Security Directory

M

Modern Tire Dealer

moderntiredealer.com

59

Modern Tire Dealer is a specialized media company providing comprehensive news, research, and market analysis for the tire industry, targeting retail and commercial tire businesses. The website serves as a leading resource with rich content including articles, podcasts, digital magazines, and webinars, positioning itself as a trusted industry authority. Technically, the site leverages modern frameworks such as Nuxt.js and Vue.js, ensuring good mobile responsiveness and a professional user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data raises some concerns about domain registration transparency, but the overall site professionalism and content quality support its legitimacy. Strategic recommendations include enhancing privacy compliance, publishing security policies, and verifying domain registration details to strengthen trust and compliance.

V

Vehicle Service Pros

vehicleservicepros.com

59

Vehicle Service Pros is a professional media platform delivering news, training, and resources focused on the automotive service repair and aftermarket distribution industries. The website hosts multiple branded magazines, multimedia content including podcasts and videos, and provides advertising and job listing services. The platform targets auto repair technicians, shop owners, and aftermarket distributors, positioning itself as a key industry information source. Technically, the site uses modern frameworks such as Nuxt.js and Vue.js, integrates Google Tag Manager and reCAPTCHA for analytics and security, and employs image CDN services for performance. Security posture is solid with HTTPS and bot protection, though explicit security headers and privacy policies are not evident in the provided content. WHOIS data is unavailable, which slightly reduces trust but the site’s professional content and branding suggest legitimacy. Overall, the site is well-designed, content-rich, and serves a specialized industry audience effectively.

A

Aebi Schmidt Group

aebi-schmidt.com

69

Aebi Schmidt Group is a globally recognized leader specializing in intelligent product systems and services for cleaning and clearing traffic areas as well as maintaining green spaces in challenging terrains. Their business model focuses on B2B engagements, targeting municipalities, industries, and service providers in transportation and green area maintenance sectors. The company maintains a strong market position supported by ISO certifications and a comprehensive digital presence. Technically, the website leverages modern JavaScript frameworks such as Vue.js and integrates marketing and analytics tools including Google Tag Manager, Bing Ads, and Matomo, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and includes standard security headers, though it lacks a publicly available security policy or vulnerability disclosure page. Overall, the website is professional, secure, and compliant with GDPR, but the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

T

Trailer Body Builders

trailer-bodybuilders.com

61

Trailer Body Builders is a specialized media platform focused on delivering innovative technologies and industry news for trailer and truck equipment designers, manufacturers, and distributors. The website serves a niche audience within the transportation and manufacturing sectors, providing news, market statistics, and product information. The business operates under the parent company Endeavor Business Media, indicating a medium-sized enterprise with established industry presence. Technically, the website leverages modern frameworks such as Nuxt.js and Vue.js, ensuring a responsive and well-structured user experience. Privacy and cookie policies are implemented with a consent mechanism, reflecting good compliance practices. Security posture is strong with HTTPS and security headers in place, though explicit security policies and incident response contacts are not published. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional and content-rich website. Overall, the site is trustworthy and well-maintained but would benefit from clearer domain registration transparency and published security policies.

B

Bulk Transporter

bulktransporter.com

61

Bulk Transporter is a specialized media platform providing comprehensive news, insights, and resources for the liquid and dry bulk logistics industry. It serves professionals and businesses in the transportation sector with a focus on fleet management, safety, green trends, technology, and equipment. The website is part of Endeavor Business Media, a recognized parent company in the media industry. The platform maintains a strong market position as a leading information source within its niche. Technically, the website leverages modern web technologies including Nuxt.js and Vue.js frameworks, integrates Google reCAPTCHA for bot protection, and employs OneTrust for cookie consent management. The site demonstrates good mobile optimization, SEO practices, and a professional design that supports user engagement and content accessibility. From a security perspective, the site enforces HTTPS and uses standard security practices such as bot mitigation and cookie consent. However, explicit security headers are not clearly visible in the HTML source and should be verified and enhanced. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Bulk Transporter presents a low-risk profile with a professional and trustworthy online presence. The main concern is the absence of WHOIS registration data, which may indicate recent domain changes or privacy protection but does not currently impact the site's legitimacy. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and ensuring robust input validation on forms.

F

Fleet Maintenance

fleetmaintenance.com

59

Fleet Maintenance is a specialized media platform providing news, best practices, and educational resources focused on truck maintenance and commercial vehicle fleet management. The website serves industry professionals and fleet leaders with a variety of content including articles, webinars, whitepapers, videos, and career resources. The site is part of a larger media group with several affiliated brands, indicating a strong market presence in the transportation media sector. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, delivering a responsive and well-structured user experience. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data is a notable concern for domain legitimacy, but the professional content and branding mitigate some risk. Overall, the site is a credible and valuable resource for its target audience but should enhance privacy compliance and domain transparency.

