and X-Frame-Options, and no privacy or cookie policies are present, indicating poor compliance with GDPR and other privacy regulations. No contact or incident response information is provided, reducing trustworthiness. Overall, the domain WHOIS data is missing, indicating the domain is unregistered or a placeholder under a domain sales network, which significantly impacts legitimacy and trust. The site is safe in terms of content but lacks transparency and security best practices. Strategic recommendations include implementing privacy and cookie policies, adding security headers, providing contact and incident response information, and clarifying domain registration status to improve trust and compliance.

S

SWING e.V.

inova-ilmenau.de

43

inovailmenau is a well-established, student-organized career forum hosted at TU Ilmenau, Germany, serving as a key platform for students and companies to connect. The website effectively communicates event details, organizational background, and partnership information, targeting students and alumni seeking career opportunities. Technically, the site is built on WordPress with a modern tech stack including jQuery, Ecwid for e-commerce, and AWS Cloudfront CDN for content delivery. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and some security headers present, but lacks advanced security policies such as CSP and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency.

B

Berlin-Brandenburgische Akademie der Wissenschaften (BBAW)

dwds.de

50

The Digitales Wörterbuch der deutschen Sprache (DWDS) is a comprehensive academic resource providing extensive digital dictionaries, text corpora, and linguistic statistics focused on the German language from 1600 to the present. It is operated under the auspices of the Berlin-Brandenburgische Akademie der Wissenschaften (BBAW), positioning it as a leading scholarly platform for linguistic research and education. The website targets researchers, linguists, educators, and language enthusiasts, offering free access to a rich set of lexical and textual data, along with interactive tools such as word games and a mobile app.

P

ProofPilot

proofpilot.com

69

ProofPilot is a healthcare technology company offering an end-to-end Clinical Experience Platform (CXP) designed to streamline clinical trial recruitment, engagement, education, and analytics. The platform targets pharmaceutical sponsors, clinical research sites, and patients, positioning itself as an innovative and award-winning solution with strong client testimonials and industry recognition. The website is built on HubSpot CMS with modern technologies and demonstrates excellent design, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and compliance certifications including HIPAA, GDPR, and SOC2 Type 1. However, WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though it lacks explicit security policy and incident response information.

C

Ctrl-a

ctrla.fr

62

Ctrl-a is a French digital ecosystem composed of multiple specialized agencies focused on building a just, useful, and responsible digital environment. Their services span digital strategy, UX/UI design, open source development, accessibility audits, ecodesign, data protection, and communication. The company positions itself as a leader in ethical and sustainable digital services, serving clients in the public, private, and non-profit sectors. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site uses modern web standards with good mobile optimization and accessibility features, though no CMS or hosting provider details are evident. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is supported by a comprehensive privacy policy and GDPR adherence, but no cookie consent mechanism was detected. WHOIS data is missing, which reduces trustworthiness but the website content and client references support legitimacy. Overall, Ctrl-a demonstrates a mature digital presence with room for improvement in security transparency and privacy mechanisms.

S

Stadt Eschweiler

eschweiler.de

59

The website www.eschweiler.de is the official digital presence of the city of Eschweiler, Germany. It serves as a comprehensive portal for residents, businesses, and visitors, offering detailed information on city administration, social services, education, culture, economic development, and public safety. The site is well-structured with deep navigation menus and localized content primarily in German, with some English sections for economic development. The business model is that of a public sector municipal government website, focusing on information dissemination and service facilitation. Technically, the site is built on the ionas4 CMS platform, utilizing modern web technologies such as HTML5, CSS3, JavaScript, and SystemJS for module loading. It employs Matomo analytics, indicating a privacy-conscious approach to user tracking. The hosting appears to be managed by RegioIT Aachen, a regional provider, with secure HTTPS configuration and use of integrity attributes for resources. Mobile optimization and accessibility are good, supporting a wide range of users. From a security perspective, the site enforces HTTPS and includes some security best practices, though additional headers like Content-Security-Policy could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy and cookie policy present, including consent mechanisms. However, no explicit incident response or vulnerability disclosure policies were found. Overall, the website presents a low-risk profile with a high degree of trustworthiness and professionalism. Strategic recommendations include enhancing security headers, publishing incident response contacts, and considering a formal vulnerability disclosure policy to further strengthen security posture and transparency.

