Security Directory

E

Edacy SA

edacy.com

55

Edacy SA operates a French-language online education platform specializing in intensive 3-month bootcamp programs focused on technology, artificial intelligence, product management, UX/UI design, and entrepreneurship. The company targets individuals seeking career transformation in tech, primarily in West Africa and French-speaking regions, offering project-based learning, mentorship, and strong employability support. The website is professionally designed with clear navigation and good mobile optimization, leveraging Google Tag Manager for analytics. However, the absence of privacy and cookie policies and missing WHOIS registration data present compliance and transparency concerns. Security posture is moderate with HTTPS usage but lacks explicit security headers and published security policies. Overall, Edacy presents a credible educational service with room for improvement in privacy compliance and security transparency.

S

SmartMailer.cz

smartmailer.cz

53

SmartMailer.cz is a Czech-based small technology company founded in 2021, offering a SaaS email marketing platform tailored for businesses, especially e-commerce users on Prestashop and WooCommerce. The platform provides easy-to-use tools for creating and managing email campaigns, newsletter automation, and detailed campaign analytics. The business model is subscription-based with tiered pricing according to the number of contacts. The website is professionally designed, multilingual, and provides clear contact and legal information, positioning SmartMailer as a trustworthy niche player in the Czech and Slovak markets. Technically, the website uses modern web technologies including JavaScript, Google Analytics, and Google reCAPTCHA for security and analytics. Hosting is inferred to be with WEDOS, a Czech hosting provider. The site is mobile optimized with good SEO practices but lacks some accessibility features. Security posture is solid with HTTPS and anti-spam measures on forms, though it lacks published security policies and some HTTP security headers. From a security and compliance perspective, the site does not publish a privacy or cookie policy, which is a notable GDPR compliance gap. The terms of service are comprehensive and available via a modal on the homepage. No incident response or vulnerability disclosure information is provided. WHOIS data is consistent with the business claims, showing no suspicious patterns. Overall, the site is safe, professional, and business-focused with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing privacy and cookie policies with consent mechanisms, adding security headers, and providing incident response contacts to enhance trust and compliance. These improvements will strengthen the security posture and regulatory adherence, supporting business growth and customer confidence.

D

DeepCloud

deepcloud.swiss

64

DeepCloud AG is a Swiss technology company specializing in AI-powered cloud services designed to optimize collaboration, efficiency, and business performance. The company positions itself as a trusted partner for digital transformation, offering a comprehensive ecosystem of integrated solutions tailored to the Swiss market and compliant with international standards such as ISO 27001:2022. Their product suite includes services for document sharing, digital signatures, digital identity, data capture AI, data visualization, banking integrations, secure communications, business management, and signature validation. Technically, the website is built on WordPress with modern SEO and analytics tools, including Google Tag Manager, Matomo, and LinkedIn Insight, all implemented with user consent mechanisms. Security posture is strong, with HTTPS enforced and ISO certification, though some security headers could be improved. The domain WHOIS data is privacy protected, which is typical for Swiss domains and justified for this business type. Overall, DeepCloud demonstrates a mature digital presence with a professional, secure, and privacy-conscious approach.

K Faktor is a certified testing laboratory specializing in measuring physical risk factors in both occupational and non-occupational environments within the Czech Republic. The company offers a range of accredited services including lighting intensity measurement, noise and vibration analysis, dust measurement, microclimate condition assessments, and energy audits. Their market position is supported by official accreditation and a clear focus on safety and compliance with government regulations. The website reflects a small but professional business targeting clients who require certified environmental and workplace safety measurements. Technically, the website is built using modern web technologies such as Bootstrap 5.1.3, ensuring responsive design and good user experience across devices. Hosting is managed via websupport.cz, a known Czech hosting provider. The site is moderately performant with good SEO practices but lacks advanced accessibility features. No CMS or analytics tools are detected, indicating a simple but effective technical infrastructure. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable scripts. However, it lacks important security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available, which could be improved to enhance trust and security posture. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to reduce risk and improve user confidence.

V

Vyšší odborná škola, Střední průmyslová škola a Střední odborná škola, Varnsdorf, příspěvková organizace

skolavdf.cz

47

The website represents Vyšší odborná škola, Střední průmyslová škola a Střední odborná škola, Varnsdorf, a public educational institution in the Czech Republic offering secondary and higher vocational education. It targets students and prospective students with detailed program offerings, events, and student services. The institution maintains a professional online presence with clear branding and comprehensive content relevant to its educational mission. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and is well-optimized for mobile devices. It uses HTTPS with a good SSL configuration and includes privacy-first cookie consent mechanisms without marketing or tracking cookies, reflecting a strong commitment to user privacy. The site lacks some advanced security headers but follows good security practices overall. Security posture is solid with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain trust verification, but the presence of official contact information, certifications (ISO 9001), and GDPR compliance indicate a legitimate and trustworthy institution. No signs of malicious or adult content were found, making the site safe for general audiences. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure information to further strengthen trust and security.

