Security Directory

C

CandyKeys

candykeys.com

59

CandyKeys is an established small e-commerce retailer specializing in mechanical keyboards, keycaps, switches, and related components, primarily serving customers in Germany and the EU with worldwide shipping since 2016. The website demonstrates a modern technical infrastructure using Nuxt.js, Tailwind CSS, Font Awesome, and integrates Google Analytics and Tag Manager for marketing and analytics purposes. DNS is managed via Cloudflare, and the domain is registered with IONOS SE, indicating a stable and legitimate online presence. Security posture is generally good with HTTPS enabled and domain transfer protection, but lacks published privacy, cookie, and security policies, which are critical for GDPR compliance and user trust. No contact information or incident response details are found, limiting transparency. Overall, the site is professional and functional but would benefit from enhanced privacy compliance and security disclosures.

M

Moje NEO

mojeneo.cz

48

Moje NEO is a Czech financial group offering a unique license product called the NEO licence, which provides users with a variety of financial benefits including cashback, insurance claim assistance, real estate services, business mentoring, commissions, financial products, and education. The company positions itself as a modern financial partner with 30 years of experience, targeting individuals and entrepreneurs seeking financial freedom and personalized financial solutions. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on DigitalOcean, and uses standard tracking tools like Google Tag Manager and Facebook Pixel. The site is well-designed, mobile-optimized, and SEO-friendly, but lacks explicit privacy and terms of service pages, which are important for compliance. Security posture is good with HTTPS and security headers implemented, but incident response and security policies are not publicly disclosed. Overall, the website is professional and trustworthy but could improve transparency and compliance documentation.

B

Breathless Films s.r.o.

breathlessfilms.cz

56

Breathless Films is a small independent film production company based in Prague, Czech Republic, founded in 2018 by producer Matěj Paclík. The company specializes in producing and co-producing fiction and documentary films, with a focus on emerging directors. Their portfolio includes award-winning short films and documentaries that have premiered at prestigious festivals such as Karlovy Vary IFF and Ji.hlava IDFF. The website reflects a professional and consistent brand image, targeting film industry professionals and cinephiles. Technically, the site is built on modern frameworks like Nuxt.js and styled with Tailwind CSS, hosted with Cloudflare DNS, and optimized for mobile devices with moderate performance. However, it lacks some security headers and privacy compliance documents, which are areas for improvement. The security posture is generally good with HTTPS enabled and no exposed sensitive data, but could benefit from enhanced headers and policies. Overall, the site is trustworthy and professional, with clear contact information and a strong business credibility score.

D

Dolce e Luce Lighting Design Studio

dolceeluce.com

50

Dolce e Luce Lighting Design Studio is a small, internationally recognized independent lighting design and consultancy firm based in Rome, Italy, founded in 2018. The company offers a broad range of lighting design services including architectural, landscape, urban lighting, light art installations, and lighting controls. Their market position is strengthened by academic involvement and membership in professional lighting associations. Technically, the website is built on modern frameworks such as Nuxt.js and Tailwind CSS, with good mobile optimization and performance. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy, but improvements in privacy and security policies are recommended.

F

Fidurock

fidurock.com

61

Fidurock is a Czech real estate investment group specializing in residential and commercial property investments. The company positions itself as a trustworthy and transparent investment partner focusing on long-term growth and sustainability. The website reflects a professional and modern digital presence, utilizing contemporary web technologies such as Nuxt.js and Tailwind CSS, and integrates analytics tools like Google Analytics and Google Tag Manager for performance and user behavior tracking. Security posture is adequate with HTTPS enabled and domain transfer protections in place, but lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is partially addressed through a cookie consent mechanism, but no dedicated privacy policy or terms of service pages were found. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

Dystopia digital is a small digital-first creative collective founded in 2020, specializing in technology-driven creative services including UI/UX design, ecommerce, marketplace development, 3D and motion design, and branding. The company serves a diverse client base across sectors such as real estate, finance, lighting design, movie production, and architecture, positioning itself as a niche provider of innovative digital solutions. The website showcases a portfolio of client projects, reflecting a professional and consistent brand image. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on DigitalOcean, and optimized for fast performance and mobile responsiveness. The site lacks a CMS and does not include analytics or tracking scripts, indicating a focus on privacy and simplicity. However, accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security policies. There is no evidence of privacy, cookie, or terms of service policies, nor incident response or vulnerability disclosure information. Contact information is limited to email addresses without phone numbers or physical addresses. These gaps reduce the overall security and compliance posture. Overall, the website is professional and trustworthy with a moderate security posture but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

I

ICT UNIE

ictu.cz

19

ICT UNIE is a professional association representing companies in the electronic communications sector in the Czech Republic. Established in 2010, it serves as a platform to raise awareness about modern information technologies among businesses and government bodies, promoting a knowledge-based society. The association offers working groups, organizes events, and supports its members through advocacy and collaboration. The website reflects a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, ICT UNIE demonstrates a credible and professional online presence aligned with its business objectives.

