Security Directory

C

Cubex

cubexcentrum.cz

46

Cubex Centrum Praha is a leading multifunctional conference center located in Prague, distinguished by its LEED Platinum certification and award-winning event spaces. The venue offers advanced technological capabilities, sustainable design, and premium catering services, positioning itself as a top choice for corporate events, conferences, gala dinners, and exhibitions in the Czech Republic. The website reflects a mature digital presence with professional design, rich multimedia content, and strong SEO optimization. Technically, the site leverages WordPress with modern JavaScript libraries and integrates multiple analytics and marketing tools. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain shows privacy protection in WHOIS data but maintains legitimacy through consistent branding, certifications, and client testimonials.

H

Hardware Association Ireland

hardwarejobs.ie

45

Hardware Association Ireland operates as the voice of the Irish hardware industry, providing a platform for career opportunities, business support, market intelligence, training, and networking within the hardware retail, builders merchanting, supply, and manufacturing sectors. The association targets professionals and job seekers in Ireland's hardware industry, offering membership services and corporate partnerships to strengthen the sector. The website is well-structured, professionally designed, and provides relevant content tailored to its audience. Technically, the website is built on WordPress with a modern tech stack including WooCommerce, WPBakery Page Builder, and various plugins for events, job management, and analytics. Hosting is provided by eTailor, and the site uses HTTPS with Google reCAPTCHA for form security. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and CAPTCHA integration but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low-risk profile with a strong business credibility and good technical implementation. Strategic recommendations include enhancing security headers, publishing a security policy, and enabling DNSSEC to further improve security posture.

H

Hard Rock Games

hardrockgames.com

60

Hard Rock Games operates a free-to-play social casino gaming platform featuring online slots, jackpot games, blackjack, and puzzle games under the Hard Rock brand. The website targets casual gamers interested in social casino experiences without real money gambling. The platform leverages WordPress CMS with SEO and analytics integrations, indicating a moderate level of digital maturity. While the site is accessible and well-designed with good mobile optimization, it lacks visible privacy policies, terms of service, and contact information, which are critical for user trust and compliance. The security posture is adequate with HTTPS enforced but lacks important security headers and incident response disclosures. The absence of WHOIS data raises concerns about domain legitimacy and registration transparency, warranting further investigation. Overall, the site presents a professional front but should improve compliance and security transparency to enhance trust and reduce risk.

The website growthzonecms.com is a basic WordPress installation with minimal content, primarily serving as a placeholder or development environment. The site title and description indicate it is a production environment for GZCMS but lacks substantive business information, contact details, or user engagement features. The domain is relatively new, registered in 2022 with GoDaddy.com, LLC, and shows no signs of privacy protection or suspicious registration patterns. Technically, the site uses common WordPress plugins and libraries such as jQuery, Select2, Owl Carousel, and Galleria, hosted on GoDaddy infrastructure. Performance and mobile optimization are basic, with no advanced SEO or accessibility features detected. Security posture is weak, with no security headers, no DNSSEC, and no privacy or cookie policies, although HTTPS is enabled. No incident response or vulnerability disclosure mechanisms are present. Overall, the site appears to be in early development or staging phase rather than a fully operational business website.

P

Purple Lamp Studios

purplelamp.com

52

Purple Lamp Studios is a Vienna-based game development company founded by industry veterans in 2020. The company focuses on creating games and related services, targeting gamers and industry partners. The website is professionally designed using WordPress with the Salient theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, mobile-optimized, and SEO-friendly, though some technical improvements are possible. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data raises concerns about domain registration legitimacy, impacting trust. Overall, the site presents a credible business but would benefit from enhanced transparency and security practices.

D

diagnose:media

diagnose-media.org

9

diagnose:media is a German non-profit initiative focused on promoting competent and self-determined use of digital media by children and adolescents. The organization supports parents, schools, and affected individuals while networking experts and specialized institutions. Their core mission is to highlight the negative side effects of digital media and recommend measures to avoid or mitigate risks, especially concerning psychosocial aspects, communication behavior, addiction potential, privacy protection, and health impacts from mobile radiation. The website offers educational articles, publications, events, and expert lectures targeted primarily at families and educational institutions. Technically, the website employs a range of JavaScript libraries including jQuery, Slick Slider, Fancybox, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with a responsive design and clear navigation. However, some technologies like jQuery are outdated, and no explicit CMS or hosting provider information is available. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers and cookie consent mechanisms despite using tracking scripts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable or protected, which limits domain trust verification and reduces the overall legitimacy score. The site does not publish security policies or incident response information. Overall, diagnose:media presents a professional and trustworthy educational resource with good content quality and user experience. The main risks relate to incomplete WHOIS transparency and minor security best practice gaps. Strategic improvements in security headers, updated libraries, and privacy compliance would enhance trust and resilience.

E

E-Pagos S.A.

epagos.com

68

E-Pagos S.A. operates as a comprehensive payment solutions provider primarily serving public agencies and private companies in Argentina. Their platform consolidates multiple payment channels including credit/debit cards, virtual wallets, bank transfers, and POS terminals, offering a flexible and secure payment ecosystem. The company has established a solid market presence since its founding in 2015, with a medium-sized operation and trusted by numerous governmental entities and enterprises. Technically, the website leverages modern web technologies such as Bootstrap, jQuery, and integrates security features like Google reCAPTCHA and PCI-DSS certification, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and spam protection, though improvements are recommended in DNS security and HTTP headers. Privacy compliance is partial, with clear privacy and terms pages but lacking cookie consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking and analytics in place.

V

Vortechs Media DOO

zemi.mk

65

Zemi.mk is a Macedonian-based web hosting provider and authorized .mk domain registrar operating since 2015 under the legal entity Vortechs Media DOO. The company offers a range of web hosting packages including shared, cloud, Windows, and Macedonian hosting, alongside domain registration and transfer services. Positioned as a leading local provider, Zemi.mk targets individuals and businesses in North Macedonia seeking affordable and reliable web services. The website is professionally designed, mobile-optimized, and provides clear navigation with comprehensive service descriptions and customer testimonials, enhancing trust and user experience. Technically, the website employs modern web technologies such as Bootstrap, jQuery, Swiper.js, and integrates third-party services like Google Tag Manager and Tawk.to for analytics and live chat support. The site uses HTTPS with good SSL configuration, though some security headers are not explicitly detected. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR indicators. Contact options include email and web forms, with abuse reporting channels clearly provided. Security posture is solid with enforced HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data due to server-side errors limits domain registration verification, slightly impacting trustworthiness. No adult or questionable content is present, making the site safe for general audiences. Overall, Zemi.mk demonstrates a mature digital presence with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing a formal security policy and vulnerability disclosure program, and improving WHOIS data availability to strengthen legitimacy verification and trust.

L

Lietuvos kultūros taryba

ltkt.lt

44

Lietuvos kultūros taryba is the official Lithuanian Culture Council responsible for providing funding, guidelines, and support to cultural organizations, creators, and regional cultural development initiatives within Lithuania. The organization operates as a governmental or non-profit entity, serving a broad audience including NGOs, private and public cultural institutions, and individual creators. Their website offers comprehensive information on funding competitions, project financing, stipends, and cultural research, positioning them as a key national cultural funding body. Technically, the website employs modern web technologies such as jQuery, Select2, Fancybox, and integrates Google Tag Manager and Google Analytics for analytics and marketing purposes. Accessibility is a strong focus, with the implementation of the Readabler tool providing multiple accessibility modes and features. The site is mobile-optimized and demonstrates good SEO practices, although some security headers are missing. From a security perspective, the site uses HTTPS and has a robust cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data limits domain registration trust verification, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and well-structured, serving its governmental cultural funding role effectively. Strategic improvements include adding security headers, publishing terms of service and security policies, and verifying domain registration details to enhance trustworthiness.

G

Gamejobs

gamejobs.eu

47

Gamejobs.eu is a niche job board platform focused on the gaming industry, providing job listings and search services for game industry professionals and employers. The website is built on WordPress using WooCommerce and WP Job Manager plugins, indicating a moderate level of digital maturity with standard e-commerce and job listing capabilities. The site currently displays a message indicating it is offline due to a decline in job listings, which impacts its active business operations. Technically, the site uses modern web technologies including HTTPS and Google reCAPTCHA for bot protection, but lacks advanced security headers and privacy compliance mechanisms. The absence of privacy and cookie policies, as well as terms of service, suggests gaps in regulatory compliance and user trust frameworks. Overall, the security posture is moderate but could be improved with better header implementation and formal policies. The business credibility is moderate given the clear focus and contact email, but limited content and offline status reduce confidence. Strategic recommendations include implementing privacy and cookie policies, enhancing security headers, and improving content quality to regain user trust and compliance.

T

Thrustmaster

thrustmaster.com

69

Thrustmaster is a well-established company specializing in the design and manufacture of gaming hardware and accessories such as wheels, joysticks, and gamepads for PC and consoles. The company targets gamers of all skill levels, from amateurs to experts, and has been in business since 1990, positioning itself as a reputable brand in the gaming peripherals market. The website reflects a mature digital presence with professional design, good SEO, and multi-language support, indicating a global reach. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses various third-party services including Google Tag Manager and Microsoft Clarity for analytics and marketing. The site is mobile-optimized and performs moderately well, with basic accessibility features. Security is robust with HTTPS enforced and multiple security headers present, though there is room for improvement in publishing explicit security policies and incident response information. The security posture is strong, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent mechanism in place. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, though the overall trustworthiness of the site remains high based on content quality and branding consistency. Overall, Thrustmaster's website demonstrates a professional and secure online presence suitable for its business model, with recommendations to enhance transparency around security policies and domain registration details to further strengthen trust.

I

International Association of Venue Managers

iavm.org

49

The International Association of Venue Managers (IAVM) is a well-established non-profit organization founded in 2008, serving over 7,800 active members globally. It focuses on representing public assembly venues and providing professional development, advocacy, certifications, and networking opportunities. The website reflects a mature digital presence built on WordPress with a professional design and clear navigation, targeting venue management professionals and allied industries. The organization maintains a strong market position as a leading association in its sector, supported by active social media engagement and industry partnerships. Technically, the website uses modern web technologies including WordPress CMS, WPBakery Page Builder, and several JavaScript libraries for enhanced user experience. Hosting and domain registration are consistent and legitimate, with HTTPS enforced and domain transfer protections in place. However, DNSSEC is not enabled, and some security headers are missing, indicating room for improvement in security hardening. From a security perspective, the site demonstrates good baseline practices such as HTTPS and domain locking but lacks published security policies, incident response information, and cookie consent mechanisms, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious activities were detected. The privacy policy is comprehensive and GDPR compliant, but cookie policy and consent mechanisms are absent. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission and audience. Strategic recommendations include enhancing security headers, enabling DNSSEC, implementing cookie consent, and publishing security and incident response policies to improve compliance and trustworthiness.

N

Nestlé Professional

nestleprofessional.be

62

Nestlé Professional Belgium operates as a B2B foodservice provider offering a range of products and solutions tailored to chefs and commercial/social catering sectors. The website demonstrates a strong brand presence consistent with the global Nestlé Professional identity, featuring localized content and a market switcher linking to multiple regional Nestlé Professional sites. Technically, the site is built on Drupal CMS with modern JavaScript libraries and includes Google Tag Manager for analytics and OneTrust for cookie consent management. Security posture is solid with HTTPS enforced and standard security headers present, although explicit security and incident response policies are not publicly linked. Privacy compliance is well addressed with a cookie consent mechanism and a comprehensive privacy policy, indicating GDPR adherence. Overall, the site is professional, trustworthy, and well-structured, supporting Nestlé's enterprise-level operations in Belgium.

S

Sendlane

sendlane.com

68

Sendlane is a technology company specializing in unified marketing automation solutions for eCommerce merchants. Their platform integrates email marketing, SMS marketing, customer reviews, and forms into a single system designed to optimize sales and customer engagement. The company positions itself as merchant-focused, offering deep data integrations and multi-channel automation to streamline marketing efforts. The website is professionally designed, mobile-optimized, and rich in content, targeting eCommerce businesses seeking efficient marketing tools. Technically, the website leverages modern web technologies including Webflow CMS, HubSpot analytics and marketing tools, Google Tag Manager, and various JavaScript libraries for enhanced user experience and tracking. The site is hosted on a reliable CDN with HTTPS enforced and appropriate security headers, indicating a mature digital infrastructure. Performance and SEO optimizations are well implemented, contributing to a fast and accessible user experience. From a security perspective, the site demonstrates good practices such as HTTPS, security headers, and secure form handling via HubSpot. However, it lacks publicly available dedicated security policies, incident response contacts, and vulnerability disclosure mechanisms, which are important for transparency and trust. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and reduces trustworthiness from a domain ownership perspective. Overall, Sendlane presents a low-risk profile with a strong business and technical foundation but would benefit from improved domain registration transparency and enhanced security policy disclosures to further strengthen trust and compliance.

S

Slovenské centrum dizajnu

scd.sk

61

Slovenské centrum dizajnu is a Slovak government-affiliated cultural institution dedicated to researching, presenting, and popularizing design in Slovakia. It also preserves cultural heritage through its Slovak Museum of Design department. The organization operates a professional website with rich content including articles, exhibitions, events, publications, and profiles of design personalities. The site targets design professionals, cultural institutions, and the general public interested in design. It holds a strong national position as the authoritative design center in Slovakia.

K

KlimaPark Kysak

klimapark.sk

50

KlimaPark Kysak is a newly established environmental education center located in eastern Slovakia, offering immersive audiovisual experiences and educational tours focused on environmental awareness. The website serves as a digital portal for visitors and educational groups to learn about the center, view galleries, and make reservations. The business positions itself as a regional leader in environmental education with a focus on interactive and innovative learning experiences. Technically, the website is built on WordPress and leverages modern JavaScript libraries including ArcGIS for mapping, providing a functional and visually appealing user experience. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and formal privacy or cookie policies, which are important for GDPR compliance. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

N

Nestle Professional

nestleprofessional.ca

70

Nestlé Professional Canada operates as a B2B supplier specializing in culinary and beverage solutions for the hospitality and foodservice sectors. The website presents a professional and consistent brand image aligned with the global Nestlé brand, targeting Canadian foodservice operators and culinary professionals. The business model focuses on providing products, systems, and expertise to grow operations in the food and beverage industry. Technically, the site is built on Drupal CMS with modern JavaScript libraries and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. The site is mobile-optimized and accessible with good SEO practices. Security posture is moderate; HTTPS is implied, but no explicit security headers or vulnerability disclosures are present. The absence of WHOIS data for the domain is a notable anomaly, potentially indicating privacy protection or registration issues. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in privacy and security policies.

H

Hessische Krebsgesellschaft e.V.

hessische-krebsgesellschaft.de

56

Hessische Krebsgesellschaft e.V. is a regional non-profit organization based in Frankfurt am Main, Germany, dedicated to providing cancer information, counseling, prevention, and support services. The website serves patients, their families, and healthcare professionals with comprehensive resources including cancer counseling centers across Hessen, prevention initiatives, and educational events. The organization maintains a strong market position within the healthcare non-profit sector in Germany, emphasizing social and economic support for cancer-affected individuals. Technically, the website is built on WordPress using the Kadence theme and several plugins such as Yoast SEO for search optimization, Modern Events Calendar Lite for event management, and Borlabs Cookie for privacy compliance. The site demonstrates good digital maturity with mobile optimization, accessibility features, and moderate performance. Analytics are implemented via Koko Analytics with minimal user tracking, respecting privacy. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows a consistent domain registration aligned with the organization's identity, hosted on agency servers common for non-profits. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, providing a safe and informative experience for its users. Strategic recommendations include enhancing security headers, publishing a security policy, and considering a vulnerability disclosure program to further strengthen security posture.

P

PCAM

pcam.co.uk

52

PCAM is a professional society representing producers and composers of applied music. The website serves as an informational and membership platform targeting music industry professionals. The site is built on WordPress using the Divi theme and incorporates membership management plugins and Mailchimp for marketing communications. The technical infrastructure is standard for small to medium-sized organizations with moderate performance and basic mobile optimization. Security posture is moderate but lacks important security headers and privacy compliance documentation. The domain WHOIS data is unavailable due to a naming rules violation, raising concerns about domain legitimacy. Overall, the website is functional but requires improvements in security, privacy compliance, and domain registration legitimacy to enhance trust and credibility.

C

Camping de Rozenhof

campingrozenhof.com

49

Camping de Rozenhof is a family-oriented camping and rental business located in Zeeland, Netherlands, offering various camping pitches and rental accommodations such as chalets and houses. The website targets families and beach lovers seeking a tranquil vacation experience. The business operates a small-scale hospitality model with a regional market focus. Technically, the website is built on Joomla CMS with modern JavaScript libraries including jQuery, Bootstrap, and Swiper.js, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are not found, indicating compliance gaps. Suspicious external links embedded in the HTML may pose reputational risks. Overall, the website is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

D

Dussmann - Das Kulturkaufhaus

kulturkaufhaus.de

58

Dussmann - Das Kulturkaufhaus operates a professional online retail platform specializing in books, music, sheet music, and movies, primarily serving cultural enthusiasts in Berlin and beyond. The website reflects a medium-sized retail business with a strong cultural focus, offering curated products and hosting events and workshops. The digital infrastructure employs modern JavaScript libraries and tracking tools, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS and secure form handling, though explicit privacy and cookie policies are not evident, indicating room for compliance improvement. Overall, the website presents a trustworthy and professional front, though enhancing transparency around privacy and contact information would strengthen user trust and regulatory compliance.

T

Thüringer Theaterportal

thueringer-theaterportal.de

52

Thüringer Theaterportal is a regional cultural platform dedicated to providing comprehensive schedules and information about theater performances in Thuringia, Germany. It aggregates event details from local theaters such as Schotte e.V. and Kabarett DIE ARCHE, offering users detailed descriptions, images, and direct links to ticket purchasing on partner websites. The portal targets theater enthusiasts and the general public interested in cultural events within the region. Technically, the website is built on the Contao Open Source CMS and employs a variety of JavaScript libraries including jQuery, jQuery UI, Colorbox, and Select2 to enhance user experience. The site is mobile-optimized with a responsive design and includes accessibility features such as skip navigation links. SEO is basic but functional, with meta tags and structured data present. From a security perspective, the site enforces HTTPS and includes essential cookies with CSRF protection. A cookie consent banner is implemented, allowing users to opt-in for external content such as Google Maps. However, the site lacks several recommended security headers and does not provide explicit incident response or vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy front for a small regional cultural information service. It complies with GDPR requirements at a basic level and maintains a good balance between usability and security. Strategic improvements in security headers and transparency would enhance its security posture further.

V

Vautron Rechenzentrum AG

vautron.de

56

Vautron Rechenzentrum AG is a well-established German technology company specializing in domain registration, dedicated servers, cloud servers, and managed hosting services. With a strong market position as one of Germany's leading domain registrars and a portfolio exceeding 1.1 million domains, Vautron operates multiple data centers and offers comprehensive IT infrastructure solutions tailored to business clients. Their services include Proxmox virtualization, S3 cloud storage, and managed private cloud offerings, emphasizing flexibility, security, and scalability. Technically, the website employs modern web technologies such as Bootstrap, jQuery, FontAwesome, and Matomo analytics, ensuring a responsive and user-friendly experience. The infrastructure is supported by ISO 27001 certified data centers, reflecting a mature security posture. The company demonstrates GDPR compliance through clear privacy and cookie policies, consent mechanisms, and transparent contact channels. Security-wise, Vautron maintains strong practices including secure managed services, abuse reporting, and encrypted communications. However, there is room for improvement in publicly disclosing vulnerability disclosure policies and enhancing HTTP security headers. No critical vulnerabilities or suspicious activities were detected. Overall, Vautron presents a trustworthy, professional, and technically sound digital presence with a high level of business credibility and compliance. The risk profile is low, supported by consistent WHOIS data and transparent business operations.

S

Syona Roots

syonaroots.com

60

Syona Roots is a commercial chair and furniture manufacturer based in India, specializing in executive chairs, cafeteria chairs and tables, visitor chairs, and gang chairs for institutions, hospitals, and business organizations. The company positions itself as a leading manufacturer offering affordable pricing. The website is built on WordPress with WooCommerce and Elementor, leveraging modern JavaScript libraries and plugins to provide a functional e-commerce experience. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data and contact information introduces some risk in trustworthiness assessment. Overall, the site is professional and business-focused but would benefit from enhanced privacy compliance and clearer business contact details.

H

Harvard Business Impact

harvardbusiness.org

62

Harvard Business Impact is a professional leadership development organization leveraging the expertise and brand of Harvard Business School to provide transformative learning experiences for enterprise clients globally. The website presents a polished, well-structured digital presence built on WordPress, incorporating modern marketing and analytics technologies such as Google Tag Manager, Demandbase, and LinkedIn Insight Tag. The content is focused on leadership insights, solutions, and client stories, targeting large organizations seeking to develop leadership capabilities. Security posture is good with HTTPS and no visible vulnerabilities, but lacks some security headers and formal privacy and cookie policies. WHOIS data is unavailable, which slightly impacts trust but the strong branding and content quality mitigate concerns. Overall, the website is professional, secure, and business credible, though improvements in privacy compliance and transparency are recommended.

V

Victory Sweepers

sweeperpartsonline.com

55

Victory Sweepers, a division of ROOTS MULTI CLEAN, Inc., operates an e-commerce platform specializing in spare parts for industrial and commercial sweepers. The company targets businesses and individuals requiring replacement parts for various sweeper models, positioning itself as a niche supplier with direct manufacturer ties. The website is professionally designed with clear navigation and mobile responsiveness, supporting a good user experience. Technically, the site is built on ASP.NET WebForms with modern frontend libraries like Bootstrap and jQuery, hosted likely via GoDaddy. Security posture is moderate with HTTPS enabled and form protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is limited, with no visible privacy or terms of service pages, though a cookie consent banner is present. Contact information is comprehensive and trust indicators are strong, including social media presence and physical address. Overall, the site is legitimate and functional but could improve in privacy and security transparency.

L

LEVIOR, s.r.o.

levior.cz

50

LEVIOR, s.r.o. is a Czech-based company specializing in supplying tools and hardware goods primarily targeting craftsmen and tradespeople. Their website presents a comprehensive catalog of measuring tools, workshop tools, cutting tools, construction tools, and safety equipment, positioning them as a specialist supplier in the Czech retail and manufacturing sectors. The business model appears to focus on both B2B and B2C sales, emphasizing product quality and reliability. Technically, the website employs modern JavaScript libraries such as Swiper, Select2, Flatpickr, and tracking tools like Google Tag Manager and Hotjar. The site is mobile-optimized with good navigation and SEO practices. However, no CMS or hosting provider information is explicitly detected. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating some privacy awareness. However, no security headers are detected, and there is no visible privacy policy, terms of service, or incident response contact information. The absence of WHOIS data reduces transparency and trustworthiness, although the website content and professional design support legitimacy. Overall, the website scores moderately well in content quality, technical implementation, and business credibility but lacks in privacy compliance and security posture. Strategic improvements in publishing privacy and security policies, adding security headers, and clarifying WHOIS information would enhance trust and compliance.

S

SPARROW

sp-sparrow.cz

45

SPARROW is a small family-owned business based in the Czech Republic specializing in the manufacture and retail of sportswear and fitness clothing, with over 25 years of experience. The company offers custom club clothing, costumes, and jerseys, leveraging high-quality imported materials and modern production technologies. Their website serves as an e-commerce platform showcasing their product range and custom design services. Technically, the website uses a legacy jQuery version and BohemiaSoft e-commerce platform scripts, with Google Tag Manager and Google Analytics for tracking. While the site is accessible and mobile-optimized, some technical issues such as outdated libraries and malformed script tags were identified. Security posture is moderate with HTTPS enforced and basic cookie consent mechanisms, but lacks advanced security headers and updated libraries. The absence of WHOIS data and a formal privacy policy page reduces trust and compliance confidence. Overall, the site is functional and professional but would benefit from technical and compliance improvements.

C

Cyberbizz FZE

plantfinancebroker.com

57

The Plant Finance Broker, operated by Cyberbizz FZE based in the UAE, is a specialized brokerage firm offering financing solutions for construction equipment, plant, and machinery. The company leverages partnerships in the US, UK, and Canada to provide international finance and fintech payment services, positioning itself as a niche player in the construction finance sector. The website reflects a professional and consistent brand image with clear service offerings and a focus on global financial services and equipment upgrades. Technically, the website is built on WordPress with modern plugins for forms, cookie consent, and analytics. It uses HTTPS with a good SSL configuration but lacks DNSSEC and some recommended security headers. The site is moderately optimized for performance and mobile devices, with basic accessibility features. Analytics usage is minimal and privacy compliant, supported by a cookie consent mechanism. Security posture is adequate with HTTPS and reCAPTCHA protections on forms, but improvements are needed in DNSSEC deployment and security headers to enhance protection. No direct contact emails or phone numbers are published, relying on web forms for communication. The domain registration is transparent and consistent with the business claims, enhancing trustworthiness. Overall, the website presents a moderate risk profile with no critical vulnerabilities detected. Strategic improvements in security headers, DNSSEC, and explicit security policies would strengthen the security posture and compliance. The business model and partnerships indicate a focused niche service with growth potential in international construction finance.

R

REMEX GmbH

meb-wissen.de

50

MEB Wissen is an educational platform operated under the REMEX GmbH group, focused on providing training and resources related to the German Ersatzbaustoffverordnung (EBV) regulation. The platform offers on-demand courses, live webinars, group seminars, and digital/print work aids targeting professionals in construction and environmental sectors. The business model centers on paid and free educational content to support sustainable building material usage. Technically, the website is built on WordPress with WooCommerce and Masterstudy LMS, leveraging modern web technologies such as Vue.js and Bootstrap. The site is hosted on INWX nameservers and shows good SEO and mobile optimization practices. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements are recommended such as adding security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR, though explicit cookie consent is missing. The WHOIS data aligns with the business claims, showing no suspicious patterns. The site integrates social media channels and partner domains related to REMEX GmbH, enhancing credibility.

M

mama & family

mamaundfamily.de

53

mama & family operates a German-language online magazine specializing in family-related topics such as pregnancy, parenting, baby care, and toddler development. The website targets parents and prospective parents, providing informational content, newsletters, and advertising opportunities. The business model is content publishing with monetization primarily through advertising and newsletter subscriptions. The site maintains a consistent brand presence and offers good quality content relevant to its niche audience. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for social sharing, forms, and ads. Hosting and DNS are managed via Cloudflare, ensuring reliable delivery and security. The website is mobile-optimized and SEO-friendly with structured data and meta tags implemented. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are lacking and no explicit security or incident response policies are published. Privacy compliance is good, with a comprehensive privacy policy and cookie consent aligned with GDPR. No suspicious or malicious content or domains were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

C

Colgate Oral Health Network

colgatedentaleducatorsnetwork.com

59

The Colgate Oral Health Network website serves as a professional platform focused on dental education and oral health resources. It targets dental educators and oral health professionals, providing educational content and networking opportunities. The site appears to be a niche healthcare-related resource, likely affiliated with Colgate-Palmolive, although explicit corporate details are not provided. Technically, the website is built on WordPress and employs modern web technologies such as Bootstrap, FontAwesome, and analytics tools like Matomo and Google Tag Manager. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS presumably enabled, but no explicit security headers or policies are visible. Privacy and cookie policies are absent, and no contact information is provided, which impacts trust and compliance. The WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the website is functional but requires improvements in transparency, security, and compliance to enhance trustworthiness and user confidence.

C

Colgate Oral Health Network

colgateoralhealthnetwork.com

59

The Colgate Oral Health Network website serves as a professional platform providing educational content and resources focused on oral health, targeting dental professionals and practitioners. The site is branded consistently with the Colgate-Palmolive Company, indicating a strong market position in healthcare education. Technically, the website is built on WordPress with modern libraries such as Bootstrap and uses Google Tag Manager and Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak, with no visible privacy or cookie policies, which could expose the organization to regulatory risks. Overall, the website is professional and trustworthy in content but requires improvements in privacy and security transparency to enhance compliance and user trust.

T

Tribune Group GmbH Inc.

fgmdentalgroupcampus.com

56

FGM Dental Group campus operates as a specialized online education platform focused on dental professionals and students, offering live and on-demand webinars, case studies, and expert sessions. The platform is professionally branded under Tribune Group GmbH Inc., with a clear focus on continuing education and dental expertise. The website is technically mature, leveraging WordPress CMS, modern JavaScript libraries, and CDN hosting for performance and scalability. Security posture is generally strong with HTTPS and reCAPTCHA integration, though some security headers are missing and WHOIS data is unavailable, which slightly impacts trust. Privacy and terms policies are comprehensive and GDPR compliant, supporting user trust and regulatory adherence. Overall, the platform presents a credible and professional digital presence in the healthcare education sector.

L

Lobbe

lobbe.app

56

Lobbe operates a German-language website providing digital tools and services for waste management, including a personalized waste collection calendar, container ordering, and recycling location information. The company targets residents in German municipalities where it operates, positioning itself as a regional service provider with a medium-sized business profile. The website is built on WordPress with modern plugins and demonstrates good content quality, accessibility, and SEO optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response details could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves its intended audience effectively.

A

Axians Deutschland

axians.de

80

Axians Deutschland is a prominent ICT solutions provider and digital transformation partner operating as part of the global VINCI Energies network. The company focuses on delivering industry-specific digitalization services, primarily targeting business customers in Germany's energy and technology sectors. The website reflects a professional and consistent brand presence, emphasizing Axians' role as a pioneer in digital transformation. Technically, the site is built on WordPress with modern libraries and includes SEO and analytics tools such as Yoast SEO Premium and Matomo Analytics. Security measures include HTTPS usage and Google reCAPTCHA integration, alongside a cookie consent mechanism, although explicit security policies and headers are not evident. The WHOIS data is partially consistent with the website's claims but lacks detailed registrant information, slightly impacting trust. Overall, the site is well-structured, secure, and compliant with basic privacy standards, suitable for its business audience.

E

ELBE DECKEN

elbedecken.de

37

ELBE Decken is a specialized German manufacturer and supplier of prestressed concrete floor slabs, operating under the umbrella of Heidelberg Materials, a major global construction materials company. The company offers a broad product range and comprehensive services including manufacturing, delivery, consulting, planning, and project support. Their market position is strong within Germany, targeting construction professionals such as builders, architects, and investors. The website reflects a professional and well-branded digital presence with clear navigation and relevant content tailored to their audience. Technically, the site is built on WordPress with modern plugins and themes, optimized for SEO and mobile use, and hosted by Goneo. Security measures include HTTPS, Google reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides sufficient contact and business information.

E

Ev.-Luth. Kirche in Oldenburg

kirche-oldenburg.de

48

The Evangelisch-Lutherische Kirche in Oldenburg operates as a regional non-profit religious organization serving the Oldenburg area in Germany. The website provides comprehensive information about church services, community support, educational programs, and social initiatives, targeting a broad audience interested in religious and community activities. The organization maintains a consistent brand presence and offers clear contact channels including phone, email, and social media. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery, ensuring good mobile responsiveness and accessibility. SEO practices are well implemented with meta tags and structured data. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms aligned with GDPR requirements. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved. No vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates a solid security posture and compliance with privacy regulations, supporting the organization's credibility and trustworthiness. Strategic improvements in security headers and publishing a formal security policy would enhance the security maturity further.

I

Internetagentur dd-media.de

werratal-wetter.de

50

The website www.werratal-wetter.de serves as a regional weather data and information portal focused on the Kalirevier area in Germany. It provides current and historical weather data, local event information, and regional news links. The site is operated by Internetagentur dd-media.de, a small agency specializing in regional digital services. The business model centers on providing free weather data and regional content to residents and visitors, supported by related regional sites and a marketplace. Technically, the site uses a modern technology stack including Bootstrap, jQuery, and Matomo analytics, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent management, though it lacks advanced security headers and explicit incident response information. Privacy compliance is well addressed with GDPR-aligned policies and a Usercentrics consent mechanism. Overall, the site is professional, trustworthy, and well-branded for its niche regional audience.

F

Fröling Heizkessel- und Behälterbau Ges.m.b.H.

froeling.com

55

Fröling Heizkessel- und Behälterbau Ges.m.b.H. is a well-established Austrian manufacturer specializing in biomass and wood heating systems. With over 60 years of experience, the company offers a comprehensive product range including pellet, wood log, chip, and combination boilers, serving residential, commercial, agricultural, and industrial sectors. The company is recognized for innovation and quality, evidenced by multiple awards such as the PlusXAward for Best Brand 2025. Their market position is strong in Austria and Europe, supported by a broad partner network and customer base. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies such as jQuery, Bootstrap, and lazy loading for images. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is incomplete or unavailable, which raises some concerns about domain registration transparency. However, the website content, branding, and contact information strongly support the legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, the website and business present a professional and trustworthy front with minor areas for improvement in security header implementation and WHOIS transparency. Strategic recommendations include enhancing security headers, publishing an explicit security policy, and ensuring WHOIS data accuracy to strengthen trust further.

U

UK Centre for Ecology & Hydrology

ceh.ac.uk

66

The UK Centre for Ecology & Hydrology (UKCEH) is a prominent UK-based government research institute specializing in environmental science focused on land and freshwater ecosystems. It operates under the Natural Environment Research Council (NERC) and delivers impactful scientific research, data services, and consultancy to governments, academia, and businesses. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its authoritative position in environmental research. Technically, the site is built on Drupal 10 with modern JavaScript libraries and includes a robust cookie consent mechanism (Klaro) and analytics tools (Google Analytics, Google Tag Manager). The site is mobile-optimized and accessible, though there is room for improvement in security headers and explicit incident response disclosures. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with detailed privacy and cookie policies and user consent management. However, WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of institution. Overall, UKCEH's website is professional, trustworthy, and well-aligned with its mission. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

100genussorte.bayern

71

Genussorte Bayern is a government-backed initiative promoting the culinary richness of Bavaria through a well-structured website featuring regional specialties, events, recipes, and interactive maps. The platform targets both residents and tourists interested in exploring Bavarian food culture. Technically, the site is built on WordPress with Elementor and uses modern JavaScript libraries and plugins to enhance user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is robust, with a comprehensive privacy policy and cookie management system. Overall, the site presents a trustworthy and professional image consistent with its government affiliation.

E

Enovis Corporation

limacorporate.com

72

Enovis Corporation operates a professional and patient-facing surgical healthcare website, providing tailored access portals for different user groups. The company positions itself as a specialized healthcare provider with a focus on surgical products and services. The website demonstrates a moderate level of digital maturity, utilizing modern JavaScript frameworks such as Alpine.js, analytics tools like Matomo and Google Tag Manager, and a cookie consent mechanism powered by OneTrust. Hosting is managed via cyon.ch, and the domain is secured with HTTPS and clientTransferProhibited status, indicating a reasonable security posture. However, explicit security headers and detailed security policies are not evident, suggesting room for improvement in security documentation and technical controls. Overall, the website is professional, well-branded, and compliant with GDPR cookie consent requirements, but lacks visible contact and incident response information.

R

Reactflow

cdnflow.co

58

Reactflow is a SaaS company specializing in conversion optimization tools such as session replay, heatmaps, funnel analytics, bug tracking, and customer feedback collection. The company targets marketers, UX designers, developers, and product managers aiming to improve website performance and user experience. The website is professionally designed, well-structured, and provides comprehensive information about its services and benefits. The technical infrastructure leverages modern JavaScript libraries and frameworks, with hosting and DNS managed via Cloudflare, ensuring good performance and availability. Security posture is solid with HTTPS enforced, data masking, and encryption in place, though DNSSEC is not enabled and some security headers are missing. Privacy compliance is emphasized with GDPR adherence and data masking technologies, but no cookie consent mechanism was detected. Overall, the website and business demonstrate a mature and trustworthy presence in the technology SaaS market.

R

Reactflow

reactflow.com

58

Reactflow is a technology company specializing in conversion optimization tools such as session recordings, heatmaps, funnel analytics, bug tracking, and feedback collection. Their platform targets marketers, UX designers, developers, and product managers aiming to improve website performance and customer experience. The company has been operational since 2016 and positions itself as a competitive alternative to established players like Hotjar, emphasizing privacy and GDPR compliance. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various analytics and tracking tools, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforced, data masking, and containerized services, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is good with a clear privacy policy, but lacks an explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, with extensive user tracking balanced by stated privacy measures.

Perpetuum.cz is a Czech educational media platform established in 2017, focusing on trends, news, and innovations in education. It targets students, educators, parents, and education professionals by providing articles, videos, and expert blogs. The website is operated under the Scio brand, a recognized entity in Czech education. Technically, the site runs on WordPress with a modern theme and uses common web technologies such as jQuery, Google Analytics, and YouTube embeds. It implements GDPR-compliant cookie consent mechanisms and uses structured data for SEO. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving as a reliable source of educational content in the Czech Republic.

P

Polsko-Niemiecka Współpraca Młodzieży

pnwm.org

53

Polsko-Niemiecka Współpraca Młodzieży (PNWM) is a well-established non-profit organization founded in 1998, dedicated to fostering Polish-German youth cooperation through funding, educational resources, and project support. The website serves as a comprehensive platform offering information on grants, training, publications, and partner search tools, targeting youth organizations, schools, and project organizers in Poland and Germany. The organization maintains a strong market position as a bilateral youth cooperation entity with a medium-sized operational scale and a clear mission to support international youth exchange projects. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Matomo for privacy-conscious analytics. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs HTTPS with a good SSL configuration and uses a cookie consent mechanism compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site follows best practices including HTTPS enforcement, cookie consent, and privacy-respecting analytics. However, there is room for improvement by enabling DNSSEC, implementing additional security headers, and publishing explicit security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, PNWM's website is professional, trustworthy, and compliant with privacy regulations, supporting its mission effectively. The domain's WHOIS data confirms legitimacy with a long registration history consistent with the organization's profile. Strategic recommendations include enhancing security headers, publishing security policies, and continuous monitoring of third-party plugins to maintain a strong security posture.

C

COST - European Cooperation in Science and Technology

cost.eu

56

COST - European Cooperation in Science and Technology is a European intergovernmental framework that funds and supports science and technology research networks known as COST Actions. The organization connects researchers and innovators across Europe and beyond, facilitating collaboration and knowledge sharing. The website reflects a professional and well-structured digital presence, targeting researchers, scientific communities, and policy makers. It provides information about funding opportunities and networking services, positioning itself as a key player in European scientific cooperation. The technical infrastructure is based on WordPress with modern SEO and event management plugins, ensuring good performance, mobile optimization, and accessibility. The site uses HTTPS with a strong SSL configuration and integrates analytics tools such as Microsoft Clarity and Matomo for user behavior insights. Cookie consent is managed via Cookiebot, indicating attention to privacy compliance, although explicit privacy and terms of service pages are not detected. Security posture is solid with HTTPS and cookie consent, but the absence of explicit security headers and vulnerability disclosure policies suggests room for improvement. No critical vulnerabilities or suspicious content were found. The domain WHOIS data is privacy protected, which is typical for European organizations, and the website's content and social media presence support its legitimacy. Overall, the website is trustworthy, professional, and well-maintained, with recommendations to enhance privacy transparency and security headers to further strengthen its security and compliance stance.

C

CHVÁLEK ATELIÉR s.r.o.

chvalekatelier.cz

47

CHVÁLEK ATELIÉR s.r.o. is a Czech Republic based architectural and engineering firm specializing in 3D architecture, urbanism, engineering preparation, and interior design services. The company targets clients seeking comprehensive and individualized architectural solutions, positioning itself as a professional and reliable service provider in the regional real estate and construction sector. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies and CMS platforms to deliver a good user experience across devices. From a technical perspective, the site uses a variety of contemporary JavaScript libraries and frameworks such as jQuery, Swiper.js, and Google Tag Manager, integrated with analytics and social media SDKs. The site is hosted securely with HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy policy documentation. Security posture is moderate with HTTPS enforced and no visible sensitive data exposure, but the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap, limiting the ability to fully verify domain legitimacy and ownership, which slightly reduces overall trustworthiness. Overall, the website is a credible and professional representation of the business with good content quality and user experience. Strategic improvements in security policies, privacy documentation, and domain registration transparency would enhance trust and compliance.

F

Fonds citoyen franco-allemand

fondscitoyen.eu

54

The Fonds citoyen franco-allemand is a non-profit organization dedicated to advising, networking, and financing projects that highlight Franco-German friendship and European cooperation. The website is professionally designed using Drupal CMS and modern front-end technologies, providing a good user experience and mobile optimization. The presence of Cookiebot for cookie consent and Google Tag Manager for analytics indicates a mature digital infrastructure. Security posture is solid with HTTPS and Cloudflare protection, although some security headers and policies could be improved. The lack of explicit privacy policy and contact information slightly reduces trust but overall the site appears legitimate and compliant with GDPR. Strategic recommendations include publishing clear privacy and security policies, adding contact details, and enhancing security headers.