Security Directory

V

Vonovia SE

vonovia.com

70

Vonovia SE is a large enterprise operating in the real estate sector primarily in Germany. The company manages residential properties and offers related services to tenants and partners. The website serves as a corporate portal providing information about the company, its subsidiaries, and services. The site is professionally designed with consistent branding and targets a broad audience including tenants, investors, and partners. Technically, the website employs modern web technologies including JavaScript, CSS3, and uses Cookiebot for GDPR-compliant cookie consent management. Analytics tools such as econda and Google services are used for traffic analysis and marketing optimization. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces domain trust slightly, but the overall security posture is good. Overall, the website is a professional and trustworthy corporate site with moderate technical maturity and good privacy compliance. Strategic improvements include publishing privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

The website centralni-adresa.net serves as an informational portal for a Czech government registry concerning declarations of activities, property, income, gifts, and liabilities under law 159/2006 Sb. The site is operated by Galileo Corporation s.r.o., a small company providing niche registry services to public officials and government entities. The content is primarily legal and regulatory in nature, targeting officials and citizens interested in conflict of interest declarations. The site is modest in design and content quality, with basic navigation and limited interactivity. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with resources hosted on the same domain. The site uses HTTPS, but lacks visible advanced security headers such as CSP or HSTS. There is no evidence of a CMS or modern frameworks, and the site appears to have been last updated in 2017, indicating potential technical debt and outdated content. Mobile optimization and accessibility are basic but present. From a security perspective, the site does not expose sensitive data or forms on the main page, which reduces risk. However, the absence of security headers and privacy/cookie policies indicates gaps in compliance and best practices. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency and legitimacy, although the site content and footer indicate a legitimate business operator. Overall, the site is functional and serves its informational purpose but requires improvements in security posture, privacy compliance, and domain registration transparency to enhance trustworthiness and regulatory compliance.

M

Ministerstvo financí České republiky

statnipokladna.cz

73

The website statnipokladna.cz serves as the official portal for the Ministry of Finance of the Czech Republic, specifically focusing on the State Treasury functions. It provides centralized financial management services including revenue centralization, expenditure control, asset management, liquidity and debt management, financial planning, payment processing, and reporting. The site targets government entities and public sector organizations, positioning itself as a critical government service platform. The content is professionally presented, with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with integrations of Cookiebot for cookie consent management and analytics tools such as Google Analytics and Matomo. The site uses HTTPS and shows good security practices, although explicit security headers are not visible in the HTML source. The performance is moderate, and accessibility features are adequately implemented. From a security standpoint, the site benefits from HTTPS encryption and a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website demonstrates a strong business credibility as a government portal with high trustworthiness. The risk profile is low, but strategic enhancements in security policy publication and contact information disclosure would further strengthen its posture.

Z

ZŠ A MŠ DOBŘÍKOV

zsdobrikov.cz

59

The website www.zsdobrikov.cz represents a small local educational institution, ZŠ a MŠ Dobříkov, offering basic and kindergarten education with a focus on a family-like atmosphere and innovative teaching methods. The school emphasizes individual attention, project-based learning, and digital competence development. The site is built on the Webnode platform and hosted via AWS Cloudfront, reflecting a moderate level of technical maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and a public privacy policy, which are areas for improvement. The absence of public WHOIS data suggests privacy protection, common for small entities, but limits transparency. Overall, the site is trustworthy and safe for general audiences, with room to enhance compliance and security practices.

N

Nota AI

nota.ai

67

Nota AI is a technology company specializing in hardware-aware AI model optimization and on-device AI solutions tailored for various industries such as industrial safety, surveillance, intelligent transportation systems, and driver monitoring. The company positions itself as a provider of seamless AI optimization platforms and AI solutions, including the NetsPresso® LLM Optimization Service for foundation models at the edge. The website is professionally designed using Squarespace, featuring modern technologies and good mobile optimization. It integrates Google Analytics and Tag Manager for tracking and Weglot for multilingual support. Security posture is strong with HTTPS and HSTS enabled, though the absence of explicit privacy policies and terms of service pages slightly reduces privacy compliance. The WHOIS data is unavailable due to privacy protection, which is typical for tech companies but limits transparency. Overall, the site is trustworthy and business credible, with a moderate to good security and privacy posture.

H

$HEEHEE | SOLANA

heehee.community

57

The website www.heehee.community represents a community-driven cryptocurrency project built on the Solana blockchain. It emphasizes a fair launch with no presales, locked liquidity, and a doxxed developer, aiming to build a strong community and token utility through marketing, influencer partnerships, and premium services for token holders. The site presents a clear roadmap and team information, targeting crypto investors and enthusiasts interested in Solana tokens. Technically, the site is built using modern web technologies including React and Next.js, offering good mobile optimization and a visually consistent design. However, the site lacks critical compliance documents such as privacy and cookie policies, and no contact information is provided, which impacts trust and regulatory compliance. Security posture is moderate with no visible vulnerabilities but missing security headers and SSL configuration details. WHOIS data is unavailable due to query failure or privacy protection, limiting domain legitimacy verification. Overall, the site is functional and informative but requires improvements in compliance, security, and transparency to enhance trustworthiness and user confidence.