H

HYLI

hyli.de

67

HYLI is a German-based technology company offering a secure digital platform for managing advance healthcare directives and other important personal documents. The platform targets individuals seeking reliable and GDPR-compliant digital storage solutions for their legal documents. HYLI positions itself as a niche provider with a user-friendly SaaS model, emphasizing security and privacy. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on Google Cloud infrastructure, and integrates standard marketing and analytics tools like Google Tag Manager and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, HYLI enforces HTTPS, employs standard security headers, and uses cookie consent mechanisms to comply with GDPR. However, it lacks a publicly available security policy or incident response page, and no vulnerability disclosure or security.txt file is present. Overall, the domain registration and hosting details are consistent and trustworthy, with no suspicious patterns detected. The website content is professional, safe, and targeted at a general audience.

L

LandReise.de

landreise.de

49

LandReise.de is a specialized online platform offering rural vacation accommodations primarily in German-speaking Europe. The company focuses on providing families, couples, and groups with access to unique farm stays, holiday homes, huts, and hideaways. Their market position is strong within the niche of rural hospitality, supported by a comprehensive and professionally designed website that facilitates booking and discovery of over 4,000 properties. Technically, the website employs modern web technologies including Statamic CMS, Tailwind CSS, and JavaScript modules, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the platform demonstrates a mature digital presence with clear contact channels and social media integration, but could improve privacy transparency and security documentation.

The website online-reiseshop.de is an e-commerce and informational platform focused on travel products, travel planning, and booking services primarily targeting German-speaking consumers. It operates as an affiliate platform linking to external shops and offers travel-related products such as books, travel vouchers, and software. The site also prominently promotes the sale of its domain, indicating a potential business transition. Technically, the site uses modern frontend technologies including Tailwind CSS and htmx.js, providing a responsive and user-friendly experience. However, it lacks a CMS and some advanced SEO and accessibility features. Security-wise, the site enforces HTTPS and includes bot detection and anti-scraping measures but lacks standard security headers and formal privacy or cookie policies, which are compliance gaps. Overall, the site is moderately secure and professionally presented but would benefit from enhanced privacy compliance and security hardening.

P

Provident

provident.cz

61

Provident is a well-established consumer finance company operating in the Czech Republic, specializing in personal loans including online and cash loans. The company targets Czech consumers seeking accessible lending solutions. The website reflects a professional and consistent brand presence with clear service offerings and user-friendly navigation. Technically, the site is built on modern frameworks such as Next.js and React, with Tailwind CSS for styling, and integrates standard analytics and marketing tools like Google Tag Manager and Google Analytics. Security posture is strong with HTTPS enforcement and comprehensive security headers, although public security policies and incident response contacts are not prominently disclosed. Privacy compliance is robust, featuring GDPR-aligned privacy and cookie policies with consent mechanisms. Overall, the site demonstrates a mature digital infrastructure suitable for its business domain.

H

Heimvooorteil

heimvooorteil.de

53

Heimvooorteil is a regional initiative focused on promoting energy-efficient home renovations in the Untermain region of Germany. The website serves as a platform to inform homeowners about energy consulting, funding, financing options, and connects them with local professionals for services such as heat pump and photovoltaic installations. Supported by local government entities and financial institutions like Sparkasse Aschaffenburg Miltenberg, the initiative positions itself as a trusted regional resource for sustainable energy solutions. Technically, the website is built on a modern Laravel framework with Livewire components, styled using Tailwind CSS, and integrates Mapbox for geolocation services. It employs privacy-focused analytics (Fathom) and implements a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and demonstrates good SEO practices. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and formal security policies or vulnerability disclosure mechanisms. The contact form collects personal data with explicit consent, aligning with privacy regulations. Overall, the website presents a professional, trustworthy, and user-friendly platform with a strong regional focus. Strategic improvements in security headers and formal security documentation could enhance its security posture further.

B

Base44

base44.app

55

Base44 appears to be a technology platform focused on enabling users to build useful applications quickly. The website content analyzed is a 404 error page indicating that the specific app or subdomain requested was not found, which limits the ability to fully assess the platform's offerings or business details. The site uses modern frontend technologies such as Tailwind CSS and Stripe.js for payment integration, indicating a contemporary technical infrastructure. However, the absence of privacy policies, cookie consent mechanisms, and contact information on this page suggests gaps in compliance and user support. Security posture is weak based on the lack of visible security headers and policies. Overall, the site is mobile optimized and uses responsive design but currently provides minimal content due to the error state.