S

Smart Sender

smartsender.com

59

Smart Sender is a well-established SaaS platform founded in 2007 that specializes in chatbot automation and multi-channel messaging integration to help businesses increase sales and customer loyalty. The platform supports popular instant messengers such as Telegram, Viber, WhatsApp, Instagram Direct, Facebook Messenger, Skype, and others, positioning itself as a comprehensive solution for automated customer engagement and sales funnels. The website is professionally designed with good content quality and clear navigation, targeting businesses seeking to automate customer communication and sales processes. Technically, the website leverages modern JavaScript frameworks like Vue.js and integrates marketing and analytics tools such as Google Tag Manager and Facebook Pixel. Hosting and DNS services appear to be managed via reputable providers including GoDaddy and Cloudflare. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the site enforces HTTPS and employs domain locking mechanisms to prevent unauthorized changes. However, DNSSEC is not enabled, and no advanced security headers or explicit security policies are published. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms. No direct contact information or incident response contacts are published, which could be improved. Overall, the website presents a low-risk profile with a strong business credibility score and good technical implementation. Strategic recommendations include enhancing DNS security with DNSSEC, publishing a security policy and incident response contacts, and implementing additional security headers to further harden the site against attacks.

F

Forsvaret

forsvaret.no

70

Forsvaret.no is the official website of the Norwegian Armed Forces, providing comprehensive information about military tasks, training, education, recruitment, veteran affairs, and public communication. The site targets Norwegian citizens interested in military service and the general public seeking authoritative defense information. The website demonstrates a high level of professionalism, with clear navigation, consistent branding, and relevant content tailored to its audience. Technically, the site employs modern web technologies including Vue.js and Google Tag Manager, and appears to be built on the Enonic CMS platform. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate to fast performance profile. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanisms. From a security perspective, the site uses HTTPS and implements cookie consent, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain WHOIS data is not publicly available due to Norid privacy policies, but the domain is consistent with an official Norwegian government entity. Overall, Forsvaret.no presents a trustworthy, secure, and well-maintained digital presence for the Norwegian Armed Forces, with recommendations to enhance security headers and publish vulnerability disclosure information to further strengthen its security posture.

W

Schönes für Baby, Kinder und Erwachsene | Waldorfshop

waldorfshop.eu

63

Waldorfshop.eu is an e-commerce platform specializing in educational and craft materials tailored for Waldorf schools, kindergartens, and families. The website offers a curated selection of sustainable, pedagogically valuable products including toys, craft supplies, and books from reputable brands such as Ostheimer and Grimm’s. The site targets parents, educators, and institutions interested in Waldorf pedagogy and sustainable childhood development. Technically, the site is built on the plentymarkets platform using Vue.js, with integrations for PayPal payments, Google Tag Manager, and various marketing and analytics tools. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security headers and privacy policy pages are missing. WHOIS data is not publicly available due to EURid privacy policies, but the site’s professional presentation and use of trusted third-party services indicate legitimacy. Overall, the site is well-positioned in its niche market with room for improvement in privacy transparency and security disclosures.

I

Investigatívne centrum Jána Kuciaka

icjk.sk

53

Investigatívne centrum Jána Kuciaka is a Slovak non-profit investigative journalism organization founded in 2018, continuing the legacy of Ján Kuciak. The organization focuses on independent investigative journalism, data analysis of corruption cases, and publishes articles and podcasts to inform the public. It maintains strong partnerships with international investigative journalism networks and receives grant support from various embassies. Technically, the website uses modern JavaScript frameworks (Vue.js and Vuetify), is hosted with CDN support, and integrates common analytics and tracking tools. The security posture is good with HTTPS, DNSSEC, and secure forms, though explicit security headers and incident response contacts are missing. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. Overall, the website is professional, trustworthy, and well-positioned in its niche.

S

Smart Sender

smartsender.eu

60

Smart Sender is a technology company offering a SaaS chatbot platform that integrates with multiple popular instant messengers such as Telegram, Viber, WhatsApp, Instagram Direct, Facebook Messenger, Skype, VKontakte, Kik, Line, and WeChat. The platform focuses on automating customer engagement, increasing sales, and improving customer loyalty through chatbots, autoresponders, and automated sales funnels. The website presents a professional and consistent brand image with clear pricing plans and calls to action for free trials and registration. Technically, the website is built using modern JavaScript frameworks, primarily Vue.js, and incorporates common analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile-optimized with good SEO practices and a moderate performance profile. Security-wise, HTTPS is enforced, and CSRF tokens are present, but there is room for improvement in implementing additional security headers and publishing explicit security policies. The security posture is solid but could benefit from enhanced transparency around incident response and vulnerability disclosure. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. No direct contact emails or phone numbers are provided, which may limit immediate customer support access but is common for SaaS platforms relying on account portals. Overall, the website and business appear legitimate, professional, and trustworthy with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and compliance.

Ž

Živá půda

ziva-puda.cz

10

Živá půda is a Czech Republic based organization focused on soil conservation and enhancement, providing services and information to maintain soil health without commercial trading of soil. The website reflects a niche environmental and agricultural support business model, targeting farmers, landowners, and environmental stakeholders. The company was founded in 2021 and operates with a small business scale. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on Azure CDN, and integrates mapping via Leaflet.js. It employs Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is strong with HTTPS, security headers, and secure forms, though explicit security and incident response policies are not present. Privacy compliance is basic with a cookie consent modal but lacks a visible privacy policy. Overall, the website is professional, content-rich, and trustworthy with moderate user tracking and good SEO and mobile optimization.