S

Střední uměleckoprůmyslová škola sklářská Valašské Meziříčí

sklarskaskola.cz

28

Střední uměleckoprůmyslová škola sklářská Valašské Meziříčí is a specialized secondary educational institution focused on glass art, design, and related artistic crafts. The school offers various study programs including glass design, applied painting, industrial design, and artistic crafts, targeting students interested in these creative fields. The website reflects a professional and consistent brand presence with clear navigation and relevant content for prospective students and parents. Technically, the site uses modern web technologies such as jQuery, Google Fonts, and Lottie animations, providing a visually engaging experience, though mobile optimization and accessibility could be improved. Security-wise, the site uses HTTPS and Google Analytics but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and contact information appear trustworthy. Strategic improvements in security headers, privacy compliance, and domain registration verification are recommended.

W

Witzenmann Opava, spol. s r.o.

witzenmann.cz

64

Witzenmann Opava, spol. s r.o. is a manufacturing company specializing in flexible metal components such as metal hoses, compensators, and bellows, serving industries including automotive, aerospace, and industrial sectors. The company is part of the Witzenmann Group with a global presence across 16 countries and 22 subsidiaries. Their website is professionally designed, multilingual, and provides comprehensive product and solution information targeting B2B customers. Technically, the site uses modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the domain registration and WHOIS data align well with the business identity, indicating a legitimate and trustworthy entity.

V

VOŠ, SŠ, JŠ, ZŠ a MŠ MILLS, s.r.o.

mills.cz

45

The website mills.cz represents a private educational institution in the Czech Republic offering a broad spectrum of educational services including kindergarten, primary, secondary, higher vocational, language education, and lifelong learning programs. The institution appears well-established with a domain age dating back to 2007 and clear physical address information. The website is professionally designed with good navigation and mobile optimization, targeting students and lifelong learners primarily within the Czech Republic. From a technical perspective, the site uses standard HTML5 and CSS3 technologies with Adobe Typekit fonts for typography. Hosting and domain registration are consistent with the Czech-based registrar WEDOS. The website performance is moderate with good SEO practices but lacks advanced frameworks or CMS indications. Accessibility is basic but functional. Security posture is limited based on the provided data. No security headers or HTTPS enforcement details were found, and no privacy or cookie policies are published, which impacts compliance and trust. No contact emails or phone numbers are provided, limiting direct communication channels. No forms or data collection mechanisms are present on the main page, reducing immediate data protection concerns but also limiting user engagement. Overall, the website is safe and suitable for general audiences with no adult or questionable content. The domain registration data supports legitimacy and trustworthiness. Strategic improvements in security headers, privacy compliance, and contact information publication would enhance the site's security and user trust.

C

Charita Opava

charitaopava.cz

53

Charita Opava is a well-established non-profit Catholic organization based in the Czech Republic, providing a broad range of social and health care services including protected housing, social rehabilitation, day care, therapeutic workshops, and senior care. The organization targets residents of the Opava region, donors, volunteers, and partners, positioning itself as a trusted regional social service provider with multiple governmental and community partnerships. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the website uses a custom CMS named HandMade, with standard web technologies including HTML5, CSS3, and JavaScript. It integrates multiple Google Analytics and Tag Manager scripts for user tracking and analytics, and implements a cookie consent mechanism compliant with GDPR. The site is mobile optimized with moderate performance and basic accessibility features. From a security perspective, the website enforces HTTPS and uses cookie consent to manage user privacy preferences. However, it lacks explicit security headers and a vulnerability disclosure policy, which are recommended for improved security posture. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's identity. Overall, Charita Opava's website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers, accessibility, and explicit security policies would further enhance trust and resilience.

S

Statutární město Opava

opava-city.cz

64

Statutární město Opava operates an official municipal website serving as the primary digital platform for city residents, visitors, and local businesses. The site provides comprehensive information about city governance, public services, news, events, and contact details. It targets a broad audience including citizens, municipal employees, and tourists, positioning itself as a trusted source of local government information. The business model is that of a government service portal, focusing on transparency and community engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap framework, and mapping libraries like Leaflet.js. It uses WebJET CMS for content management and integrates Google Tag Manager and Google Analytics for tracking and analytics. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit privacy policy and terms of service pages, security headers, and incident response contacts, which are areas for improvement. No vulnerabilities or malicious content were detected, and the site maintains a good security posture overall. Overall, the website is a professional and trustworthy municipal portal with good content quality and technical implementation. The absence of WHOIS data limits domain transparency, but the official branding and comprehensive contact information support its legitimacy. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and trust.

C

Cercle Communication

cerclecommunication.com

59

Cercle Communication is a small Canadian marketing and communication agency focused on providing personalized and multidisciplinary services to businesses. The website is built on the GoDaddy Website Builder platform, indicating a moderate level of digital maturity with basic technical infrastructure including HTTPS and service worker support. However, the site lacks comprehensive privacy and security policies, contact information, and advanced SEO or accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and incident response contacts. Overall, the website presents a basic but functional online presence suitable for a small agency, with room for improvement in privacy compliance and security best practices.