K

Kurt König

kurt-koenig.de

71

Kurt König Baumaschinen is a German-based company specializing in the sales and servicing of construction machinery. The company appears to be an established medium-sized business with a domain registered since 2001, indicating a long-standing presence in the industry. Their website targets construction companies and machinery operators, offering key services related to heavy equipment. The digital infrastructure leverages modern frontend technologies such as Tailwind CSS and integrates marketing and analytics tools like HubSpot and Google Tag Manager. Hosting is provided via Amazon AWS DNS infrastructure, ensuring reliable availability. Security posture is adequate with HTTPS enabled and domain status protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is professional and trustworthy, though improvements in privacy transparency and security hardening are recommended.

E

Enovis Corporation

enovis-medtech.eu

46

Enovis International operates as a global leader in medical technology, specializing in orthopedic, rehabilitation, and surgical devices outside the US. The company offers a comprehensive product portfolio including bracing, vascular, recovery sciences, and surgical solutions, supported by medical education and webinars. Their market position is strong with a focus on healthcare professionals and international markets. Technically, the website employs modern frameworks such as Bootstrap, jQuery, and Tailwind CSS, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Overall, the site reflects a professional and trustworthy business presence with moderate to high digital maturity.

R

Rundschau Online

rundschau-online.de

63

Rundschau Online is a regional news website delivering current news content focused on Cologne and its surrounding region, covering sports, politics, celebrities, and other local interests. The site positions itself as a key regional media outlet with a broad target audience of general news consumers. The business model appears to be advertising-supported, leveraging ad networks such as Taboola for monetization. Technically, the website employs modern web technologies including Nuxt.js (a Vue.js framework) and Tailwind CSS for styling, indicating a contemporary and modular front-end architecture. The site is mobile-optimized and includes cookie consent mechanisms compliant with GDPR requirements, although explicit privacy and terms of service documents are not clearly found in the provided content. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie security best practices. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analysis. The domain registration appears legitimate and consistent with the business claims, with no privacy protection or suspicious WHOIS patterns. Overall, the website presents a professional and trustworthy regional news platform with moderate technical maturity and security posture. Improvements in privacy documentation, security headers, and incident response transparency would enhance compliance and trustworthiness.

D

DEKRA

dekra.de

73

DEKRA is a globally recognized expert organization specializing in vehicle inspection, expert reports, and various technical services related to transportation. With over 47,000 employees operating in more than 50 countries, DEKRA holds a strong market position as a leading service provider in the transportation sector. The website reflects a professional and consistent brand image targeting both private and business customers. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience. Analytics are handled via Matomo, indicating a moderate level of user tracking. Security posture is adequate with HTTPS enabled and strict referrer policies, but lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, suitable for its enterprise scale and industry.

I

Ingka Centres Holding B.V.

avion.cz

64

Avion Shopping Park is a large retail shopping center located in Ostrava, Czech Republic, operated under the parent company Ingka Centres Holding B.V. The website presents a professional and well-structured digital presence showcasing a variety of retail shops, restaurants, services, and events aimed at the general public and local community. The business model focuses on providing retail space and customer services, supported by a strong brand association with IKEA. Technically, the website leverages modern web technologies including React and Gatsby, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website reflects a trustworthy and professional retail business with moderate to good technical maturity and security awareness.

The website www.bender-verlag.com is currently inaccessible beyond a maintenance mode placeholder page in German, indicating the site is offline or under maintenance. There is no accessible business content, contact information, or security and privacy policies. The technical infrastructure is minimal, relying on WordPress with the SeedProd coming soon plugin, jQuery, Tailwind CSS, and FontAwesome. No advanced security headers or analytics tools are detected. The WHOIS data is unavailable or the domain appears unregistered, which severely impacts trust and legitimacy. Overall, the site lacks digital maturity and security posture, providing no meaningful business or compliance information.

Forstpraxis.de is a well-established German forestry media portal operated by Deutsche Landwirtschaftsverlag GmbH, targeting foresters, forest entrepreneurs, and forest owners. It offers comprehensive forestry news, expert articles, newsletters, and subscription-based ad-free access. The website demonstrates a mature digital infrastructure using Drupal 10 CMS, modern CSS frameworks, and integrates multiple third-party marketing and analytics tools including Google Tag Manager, Cxense, and Piano.io. Privacy compliance is strong with explicit GDPR cookie consent and a comprehensive privacy policy. Security posture is good with HTTPS and OAuth login integration, though explicit security policies and incident response contacts are not found. WHOIS data is minimal and uses dynamic DNS name servers, which slightly reduces trust but does not indicate malicious intent. Overall, the site is professional, content-rich, and trustworthy for its target audience.