P

PaRELI s.r.o.

pareli.sk

43

PaRELI s.r.o. is a Slovak company founded in 2013 specializing in digitization and project documentation services for the construction sector, focusing on electrical installations, lighting, and security systems. The company serves construction professionals and developers primarily in Slovakia, with a portfolio of multifunctional complex projects. The website is built using modern technologies such as Vue.js and integrates Google Maps API for enhanced user experience. The site is professionally designed with good navigation and mobile optimization, though it lacks formal privacy and cookie policies, which impacts compliance. Security posture is moderate with no evident security headers or vulnerability disclosures, and no analytics or tracking scripts detected, indicating minimal user tracking. Contact information is clearly presented, supporting business credibility. Overall, the website reflects a legitimate and professional small business with room for improvement in privacy and security practices.

D

DAAD (Deutscher Akademischer Austauschdienst)

alumniportal-deutschland.org

69

Alumniportal Deutschland is a digital networking platform primarily serving alumni, universities, and organizations to facilitate international exchange, events, and career development. It is affiliated with the DAAD, a reputable German academic exchange service, which strengthens its market position and trustworthiness. The platform offers a variety of services including community engagement, job boards, and learning resources, targeting international alumni and academic professionals. Technically, the website uses modern frontend frameworks such as Vue.js and Nuxt.js, delivering a responsive and accessible user experience with good SEO practices. Security-wise, the site enforces HTTPS, implements cookie consent mechanisms, and follows best practices in form handling and data privacy, although explicit security policies and incident response information are not publicly detailed. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a strong focus on privacy compliance and user engagement.

R

REMEX GmbH

meb-wissen.de

50

MEB Wissen is an educational platform operated under the REMEX GmbH group, focused on providing training and resources related to the German Ersatzbaustoffverordnung (EBV) regulation. The platform offers on-demand courses, live webinars, group seminars, and digital/print work aids targeting professionals in construction and environmental sectors. The business model centers on paid and free educational content to support sustainable building material usage. Technically, the website is built on WordPress with WooCommerce and Masterstudy LMS, leveraging modern web technologies such as Vue.js and Bootstrap. The site is hosted on INWX nameservers and shows good SEO and mobile optimization practices. Security posture is solid with HTTPS and no exposed sensitive data, though some improvements are recommended such as adding security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and compliant with GDPR, though explicit cookie consent is missing. The WHOIS data aligns with the business claims, showing no suspicious patterns. The site integrates social media channels and partner domains related to REMEX GmbH, enhancing credibility.

A

AMBEST

am-best.com

53

AMBEST is a well-established, member-owned network of independent truck stops and service centers operating nationwide since 1988. The company focuses on providing quality facilities, competitive fuel pricing, expert maintenance, and a loyalty rewards program (AMBUCK$) targeted at drivers and fleets in the transportation sector. The website reflects a professional and consistent brand image emphasizing family-owned values and service excellence. Technically, the site uses modern JavaScript frameworks (Vue.js, Quasar) and is hosted with Cloudflare DNS, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS and domain registration protections but lacks important security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is minimal and no incident response or vulnerability disclosure policies are published, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy and security practices.

D

Datatilsynet

datatilsynet.no

74

Datatilsynet is the Norwegian Data Protection Authority, serving as both a supervisory and ombudsman body responsible for ensuring compliance with privacy regulations and protecting individuals from misuse of personal data. The website provides comprehensive information on privacy rights, obligations for businesses, and regulatory frameworks, targeting Norwegian citizens, organizations, and privacy professionals. It holds a strong market position as a national government agency with authoritative content and services. Technically, the website employs a modern tech stack including Vue.js and jQuery, is built on the EPiServer CMS platform, and demonstrates good mobile optimization and accessibility. The site uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements, reflecting a mature digital infrastructure suitable for a government entity. From a security perspective, the site benefits from HTTPS and secure cookie handling but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is consistent with Norwegian domain registry policies and does not detract from the site's legitimacy. Overall, Datatilsynet's website is professional, trustworthy, and compliant with privacy regulations, offering valuable resources and guidance on data protection. Strategic improvements could include enhancing security headers, publishing incident response information, and adding vulnerability disclosure mechanisms to further strengthen security posture.

T

Teta drogerie

tetadrogerie.cz

69

Teta drogerie is a prominent retail and e-commerce company operating in the Czech Republic, specializing in cosmetics, skin care, household goods, and products for children and pets. The company holds a strong market position as a leading drugstore chain, targeting general consumers with a comprehensive product range both in physical stores and online. The website reflects a professional and consistent brand image with excellent content quality and user experience. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, leveraging various third-party tools for analytics, advertising, and consent management. The site is mobile-optimized and performs moderately well, with good SEO and accessibility features. Security measures include HTTPS enforcement and multiple security headers, though explicit security policies and incident response information are not publicly available. The security posture is solid with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through a comprehensive privacy policy and cookie consent mechanism, aligning with GDPR requirements. However, the absence of WHOIS data reduces transparency and slightly impacts business credibility. Overall, the website is trustworthy and professionally managed, with room for improvement in security transparency and WHOIS data availability.