L

Landkreis Lüneburg / Hansestadt Lüneburg / Wirtschaftsfördergesellschaft mbH für Stadt und Landkreis Lüneburg

lueneburg.de

52

The website www.lueneburg.de serves as an official information portal for the Lüneburg region in Germany, providing details about the district administration, city services, tourism, and economic development. It targets residents, tourists, and local businesses, positioning itself as a regional government and municipal service provider. The site links to official partner domains representing the district, city, and economic development agency, reinforcing its legitimacy and regional focus. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Matomo analytics for privacy-conscious visitor tracking. The cookie consent mechanism is well implemented, supporting GDPR compliance. Security posture is moderate with no visible critical vulnerabilities but lacks explicit security headers and a published security policy. No contact emails or phone numbers are directly visible in the provided content, which may limit direct user engagement. Overall, the site is professionally designed, mobile-optimized, and trustworthy for general audiences with no adult or questionable content detected.

B

Bielefeld University

uni-bielefeld.de

63

Bielefeld University is a well-established, internationally recognized research-intensive university in Germany, offering a broad range of academic programs and research initiatives. The institution emphasizes interdisciplinarity, diversity, and innovative teaching, targeting prospective and current students, researchers, and academic staff. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to its academic audience. Technically, the site employs modern web standards and responsive design, hosted likely by a reputable German research network provider. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be enhanced. Overall, the site demonstrates strong compliance with privacy regulations and maintains a trustworthy and professional image.

O

Open Research Office Berlin

open-access-berlin.de

51

The Open Research Office Berlin operates as a coordination and support entity for open science initiatives in Berlin, hosted by the Universitätsbibliothek der Freien Universität Berlin and supported by the Senatsverwaltung für Wissenschaft, Gesundheit und Pflege. It focuses on promoting open access, providing information, advice, and networking opportunities to scientific and cultural heritage institutions in Berlin. The website reflects a well-structured public service organization with a clear mission and target audience in the academic and governmental sectors. Technically, the website is built on a modern CMS platform (Infopark CMS Fiona) with Ruby on Rails integration, employing standard web technologies such as HTML5, CSS3, JavaScript, and jQuery. The site is mobile-optimized, SEO-friendly, and performs moderately well. Hosting appears to be managed by institutional providers linked to the Freie Universität Berlin and DFN, ensuring reliability. From a security perspective, the site uses HTTPS with proper CSRF protections but lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and compliance. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a privacy policy, though cookie consent is missing. Contact information is primarily via a contact form, with no direct emails or phone numbers displayed. Overall, the website is trustworthy, professional, and serves its public mission effectively. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its posture.

R

Rhein-Main Universitäten (RMU)

rhein-main-universitaeten.de

47

Rhein-Main Universitäten (RMU) is a strategic alliance of three major German universities collaborating in research, teaching, and regional development. The alliance serves over 95,000 students and 1,500 professors, aiming to strengthen scientific excellence and cooperation in the Frankfurt-Rhein-Main region. The website is professionally designed using Drupal 10, with modern web technologies and privacy-conscious analytics (Matomo). It offers multilingual content and clear navigation, targeting students, researchers, and academic partners. Security posture is strong with HTTPS and privacy-respecting analytics, though cookie consent mechanisms are absent. Contact information is comprehensive and transparent, enhancing trust.

C

CAMPUSERVICE GmbH Servicegesellschaft der Goethe-Universität Frankfurt am Main

stellenportal-uni-frankfurt.de

41

The Stellenportal der Uni Frankfurt is a professionally managed job portal operated by CAMPUSERVICE GmbH, affiliated with Goethe University Frankfurt. It serves as a regional employment platform targeting students and graduates in the Rhein-Main area, offering job listings, talent pool registration, company profiles, events, and news. The portal demonstrates a solid market position as a niche educational service with strong university backing and trusted partnerships. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Font Awesome icons, and Lottie animations, hosted on rzone.de infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though it lacks advanced security headers and published security policies. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information and social media presence. No critical vulnerabilities or suspicious patterns were detected.

Reims Campus is a city-supported platform dedicated to student life in Reims, France. It provides comprehensive information on education, housing, transport, health, student associations, and civic engagement. The website serves as a centralized hub for students to access resources and stay informed about local events and opportunities. The platform is positioned as a public service initiative backed by the city of Reims and Grand Reims, targeting students and young adults in the region. Technically, the website employs modern web technologies including Bootstrap 5 and Google Fonts, ensuring responsive design and good mobile optimization. The site is well-structured with clear navigation and professional design elements. However, there is no evidence of advanced CMS usage or analytics tools in the provided content. Performance is moderate, and accessibility features are basic but present. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance with EU regulations. No vulnerability disclosure or incident response information is published. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the official branding and content quality support trustworthiness. Overall, the website is a reliable and professional resource for its target audience but would benefit from enhanced security practices and privacy compliance measures to improve its risk posture and user trust.