The website promobay.com appears to be a minimal content portal primarily serving embedded advertisements via Google Adsense and related Google ad services. The site lacks meaningful business information, contact details, or user engagement features. The domain WHOIS data is unavailable, indicating either privacy protection or an unregistered domain, which raises concerns about legitimacy. Technically, the site uses basic HTML, CSS, and JavaScript with embedded iframes for ads but lacks modern CMS or frameworks. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible incident response or data protection policies. Overall, the site presents a low trust profile with limited business credibility and minimal privacy compliance.

A

Asociace regionálních značek, z.s.

pokladyzregionu.cz

51

The website 'Poklady z regionů' is operated by Asociace regionálních značek, z.s., a non-profit association promoting certified regional quality products from the Czech Republic. It serves as an e-commerce platform offering original, locally produced gifts and products that have passed regional certification. The site targets consumers interested in authentic regional goods and provides options for custom orders and corporate branding. The business has been active since 2005, positioning itself as a niche leader in the Czech regional product market. Technically, the website is built on the Upgates e-commerce platform using modern web technologies including HTML5, CSS3, JavaScript, jQuery, Bootstrap, and the Nette framework. It features responsive design, good SEO practices, and moderate performance. The site includes cookie consent mechanisms and form validation to enhance user privacy and security. From a security perspective, the site enforces HTTPS and employs cookie consent with granular options. However, explicit security headers and a published security policy or incident response plan are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain reduces trustworthiness somewhat, though the website content and contact information appear professional and legitimate. Overall, the website presents a trustworthy and professional front for a small non-profit e-commerce business focused on regional products. Strategic improvements in security transparency and WHOIS data availability would enhance credibility and security posture.

O

Obec Chvojenec

chvojenec.cz

42

Obec Chvojenec is the official website of the municipality of Chvojenec in the Czech Republic, serving as a local government portal providing community information, public notices, and municipal services. The website targets residents and visitors seeking information about local governance, events, and services. The site is well-structured with clear navigation and consistent branding, reflecting a small government entity focused on community engagement. Technically, the website employs standard web technologies including jQuery, YouTube API integration, and Google Analytics for visitor tracking. It uses HTTPS to secure communications and implements a cookie consent mechanism, indicating some level of privacy awareness. However, the absence of a dedicated privacy policy and security headers suggests room for improvement in compliance and security hardening. From a security perspective, the site shows moderate maturity with HTTPS enabled and no visible vulnerabilities in the provided content. The lack of WHOIS data limits domain trust verification, but the website content and external references support its legitimacy. No signs of malicious or adult content were found, and the site appears safe for general audiences. Overall, the website is functional and professional for its purpose but would benefit from enhanced privacy disclosures, improved security headers, and better transparency in domain registration to strengthen trust and compliance.

O

Obec Horní Ředice

horniredice.cz

42

Obec Horní Ředice operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about the municipality, including local government news, event calendars, public notices, educational institutions, and community services. It targets residents and visitors seeking official information about Horní Ředice. The business model is that of a government information portal, focusing on transparency and community engagement. The website is well-branded and consistent with its official purpose, reflecting a small-sized local government entity founded in 2003. Technically, the website uses standard web technologies including HTML5, CSS, JavaScript, and integrates external resources such as YouTube for video content and Smart App Banner for mobile app promotion. The hosting is managed through a Czech registrar and name servers, indicating local infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site benefits from HTTPS encryption and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies such as vulnerability disclosure or incident response contacts. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR applicability. No tracking or advertising scripts were detected, indicating minimal user tracking. Overall, the website is trustworthy and professional, serving its governmental function effectively. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance user trust and regulatory adherence.

pg-webstudio is a small German web design and development service provider specializing in custom websites using popular CMS platforms such as Wordpress, Drupal, Grav, Contao, and Joomla. The company targets local businesses and individuals in Göttingen and surrounding areas, offering a comprehensive range of services including SEO, responsive design, interactive maps, and ongoing website maintenance. The website showcases a strong portfolio of client projects across various industries, demonstrating technical versatility and design expertise. Technically, the site uses modern web standards and frameworks like Bootstrap 4 and jQuery, hosted on Alfahosting servers. Mobile optimization and user experience are excellent, with clear navigation and professional content. Security posture is moderate with cookie consent implemented and form nonce tokens present, but lacks visible HTTP security headers and explicit security policies. No active analytics tracking or advertising is detected, enhancing privacy compliance. WHOIS data aligns with the website's business focus, indicating legitimacy. Overall, the site is professional, trustworthy, and well-structured.