E

Evangelisches Medienhaus GmbH

digendo.de

60

digendo.de is a German-language digital portal platform operated by Evangelisches Medienhaus GmbH, targeting primarily German-speaking users such as municipalities or community organizations. The platform offers subscription-based access to digital services with a focus on secure user login and account management. The website is professionally designed with consistent branding and provides essential legal and subscription information through linked partner domains. Technically, the site uses modern JavaScript frameworks like Vue.js and Bootstrap for responsive design, delivering a moderate performance experience. Security posture is adequate with HTTPS usage and secure password input features, but lacks explicit security headers and cookie consent mechanisms. No contact information or incident response details are directly available on the login page, which limits transparency. Overall, the site is safe, business-oriented, and trustworthy but could improve in privacy compliance and security best practices.

R

Red Tiger

redtiger.com

70

Red Tiger is a well-established gaming software provider specializing in casino games and marketing tools for casino operators. The company is part of Evolution Gaming, a major player in the online gaming industry. Their website demonstrates a strong market position with a focus on innovative bonusing tools, tournaments, and jackpot offerings. The site is professionally designed, mobile-optimized, and provides clear information about their products and services. Technically, the website uses modern frameworks such as Vue.js and Nuxt.js, hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is strong with HTTPS enforced, proper domain registration locks, and multiple regulatory certifications displayed. Privacy compliance is evident with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

S

Simmons & Simmons

simmons-simmons.com

68

Simmons & Simmons is an established international law firm that positions itself as a strategic business partner to its clients. The firm offers legal services across multiple sectors including financial institutions, healthcare and life sciences, technology, media and telecommunications, and energy and infrastructure. With over 120 years of history, Simmons & Simmons maintains a strong market presence and a professional brand image. The website reflects a mature digital presence with comprehensive content, clear navigation, and modern web technologies such as Vue.js and Google reCAPTCHA for security. Technically, the website is well-structured, mobile-optimized, and employs modern fonts and video embedding technologies. The presence of privacy and cookie policies, along with a cookie consent mechanism, indicates attention to privacy compliance and user experience. However, the absence of visible security headers and explicit contact information for security or incident response are areas for improvement. From a security perspective, the site uses HTTPS and Google reCAPTCHA, which are positive indicators. The lack of WHOIS data is unusual for a firm of this stature and may warrant further investigation to confirm domain registration legitimacy. No vulnerabilities or malicious content were detected in the site content. Overall, Simmons & Simmons presents a professional and trustworthy online presence suitable for its business model. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving transparency around domain registration and contact information.

E

European Natural Forest School

naturalforest.eu

53

The European Natural Forest School is a specialized educational program dedicated to natural forestry and ecology, targeting advanced students and young professionals in forestry and conservation fields. It operates as a small-scale, donor-supported initiative with partnerships including The Natural Forest Academy and donors such as the Frankfurt Zoological Society and Dieter Mennekes Umweltstiftung. The program aims to provide expert knowledge and practical field experience in natural forest ecology, conservation, and management, with the next session planned for 2026. Technically, the website is built on WordPress using Elementor and the JupiterX theme, leveraging modern plugins and libraries such as Vue.js and jQuery. The site is moderately performant, mobile-optimized, and accessible at a basic level. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional, trustworthy, and aligned with its educational mission but would benefit from enhanced privacy and security practices.

A

amosWEB

amosweb.de

55

The website amosweb.de, specifically the /app/auth page, currently displays an error message indicating an issue with content availability. The site appears to be built using modern JavaScript frameworks such as Nuxt.js and Vue.js, with integration of Mapbox for mapping services. However, the page lacks substantive content, including privacy policies, contact information, and business descriptions, which limits the ability to fully assess the business or its market position. The domain is registered with NS1 name servers and appears consistent with a German entity, but no registrant details are provided to confirm legitimacy. Security posture is moderate with HTTPS enabled but no visible security headers or policies. Overall, the site is minimally functional and lacks critical compliance and trust indicators.

V

VM

vm.com

53

VM operates as a pioneering domain NFT marketplace, leveraging blockchain technology to facilitate seamless domain trading, transfers, lending, and escrow services. Registered as an ICANN-accredited registrar in Hong Kong since 2022, VM positions itself as a trusted platform for Web3 domain asset management. The website demonstrates a modern technical infrastructure built on Vue.js and integrates with popular blockchain wallets such as MetaMask, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly available. The absence of WHOIS data for the domain raises some concerns about registration transparency, but the presence of recognized partners and clear privacy policies mitigates some risk. Overall, VM presents a credible and innovative business with room for improvement in transparency and security disclosures.