T

Todon.eu

todon.eu

60

Todon.eu operates as a small, volunteer-run Mastodon instance focused on radical leftist and anti-authoritarian communities, providing decentralized social media services. The platform supports multiple languages and offers enhanced Mastodon features such as increased character limits and custom themes. The website is well-branded and consistent with its community-driven mission, emphasizing privacy and anti-discrimination policies. Technically, the site runs Mastodon version 4.4.8 with a modern tech stack including Ruby on Rails and React. The site is moderately performant and mobile-optimized, though accessibility and SEO could be improved. Security posture is solid with HTTPS enforced and privacy-conscious defaults, but lacks formal security policies and some security headers. Overall, the site is trustworthy and safe, with no adult or explicit content. Contact information is limited but present via email. There are no signs of malicious activity or suspicious domains. Strategic improvements include adding a cookie consent mechanism, formalizing security policies, and enhancing accessibility. This positions Todon.eu as a niche but credible player in the decentralized social media space, serving a specific activist audience with a strong privacy and community focus.

M

MapTiler AG

openmaptiles.org

53

OpenMapTiles is an open-source mapping project operated by MapTiler AG, providing vector tiles and map hosting solutions primarily for developers and GIS professionals seeking self-hosted map infrastructure. The website demonstrates a solid market position with trusted partnerships and a strong community presence on GitHub. Technically, the site uses modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices, though some accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and published policies. Privacy compliance is weak due to absence of privacy and cookie policies or consent mechanisms. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and security documentation.

D

Diplomeo

diplomeo.com

70

Diplomeo is a well-established French educational orientation platform founded in 2011, serving over 300,000 students annually. It specializes in helping users find suitable diplomas, schools, and career paths in France. The platform offers comprehensive services including diploma and school searches, career guidance, event listings, and school reviews, positioning itself as a market leader in educational orientation within France. Technically, the website employs modern web technologies such as Turbo Frames and StimulusJS, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and formal security policies. Privacy compliance is basic, with cookie consent mechanisms present but no explicit privacy or terms of service pages detected. Overall, the website is professional, trustworthy, and content-rich, though improvements in security and privacy transparency are recommended.

C

Centrum pro rodinu a sociální péči z. s.

prorodiny.cz

54

Centrum pro rodinu a sociální péči z. s. is a well-established non-profit organization based in Ostrava, Czech Republic, dedicated to supporting families, relationships, individuals with disabilities, caregivers, and seniors. The organization offers a broad range of services including counseling, education, social support, and community engagement, with a strong focus on inclusivity and social welfare. Their website reflects a mature digital presence with rich content, active event calendars, and social media integration, positioning them as a trusted local entity in the social care sector. Technically, the website employs modern JavaScript libraries and Google Analytics with consent management, ensuring a good user experience and moderate performance. Security posture is adequate with HTTPS and cookie consent but lacks some advanced security headers and explicit privacy policies. The absence of WHOIS data for the domain is a notable concern that slightly impacts trustworthiness, though the website content and social presence strongly indicate legitimacy. Overall, the site is professional, content-rich, and user-friendly, serving its target audience effectively.

C

Centrum sociálních služeb Ostrava, o.p.s.

css-ostrava.cz

49

Centrum sociálních služeb Ostrava, o.p.s. is a well-established non-profit organization founded in 2006, providing a broad range of social services primarily in the Czech Republic. Their services focus on supporting families, children, and individuals in difficult social situations through shelters, crisis centers, family counseling, and social activation programs. The organization maintains a professional web presence with clear navigation and multiple physical locations integrated via Google Maps, enhancing accessibility for their target audience. The website encourages donations and donations with tax deduction benefits, indicating a transparent and community-focused business model. Technically, the website uses modern JavaScript libraries such as Swiper.js and Google Maps API, along with Google Tag Manager for analytics, reflecting a moderate level of digital maturity.

L

La Venelle

lavenelle-montreuil.org

56

La Venelle is a non-profit community organization based in Montreuil, France, focused on promoting solidarity-based reuse and circular economy practices. It hosts nine associations that operate reuse shops, repair workshops, and social insertion employment programs. The organization also offers a café-cantine and hosts cultural events, positioning itself as a local hub for ecological and social initiatives. The website reflects this mission with clear content, community-oriented messaging, and accessible navigation. Technically, the site uses modern web technologies such as Ionic and React, with a moderate performance profile and good mobile optimization. However, it lacks explicit privacy and security policies, and no security headers or vulnerability disclosures are present. The site does not use tracking or analytics scripts, aligning with its privacy-conscious stance. Overall, the website is professional and trustworthy but could improve in privacy compliance and security posture.