O

OEMUS MEDIA AG

welovewhatwedo.org

56

OEMUS MEDIA AG is a well-established German media company specializing in dental publishing, online media, and event management. The website analyzed is a dedicated anniversary campaign site celebrating 30 years of OEMUS, showcasing employee testimonials and company milestones. The company holds a strong market position as a key player in the dental media sector with a medium-sized operation based in Leipzig, Germany. Technically, the site uses modern frontend technologies including jQuery and Owl Carousel, hosted likely on AWS infrastructure. The site is mobile-optimized and professionally designed, providing a good user experience and clear navigation. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the domain registration is transparent and consistent, though the domain age is relatively new compared to the company's long history, indicating a possible new campaign domain. No suspicious or malicious content was found, and the site is safe for general audiences.

R

Revolware

revolware.com

49

Revolware is a Slovakia-based technology company specializing in rational software and AI development services tailored for modern businesses and startups. Founded in 2015, the company offers a broad range of services including web and mobile app development, augmented and virtual reality solutions, design and branding, and consulting focused on business process digitization. Their portfolio showcases diverse projects and multiple awards, positioning them as an innovative and trusted software solutions provider in their market segment. Technically, Revolware employs a modern technology stack including Java, C#, Python, C++, PHP, and JavaScript frameworks such as React-native and Laravel. The website is hosted on DigitalOcean and uses Bootstrap for responsive design. While the site demonstrates good design quality, mobile optimization, and SEO practices, some technical improvements are recommended, such as enabling DNSSEC and implementing security headers. From a security perspective, the website uses HTTPS and anonymizes IP addresses in Google Analytics, but lacks visible security headers and published security or privacy policies. No incident response or vulnerability disclosure information is provided. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, Revolware presents a professional and credible online presence with strong business credibility and technical maturity. However, to enhance security posture and regulatory compliance, the company should publish comprehensive privacy and cookie policies, implement security headers, enable DNSSEC, and provide incident response contacts. These steps will improve trust and reduce potential risks associated with data protection and security.

G

Gábor Szilvia

aszodiuzletek.hu

48

Aszodiuzletek.hu is a Hungarian e-commerce price comparison and product recommendation platform launched in 2023. It aggregates product offers from multiple partner webshops, providing users with a centralized place to find competitive prices and product information. The website targets general consumers interested in shopping across various categories including electronics, fashion, home goods, and adult products. The platform emphasizes ease of use, quick price comparison, and access to special offers. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google reCAPTCHA v3 for bot protection. The site is mobile optimized and features a structured navigation system with extensive product categories and partner listings. Security posture is moderate with HTTPS enforced and reCAPTCHA implemented, but lacks explicit security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. The domain registration is recent and consistent with the business profile, indicating legitimacy. Overall, the site presents a professional and functional e-commerce aggregator with room for improvement in security and privacy compliance.

D

DAAD (Deutscher Akademischer Austauschdienst)

alumniportal-deutschland.org

69

Alumniportal Deutschland is a digital networking platform primarily serving alumni, universities, and organizations to facilitate international exchange, events, and career development. It is affiliated with the DAAD, a reputable German academic exchange service, which strengthens its market position and trustworthiness. The platform offers a variety of services including community engagement, job boards, and learning resources, targeting international alumni and academic professionals. Technically, the website uses modern frontend frameworks such as Vue.js and Nuxt.js, delivering a responsive and accessible user experience with good SEO practices. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and follows best practices in form handling and data privacy, although explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a strong focus on privacy compliance and user engagement.

F

Förderverein Moritzkirche Naumburg (Saale) e.V.

moritzkirche-naumburg.de

49

The website represents the Förderverein Moritzkirche Naumburg (Saale) e.V., a non-profit organization dedicated to preserving and promoting the cultural and religious heritage of the St. Moritz church in Naumburg, Germany. It offers information about church services, exhibitions, concerts, and historical lectures, targeting local visitors and cultural enthusiasts. The site is well-branded and provides clear contact and donation information, reflecting a trustworthy community institution. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and slick carousel, delivering a good user experience with mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is used, but no security headers or vulnerability disclosures are present, indicating room for improvement in security posture. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security measures.

N

Nasjonal sikkerhetsmyndighet

nsm.no

10

Nasjonal sikkerhetsmyndighet (NSM) is the Norwegian National Security Authority, a government agency established in 2016 responsible for national security and cybersecurity in Norway. The website serves as the official portal for disseminating security alerts, guidelines, and protective security information to the public sector, businesses, and citizens. It positions itself as the primary national authority in its domain, providing critical services related to cybersecurity and incident response coordination. Technically, the website is built on the Corepublish CMS platform, utilizing standard web technologies such as JavaScript, SVG, CSS, and HTML5. The site is accessible over HTTPS and includes Google site verification, indicating a legitimate and verified presence. The design is professional and mobile-optimized, though accessibility and SEO optimizations are basic. No advertising or tracking technologies were detected, reflecting a focus on information dissemination rather than commercial activity. From a security perspective, the site benefits from HTTPS and some best practices but lacks explicit security headers and formalized privacy or cookie policies. There is no visible vulnerability disclosure or security.txt file, and no direct contact information for incident response was found in the provided content. These gaps suggest room for improvement in transparency and security posture. Overall, the website is trustworthy and professional, consistent with a government entity. The domain registration data aligns well with the agency's profile, supporting legitimacy. However, the absence of privacy and cookie policies and limited contact information slightly reduce the privacy compliance score. Strategic enhancements in these areas would strengthen the site's security and compliance posture.