P

PDCS, o.z.

pdcs.sk

41

PDCS is a Slovak non-governmental organization specializing in conflict resolution, civic participation, and social dialogue. The organization offers educational courses, facilitation, consulting, and project support primarily targeting individuals, groups, and organizations interested in societal development and democratic processes. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses modern web technologies including Vue.js and Bootstrap, and integrates privacy-respecting analytics via Plausible. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the absence of a cookie consent mechanism and a dedicated privacy policy page. Overall, PDCS demonstrates a credible and trustworthy online presence aligned with its non-profit mission.

N

Napoleon Games NV

napoleongames.be

61

Napoleon Games NV operates a leading online gambling platform in Belgium, offering a wide range of casino games, live casino, dice games, and sports betting services. The company targets adult users (21+) and positions itself as Belgium's best online casino and bookie, supported by strong branding and sponsorships in Belgian sports. The website is professionally designed with consistent branding and clear navigation, providing comprehensive legal and responsible gaming information to comply with local regulations. Technically, the site uses modern web technologies including Vue.js, Google Tag Manager, and OneTrust for cookie consent, hosted via Fastly CDN, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security policies and vulnerability disclosure mechanisms suggests room for improvement. Overall, the domain registration and WHOIS data confirm legitimacy and consistency with the business claims. The site is fully accessible without WAF blocking, and privacy compliance is well addressed. Recommendations include enhancing security headers, publishing security policies, and providing direct contact information for security incidents to further strengthen trust and compliance.

D

Drausy GmbH

drausy.de

56

Drausy GmbH operates as a specialized provider of biological water treatment and odor control solutions, focusing on sustainable and environmentally friendly technologies for water, wastewater, and soil treatment. The company targets municipal water management, environmental technology sectors, and related industries, positioning itself as a niche player with recognized expertise and practical applications demonstrated through expert testimonials and awards. The website reflects a professional and consistent brand image with detailed product information and a user-friendly contact mechanism. Technically, the website employs modern web technologies including Vue.js, Bootstrap, Google Analytics, and reCAPTCHA, ensuring a responsive and interactive user experience. The presence of a cookie consent manager (Klaro) and multi-language support indicates a mature digital infrastructure with attention to privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and implements reCAPTCHA on forms to mitigate spam. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, Drausy GmbH's website presents a trustworthy and professional front with solid business credibility and compliance with GDPR. The domain registration data is partially consistent with the business claims, supporting legitimacy. Strategic improvements in security policies and technical headers would further strengthen the site's security and trustworthiness.

A

ARCHEKTA, s.r.o.

archekta.com

47

Archekta is a small Slovak architecture studio founded in 1991, specializing in architectural design and construction consulting with a focus on balancing art and architecture. The company has a strong regional presence with award-winning projects and a professional team. The website showcases their portfolio and team but lacks privacy and cookie policies, which are important for compliance. Technically, the site uses modern frameworks like Nuxt.js and Tailwind CSS, hosted on Websupport.cz, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled but lacks DNSSEC and security headers. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and trustworthy but could improve compliance and security practices.

S

Saba Rock

sabarock.com

56

Saba Rock is a hospitality-focused website likely representing a resort or tourism service provider. The domain is well-established since 1998, indicating a mature business presence. The website employs modern frontend technologies such as Vue.js and Tailwind CSS, with integrated marketing and analytics tools including Google Tag Manager and Facebook Pixel. However, the site lacks visible privacy, cookie, and terms of service policies, which are critical for compliance and user trust. Security posture is moderate with no detected security headers or vulnerability disclosures, and no signs of WAF or content blocking were found. Overall, the site presents a professional but basic digital presence with room for improvement in privacy and security compliance.

C

CardPro - Specializovaný e-shop na Pokémon TCG

cardpro.cz

56

CardPro.cz is a specialized e-commerce platform focused on selling Pokémon Trading Card Game (TCG) products, including booster packs, elite trainer boxes, special sets, gift tins, accessories, and individual cards. The website targets collectors, players, and gift buyers within the Czech Republic, positioning itself as a niche retailer with a professional and modern online presence. Founded in 2023, the business leverages modern web technologies such as Nuxt.js and Vue.js, hosted with Cloudflare and DigitalOcean services, ensuring fast performance and excellent mobile optimization. The site integrates multiple analytics and marketing tools including Google Tag Manager, Microsoft Clarity, and Facebook Pixel, indicating a moderate level of user tracking and marketing sophistication. Security posture is good with HTTPS enforced and Cloudflare protection, but lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Contact information is not explicitly found in the provided content, which may impact customer confidence. Overall, the website is well-designed and functional but requires improvements in privacy compliance and transparency to enhance trust and legal adherence.

L

Livimi

livimi.com

66

Livimi is a Czech Republic-based real estate rental platform offering modern apartments in prime urban locations with a focus on digitalized rental processes. The company is part of the Fidurock investment group, leveraging over a decade of experience in property management. Their business model emphasizes direct rentals without commission, digital contract signing, and online housing management, targeting individuals seeking convenient and transparent urban living solutions. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, hosted on DigitalOcean infrastructure, and optimized for performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR and cookie policies. Overall, the website presents a professional, trustworthy, and user-friendly experience with moderate tracking for analytics and marketing purposes.