The website represents the Délégation Intergénérationnelle du Numérique, a small non-profit association within the École Normale Supérieure focused on intergenerational digital knowledge sharing and IT support for students. The site provides clear descriptive content about its mission and activities but lacks formal privacy, cookie, or terms of service policies. Technically, the site uses a simple modern CSS framework (Bulma) and is hosted by OVH, but lacks advanced security headers and visible analytics or tracking tools. The security posture is basic with no evident vulnerabilities but also no advanced protections. Overall, the domain registration is consistent with the organization's founding date and mission, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

P

PraneKilimi.bg

pranekilimi.bg

51

PraneKilimi.bg is a small local Bulgarian business specializing in professional carpet and textile cleaning services in Sofia. The company offers a range of services including washing carpets, rugs, mats, blankets, and other textiles with free pickup and delivery within Sofia. The website demonstrates a solid market position with over 10 years of experience and a loyal customer base including institutions. Technically, the website uses modern web technologies such as Bootstrap, jQuery, and Google Tag Manager, providing a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible cookie consent mechanism and only a basic privacy policy. Overall, the site is professional, trustworthy, and safe for general audiences.

Н

Нет Инфо ЕАД

abv.bg

61

АБВ Поща, operated by Нет Инфо ЕАД, is a leading Bulgarian email service provider established in 1998. The website offers a secure and user-friendly email platform with 15 GB storage, contact management, and mobile applications. It integrates a rich media ecosystem featuring news, weather, horoscopes, and entertainment content from trusted Bulgarian partners, positioning itself as a comprehensive digital portal for Bulgarian internet users. The business model combines free email services with advertising and premium offerings (ABV+). The company maintains a strong market presence with consistent branding and official mobile app distribution.

A

AnarchyMu Season 6 Episode 3

anarchymu.com

56

AnarchyMu.com is a niche online gaming website hosting private servers for the MU Online MMORPG, specifically focusing on Season 6 Episode 3. The site offers game client downloads, player rankings, market for in-game items, and community forums. The target audience is MU Online players seeking private server experiences with enhanced rates and features. Technically, the site uses jQuery and jQuery UI libraries, with Cloudflare DNS hosting but lacks advanced security headers and DNSSEC. The website design is functional and moderately optimized for mobile, with basic SEO and accessibility features. Security posture is limited, with no evident privacy or cookie policies, and no incident response or vulnerability disclosure information. The domain is registered since 2017 with a reputable registrar and Cloudflare nameservers, indicating moderate legitimacy. Overall, the site provides a functional gaming community platform but lacks formal privacy, security, and compliance measures.

M

Maze Creative

mazecreative.co.uk

61

Maze Creative is a small, remote creative agency specializing in branding and digital product design, operating studios in London and Valencia. The company offers a comprehensive range of services including creative direction, brand identity, UI/UX design, and no-code development. Their market position is that of a specialized boutique agency focused on long-term client relationships and delivering high-quality creative solutions. Technically, the website is built on modern web technologies including Webflow CMS, uses Google Analytics for visitor insights, and implements Google reCAPTCHA for bot protection. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies are not publicly documented. The absence of WHOIS data for the exact domain queried introduces some uncertainty regarding domain registration legitimacy, but the website content and client testimonials strongly indicate a legitimate business. Privacy compliance is partial, with cookie consent present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy with room for improvement in transparency and security documentation.

The website sitemaphosting4.com serves as a hosting platform for sitemaps created by the PRO-Sitemaps.com service. It offers sitemap hosting and generation services including various sitemap types and automatic updates, targeting webmasters and site owners who require easy sitemap management without installing software. The site is simple and informational, with basic design and limited technical sophistication. The domain is registered since 2020 with a reputable registrar and uses Cloudflare DNS, indicating a stable technical foundation. However, the absence of DNSSEC, visible HTTPS confirmation, and security headers suggests room for security improvements. No privacy, cookie, or terms of service policies are present, and no contact information is provided, which impacts compliance and trust. Overall, the site is functional for its niche but lacks comprehensive security and privacy practices.

V

VGN Medien Holding GmbH

vgn.at

72

VGN Medien Holding GmbH is Austria's leading magazine publisher, established in 1992 with a strong portfolio of print and digital media brands. The company targets the Austrian population with content spanning politics, society, lifestyle, business, and entertainment. Their business model integrates traditional publishing with digital innovation and content marketing services, positioning them as a market leader in the Austrian media sector. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics, and OneTrust for cookie consent, ensuring a compliant and user-friendly experience. The site is mobile-optimized and SEO-conscious, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policy pages and incident response contacts, which are recommended for enhanced transparency and readiness. Overall, the website is professional, trustworthy, and compliant with GDPR, with no detected critical vulnerabilities or suspicious content.

R

Reformierte Kirche Kanton Luzern

reflu.ch

62

The website www.reflu.ch serves as the official online presence of the Reformed Church of the Canton of Luzern, Switzerland. It provides information about church services, pastoral care, community events, and regional church congregations. The site targets local German-speaking community members seeking spiritual support and church-related activities. The business model is non-profit and government-affiliated, focusing on community and religious services. The website is well-branded and consistent with the church's identity, featuring event calendars and news updates that demonstrate active engagement with its audience. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and integrates tracking pixels from TikTok, Facebook, and Google Tag Manager. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. However, it lacks explicit privacy and cookie policies, which is a notable compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and explicit incident response contacts reduces the overall security maturity. From a security and compliance perspective, the site does not present critical vulnerabilities or exposed sensitive data. The WHOIS data aligns well with the website's claims, showing consistent registrant information appropriate for a regional church organization. No WAF or blocking mechanisms were detected, allowing full content access. The site does not contain any adult or NSFW content, making it safe for general audiences. Overall, the website is credible and professionally maintained but would benefit from enhanced privacy compliance measures and improved security headers. Adding clear contact information for security incidents and a vulnerability disclosure policy would further strengthen trust and compliance.