V

Ville et Eurométropole de Strasbourg

strasapp.eu

67

StrasApp is an official mobile application developed for the residents and visitors of the City and Eurométropole of Strasbourg, France. It provides real-time access to municipal services, notifications, event agendas, and personalized dashboards to enhance daily life in the metropolitan area. The website serves as a promotional and informational portal linking to the app stores and official city resources. The business model is a public service offering free access to digital municipal services, positioning StrasApp as a key digital tool for local governance and citizen engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics with a strong emphasis on privacy and consent management via Tarteaucitron.js. The site is mobile-optimized and accessible, with features such as contrast toggling to support users with disabilities. Hosting and analytics are managed through trusted providers, and the site maintains good SEO and performance standards. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms that comply with GDPR. However, explicit security headers and a published security policy or incident response contacts are absent, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the official nature of the site, registered through a reputable registrar, and the site links to official social media and city domains, reinforcing trustworthiness. Overall, StrasApp's website demonstrates a high level of professionalism, privacy compliance, and user-centric design. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contact information to further strengthen trust and security posture.

ThingLink is a well-established company founded in 2010, specializing in immersive and spatial learning solutions powered by AI and no-code tools. Their platform supports a wide range of industries including education, business, healthcare, and museums, offering scalable and interactive training experiences across devices including XR headsets. The website demonstrates a high level of professionalism, rich multimedia content, and clear navigation, reflecting a mature digital presence. Technically, the site uses modern frameworks such as React and Next.js, ensuring good performance and mobile optimization. Security posture is strong, evidenced by ISO 27001 certification and a dedicated Trust Center, although WHOIS data is missing, which slightly impacts trust but does not undermine the overall credibility. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, ThingLink presents as a credible and trustworthy business with a robust technical and security foundation.

E

Echo360

echo360.org.uk

58

Echo360 is an educational technology company providing a video-based learning platform primarily targeting students and educators through LMS and VLE integrations. The website analyzed is a login portal subdomain designed for user authentication via email, supporting access to video lecture content. The platform positions itself as a medium-sized player in the education sector with a focus on SaaS delivery of lecture capture and learning management services. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and integrates the Userpilot SDK for user experience enhancements. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is moderate with secure form submission and cookie checks but lacks visible security headers and explicit privacy or cookie policies on this page. No WHOIS data is available for the subdomain, which is consistent with it being a subdomain of echo360.org.uk, a legitimate domain. Overall, the site is safe, professional, and trustworthy but could improve transparency and security practices.

S

Septeo Notaires

mondossiernotairepro.fr

55

Mondossiernotairepro.fr is a professional web portal operated by Septeo Notaires, designed to allow notaries and related professionals to track the progress of their dossiers. The platform offers services such as dossier tracking, document management, notifications, and appointment scheduling integration. The business targets professional users in the French real estate and notary sector, positioning itself as a niche SaaS provider with a medium-sized operation founded in 2017. The website is well-branded and consistent with the parent company Septeo, reflecting a focused business model serving the legal and real estate industry. Technically, the site uses modern web technologies including ASP.NET MVC, JavaScript, and CSS, hosted likely via DNSimple with a moderate performance profile. Mobile optimization and user experience are good, though accessibility features are basic. Security posture is adequate with HTTPS and anti-CSRF tokens implemented, but lacks some security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and legitimate, supporting the trustworthiness of the site.

H

Hello Design | Tisková grafika, webdesign

hellodesign.cz

40

Hello Design is a small Czech Republic based graphic and web design service provider specializing in print graphics, web design, UX, and UI. The website presents a professional and visually appealing design with good mobile optimization and SEO practices. The technical infrastructure includes modern web technologies such as HTML5, CSS3, JavaScript, and integration with Facebook Customer Chat for user engagement. However, the security posture is weak due to lack of visible security headers and unknown SSL/TLS configuration. Privacy compliance is minimal with no visible privacy or cookie policies. The absence of WHOIS data raises concerns about domain registration legitimacy, which impacts overall trust. Strategic improvements in security and compliance are recommended to enhance credibility and user trust.