F

Fidurock

nearliving.cz

44

NEAR living is a modern residential real estate development project located in the rapidly evolving Prague district of Palmovka. The project offers a range of apartments from 1+kk to 3+kk, combining urban lifestyle with tranquility and high-quality architectural design. The website is professionally designed using modern technologies such as Nuxt.js and Vue.js, with strong mobile optimization and good SEO practices. The security posture is solid with HTTPS and secure forms, though explicit security headers and a published security policy are missing. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The WHOIS data shows inconsistencies with a future domain creation date, which slightly impacts trust but does not undermine the overall legitimacy of the business. Strategic recommendations include improving security headers, publishing a security policy, and verifying WHOIS data accuracy.

B

B2C, s.r.o.

dezeta.cz

45

Papírnictví DEZETA is an e-commerce and physical retail business operated by B2C, s.r.o., specializing in office, school, and paper products. The company has a local market presence in the Czech Republic, with a physical store located at Thákurova 7, Prague 6, and an online shop offering a wide range of stationery and related products. The website is built using modern JavaScript frameworks, specifically Vue.js, providing a responsive and user-friendly shopping experience. However, the site lacks some advanced security and privacy features such as cookie consent mechanisms and security headers. The WHOIS data confirms the legitimacy and consistency of the domain registration with the business information provided on the site.

I

ICT UNIE

ictu.cz

19

ICT UNIE is a professional association representing companies in the electronic communications sector in the Czech Republic. Established in 2010, it serves as a platform to raise awareness about modern information technologies among businesses and government bodies, promoting a knowledge-based society. The association offers working groups, organizes events, and supports its members through advocacy and collaboration. The website reflects a mature digital presence with a modern tech stack based on Nuxt.js and Vue.js, optimized for performance and mobile devices. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, ICT UNIE demonstrates a credible and professional online presence aligned with its business objectives.

M

Markgrafenkirchen e.V.

markgrafenkirchen.de

59

Markgrafenkirchen e.V. is a non-profit organization dedicated to the cultural, spiritual, and touristic promotion of the Markgrafenkirchen churches in Upper Franconia, Germany. The website serves as a comprehensive resource offering detailed information about nearly 60 churches, including photos, events, tours, and educational materials. The organization is positioned as a niche cultural heritage promoter with a strong regional focus and supported by European Union funding. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and SEO optimization. Security posture is solid with HTTPS and some security plugins, though improvements can be made in cookie consent and explicit security policies. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

S

Stiftung Gesundheit

arzt-auskunft.de

57

Stiftung Gesundheit operates the Arzt-Auskunft platform, a comprehensive German healthcare provider search service established in 1997. The platform enables patients to find doctors, clinics, therapists, and pharmacies nearby, offering features such as online appointment booking and information on barrier-free practices. The website is well-positioned in the German healthcare information market with a large user base and a strong reputation as a non-profit entity. Technically, the website employs modern frontend technologies including Vue.js, Bootstrap, jQuery, and Choices.js, ensuring a responsive and user-friendly experience across devices. Hosting is managed via Schlundtech, a reputable provider. The site demonstrates good SEO and accessibility practices, though performance is moderate. From a security perspective, the site uses HTTPS and deferred script loading, but lacks explicit security headers and a visible security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy, though no cookie consent mechanism was observed. Overall, the website presents a low-risk profile with high trustworthiness and professionalism. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response details to further strengthen security posture and compliance.

B

Brains Disruptive

dny.ai

61

Dny AI is a Czech national festival focused on artificial intelligence, showcasing AI's impact across various sectors and disciplines. The event targets a broad audience including companies, public institutions, academics, students, and the general public. Supported by the President of the Czech Republic and multiple ministries, it holds a strong market position as a key AI educational and networking platform in the region. Technically, the website is built on modern frameworks such as Vue.js and Nuxt.js, with integrated cookie consent and analytics tools, reflecting a moderate to good digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks visible advanced security headers and explicit incident response contacts. Overall, the site is professional, well-branded, and trustworthy, though improvements in privacy policy visibility and security practices are recommended.

D

Dr. Becker eHealth GmbH

hausmed.de

52

HausMed, operated by Dr. Becker eHealth GmbH, is a well-established German online platform offering certified health prevention courses reimbursed by statutory and some private health insurers. The website targets individuals seeking flexible, expert-supported health improvement programs in areas such as nutrition, physical activity, stress management, and habit change. With over 15 years of experience and more than 46,000 participants, HausMed holds a strong market position supported by partnerships with numerous health insurance providers. Technically, the site leverages modern frameworks like Vue.js, integrates Matomo and Facebook Pixel for analytics, and uses Vimeo for video content, ensuring a responsive and user-friendly experience optimized for mobile devices. Security practices include HTTPS enforcement, CSRF tokens, and GDPR-compliant cookie consent mechanisms, though some security headers could be improved. The WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, HausMed demonstrates a mature digital presence with good privacy and security posture, serving a clear healthcare niche in Germany.