F

Freaking Dad

freaking-dad.de

56

Freaking Dad is a German-language podcast platform focused on fatherhood, parenting, and family life, targeting parents with a special emphasis on fathers. The website hosts podcast episodes, blog content, and engages audiences via multiple social media channels. The business operates as a small media entity with a niche market position, leveraging LetsCast.fm for podcast hosting and distribution. The content is professionally presented with consistent branding and good quality, appealing to a general audience interested in parenting and related lifestyle topics. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and the Podlove Web Player for podcast playback. It uses Turbolinks for navigation and Tailwind CSS for styling. Hosting is via LetsCast.fm and domain DNS is managed through rzone.de. The site is mobile-optimized with good SEO practices but lacks some accessibility features. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. However, no explicit security headers were detected, and there is no published security policy or incident response information. Privacy compliance is partial, with a privacy policy linked to the podcast host but no cookie consent mechanism on the main site. Contact information is available via email and a contact form with anti-spam measures. Overall, the website is safe, professional, and trustworthy for its intended audience. It does not contain adult or explicit content. Recommendations include enhancing security headers, implementing cookie consent, and publishing security and incident response policies to improve compliance and trust.

A

Associazione svizzera delle organizzazioni giovanili (SAJV)

congedogiovanile.ch

53

The website congedogiovanile.ch serves as an informational platform dedicated to promoting and explaining the youth leave rights (congedo giovanile) in Switzerland. It targets young employees and apprentices under 30 engaged in volunteer activities within cultural, sports, or social organizations. The site provides downloadable forms, informational brochures, legislative references, and a chatbot for user assistance. The organization behind the site is the Swiss Association of Youth Organizations (SAJV), positioning itself as a trusted non-profit resource in this niche. Technically, the site is built on a Redaxo CMS platform, utilizing standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Swiper.js for UI components. While the site is well-structured and mobile-optimized, it lacks critical privacy and cookie policies and does not expose security headers, which are areas for improvement. No contact emails or phone numbers are explicitly provided, which may affect user trust and compliance. Overall, the site is legitimate, safe, and serves its informational purpose effectively but would benefit from enhanced security and privacy compliance measures.

S

SIWECOS

siwecos.de

46

SIWECOS is a German-based service focused on providing website security checks and CMS security analysis primarily targeting small and medium-sized enterprises (KMU). The platform offers an online security scanner, a security seal, and support resources to help website operators identify and remediate security vulnerabilities. The website is professionally designed, bilingual (German and English), and supported by reputable partners including government and academic institutions. Technically, the site is built on Joomla CMS, hosted by Hetzner, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and secure forms, though some improvements are recommended such as adding security headers and cookie consent mechanisms. Overall, the domain and hosting information align with the business claims, indicating legitimacy and trustworthiness.

The Wasser- und Bodenverband "Untere Tollense / Mittlere Peene" is a regional government-related organization based in Jarmen, Germany, focused on water and soil management. Their website provides comprehensive information about their tasks, organizational structure, and current activities, targeting local stakeholders and the public interested in environmental and water management issues. The site is professionally designed with clear navigation and relevant content, reflecting a small-sized public service entity. Technically, the website is built on TYPO3 CMS 6.2 with common web technologies such as Bootstrap, jQuery, and Font Awesome. While the site is mobile-optimized and performs moderately well, it uses an outdated CMS version which may pose security risks. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism and only a basic privacy policy present. Overall, the website is trustworthy and serves its informational purpose effectively but would benefit from modernization and enhanced security and privacy practices.

M

MS Management-Service GmbH

ms-agrarversicherungen.de

60

MS Management-Service GmbH is a specialized insurance broker based in Gießen, Germany, focusing on agricultural and private insurance products. Their offerings include liability insurance, building insurance, crop damage coverage, and services for seasonal workers, among others. The company targets agricultural businesses and private clients within Germany, positioning itself as a niche regional broker with a comprehensive portfolio tailored to the agricultural sector. Technically, the website is built on the cm Homepage-Baukasten CMS platform, hosted via transmit.de, and employs modern web technologies including HTTPS, JavaScript, and FriendlyCaptcha for form protection. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO and technical implementation are adequate but could benefit from enhancements such as improved security headers and accessibility compliance. From a security perspective, the site enforces HTTPS and uses captcha mechanisms to prevent spam. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is strong with clear GDPR-aligned privacy and cookie policies and user consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional and trustworthy front for a small insurance brokerage firm. Strategic improvements in security headers, incident response transparency, and accessibility would enhance the security posture and user trust further.

S

Sparstopp

sparstoppjugend.ch

9

Sparstopp is a Swiss non-profit advocacy website dedicated to opposing government budget cuts in youth and child promotion programs. The site serves as a mobilization platform for youth organizations and civil society, providing information, petitions, and calls to action. The website is well-designed with good content quality and clear navigation, targeting Swiss youth organizations and the general public concerned with youth funding. Technically, it uses modern front-end libraries such as Swiper.js and FontAwesome and is likely built on the REDAXO CMS. However, the site lacks key privacy and cookie policies, security headers, and explicit contact information, which impacts its security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

Faktor Journalisten AG is a Swiss-based small enterprise specializing in communication, technical journalism, and graphic design with a focus on sustainability, architecture, construction, and energy sectors. The company also operates a subsidiary publishing house, Faktor Verlag, which produces educational materials for professionals in planning and construction. The website is professionally designed with clear navigation and relevant content targeting industry professionals. Technically, the site uses standard web technologies with good mobile optimization and SEO practices but lacks advanced frameworks or CMS indications. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is basic with a privacy policy and cookie information present but no explicit consent mechanism. Overall, the site is trustworthy and well-positioned within its niche.

S

skyPixX GmbH

skypixx.ch

47

skyPixX GmbH is a Swiss-based small business specializing in graphic design and advertising technology services. Their offerings include direct printing, vehicle wrapping, signage, interior design, milling and cutting, POS displays, illuminated advertising, privacy and sun protection films, and logistics/montage services. The company targets local businesses and organizations seeking professional advertising and design solutions. The website presents a professional and consistent brand image with clear contact information and multimedia content such as videos and maps to enhance user engagement. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, Google Analytics, Google Maps API, Video.js, Lightbox2, and Typekit fonts. The site is mobile optimized with good navigation and user experience, although accessibility features are basic. Performance is moderate with no critical errors or broken elements detected. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML. However, it lacks visible security headers such as Content-Security-Policy and Strict-Transport-Security, and no security or incident response policies are published. The absence of privacy and cookie policies and consent mechanisms indicates compliance gaps with GDPR and related regulations. Google Analytics is used without visible user consent, which may pose privacy compliance risks. Overall, the website is safe, professional, and business-focused with moderate security posture and privacy compliance. Strategic improvements in security headers, privacy policies, and cookie consent would enhance trust and regulatory compliance.

L

Landeswasserverbandstag Brandenburg e.V.

lwt-brandenburg.de

47

The Landeswasserverbandstag Brandenburg e.V. (LWT) is a regional non-profit organization serving as the umbrella association for public water management entities in Brandenburg, Germany. The website provides information about the organization's mission, events, and member services, targeting stakeholders in water supply, wastewater management, and water body maintenance. The site is built on Joomla CMS with Yootheme and UIkit frameworks, offering a responsive and well-structured user experience. Technical infrastructure is modern and adequate for the organization's needs, hosted on a regional provider with secure HTTPS connections. Security posture is solid with HTTPS and CSRF protections, but lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Overall, the website is professional, trustworthy, and safe, with no signs of malicious content or blocking mechanisms.

Deutsche Telekom AG operates the website www.telekom.de, providing a comprehensive range of telecommunications services including mobile telephony, fixed-line, internet, TV, and fiber optic solutions. The website targets both private and business customers in Germany, positioning itself as a leading telecommunications provider with a strong market presence. The business model revolves around offering bundled and individual telecom services with a focus on digital innovation and customer convenience. Technically, the website employs modern web technologies such as React, Dynatrace for monitoring, and Tealium for tag management, ensuring a responsive, accessible, and SEO-optimized user experience. The infrastructure appears robust, with fast performance and mobile optimization, hosted likely on proprietary or Telekom-controlled infrastructure. From a security perspective, the site enforces HTTPS, uses security monitoring tools, and implements GDPR-compliant consent mechanisms. However, explicit security policies and vulnerability disclosure information are not publicly available, representing an area for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations, making it a reliable digital presence for Deutsche Telekom AG. Strategic recommendations include publishing detailed security policies, enhancing visible security headers, and providing a vulnerability disclosure channel to further strengthen security posture.

M

Meyer Sound

meyersound.com

47

Meyer Sound is a well-established company founded in 1979 specializing in the design and manufacture of professional audio equipment, particularly loudspeakers and sound systems. The company targets professional audio engineers, event production companies, and venues, positioning itself as a leader in the professional audio technology sector. The website reflects a professional and consistent brand image with good content quality and relevant business information. Technically, the site uses modern web technologies including WordPress CMS, Google Fonts, and Font Awesome Pro icons, hosted via a CDN for performance. However, mobile optimization and accessibility are basic and could be improved. Security posture is moderate with HTTPS likely enabled but lacking visible security headers and DNSSEC. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data is consistent with the business history, enhancing trustworthiness.

T

TELTA Citynetz GmbH

telta.de

60

TELTA Citynetz GmbH is a regional telecommunications and IT service provider based in Germany, specializing in high-speed fiber internet, telephone, TV, and webhosting services primarily targeting private and business customers in the Eberswalde region. The company operates under the EWE Konzern umbrella, indicating a solid corporate backing. Their website reflects a professional and consistent brand presence with clear service offerings and customer support channels. Technically, the site is built on TYPO3 CMS with Bootstrap, providing a modern and responsive user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and published security policies. The domain WHOIS data is limited due to DENIC privacy policies but shows consistent nameservers and domain status, supporting legitimacy. Overall, TELTA Citynetz GmbH demonstrates a mature digital presence with good compliance and trust indicators.

S

Sharp

sharp.eu

78

Sharp Europe is a well-established technology company specializing in secure, sustainable, and smart workplace technology solutions. Their offerings include multifunction printers, managed IT services, audio visual equipment, and cybersecurity solutions targeted primarily at SMBs and enterprises across Europe. The website demonstrates a strong market position with comprehensive service coverage and a professional digital presence. Technically, the site is built on Drupal CMS with modern web standards, optimized for mobile and SEO, and integrates Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the domain is privacy protected but consistent with a legitimate business entity. The site is safe for general audiences and shows high professionalism and trustworthiness.

W

Württembergischer Tennis-Bund e.V.

wtb-tennis.de

57

The Württembergischer Tennis-Bund e.V. is a large, well-established regional tennis association in Germany, serving as the second largest within the German Tennis Federation. The organization provides a comprehensive range of tennis-related services including competition management, training and education for coaches and referees, youth development, and media relations. Their website reflects a professional and content-rich platform targeting tennis players, clubs, and enthusiasts in the Württemberg region. Technically, the site is built on the TYPO3 CMS with Bootstrap for responsive design, delivering good performance and accessibility. Security posture is solid with HTTPS enforced, but lacks some advanced security headers and explicit security policies. Privacy compliance is moderate due to the absence of a clearly accessible privacy policy, though a cookie consent mechanism is present. Overall, the domain and website present a trustworthy and professional image with strong social media integration and active content updates.

E

EKO-PUNKT

eko-punkt.de

65

EKO-PUNKT is a German-based competence center specializing in sustainable packaging management, including packaging licensing, circular contracting, ecodesign, and recycled material delivery. The company operates under the REMONDIS Group umbrella, a well-established waste management conglomerate. Their website reflects a professional and business-focused approach, targeting companies needing compliance and sustainability solutions in packaging. The digital infrastructure is built on TYPO3 CMS, integrating modern tools like Cookiebot for consent management and Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides clear navigation, although explicit contact details like emails and phone numbers are not directly visible, relying instead on contact forms.

Niederoesterreich.at is the official tourism and travel portal for the Lower Austria region, operated by Niederösterreich-Werbung GmbH. The website offers comprehensive travel information, accommodation booking, event calendars, and cultural and natural experience guides targeting tourists interested in exploring the region around Vienna. It holds a strong market position as a government-supported regional tourism authority with consistent branding and a professional online presence. Technically, the website employs modern web technologies including JavaScript, Matomo analytics with privacy-conscious configurations, and Google Tag Manager. The site is mobile-optimized and features good SEO practices, though some security headers could be improved. The site uses HTTPS with good SSL configuration, and disables cookies in analytics to enhance privacy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-respecting analytics. However, it lacks a visible cookie consent mechanism and some security headers like Content-Security-Policy and X-Frame-Options are missing, which are recommended for enhanced protection. No vulnerabilities or suspicious activities were detected. Overall, the website is safe, professional, and trustworthy, with no adult or explicit content. The WHOIS data aligns well with the website's identity, confirming legitimacy. Strategic recommendations include implementing a cookie consent banner, adding missing security headers, and enhancing accessibility features to further improve compliance and security posture.

The website www.wieneralpen.at serves as a comprehensive regional tourism portal for the Wiener Alpen area in Lower Austria, Austria. It provides detailed information on hiking, cultural events, accommodation, and travel tips, targeting tourists interested in outdoor and cultural activities. The site is well-branded and consistent with regional tourism authorities, offering a good user experience with clear navigation and multilingual support. Technically, it employs modern web technologies including JavaScript frameworks, Vimeo video integration, Google Tag Manager, Matomo analytics with privacy-conscious configurations, and Cookiebot for cookie consent management. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though explicit security policies and incident response contacts are not published. The site does not expose sensitive data or use vulnerable libraries. Privacy compliance is partial due to the absence of a visible privacy policy and terms of service. Overall, the site is trustworthy, professional, and safe for general audiences.

M

Ministerium für Kultus, Jugend und Sport Baden-Württemberg

km-bw.de

67

The website km.baden-wuerttemberg.de is the official portal for the Ministry of Education, Youth and Sports of Baden-Württemberg, Germany. It serves as a comprehensive information hub for education policies, youth programs, sports initiatives, cultural affairs, and public services related to schooling and early childhood education in the region. The site targets citizens, students, parents, and educators within Baden-Württemberg, providing official government content and resources. The business model is public service and information dissemination as part of the regional government infrastructure. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo analytics with a user consent mechanism, reflecting a privacy-conscious approach. The site uses modern web technologies including responsive design, SVG icons, and asynchronous JavaScript loading. Hosting appears to be managed by Baden-Württemberg state infrastructure, ensuring reliability and compliance with government standards. From a security perspective, the site enforces HTTPS and uses cookie consent for analytics. While some standard security headers are present, there is room for improvement by adding additional headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the official nature of the site, showing consistent domain registration and name servers. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It provides a safe and accessible user experience with clear navigation and relevant content. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

A

APISUMM A. Schuler

apisumm.ch

10

APISUMM A. Schuler is a small Swiss retail business specializing in the production and sale of high-quality Swiss honey, bee cosmetics, and health supplements derived from bee products such as Propolis and Gelée Royal. The company operates an e-commerce platform targeting health-conscious consumers and regional customers in Switzerland. The website presents a professional and consistent brand image with clear navigation and product offerings. Technically, the site is built on the Shopware platform, employs modern web technologies, and integrates security features such as HTTPS, CSRF tokens, and Google reCAPTCHA. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit security policies and incident response information. Overall, the website is trustworthy, secure, and well-suited for its business model.

R

Recisio

tencymusic.fr

67

Tency Music is a professional music licensing platform offering a large catalog of over 80,000 high-quality covers, instrumentals, stems, and karaoke tracks for sync and commercial use. The company targets media producers, advertisers, app developers, and video creators, providing fast licensing with a 48-hour response guarantee and tailored music solutions. The website is well-designed, mobile-optimized, and features notable clients such as Netflix, Amazon Prime, and Universal Music France, indicating a strong market position within the media industry. Technically, the site uses modern web technologies including Google Tag Manager and Google Fonts, hosted on a CDN associated with its parent company, Recisio. Security posture is good with HTTPS enforced and secure forms, but lacks some security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies. WHOIS data is missing, which raises some concerns about domain registration transparency, but the professional site and business information mitigate some risk. Overall, the site is trustworthy and functional but should improve privacy compliance and security disclosures.

The website represents the Pirelli Foundation's cultural and historical initiative celebrating 150 years of Pirelli's industrial and innovative legacy. It serves as a corporate branding and heritage platform, targeting a general audience interested in Pirelli's history and innovation. The site is well-structured with clear navigation and multilingual support (Italian and English). Technically, it employs modern web technologies including Google Tag Manager for analytics and cookie consent management, ensuring GDPR compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though some security headers are not visible in the HTML source. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and aligns with Pirelli's corporate identity.

R

RaiseNow

raisenow.com

74

RaiseNow is a professional fundraising and payment platform targeting nonprofits, clubs, and changemakers globally. The company offers a SaaS model with tools for donation collection, payment processing, community engagement, CRM integration, and campaign management. The website is well-designed, mobile-optimized, and uses modern technologies such as HubSpot CMS and Google Analytics. Privacy and cookie compliance are well addressed with visible policies and consent mechanisms. However, the absence of WHOIS data and lack of explicit security and incident response policies slightly reduce trustworthiness. Overall, the platform appears mature and reliable for its target audience.

Transkribus is a mature AI-powered platform specializing in the transcription, recognition, and analysis of historical documents. Operated by the cooperative READ-COOP SCE, it serves a broad audience including researchers, archivists, and educational institutions. The platform offers advanced AI text recognition, custom model training, and collaborative tools, positioning itself as a leader in the niche of historical document digitization. Technically, the website leverages modern frameworks such as Next.js and React, with strong performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, GDPR compliance, and consent management, although explicit security policies and incident response details are not publicly disclosed. Overall, the platform demonstrates high professionalism, trustworthiness, and a strong community-driven business model.

G

GT World Challenge Asia Powered by AWS

gt-world-challenge-asia.com

47

GT World Challenge Asia Powered by AWS is a professional motorsports racing series website focused on GT3 and GT4 racing events across Asia. The site offers comprehensive event information, live streaming, news, standings, and multimedia content targeting motorsports fans and participants. The website is well-branded and linked to the reputable SRO Motorsports Group, indicating a strong market position within the niche motorsports sector. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with good mobile optimization and SEO practices. However, the use of an outdated jQuery version and lack of visible security headers suggest areas for improvement in security posture. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, though no terms of service or explicit incident response contacts are found. The WHOIS data for the domain is missing, which raises some concerns about domain registration transparency, but the professional content and official partnerships support legitimacy. Overall, the website is functional, professional, and trustworthy with moderate technical and security maturity.

S

SRO Motorsports Group

gt-world-challenge-europe.com

68

GT World Challenge Europe Powered by AWS is a professionally managed motorsport racing series website operated by SRO Motorsports Group. The site offers comprehensive live streaming, live timing, news, and media content focused on GT3 racing events across Europe. It targets motorsport fans, teams, media, and sponsors, positioning itself as a leading platform in the European GT racing market with strong partnerships including AWS and Pirelli. The website is well-branded, content-rich, and provides a seamless user experience with clear navigation and mobile optimization. Technically, it leverages modern web technologies hosted likely on AWS infrastructure, ensuring reliable performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements are recommended in DNSSEC and security headers. No critical vulnerabilities or suspicious activities were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.