G

Grunnstoffene

grunnstoffene.no

54

Grunnstoffene.no is a Norwegian educational website and podcast focused on the periodic table of elements. It offers a unique content model with one podcast episode per chemical element, targeting Norwegian-speaking students, educators, and chemistry enthusiasts. The site is built on WordPress using the Twenty Twenty-One theme and optimized with the Yoast SEO plugin, indicating a moderate level of digital maturity. The technical infrastructure supports good mobile responsiveness and accessibility, with a clean and interactive design. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal security policies. Privacy compliance is partial, with cookie and privacy policies present but no explicit consent mechanism. Business credibility is moderate due to the absence of direct contact information and formal trust signals. Overall, the site is a well-maintained educational resource with room for improvement in security and compliance.

T

Domain Default page

tribune-group.com

41

The website tribune-group.com currently hosts a default placeholder page generated by Plesk, indicating that the domain is registered but no active business website or content is published. The page primarily promotes Plesk hosting control panel features and related tools such as Sitejet Builder and WP Guardian, targeting web professionals and site owners interested in hosting management. There is no direct business information, contact details, or service offerings presented on the site. From a technical perspective, the site uses standard HTML5 and CSS3 with Plesk default assets and fonts. The site is mobile responsive and has basic accessibility features but lacks SEO optimization and advanced technical frameworks. No CMS or hosting provider details are explicitly identified beyond the Plesk environment. Performance is moderate with no evident errors or broken elements. Security posture is minimal; the domain is registered with a reputable registrar and has a clientTransferProhibited status, which is positive. However, the site lacks DNSSEC, security headers, and visible HTTPS enforcement in the provided data. No privacy, cookie, or terms of service policies are present, and no contact or incident response information is available. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the website is not operational as a business site and scores low on content quality, privacy compliance, and business credibility. The domain registration is legitimate but the lack of active content and security best practices suggests the site is either under development or abandoned. Strategic recommendations include developing a proper business website with clear contact and policy pages, implementing security headers and HTTPS, enabling DNSSEC, and adding privacy and cookie compliance mechanisms.

T

Titan Leaf Solution

titanleafsolutions.com

56

Titan Leaf Solution is a small manufacturing business specializing in the production and nationwide distribution of leaf vacuums through a dealer network. The company targets dealers and customers across the United States, focusing on leaf containment and vacuum solutions. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. The site is moderately optimized for mobile devices and provides basic SEO and accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and business-focused. Overall, the site presents a moderate risk profile with recommendations to improve security headers, privacy policies, and domain registration transparency.

A

Agroline Deutschland

agroline.de

55

Agroline Deutschland operates a specialized online marketplace focused on agricultural machinery, spare parts, and related services. With over 23 years in the market and a large user base, it holds a strong position in the German and international agricultural equipment sector. The platform offers extensive listings, dealer directories, and advertising opportunities, targeting agricultural businesses and individuals. Technically, the site employs modern web technologies, integrates multiple analytics and advertising tools, and maintains good performance and mobile optimization. Security posture is solid with HTTPS and basic security headers, though explicit security policies and cookie consent mechanisms are lacking. Overall, the site is professional, trustworthy, and business credible, but could improve privacy compliance and incident response transparency.

Seagate Technology is a global leader in mass data storage solutions, with a strong market position and a comprehensive portfolio of scalable storage products. The German website reflects a mature digital presence with professional design, clear navigation, and localized content targeting both consumers and enterprise customers. The technical infrastructure leverages Adobe Experience Manager and Adobe Analytics, indicating a modern and well-maintained platform. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms in place. However, the absence of WHOIS registration data is notable but likely due to registry policies rather than malicious intent. Overall, the website demonstrates high professionalism and trustworthiness.

NVIDIA is a globally recognized leader in AI computing, graphics processing, and high-performance computing technologies. The company focuses on innovation in GPUs, AI platforms, gaming, autonomous vehicles, and robotics, positioning itself as a key player in the technology sector. The website reflects this leadership with comprehensive content, professional design, and clear messaging tailored to technology enthusiasts and enterprise clients. Technically, the site leverages modern web technologies including Adobe Experience Manager CMS, advanced JavaScript frameworks, and robust analytics and marketing tools, ensuring a fast, responsive, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of blocking or WAF interference, and complies well with privacy regulations such as GDPR. The absence of WHOIS data is likely due to registry privacy policies rather than suspicious activity, given the brand's global stature.