B

Bluethumb

bluethumb.com.au

57

Bluethumb is a well-established Australian online art marketplace specializing in original paintings and modern art. Since its founding in 2012, it has positioned itself as a leading platform connecting Australian artists with collectors and art buyers. The website offers free shipping, returns, and insurance, enhancing customer trust and satisfaction. The business model focuses on e-commerce with additional services such as art advisory and trade services. Bluethumb targets art enthusiasts and collectors primarily within Australia.

F

FLERBAR Online Shop | Alle Produkte online kaufen |

flerbar.de

63

The website www.flerbar.de operates as an official German online retailer specializing in FLERBAR vaping products, including disposable e-cigarettes, pods, and e-liquids. It targets adult consumers interested in vaping and nicotine products, offering fast shipping within Germany and payment options such as PayPal and Klarna. The site is built on the plentymarkets e-commerce platform using Vue.js, with integrations for analytics and marketing tools like Google Analytics, Microsoft Clarity, and Google Tag Manager. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, HTTPS is enforced and a cookie consent mechanism is implemented, but explicit privacy policies and terms of service pages are not found, which is a compliance gap. WHOIS data is minimal and uses Alibaba DNS servers, which is unusual for a German retailer and slightly reduces trust. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

A

Abele Optik

abele-optik.de

70

Abele Optik is a well-established German retail company specializing in eyewear products including glasses, sunglasses, contact lenses, and related care products. With a strong physical presence of 75 stores across Germany and an integrated online shop, the company targets consumers seeking quality optical products and professional services. The website reflects a mature digital infrastructure built on modern web frameworks such as Nuxt.js and Vue.js, hosted on Bunny.net, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers and formal security policies are absent. The presence of Trusted Shops certification and active social media channels enhance trust and credibility. Overall, the website is professional, user-friendly, and compliant with basic privacy regulations, though explicit privacy and terms of service documents were not found in the analyzed content.

D

Deutscher Akademischer Austauschdienst

daad.de

66

The Deutscher Akademischer Austauschdienst (DAAD) is the world's largest funding organization dedicated to the international exchange of students and researchers. The website serves as an official platform providing comprehensive information about scholarships, academic exchange programs, and services for universities. It targets students, academics, and educational institutions primarily in Germany but also internationally. The DAAD operates as a non-profit organization with a strong market position in the education sector. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted on Microsoft Azure infrastructure, and employs Bootstrap for responsive design. The site demonstrates excellent mobile optimization, accessibility, and SEO practices, ensuring a fast and user-friendly experience. From a security perspective, the site enforces HTTPS, implements standard security headers, and includes a cookie consent mechanism compliant with GDPR. However, it lacks a dedicated security policy or incident response contact information, which could enhance transparency and trust. Overall, the DAAD website is professional, secure, and compliant with privacy regulations, reflecting the organization's credibility and commitment to international academic cooperation. Strategic improvements could focus on publishing explicit security policies and vulnerability disclosure channels to further strengthen its security posture.

D

Durchstarter - Freiwilliges Schuljahr

freiwilligennet.de

41

Durchstarter - Freiwilliges Schuljahr is a German non-profit educational initiative aimed at engaging students from the 8th grade onwards in voluntary social and active school year programs. The website serves as an informational and engagement platform, offering a variety of social, cultural, and ecological volunteer opportunities in cooperation with local organizations. The platform targets young students seeking meaningful extracurricular experiences and supports partnerships with local social institutions. Technically, the website is built on a modern stack including Vue.js, Bootstrap, and Pimcore CMS, with privacy-conscious analytics via Matomo and a compliant cookie consent mechanism. Security posture is adequate with HTTPS enforced and privacy best practices observed, although explicit security headers and incident response policies are not published. Overall, the site is professional, accessible, and trustworthy, with a clear focus on educational and social engagement.

D

DEKRA

dekra.de

73

DEKRA is a globally recognized expert organization specializing in vehicle inspection, expert reports, and various technical services related to transportation. With over 47,000 employees operating in more than 50 countries, DEKRA holds a strong market position as a leading service provider in the transportation sector. The website reflects a professional and consistent brand image targeting both private and business customers. Technically, the site employs modern JavaScript frameworks such as Vue.js and Nuxt.js, ensuring a responsive and user-friendly experience. Analytics are handled via Matomo, indicating a moderate level of user tracking. Security posture is adequate with HTTPS enabled and strict referrer policies, but lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professionally maintained, suitable for its enterprise scale and industry.

B

Behinderten-Sportverband Niedersachsen e.V.

bsn-ev.de

53

The Behinderten-Sportverband Niedersachsen e.V. (BSN e.V.) is a regional non-profit sports association in Germany focused on disability sports and rehabilitation training. Their website provides comprehensive information about their services, including rehabilitation sports and function training, targeting individuals interested in disabled sports within Niedersachsen. The site is built on TYPO3 CMS and incorporates modern web technologies such as Vue.js and jQuery, with integrated Google services for analytics and marketing. The presence of Cookiebot ensures GDPR-compliant cookie consent management. Security measures include HTTPS enforcement, security headers, and reCAPTCHA for form protection. No critical vulnerabilities or security issues were detected, and the site maintains a good privacy posture with a detailed privacy policy and cookie declaration. Overall, the website is professional, accessible, and trustworthy, serving its target audience effectively.

F

Festool

festool.de

65

Festool GmbH is a well-established German manufacturer and retailer of high-quality power tools and system solutions targeted at professional craftsmen. Founded in 1925, the company holds a strong market position as a premium brand in the manufacturing and retail sectors. Their website reflects a professional and comprehensive digital presence, offering detailed product information, customer support, and e-commerce capabilities. The target audience is clearly professional tradespeople seeking reliable and tailored power tool solutions. Technically, the website employs modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for consent management, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and a consent mechanism. Business credibility is high, supported by transparent contact information, legal company data, and consistent branding. Overall, the website demonstrates a mature and secure digital infrastructure suitable for a large enterprise in the manufacturing industry.

B

BIIGLE

biigle.de

61

BIIGLE is a specialized web service platform focused on efficient image and video annotation, primarily serving the marine environmental monitoring and research community. The platform offers advanced annotation tools, collaborative label management, and machine learning assistance to accelerate annotation workflows. It is supported by reputable research institutions and funded by recognized organizations, positioning it as a trusted niche solution in scientific image analysis. Technically, the website employs modern frontend technologies such as Vue.js, delivering a fast, mobile-optimized, and well-structured user experience. The hosting is managed via INWX nameservers, and HTTPS is enforced with a valid SSL configuration. However, some security best practices such as security headers and explicit cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. From a security perspective, the site demonstrates good fundamentals including CSRF token usage and secure login forms. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response plan is a gap that could affect trust and readiness. Privacy compliance is generally good with a privacy policy present, but the lack of a cookie consent banner is a minor compliance risk. Overall, BIIGLE presents a professional, trustworthy, and technically sound web presence with strong academic credibility. Strategic improvements in privacy and security transparency would further strengthen its risk profile and user trust.

D

Durchstarter - Freiwilliges Schuljahr

durchstarter-fssj.de

41

Durchstarter - Freiwilliges Schuljahr is a German non-profit initiative focused on enabling students from the 8th grade onwards to engage in voluntary social and active school year programs. The website serves as an informational and engagement platform, facilitating connections between students and local social, cultural, and ecological organizations. The organization positions itself as a niche regional player promoting youth voluntary engagement with a clear target audience of school students. Technically, the website is built on a modern stack including Pimcore CMS, Vue.js, Bootstrap, and privacy-focused Matomo analytics, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting its non-profit mission effectively.

T

Technikboerse

technikboerse.com

58

Technikboerse.com operates as a specialized online marketplace focused on new and used agricultural machinery, forestry, construction, municipal, and viticulture equipment. The platform targets professionals and businesses in the agricultural and related sectors primarily in Germany and Europe. It offers a comprehensive search and listing service for machinery buyers and sellers, including dealers and private individuals. The website is multilingual, supporting a broad European audience, and positions itself as a trusted marketplace in its niche. From a technical perspective, the website employs modern web technologies including Vue.js for frontend interactivity, Google Tag Manager and Google Analytics for analytics, and a Consent Management Platform to ensure GDPR compliance. The site is well-structured with SEO best practices, mobile optimization, and accessibility considerations, although some accessibility features could be enhanced. Performance is moderate, with preloading and asynchronous script loading implemented. Security-wise, the site enforces HTTPS with good SSL configuration and includes standard security headers such as Content-Security-Policy and Strict-Transport-Security. The presence of a cookie consent banner and privacy policy indicates attention to privacy compliance. However, there is no publicly available security policy or incident response contact, and no vulnerability disclosure mechanism is found, which are areas for improvement. Overall, Technikboerse.com presents a professional and trustworthy online marketplace with solid technical infrastructure and privacy compliance. The main risk factor is the lack of publicly available WHOIS data, which slightly reduces domain trustworthiness. Strategic recommendations include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure page to enhance transparency and security posture.

U

Univerzita Palackého v Olomouci

univerzitnimesto.cz

41

Univerzitní město is a website representing Univerzita Palackého v Olomouci, a well-established university in the Czech Republic. The site serves as an informational portal for prospective students, offering details about study programs, university activities, open days, and other student-related services. The university positions itself as a key educational institution in the region with a broad offering of over 900 study program combinations. The website is professionally designed with consistent branding and clear navigation, targeting students and their families. Technically, the website employs modern web technologies including Bootstrap, Vue.js, jQuery, and Font Awesome, hosted via a Czech registrar Wedos. It integrates Matomo analytics for user tracking and includes cookie consent mechanisms, indicating attention to privacy compliance. The site is mobile-optimized and performs moderately well, with good SEO practices. From a security perspective, the site uses HTTPS and has cookie consent but lacks explicit security headers and visible security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. Overall, the website presents a strong digital presence for the university with good content quality and business credibility. Recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security and incident response purposes.