D

Deutscher Landwirtschaftsverlag GmbH

dlv.de

67

Deutscher Landwirtschaftsverlag GmbH operates a comprehensive media platform focused on agriculture and forestry sectors in Germany. The website serves as a hub for their media brands, subscription services, events, and digital content. It targets professionals and enthusiasts in the agricultural and forestry industries, offering a broad portfolio of magazines, special issues, and digital media. Technically, the site is built on Drupal 10 with modern frontend technologies like Tailwind CSS and Swiper.js, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS, cookie consent mechanisms, and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent management. Overall, the site reflects a professional, trustworthy media company with a strong digital presence and good business credibility.

E

Evangelisches Bildungswerk Oberfranken-Mitte e.V.

ebw-oberfranken-mitte.de

41

Evangelisches Bildungswerk Oberfranken-Mitte e.V. is a regional non-profit organization focused on adult education within the evangelical community in the Oberfranken-Mitte region of Germany. The website serves as a platform to present their educational programs, projects, and events, targeting adults and church communities. The organization holds a recognized position in the regional education sector with a clear evangelic profile and offers a variety of services including seminars, exhibitions, and newsletters. Technically, the website is built on WordPress with modern front-end technologies such as Tailwind CSS and jQuery-based libraries like Slick Carousel and GLightbox. Accessibility is enhanced through the integration of Eye-Able tools, and the site is mobile-optimized with good SEO practices. Performance is moderate, and the site uses HTTPS with a valid SSL configuration, ensuring secure communication. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in the HTML. However, it lacks several security headers and does not provide a security policy or incident response contact information. Privacy compliance is partially addressed with a comprehensive privacy policy, but no cookie consent mechanism is present. No vulnerabilities or malicious content were detected. Overall, the website is trustworthy and professional, with a strong business credibility score. Strategic recommendations include implementing security headers, adding a cookie consent mechanism, publishing a security policy, and enhancing incident response readiness to improve compliance and security posture.

H

Holidu GmbH

tomas-travel.online

67

Holidu GmbH operates the Holidu Smart Destination platform, providing innovative and comprehensive destination management solutions tailored for tourism destinations and hosts. The company leverages advanced technology combined with personal service to optimize marketing and booking processes for vacation rentals and related services. Their market position is strong, supported by multiple subsidiary brands and a medium-sized operation based in Germany. Technically, the website employs modern frameworks such as React and Tailwind CSS, hosted on AWS infrastructure, with good performance and mobile optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policy documentation and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR, with extensive analytics and marketing integrations. The domain registration data aligns well with the business claims, indicating legitimacy and consistency.

A

Abteilung Digital

abteilung-digital.de

57

Abteilung Digital is a German digital agency specializing in strategic consulting, design, online marketing, web development, and employer branding. They position themselves as an external yet integrated partner for medium-sized businesses and public institutions, emphasizing a collaborative approach. The website is professionally designed using TYPO3 CMS and modern frontend technologies, providing a seamless user experience with mobile optimization and clear navigation. The technical infrastructure includes Google Tag Manager and Cookiebot for analytics and cookie consent management, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a strong commitment to privacy compliance and professional business presentation, with room for improvement in publishing formal security and incident response documentation.

D

DAK-Gesundheit

dak.de

64

DAK-Gesundheit is a well-established German statutory health insurance provider with a strong market position and a comprehensive portfolio of health-related services. The website reflects a professional and user-friendly digital presence, leveraging modern web technologies such as Next.js and Tailwind CSS to deliver a fast and accessible experience. The company demonstrates strong compliance with GDPR and privacy regulations, including detailed privacy and cookie policies with consent mechanisms. Security posture is robust, with HTTPS enforced and appropriate security headers in place, although explicit security policy and incident response information are not publicly detailed. Overall, the website and domain registration data indicate a legitimate and trustworthy organization with a mature digital infrastructure.

E

enovetic

enovetic.ch

68

enovetic is a Swiss-based company specializing in software solutions and business process outsourcing for the personal leasing and pension fund sectors. Their offerings include digital platforms and expert services aimed at simplifying administration in work, health, and pension management. The company positions itself as a comprehensive service provider with a strong focus on HR-related outsourcing and software products tailored to their target audience. Technically, the website is built on WordPress with modern technologies such as Tailwind CSS and integrates advanced analytics and monitoring tools like Datadog RUM and Google Analytics. Security posture is solid with HTTPS enforced and bot protection via Cloudflare Turnstile, though some security headers and policies could be improved. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the website reflects a professional and trustworthy business presence with good technical implementation and compliance.

P

Polsat Box

polsatbox.pl

66

Polsat Box is a prominent Polish media and telecommunications company specializing in digital television subscription services. The website serves as a portal for customers to explore offerings, manage subscriptions, and access support. The site is professionally designed with good content quality and clear navigation, targeting Polish consumers interested in media services. Technically, the website employs modern JavaScript frameworks, cookie consent tools, and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are lacking. The absence of WHOIS data is a notable gap, slightly impacting trustworthiness. Overall, the website is safe, compliant with GDPR, and suitable for general audiences.

E

enovetic global SA

enovetic.com

55

enovetic global SA is a newly founded (2023) financial services company specializing in digital platforms and consulting for European pension funds and occupational retirement provision. Positioned in Luxembourg, a leading European financial center, the company offers cross-border advisory services, partner network integration, and administration solutions to employers, employees, and distribution partners. The website reflects a professional and modern digital presence built on WordPress with Tailwind CSS and integrates advanced analytics and user tracking tools such as Datadog RUM and Google Tag Manager. Security posture is solid with HTTPS and Cloudflare DNS, though improvements like DNSSEC and explicit security headers are recommended. Privacy compliance is well addressed with comprehensive cookie and privacy policies and an opt-in consent mechanism. Contact is primarily via web forms, with no direct emails or phone numbers publicly listed. Overall, the website and domain registration are consistent and trustworthy, supporting the company's market positioning in the European pension fund sector.

N

natureOffice

natureoffice.com

69

natureOffice is a medium-sized German company specializing in sustainability consulting and climate management services for businesses. Their offerings include carbon accounting, emission reduction strategies, carbon offsetting projects certified by recognized standards such as Gold Standard and VCS, and sustainability reporting. The company positions itself as an expert partner helping companies reduce their ecological footprint and comply with evolving sustainability regulations. The website is built on modern technologies including Nuxt.js and Tailwind CSS, hosted with Cloudflare DNS services, and integrates a Usercentrics consent management platform to address GDPR compliance. Security posture is strong with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security headers are not visible in the HTML. Privacy policy and terms of service documents are not found in the provided content, which slightly impacts privacy compliance scoring. Overall, the website is professional, well-designed, mobile-optimized, and trustworthy, targeting companies seeking sustainability solutions. No adult or questionable content is present, and no WAF or blocking mechanisms interfere with content access.

S

Domovská stránka

supplo.cz

46

SUPPLO.cz is a Czech Republic based website likely involved in beverage-related products or services, as inferred from visual and textual cues. The website employs modern web technologies including Tailwind CSS, JavaScript frameworks, and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, Hotjar, and SmartSupp Chat. The site is mobile optimized and presents a professional design with good user experience. However, the absence of WHOIS registration data and lack of visible privacy or terms of service pages limit the ability to fully verify business legitimacy and compliance. Security posture is moderate with no detected security headers and no explicit incident response or security policies published. Cookie consent is implemented via a third-party script, indicating some level of privacy compliance. Overall, the website is functional and professional but would benefit from enhanced transparency and security practices.

KOBODAS INDUSTRY s.r.o. is a small Czech company specializing in the sale of construction materials, targeting local customers and construction professionals. The website is currently a 'coming soon' placeholder with basic contact information, business hours, and company representatives listed. The technical infrastructure is based on WordPress with common plugins such as SeedProd for coming soon pages, jQuery, Tailwind CSS, and FontAwesome. The site is mobile responsive but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS enabled but missing important security headers and privacy policies. No WHOIS data was available, which limits domain legitimacy verification. Overall, the site presents a basic but functional online presence for a small local business.

Avail Stores is a small business specializing in building custom ecommerce webstores tailored for schools, companies, and various organizations. The company operates under Avail Labs LLC and has been active since 2020. Their market position is niche-focused, providing bespoke ecommerce solutions rather than generic platforms. The website content clearly communicates their services and target audience, with professional design and consistent branding. Technically, the website leverages modern web technologies including Laravel with Livewire, Tailwind CSS, and Cloudflare DNS services. The site is moderately optimized for performance and mobile devices, with basic SEO and accessibility features. The presence of Google Maps API indicates some location-based functionality, though no physical addresses are listed. From a security perspective, the site enforces HTTPS and uses domain status locks to protect domain integrity. However, DNSSEC is not enabled, and no explicit security headers or published security policies are found. Cookie consent is implemented with secure attributes, but incident response and vulnerability disclosure mechanisms are absent. Overall, the security posture is moderate but could be improved with additional controls and transparency. The overall risk assessment is low to moderate. The business appears legitimate with consistent WHOIS data and no suspicious indicators. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and enhancing contact information transparency to improve trust and compliance.

U

Universität Freiburg

uni-freiburg.de

55

The Universität Freiburg website represents a large, reputable public university in Germany, offering a wide range of academic programs and research activities. The site targets students, researchers, and the academic community, providing information about study programs, admissions, and university news. Technically, the website is built on WordPress with modern CSS frameworks like Tailwind, and it is hosted on a regional academic network (BelWü), ensuring reliable infrastructure. The site is mobile-optimized and accessible, with good SEO practices evident. Security-wise, the site uses HTTPS with strong SSL configuration and employs Piwik (Matomo) for analytics, indicating moderate user tracking. However, it lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the domain registration and DNS setup are consistent with the university's identity, supporting high legitimacy and trustworthiness.

I

INTERNET CZ, a.s.

emailcampaigns.eu

66

Emailcampaigns.eu is a professional email marketing platform offering modern tools such as automation, personalization, and CRM integration. The service targets businesses and marketers in European markets, providing a SaaS model with a free trial and no credit card required. The website is built on modern technologies including Nuxt.js and Tailwind CSS, ensuring a responsive and visually appealing user experience. Cookie consent is managed via Klaro, reflecting some privacy compliance efforts. Security posture is good with HTTPS and security headers in place, though explicit privacy policies and terms of service are missing, which impacts compliance and trust. Overall, the domain registration is consistent and legitimate, registered through a reputable Czech registrar. Strategic improvements in privacy transparency and contact availability would enhance trust and compliance.

P

Pelhřimovská vodárenská s.r.o.

pelhrimovska.cz

45

Pelhřimovská vodárenská s.r.o. is a local utility company providing water supply, sewerage, and wastewater treatment services in the Pelhřimov region of the Czech Republic. The website clearly targets residential and business customers in this area, offering essential information about services, billing, and emergency contacts. The company maintains a professional online presence with clear contact details and relevant service information. Technically, the website employs modern frontend technologies including JavaScript, Google reCAPTCHA v3 for bot protection, and Google Tag Manager for analytics. The site is mobile-optimized and uses HTTPS to secure communications. Security posture is generally good, with no visible vulnerabilities or exposed sensitive data, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small regional utility provider. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the website is functional, secure, and professional, but the missing WHOIS data and limited security disclosures suggest a moderate risk level.

S

Saferoad Services Danmark

saferoad-services.dk

54

Saferoad Services Danmark is a medium-sized company specializing in road safety and infrastructure solutions in Denmark. The company offers a range of products including road markings, traffic safety equipment, and consulting services aimed at improving traffic safety and infrastructure robustness. The website reflects a professional and consistent brand presence targeting businesses and public sector entities involved in road infrastructure. Technically, the site uses modern JavaScript frameworks, Tailwind CSS, and integrates analytics tools such as Piwik PRO and Microsoft Application Insights. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain trust assessment, but the overall digital footprint suggests a legitimate and professional business. Recommendations include adding privacy and cookie policies, security headers, and vulnerability disclosure information to enhance compliance and trust.

A

Aseta Group s.r.o.

inexcz.cz

50

Aseta Group s.r.o. is a well-established facility management company operating in the Czech Republic with over 30 years of experience. The company offers a broad range of services including technical building management, cleaning, waste management, outdoor maintenance, substitute fulfillment, and security services. Their market position is strong, supported by a large workforce and numerous active contracts, indicating a significant presence in the facility management sector. The website reflects a professional and consistent brand image, targeting businesses and institutions requiring comprehensive facility services. Technically, the website uses modern technologies such as jQuery, Tailwind CSS, and Google Analytics, with a custom or Nette-based CMS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers and explicit security policies. The absence of WHOIS data is a notable gap, reducing trustworthiness and requiring further verification. Overall, the site is professional and trustworthy but could improve transparency in domain registration and security disclosures.

B

Bonifatius Druckerei

bonifatius-druckerei.de

51

Bonifatius Druckerei is a sustainable printing and media house based in Paderborn, Germany, operating as a business unit of Bonifatius GmbH. The company offers a broad range of printing services including digital printing, offset printing, media design, finishing, and logistics, with a strong emphasis on environmental responsibility and quality. Their market position is that of a regional medium-sized enterprise serving business clients with professional and sustainable print solutions. Technically, the website is built on WordPress with modern plugins and accessibility features, delivering a good user experience and mobile optimization. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though security headers and cookie consent mechanisms are missing. Overall, the site is professional and trustworthy, but could improve privacy compliance and security best practices.

B

Bonifatius GmbH

bonifatius.de

56

Bonifatius GmbH is a well-established media and printing company based in Paderborn, Germany, with a history dating back to 1869. The company operates multiple business fields including printing services, publishing, and retail bookstores, serving a broad audience from individual book buyers to business clients seeking sustainable and high-quality media solutions. The website reflects a professional and consistent brand image with clear navigation and comprehensive content about the company's offerings and values, particularly emphasizing sustainability and innovation. Technically, the website is built on WordPress with modern frontend technologies such as Tailwind CSS and Tiny Slider, ensuring good mobile optimization and accessibility. The site uses HTTPS with no visible security vulnerabilities or exposed sensitive data. However, there is room for improvement in security headers and explicit incident response policies. Privacy compliance is addressed with a comprehensive privacy policy, though a cookie consent mechanism is absent. The security posture is solid with HTTPS and secure form handling, but lacks advanced security headers and vulnerability disclosure mechanisms. The domain WHOIS data is partially consistent with the business claims, showing no suspicious patterns. Overall, the website presents a trustworthy and professional digital presence for Bonifatius GmbH. Strategic recommendations include enhancing security headers, implementing cookie consent, adding a vulnerability disclosure policy, and improving incident response transparency to strengthen compliance and trust.

W

Websure

websure.digital

58

Websure is a specialized website security, maintenance, and management service targeting businesses, agencies, and individuals seeking expert-led, hassle-free website management solutions. The company emphasizes proactive threat detection, seamless updates, and scalable solutions to empower business growth. Their market position is strengthened by real human support, client testimonials, and partnerships with reputable hosting providers such as WP Engine. Technically, the website is built on WordPress with modern technologies including Tailwind CSS, Swiper.js, and CookieYes for cookie consent management. SEO and mobile optimization are well implemented, contributing to a professional digital presence. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and a dedicated security policy page are absent. Overall, the domain WHOIS data is unavailable due to TLD restrictions or privacy protection, but the website content and business operations indicate legitimacy and professionalism.

MarineTraffic operates a comprehensive global ship tracking platform providing real-time AIS data, vessel positions, and maritime intelligence services. The website targets maritime professionals, shipping companies, and enthusiasts, offering a large vessel database and port location services. The platform is technologically modern, leveraging React and Tailwind CSS, and supports mobile platforms via dedicated apps. However, the website lacks visible privacy, cookie, and terms of service policies, which impacts compliance and user trust. Security posture is limited by absence of security headers and incident response contacts. WHOIS data is unavailable, which raises concerns about domain registration transparency despite the professional appearance and market position of the service. Overall, MarineTraffic presents a strong business presence but should improve privacy and security disclosures to enhance trust and compliance.

H

HubSpot

inbound.com

69

INBOUND.com is the official website for HubSpot's annual marketing and sales conference, INBOUND, scheduled for September 3-5, 2025. The site serves as a comprehensive platform for event information, registration, and resources targeting marketing professionals and sales teams. It positions itself as a leading event in the marketing technology space, leveraging HubSpot's strong brand presence. The website demonstrates a modern technical infrastructure built on Nuxt.js and Tailwind CSS, ensuring fast performance and excellent mobile responsiveness. Security best practices are observed with HTTPS and multiple security headers, although dedicated security and incident response policies are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy compliance. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given the strong branding and content quality. Overall, the site is professional, secure, and well-optimized, serving its business purpose effectively.

A

Alpro

alpro.com

65

Alpro is a prominent European brand specializing in plant-based food and beverage products, targeting health-conscious and environmentally aware consumers. The company operates under the parent company Danone and maintains a strong market position in the dairy alternative sector. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, the site leverages modern frameworks such as Next.js and React, ensuring fast performance and good SEO. Security measures including HTTPS and security headers are properly implemented, though the absence of a dedicated security policy and incident response page suggests room for improvement. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the brand's established reputation. Strategic recommendations include enhancing transparency around security policies and verifying domain registration details to strengthen trust.

N

Nortek

nortekgroup.com

64

Nortek is a specialized technology company focused on oceanographic and subsea navigation solutions, offering advanced Doppler Velocity Log (DVL) and Acoustic Doppler Current Profiler (ADCP) technologies. The company targets marine scientists, oceanographers, and subsea navigation professionals, positioning itself as a key player in the marine technology sector. The website reflects a professional and consistent brand image with good content quality and relevant business descriptions. Technically, the site employs modern frontend technologies such as Tailwind CSS, Vite, and jQuery, hosted behind Cloudflare with HTTPS enabled, indicating a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent management via Cookiebot, though there is room for improvement in security headers and published policies. Overall, the site is trustworthy and well-maintained but lacks explicit privacy and security policy documentation.

O

Obecní úřad Hrusice

obec-hrusice.cz

10

The website obec-hrusice.cz serves as the official digital presence for the municipality of Hrusice in the Czech Republic. It provides residents and visitors with essential information such as news updates, official notices, contact details, event calendars, and local services. The site is positioned as a local government authority platform, targeting the community and stakeholders within the municipality. The business model is governmental public service, with a focus on transparency and community engagement. Technically, the website is built using modern web technologies including Nuxt.js and Tailwind CSS, hosted on Amazon AWS Cloudfront CDN, ensuring good performance and mobile responsiveness. The site employs HTTPS with good SSL configuration and security headers, reflecting a solid security posture. However, it lacks some advanced privacy compliance features such as a cookie consent mechanism and explicit security or incident response policies. From a security perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. The domain registration data is consistent and trustworthy, with a long-standing domain age appropriate for a municipal entity. The absence of a vulnerability disclosure policy and incident response contact points are areas for improvement. Overall, the website is professional, trustworthy, and serves its purpose effectively, though it could enhance privacy compliance and security transparency to further strengthen user trust and regulatory adherence.

F

Festival Musica

festivalmusica.fr

48

Festival Musica is an international contemporary music festival based in Strasbourg, France, founded in 2019. The organization focuses on cultural event programming, ticket sales, and community engagement through various media including podcasts and a magazine. The website reflects a professional and consistent brand presence with strong ties to regional and national cultural institutions. Technically, the site uses modern frontend technologies such as Alpine.js and Livewire, hosted by OVH, and integrates privacy-respecting analytics via Fathom. Security posture is good with HTTPS enforced and CSRF protections, though some security headers and explicit privacy mechanisms are missing. Contact is primarily via a web form, with no direct emails or phone numbers published. Overall, the site is trustworthy, well-designed, and serves a general audience interested in contemporary music and culture.

Z

Zukunftsregion JadeBay

zukunftsregion-jadebay.de

48

Zukunftsregion JadeBay is a regional government-backed initiative focused on fostering sustainable development, innovation, and digital transformation within the JadeBay region in Niedersachsen, Germany. The website serves as an informational platform highlighting funding opportunities, projects, news, and partnerships with local counties. The technical infrastructure leverages modern frontend technologies such as Alpine.js, GSAP, Swiper.js, and Font Awesome, hosted via Schlund Technologies. The site is mobile-optimized and presents a professional design with clear navigation. Security posture is adequate with HTTPS and a Content-Security-Policy header, though additional security headers and policies could enhance protection. Privacy compliance is limited, with no visible privacy or cookie policies, which is a notable gap. Overall, the site is trustworthy and serves its public sector mission effectively.

A

AmBilet

ambilet.ro

48

AmBilet is an online ticketing platform primarily serving the Romanian market, offering tickets for concerts, festivals, theater, stand-up comedy, and children's events. The website is built on WordPress with e-commerce and event management plugins, providing a visually appealing and user-friendly experience optimized for mobile devices. The platform integrates marketing and analytics tools such as Facebook and TikTok pixels to track user engagement and retarget visitors. Security posture is adequate with HTTPS enforced, but lacks some advanced security headers and visible security policies. Privacy compliance is partial, with a cookie consent mechanism present but no clear privacy or terms of service pages. Overall, the site appears legitimate and professionally maintained, targeting event attendees in Romania.

F

Festival Musica

festivalmusica.org

48

Festival Musica is an established international contemporary music festival based in Strasbourg, France, founded in 2019. It offers a rich program of events including concerts, podcasts, articles, and community engagement activities. The festival targets a general audience interested in contemporary music and cultural experiences. The website reflects a professional and consistent brand image supported by official cultural partners and regional sponsors. Technically, the site uses modern web technologies such as Alpine.js, Livewire, and Tailwind CSS, hosted by OVH, ensuring fast performance and excellent mobile optimization. Security practices include HTTPS enforcement and CSRF protection, though explicit cookie consent and privacy policy details could be improved. Overall, the site is trustworthy and well-maintained, with a strong social media presence and clear business legitimacy.

O

Otevřená města, z. s.

otevrenamesta.cz

52

Otevřená města, z. s. is a Czech non-profit organization specializing in supporting the digitalization of local governments and municipalities. They provide technical, legal, and methodological assistance and develop open source software solutions tailored for public administration. The organization has established partnerships with key government agencies and digital initiatives, positioning itself as a trusted partner in the Czech public sector digital transformation space. Their website reflects a professional and modern digital presence, built on Nuxt.js and Tailwind CSS, optimized for mobile and accessibility. Security posture is good with HTTPS enforced, though some security headers and privacy compliance elements are missing. Overall, the organization demonstrates a credible and stable business presence with transparent contact information and active social media engagement.