Areca Technology Corporation is a Taiwan-based technology company specializing in RAID and storage solutions including hardware RAID adapters, storage subsystems, and Thunderbolt RAID storage products. The company targets enterprise IT professionals and data centers requiring high-performance, reliable storage solutions. Their website reflects a medium-sized business with a consistent brand presence and detailed product information. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie consent banner present. WHOIS data confirms domain legitimacy and consistency with the company's location. Overall, the website is professional, trustworthy, and safe for general audiences.

I

IP-Projects

ip-projects.de

69

IP-Projects is a medium-sized German hosting provider specializing in flexible and customized hosting solutions including web hosting, dedicated servers, virtual servers, and SSL certificates. With over 16 years of experience, the company emphasizes customer support, transparency, and high-quality infrastructure located exclusively in certified German data centers. The website reflects a professional and trustworthy business with clear service offerings and strong partner affiliations. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is strong with HTTPS, DDoS protection, and firewall solutions, though some minor improvements in security policy disclosure and cookie consent are recommended. Overall, the domain and business information are consistent and legitimate, supporting a high trust level.

Z

Zentralverband der deutschen Seehafenbetriebe e.V.

zds-seehaefen.de

54

The Zentralverband der deutschen Seehafenbetriebe e.V. (ZDS) operates as a German industry association representing seaport operators. The website serves as an informational portal primarily targeting businesses and stakeholders involved in maritime logistics and seaport operations within Germany. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity but with room for improvement in content richness and user engagement. Technical infrastructure is standard for a WordPress site, with basic mobile optimization and moderate performance. Security posture is weak due to the absence of security headers, privacy policies, and incident response information, which are critical for compliance and trust in today's regulatory environment. Overall, the site is functional but lacks comprehensive security and privacy features, limiting its credibility and compliance standing.

H

HERO Computers s.r.o.

herocomp.cz

50

HERO Computers s.r.o. is a Czech Republic based IT services company specializing in comprehensive IT solutions including network management, software development, IT outsourcing, hardware supply and service, telecommunication, and security solutions. The company targets businesses seeking reliable and tailored IT support and has established a strong market presence with reputable partners and clients. The website reflects a professional and consistent brand image with detailed service offerings and clear contact channels. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates security features like HTTPS, hCaptcha, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is strong with proper SSL configuration, security headers, and form protections, though the absence of a public security policy and incident response information suggests room for improvement. Overall, the website is trustworthy, well-structured, and compliant with GDPR, providing a positive user experience and business credibility.

L

Lebensfarben | Hilfen für Kinder und Jugendliche e.V.

lebensfarben-oberberg.de

45

Lebensfarben | Hilfen für Kinder und Jugendliche e.V. is a German non-profit organization dedicated to supporting children and youth whose parents suffer from psychological or addiction-related illnesses. The organization provides free counseling, accompaniment, and support services, including individual advice, parent assistance, and volunteer mentorship programs. Their market position is regional within the Oberbergischer Kreis area, focusing on vulnerable youth and families. The website reflects a professional and consistent brand with clear navigation and relevant content. Technically, the site uses standard web technologies such as jQuery and fancyBox, hosted under domaincontrol.com DNS services. While the site is functional and moderately optimized, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. Security posture is moderate with no visible vulnerabilities but could be improved with better HTTPS enforcement and security policies. Overall, the site is trustworthy and serves its non-profit mission effectively.

Z

Ze Stodoly

zestodoly.cz

10

Ze Stodoly is a small family-owned business based in the Czech Republic specializing in the production and sale of cold-pressed virgin oils such as flaxseed, poppy seed, and rapeseed oils. The company emphasizes traditional farming values and family involvement since its founding in 2018. Their market position is that of a local artisanal producer targeting health-conscious consumers interested in natural and fresh oils. The website is professionally designed with good content quality and clear navigation, supporting their business model of direct sales through an online shop and farmer markets. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and popular libraries like Swiper.js and AOS for animations. Google Analytics and Google Tag Manager are used for visitor tracking, with IP anonymization enabled. The site is mobile optimized and performs moderately well. However, no CMS or hosting provider details were identified. Security best practices such as HTTPS and cookie consent are implemented, but security headers are missing and no formal security or privacy policies are published. From a security perspective, the site has a good SSL configuration and cookie consent mechanism, but lacks published security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. No WAF or blocking mechanisms were detected, and no vulnerabilities were found in the visible content. Overall, the website presents a trustworthy and professional front for a small family business with room for improvement in privacy transparency and security hardening. Strategic recommendations include publishing privacy and security policies, implementing security headers, and improving WHOIS transparency to enhance trust and compliance.

W

wbv Kommunikation

wbv-kommunikation.de

59

wbv Kommunikation is a specialized communications and media service provider focused on supporting public sector clients, associations, and church administrations in Germany. Their offerings include agency services, educational media production, and digital solutions for church administration. The company operates as a business unit under wbv Media, leveraging a strong reputation supported by testimonials from notable clients such as DAAD, OECD, and various government bodies. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site uses modern frameworks like UIkit and jQuery, hosted on Schlundtech infrastructure, and employs Matomo analytics with a privacy-conscious cookie consent mechanism.

E

Evangelische Kirchengemeinde Ingersheim

kirchengemeinde-ingersheim.de

56

Evangelische Kirchengemeinde Ingersheim operates as a small non-profit Protestant church community in Germany, affiliated with the Evangelische Landeskirche in Württemberg. The website serves as an informational and community engagement platform, offering details on church services, events, youth and adult education, and pastoral care. It targets local community members and churchgoers, providing a trusted source for religious and community activities. Technically, the site is built on TYPO3 CMS, employs Matomo analytics configured for privacy, and includes accessibility features enhancing user experience. The site is mobile-optimized and well-structured, reflecting good digital maturity for a small non-profit entity. Security posture is solid with HTTPS enforced and privacy compliance evident through consent management, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting the church's mission effectively.

M

Městský úřad Lanškroun

lanskroun.eu

47

The website www.lanskroun.eu serves as the official municipal portal for the city of Lanškroun in the Czech Republic. It provides comprehensive information about the city administration, local news, cultural events, tourism, and public services. The site targets residents, visitors, and businesses in the Lanškroun region, offering multilingual support and various e-government services. The business model is focused on public service and community engagement, positioning itself as a trusted local government resource. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor tracking and employs Google reCAPTCHA v2 to protect forms from spam. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, no explicit security policies or incident response contacts are published, and security headers appear to be missing or not detected in the provided content. The WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains and does not raise immediate concerns. Overall, the security posture is moderate with room for enhancement. The overall risk assessment indicates a well-maintained official government website with no signs of malicious activity or content safety issues. Strategic recommendations include implementing HTTP security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to enhance trust and security maturity.

M

Město Litomyšl

litomysl.cz

54

Město Litomyšl is the official municipal government website for the city of Litomyšl in the Czech Republic. It provides comprehensive information and services for both citizens and tourists, including municipal services, cultural events, education, and tourism information. The site targets local residents and visitors, positioning itself as a key resource for public administration and community engagement. The website demonstrates consistent branding and professional content quality, supporting its role as a trusted government portal. Technically, the website employs standard web technologies such as jQuery, Google Custom Search Engine, and Fancybox for enhanced user experience. The site is mobile-optimized and features good navigation and SEO practices. However, there is room for improvement in accessibility and security headers implementation. Performance is moderate, with external dependencies on Google services. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No critical vulnerabilities or outdated libraries were detected. The presence of a comprehensive GDPR privacy policy indicates attention to compliance, though the absence of a cookie consent mechanism is a gap. The lack of WHOIS data for the domain raises concerns about domain registration transparency, though the official nature of the content mitigates some risk. Overall, the website is a well-structured and professional municipal portal with good content and usability. Strategic improvements in security headers, cookie consent, and domain registration transparency would enhance trust and compliance.

M

Město Polička

policka.org

47

Město Polička operates an official municipal website serving residents and visitors with comprehensive city information, including news, events, official documents, and public services. The website is well-established with a domain age since 2003, reflecting a stable digital presence for the local government of Polička, Czech Republic. The site targets local citizens and visitors seeking municipal updates and services. Technically, the website uses ASP.NET Web Forms with Bootstrap and FontAwesome, providing a responsive and user-friendly interface, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing business credibility. Overall, the website is trustworthy and professionally maintained, suitable for its government function.

S

SCM Bundes-Verlag

bundesverlag.de

55

SCM Bundes-Verlag operates the bundes-verlag.net website, offering a range of Christian magazines and media products targeting children, teenagers, adults, and church community workers. Established in 2004, the company holds a solid market position in the niche Christian media retail and subscription sector in Germany. The website provides e-commerce capabilities for subscriptions, digital reading, and gift bundles, supported by a professional and consistent brand presence. Technically, the site uses a custom CMS with modern web technologies, including Matomo analytics for privacy-conscious user tracking. Mobile optimization and accessibility are well addressed, contributing to a good user experience. Security posture is adequate with HTTPS enforced and CSRF protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

The website represents the Catholic daycare center St. Marien in Detmold, Germany, providing childcare and family support services. It operates under the umbrella of the Katholische Kindertageseinrichtungen Minden-Ravensberg-Lippe gemeinnützige GmbH, a non-profit organization. The site targets parents and families seeking quality early childhood education with a religious affiliation. The business model is community-focused, emphasizing inclusion, language development, and family partnership. Technically, the website is built on the dialogperfect® CMS platform, hosted via GoDaddy's domain services, and incorporates modern web standards including accessibility tools such as DigiAccess. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, safe, and professionally maintained, suitable for its target audience.

K

Kreissparkasse Göppingen

ksk-gp.de

69

Kreissparkasse Göppingen is a regional bank serving private and corporate customers in the Göppingen district of Germany. The website offers a comprehensive range of financial services including online banking, accounts, loans, investments, insurance, and real estate services. The bank positions itself as a trusted local financial institution with a strong focus on customer service and sustainability. Technically, the website is built on Adobe Experience Manager, uses modern web technologies, and is optimized for mobile and accessibility. Security posture is strong with HTTPS enforced and secure login mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-maintained.

S

SCM Bundes-Verlag

bundes-verlag.net

10

SCM Bundes-Verlag operates the bundes-verlag.net website, an established German-language e-commerce platform specializing in Christian magazines and media products targeting a broad audience including children, teenagers, adults, and church volunteers. Founded in 2004, the company holds a solid market position within the niche Christian media sector in German-speaking countries. The website offers subscription services, digital reading options, gift bundles, and evangelistic media, reflecting a focused business model with clear target demographics. Technically, the site employs modern web technologies including JavaScript and CSS, with Matomo analytics for user tracking and a cookie consent mechanism ensuring GDPR compliance. The platform is mobile-optimized and provides a good user experience with clear navigation and professional design.

H

Hülskens GmbH & Co. KG

huelskens-kies-sand.de

50

Hülskens GmbH & Co. KG is a well-established German company specializing in the extraction and supply of mineral raw materials such as sand and gravel, primarily serving the construction and infrastructure sectors. With over 100 years of experience and multiple regional subsidiaries, the company emphasizes sustainable land use and ecological projects alongside its core business. The website reflects a professional and regionally focused business model with clear communication of services and corporate values. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies including Bootstrap and jQuery. It is hosted on agenturserver infrastructure, with good mobile optimization and SEO practices. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. The absence of analytics scripts suggests a privacy-conscious approach. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant, with room for improvement in security policy transparency and header implementation. The risk level is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain and improve security and compliance posture.

A

Asociace regionálních značek, z.s.

regionalni-znacky.cz

44

Asociace regionálních značek, z.s. is a Czech non-profit association dedicated to certifying and promoting regional products, services, and experiences with guaranteed quality and origin. Operating since 2005, it manages 32 regional quality brands across 31 Czech regions, serving both consumers interested in authentic regional goods and producers seeking certification and cooperation. The website offers rich content including product categories, regional information, news, and event calendars, supported by an e-shop partner site. Technically, the site uses modern frontend technologies such as Bootstrap, Swiper.js, Leaflet.js, and Google Analytics, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking some advanced security headers and explicit security policies. The absence of WHOIS data reduces domain registration trust but does not detract from the legitimacy of the business itself. Overall, the site is professional, trustworthy, and well-positioned in its niche.

R

Raben Group

raben-group.com

79

Raben Group is a well-established European logistics company specializing in transport, warehousing, and supply chain management services. The company targets businesses requiring comprehensive logistics solutions and maintains a strong market presence in Poland and other European countries. Their website reflects a professional and consistent brand image, with clear service offerings and accessible contact information. Technically, the website is built using modern web technologies including Nuxt.js and Swiper.js, providing a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a publicly available security policy or incident response details. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness but does not detract significantly from the overall legitimacy of the business. Privacy and cookie policies are present and indicate GDPR compliance, supporting a positive privacy posture. Overall, the website is professional, secure, and business-focused, suitable for its target audience.

M

Město Červený Kostelec

cervenykostelec.cz

41

Město Červený Kostelec operates an official municipal website serving residents and visitors with comprehensive information about the town's administration, public services, news, and community events. The website is well-structured, primarily in Czech, and targets local citizens and stakeholders. It provides key services such as contact details, public documents, and updates on municipal activities, positioning itself as a trusted local government resource. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, running on the Munipolis CMS platform. It is mobile-optimized and offers a moderate performance profile. The site uses HTTPS and implements cookie consent mechanisms, reflecting a reasonable level of digital maturity. From a security perspective, HTTPS is enforced, and no immediate vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is supported by a dedicated GDPR page and cookie consent, but terms of service and incident response contacts are missing. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. The lack of WHOIS data limits domain trust assessment, but the site itself shows no signs of malicious activity. Strategic recommendations include enhancing security headers, adding terms of service, and publishing a security.txt file to improve transparency and trust.

M

Město Lázně Bohdaneč

bohdanec.cz

45

Lázně Bohdaneč is the official municipal website for the town of Lázně Bohdaneč in the Czech Republic. It serves as a comprehensive portal providing residents and visitors with access to municipal services, news updates, event calendars, job vacancies, and contact information. The site targets local citizens and stakeholders interested in town governance and community activities. The business model is that of a local government authority focused on public service and information dissemination. Technically, the website employs modern web technologies including Blazor WebAssembly for interactive components, Google Translate for multilingual support, and a chatbot for user assistance. The site is built on the Vismo CMS platform, which is specialized for municipal websites. The design is responsive and accessible, with good SEO practices and clear navigation, although some performance optimizations could be considered. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and explicit cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, which should be investigated further. Overall, the website is professional, trustworthy, and well-suited for its purpose, but improvements in security headers, privacy compliance, and domain registration transparency are recommended to enhance trust and compliance.

F

Ferienhof Hardthöhe

farm-wedding.de

49

Farm Wedding on Hof Hardthöhe is a specialized wedding and event venue located in Germany, offering comprehensive wedding planning and farm event services. The business targets couples seeking a rural, charming location for their wedding ceremonies and receptions, complemented by accommodation options and decoration services. The website is professionally designed using TYPO3 CMS and Bootstrap, providing a good user experience with clear navigation and mobile optimization. Social media integration and a cookie consent mechanism demonstrate digital maturity and privacy awareness. Security posture is adequate with HTTPS and cookie controls, though security headers and incident response information are absent. Overall, the site is trustworthy and well-positioned in its niche market.

S

STORK Umweltdienste GmbH

stork-mobil.de

44

STORK Umweltdienste GmbH operates as a specialized provider of mobile mineral waste processing technology, focusing on modular mobile solutions for the treatment of slag, ash, construction debris, and dredged material. The company is positioned within the energy and transportation sectors, serving industrial clients requiring on-site processing capabilities. Their business model centers on B2B services with a strong emphasis on modularity and customization. The website reflects a medium-sized enterprise with consistent branding and professional presentation, supported by a parent company, STORK Unternehmensgruppe. Technically, the site is built on TYPO3 CMS with modern web standards, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security policies or incident response contacts. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels.

F

Frau Heike Bobusch-Seefeld

the-new-art.de

57

The website www.the-new-art.de represents the online presence of artist Heike Bobusch, specializing in original acrylic paintings and abstract canvas art. The site offers virtual 360° tours of the gallery and promotes commissioned artwork services. The business operates as a small-scale art seller based in Berlin, Germany, targeting art enthusiasts and potential buyers interested in unique, hand-painted pieces. The website is well-structured with clear navigation and professional content, including customer testimonials and detailed contact information. Technically, the site uses a custom CMS (tourcms3), krpano for immersive virtual tours, and Howler.js for audio support. It is hosted on 1&1 IONOS infrastructure with HTTPS enabled, ensuring secure connections. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. Privacy policy is comprehensive and GDPR compliant, but no explicit terms of service or incident response policies are found. Overall, the website is trustworthy, professionally maintained, and suitable for its niche market.

F

Förderverein Finower Wasserturm und sein Umfeld e.V.

wasserturm-finow.de

58

The Förderverein Finower Wasserturm und sein Umfeld e.V. operates a cultural museum dedicated to preserving the industrial heritage of the Messingwerksiedlung and the Finower Wasserturm in Germany. The website offers detailed historical content, virtual 360° tours, and visitor information, targeting cultural enthusiasts and regional tourists. The organization is a small non-profit founded in 2003, relying on donations and volunteer support. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and specialized 360° tour software (krpano) integrated with the VR-Easy CMS. Hosting is provided via rzone.de nameservers. Security posture is adequate with HTTPS and client-side validation but lacks advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility.

V

VR-EASY Marketing

faszination-tegernsee-schliersee.de

56

VR-EASY Marketing operates the website faszination-tegernsee-schliersee.de, offering immersive 360° virtual tours and panoramas focused on the Tegernsee and Schliersee regions in Germany. The business targets tourists, local hotels, and destination marketing organizations by providing high-quality virtual tour creation and marketing consulting services. The website is well-structured, content-rich, and professionally presented in German, with clear contact information and legal disclosures. Technically, the site uses modern web technologies including krpano for panorama viewing, Google Maps API, and Google Analytics with IP anonymization, hosted on servers indicated by the mga-intermedia.com nameservers.

M

Ministerium der Justiz des Landes Nordrhein-Westfalen

vr-jva.nrw

55

The website vr-jva.nrw is an official government digital platform operated by the Ministerium der Justiz des Landes Nordrhein-Westfalen, providing a virtual 360° tour of correctional facilities in North Rhine-Westphalia, Germany. It serves an educational and informational purpose, targeting the general public and potential applicants interested in the justice system. The site features interactive virtual tours, quizzes, and contact forms to engage users. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and licensed krpano software for immersive virtual tours. Hosting is provided by Global Village GmbH, with a domain registered under the government ministry. The site is mobile-optimized and includes basic accessibility features, though SEO and privacy compliance could be improved. From a security perspective, the site uses HTTPS and input validation on forms but lacks DNSSEC and important security headers. No privacy or cookie policies are present, representing compliance gaps. The WHOIS data confirms legitimacy and consistency with the government entity. No signs of blocking or WAF interference were detected. Overall, the site is trustworthy and professionally implemented but would benefit from enhanced privacy compliance, security hardening, and explicit incident response information to improve user trust and regulatory adherence.

B

buff.rocks GmbH

buff.media

54

buff.rocks GmbH is a small digital and advertising agency based in Magdeburg, Germany, specializing in creative and strategic services including TYPO3 CMS web projects, design, campaigns, content marketing, hosting, and digital transformation. The company is part of the +Pluswerk network, enhancing its market position and service capabilities. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and Matomo analytics for user tracking, with good performance and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is unavailable or malformed, limiting domain registration trust verification, but the business legitimacy is supported by consistent branding, client testimonials, and industry memberships. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility.