Security Directory

R

Radio Rockland GmbH & Co. KG

rockland.de

43

Rockland Radio GmbH & Co. KG operates a regional German radio station focused on rock and pop music, serving the Rheinland-Pfalz region and surrounding areas. The website provides rich content including live streams, podcasts, interviews, news, and event information, positioning itself as a key media player in its niche. The business model centers on media broadcasting and advertising, supported by a professional web presence and active social media engagement. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and implements cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent in place, though improvements in security headers and explicit security policies are recommended. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting a positive risk profile.

R

Radio Nordseewelle GmbH & Co. KG

nordseewelle2.de

46

NORDSEEWELLE 2 is a regional German radio station specializing in classic rock, pop, and disco hits from the 70s to 90s, targeting listeners primarily in the northwest of Niedersachsen. The station offers broadcast via DAB+ and online streaming through various platforms including Alexa and its own app. The website is professionally designed using TYPO3 CMS and Bootstrap, providing a responsive and user-friendly experience. It includes event promotion and a music community engagement section. From a technical perspective, the site is well-structured with modern web technologies and implements a cookie consent mechanism compliant with GDPR requirements. Security posture is adequate with HTTPS enforced, though additional security headers and explicit policies could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, indicating stable accessibility and trustworthiness.

L

Landwirtschaftliche Rentenbank

rentenbank.de

64

Landwirtschaftliche Rentenbank operates as the central refinancing institution for the German agricultural and food industry sectors, providing specialized loans and refinancing services. The website reflects a professional and consistent brand presence targeting stakeholders in the German agribusiness sector. The business model focuses on supporting agriculture through financial products and promotional banking services, positioning Rentenbank as a key player in this niche market. Technically, the website employs modern web technologies including JavaScript, CSS, and HTML5, with integrations such as etracker for analytics and Cognigy for chatbot services. Hosting is managed via Ecotel nameservers, indicating a stable infrastructure. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS and includes scripts to disable cookies for analytics, showing some privacy awareness. However, explicit privacy and cookie policies, security headers, and incident response information are absent, representing areas for improvement. No vulnerabilities or suspicious domains were detected, and no WAF or blocking mechanisms interfere with content access. Overall, the website is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and clearer contact and security policy disclosures to improve user trust and regulatory adherence.

The website krakow.pl is the official municipal portal for the city of Kraków, Poland. It serves as a comprehensive information hub for residents and visitors, offering daily news, traffic updates, cultural events, tourism information, and practical city services. The site is well-branded with consistent government identity and targets a broad audience including local citizens and tourists. Technically, the site employs modern web technologies such as HTML5, CSS3, JavaScript, and Font Awesome icons, with good mobile optimization and accessibility features. However, there is a lack of visible privacy and cookie policies, and no explicit security or incident response information is provided, which impacts its privacy compliance and security posture scores. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registrant information and appropriate domain age. Overall, the site is professional and trustworthy but could improve in security and privacy transparency.

A

Artneo Sp. z o.o.

artneo.pl

11

Artneo Sp. z o.o. is a well-established Polish interactive agency and software house founded in 2002, specializing in UX/UI design, dedicated software systems, mobile applications, e-commerce platforms, and digital marketing services including SEO and SEM. The company positions itself as a leading software house in Poland with a strong portfolio and trusted client base. Technically, the website employs modern web technologies including Uikit, Google Analytics, Google Ads, and Facebook Pixel, with a comprehensive cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS, CSRF protection, and consent management, though some security headers and policies could be improved. Overall, the website is professional, accessible, and trustworthy, reflecting the company's maturity and market position.

P

PRO CARE – Partner für Haushalt, Familie und Betrieb e.V.

procare-partner.de

49

PRO CARE – Partner für Haushalt, Familie und Betrieb e.V. is a well-established German service provider specializing in household, family, and agricultural assistance primarily in the Nordbaden region. With over 50 years of experience and a team of more than 50 employees across three regional offices, PRO CARE offers trusted and competent support services reimbursed by health insurance and social security. The website reflects a professional and user-friendly digital presence with clear service descriptions and contact points. Technically, the website is built on a modern stack including Kirby CMS, uses reputable hosting by Hetzner, and integrates third-party services such as Typekit fonts and Tiny Slider for UI components. The site is mobile-optimized, accessible, and SEO-friendly, with a cookie consent mechanism aligned with GDPR requirements. Analytics and marketing tools from Google are used responsibly with user consent. From a security perspective, the site enforces HTTPS and employs cookie consent for tracking. However, it lacks explicit security policy documentation, incident response contacts, and advanced security headers, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious patterns were detected. Overall, PRO CARE demonstrates a strong business credibility and digital maturity suitable for its sector and audience. Strategic improvements in security transparency and incident readiness would further strengthen its posture.

B

Bildungshaus Kloster St. Ulrich

st-ulrich-lvhs.de

47

Bildungshaus Kloster St. Ulrich is a small, non-profit educational institution affiliated with the Erzdiözese Freiburg, focusing on providing learning and experiential spaces primarily for rural communities. Their offerings include seminars, workshops, and spiritual retreats targeting a broad audience including families, youth, and adults interested in personal and societal development. The website reflects a well-structured, content-rich platform with clear navigation and consistent branding, supporting their educational mission. Technically, the website uses standard web technologies such as JavaScript, CSS, and HTML5, with moderate performance and good mobile optimization. However, there is no evidence of a CMS or advanced frameworks, and no hosting provider information is available. SEO practices appear adequate with proper meta tags and descriptive content. Accessibility is basic but could be improved. From a security perspective, the site uses HTTPS (assumed from domain context though not explicitly confirmed), but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows privacy-protected name servers, which is reasonable for this type of institution. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy compliance measures.

S

Statistisches Bundesamt (Destatis)

destatis.de

63

The Statistisches Bundesamt (Destatis) is the official German Federal Statistical Office providing comprehensive statistical data, publications, and analyses to the public, government, and researchers. The website serves as a central portal for accessing official statistics across various sectors including economy, society, environment, and government. It maintains a strong market position as the authoritative source of official statistics in Germany. Technically, the website is built on the Government Site Builder CMS, employs Matomo analytics hosted on trusted government infrastructure, and demonstrates good performance and mobile optimization. The site features a clear navigation structure, extensive content, and accessibility features, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS, uses a cookie consent mechanism compliant with GDPR, and avoids exposing sensitive data. While explicit security headers are not visible in the HTML, the overall security posture is strong with recommendations to enhance header implementation and publish a dedicated security policy. Privacy compliance is robust with transparent data collection and retention policies. Overall, the website is highly trustworthy, professionally maintained, and compliant with relevant privacy regulations. It effectively balances user experience, data transparency, and security, making it a reliable resource for official statistical information in Germany.

B

Blitzfang Medien

blitzfang.de

53

Blitzfang Medien is a German communications agency specializing in film production and moving image campaigns for international clients. The company emphasizes storytelling and close collaboration to deliver tailored communication solutions beyond mere film production. The website is professionally designed, mobile-optimized, and built on Magnolia CMS using modern JavaScript libraries such as Video.js and Slick Carousel. However, the site lacks critical privacy and cookie policies, security headers, and explicit contact information, which impacts its overall security posture and privacy compliance. No WAF or blocking mechanisms were detected, and the content is safe for general audiences.

D

Drei Quellen Mediengruppe GmbH

drei-quellen-mediengruppe.de

43

Drei Quellen Mediengruppe GmbH operates as a regional media and communications company based in Germany, focusing on political journalism, creative agency services, and event management. Their flagship publication, the Politikjournal Rundblick, provides insider political news and analysis for Lower Saxony. The company also offers consulting, production, post-production, marketing, and event planning services, targeting political professionals, businesses, and event clients in the region. The website reflects a small-sized business with consistent branding and professional content. Technically, the website is built on the Pimcore CMS platform and hosted by OVH, utilizing modern web technologies such as JavaScript, CSS, and FontAwesome icons. The site is mobile-optimized with good navigation and content relevance, though accessibility features are basic. Performance is moderate, and SEO optimization is basic but present. No advanced frameworks or analytics tools were detected. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, indicating room for improvement in GDPR compliance and security best practices. No vulnerabilities or exposed sensitive data were found, but the absence of a security policy, incident response contacts, and vulnerability disclosure reduces the overall security maturity. WHOIS data is minimal but consistent with the hosting provider, with no suspicious patterns detected. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements in security headers, cookie consent, and policy disclosures would enhance compliance and trustworthiness.

R

RADIO 21 GmbH & Co. KG

radio21.de

41

RADIO 21 GmbH & Co. KG operates a professional German radio station focused on rock and pop music, serving regions including Niedersachsen, Nordrhein-Westfalen, Hamburg, and Schleswig-Holstein. The website provides comprehensive content including live streaming, podcasts, news, events, and interviews, targeting German-speaking music enthusiasts. The company maintains a solid market position as a regional broadcaster with a clear business model centered on media broadcasting and advertising services. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and implements GDPR-compliant cookie consent mechanisms. The website is well-structured, mobile-optimized, and professionally designed, enhancing user experience and trust. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. WHOIS data is minimal but consistent with the business identity, supporting legitimacy. Overall, RADIO 21 presents a trustworthy and professional digital presence with moderate to high security and compliance maturity.

Z

Združenie Informačných a poradenských centier mladých v SR (ZIPCeM)

icm.sk

43

The website icm.sk represents a well-established non-profit organization, Združenie Informačných a poradenských centier mladých v SR (ZIPCeM), which operates a national network of youth information centers across Slovakia. Founded in 2003, the organization provides verified, anonymous, and tailored information and counseling services to young people on topics such as employment, education, travel, addictions, and human rights. The site targets youth and stakeholders interested in youth development and support services. The business model is focused on non-profit service delivery with partnerships involving governmental and educational institutions. The website content is professionally presented, consistent, and relevant to its audience.

B

Blinde Kuh e.V.

blinde-kuh.de

49

Blinde Kuh e.V. operates a pioneering German-language child-friendly search engine and educational portal, serving children and families with curated internet content and link tips. Established in 1997, it holds a unique market position as a trusted non-profit educational resource. The website is technically implemented using a custom CMS (BK CMS) with support for Progressive Web App technology, ensuring good mobile optimization and user experience. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response information. Privacy compliance is adequate with clear privacy and cookie policies, though no explicit consent mechanism is present. Overall, the site is trustworthy, safe for children, and professionally maintained, though funding challenges are noted as government support ended in early 2024.

GERICS (Climate Service Center Germany) operates as a specialized climate service organization providing scientific research, climate impact assessments, and knowledge transfer services primarily focused on climate change adaptation and mitigation. The website presents a professional and content-rich platform targeting researchers, policymakers, and public sector stakeholders interested in climate services. The technical infrastructure is based on the Imperia CMS with interactive maps and climate-related product catalogs, though mobile optimization and accessibility are basic. Security posture is moderate with HTTPS likely enabled but lacking security headers and formal privacy or incident response policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and privacy compliance measures.

P

Pixelgrade

pixelgrade.com

59

Pixelgrade is a specialized company focused on delivering premium WordPress themes tailored for creative professionals such as designers, photographers, and agencies. Established in 2010, the company has positioned itself as a niche leader in the creative WordPress theme market, offering high-quality, customizable themes with dedicated customer support. Their website reflects a strong brand identity and professional design, targeting a global audience of creatives seeking elegant and functional website solutions. Technically, Pixelgrade's website is built on WordPress with Elementor as a key framework, leveraging modern web technologies including HTML5, CSS3, and JavaScript. The site is hosted with Cloudflare providing DNS and CDN services, ensuring fast load times and good performance. Mobile optimization and accessibility are well addressed, contributing to an excellent user experience. SEO best practices are implemented with proper meta tags and structured data. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes essential security headers. The domain registration is transparent and consistent with the business profile, with no privacy protection masking ownership. While no explicit security policy or incident response information is published, the site follows good security hygiene. No vulnerabilities or suspicious activities were detected. Overall, Pixelgrade presents a low-risk profile with a mature digital presence, strong business credibility, and good privacy compliance. Strategic recommendations include enabling DNSSEC, publishing a dedicated security policy, and adding a security.txt file to enhance transparency and vulnerability management.

M

Ministerium der Deutschsprachigen Gemeinschaft

mdg.be

61

The website www.mdg.be serves as the official online portal for the Ministerium der Deutschsprachigen Gemeinschaft, the government ministry responsible for the German-speaking Community in Belgium. It provides digital services primarily for government personnel, civil servants, and school staff, including access to payslips, time records, SAP system access, and remote support. The site is clearly targeted at internal government users and operates as a government service platform. Technically, the website is built with basic HTML, CSS, and JavaScript, with minimal external dependencies and no detected CMS or advanced frameworks. The site demonstrates moderate performance and basic mobile optimization but lacks advanced accessibility and SEO features. Security-wise, the site uses HTTPS for its subdomains and provides a cookie removal script, but no explicit security headers or privacy policies are present, which limits its security posture. The WHOIS data is restricted by DNS Belgium policy, preventing extraction of registrar or registrant details, but the domain's use and content strongly indicate legitimacy as a government entity. Overall, the site is functional and trustworthy for its intended audience but would benefit from enhanced security headers, privacy compliance documentation, and improved technical modernization.

E

esistfreitag

esistfreitag.de

49

esistfreitag is a German creative agency established in 2011, specializing in multidisciplinary projects and campaigns that connect brands with people. The company operates beyond traditional agency services by running a city magazine, a curated product store, and an urban space for creativity and events. Their market position is that of a small but established agency with a strong community focus and a modern approach to creative services. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and Lottie animations, hosted on rzone.de servers. The site is mobile-optimized and features video backgrounds and interactive elements, though SEO metadata is minimal. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though improvements in security transparency and SEO could enhance its profile.

J

JW Web Development

jw-webdev.info

61

JW Web Development is a small, established Polish technology company specializing in responsive website design, custom web applications, CMS/CRM solutions, e-commerce platforms, and graphic design services. With over 18 years of experience and more than 800 projects completed, the company serves primarily Polish businesses and institutions, with some international clients. Their market position is that of a trusted regional web development provider with a comprehensive service portfolio including digital accessibility and SEO. Technically, the website employs a modern technology stack including HTML5, CSS3, PHP, MySQL, jQuery, Bootstrap, and Angular, with a focus on responsive design and accessibility. The site is well-structured, mobile-optimized, and uses Google Analytics and Tag Manager for user tracking. Performance is moderate, with room for optimization. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and cookie consent mechanisms indicates areas for improvement. The lack of WHOIS transparency due to TLD restrictions limits domain trust verification but the professional website content and business information mitigate concerns. Overall, the website presents a professional and trustworthy digital presence with solid technical foundations. Strategic improvements in security headers, privacy compliance, and WHOIS transparency would enhance trust and compliance further.

F

Freelancing.eu

freelancing.eu

49

Freelancing.eu operates as a specialized online directory and resource platform dedicated to European freelancers. It offers a curated open directory of freelancers across multiple categories, freelance news, and educational resources such as books. The platform targets freelancers and clients within Europe, positioning itself as a niche leader with a long operational history dating back to 2005. The business model centers on providing visibility and connection opportunities for freelancers alongside valuable industry news and insights. Technically, the website is built on a custom or unknown CMS with standard web technologies including HTML5, CSS3, and JavaScript. It is hosted by ZONER a.s., a reputable hosting provider. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. There is no cookie consent mechanism, which is a compliance gap given GDPR relevance. No vulnerabilities or exposed sensitive data were detected, but improvements are recommended in security headers and incident response documentation. Overall, the security posture is moderate but could be enhanced to better protect users and data. The overall risk assessment is low with no signs of malicious activity or suspicious domain registration. The site is trustworthy, professional, and safe for general audiences. Strategic recommendations include implementing GDPR-compliant cookie consent, enhancing security headers, publishing a security policy, and improving accessibility compliance to strengthen trust and compliance.

H

Hyundai OCI Co., Ltd.

hd-hyundaioci.co.kr

52

Hyundai OCI Co., Ltd. operates as a leading manufacturer in the energy sector, specializing in the production of carbon black and BTX chemical products. The company positions itself as a technologically advanced and competitive player in the carbon black industry, targeting business customers and investors. The website reflects a professional corporate presence with clear branding and comprehensive business information, supported by a family of related companies under the HD Hyundai Group umbrella. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and jQuery, hosted likely by Gabia, a reputable Korean hosting provider. While the site is accessible and well-structured, mobile optimization and accessibility are basic, and no CMS or advanced frameworks are detected. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is transparent and consistent with the business identity, enhancing trustworthiness.

H

HD현대케미칼

hd-hyundaichemical.co.kr

52

HD현대케미칼 is a South Korean petrochemical company specializing in the production and supply of various energy and chemical products such as LPG, naphtha, aviation fuel, diesel, and aromatic hydrocarbons. The company is part of the larger HD Hyundai conglomerate, with multiple related subsidiaries and partner companies linked through family site connections. The website presents a professional corporate image with clear business information and product descriptions targeted at industrial clients, investors, and potential employees. Technically, the site uses a traditional web stack with jQuery and RequireJS, hosted via Gabia, and employs HTTPS for secure communications. However, there is room for improvement in modern security practices, including the implementation of security headers and privacy compliance mechanisms. The WHOIS data is transparent and consistent with the company's identity, supporting the legitimacy of the domain and business. Overall, the website is well-structured and trustworthy but could enhance its privacy and security posture to align with best practices.

A

Avikus Co. Ltd

avikus.ai

55

Avikus Co. Ltd is a Korean-based company specializing in maritime autonomous navigation solutions, targeting both commercial shipping and recreational boating markets. Their offerings include AI-powered systems to improve fuel efficiency, safety, and fleet management for commercial vessels, as well as navigational and docking aids for recreational boats. The company is positioned as an innovator in the maritime technology sector with strategic ties to HD Hyundai, enhancing its market credibility. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies and integrated with Google Analytics 4 and Google Tag Manager for marketing and analytics. The site demonstrates good mobile optimization and user experience, though some SEO and accessibility features could be improved. Hosting is via Amazon AWS, ensuring reliable infrastructure. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC, security headers, and published privacy or cookie policies, indicating areas for compliance and security enhancement. No incident response or vulnerability disclosure information is provided, which could be a risk factor. Overall, Avikus presents a professional and trustworthy online presence aligned with its business objectives. Strategic improvements in privacy compliance, security headers, and transparency around data protection would strengthen its security posture and regulatory adherence.

B

Bundesamt für Seeschifffahrt und Hydrographie (BSH)

bsh.de

63

The Bundesamt für Seeschifffahrt und Hydrographie (BSH) is a German federal maritime authority responsible for shipping, hydrography, marine environment, offshore wind energy, and climate data. It serves as a central hub combining administration and scientific research, providing extensive services and information to maritime professionals, government bodies, and the public. The website reflects a mature, well-structured digital presence with comprehensive content and clear navigation, targeting a specialized audience in maritime and environmental sectors. Technically, the site is built on the Government Site Builder CMS, hosted on German government infrastructure with secure HTTPS and moderate performance. Accessibility and SEO are well addressed, though some modern security headers are not explicitly visible. The site lacks a visible cookie consent mechanism, which is a minor compliance gap given the GDPR environment. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a public vulnerability disclosure policy and incident response contacts suggests room for improvement in transparency and security culture. Overall, the domain registration and hosting align with official government standards, reinforcing trustworthiness. The site is free from advertising, tracking, or adult content, ensuring a safe and professional user experience. Strategic recommendations include implementing a cookie consent banner, publishing security policies, and enhancing visible security headers to further strengthen compliance and trust.

N

Národní pedagogický institut

euroguidance.cz

50

Euroguidance.cz is the official Czech branch of the European Euroguidance network, operated by the National Pedagogical Institute. The website serves as a resource hub for career guidance professionals, educators, and students, offering publications, news, events, and educational materials focused on lifelong career counseling and mobility. The site is professionally designed, well-structured, and targets a Czech-speaking audience involved in education and career services. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and jQuery, with integration of Facebook Pixel for marketing analytics. Cookie consent mechanisms are implemented inline, reflecting basic privacy compliance efforts. However, no explicit privacy policy or terms of service pages were found, which is a gap in compliance and transparency. The WHOIS data for the domain is unavailable, which reduces trust from a domain registration perspective but does not negate the legitimacy indicated by the site's content and partner affiliations. Security posture is moderate with HTTPS implied but no detected security headers or incident response information. Overall, the site is a credible, safe, and useful resource for its target audience but could improve in privacy and security transparency.

M

Můj život po škole - rozcestník

mujzivotposkole.cz

41

The website 'Můj život po škole' serves as a regional navigation portal aimed at students or young people finishing school in various Czech Republic regions. It provides links to subdomains dedicated to specific regions, facilitating access to localized educational or post-school resources. The business model is informational, focusing on regional educational support without direct commercial services. The site is small in scale, founded in 2019, and targets a niche audience within the Czech education sector. Technically, the website uses basic HTML5, CSS3, and JavaScript with Google Fonts integration. Hosting is provided by a Czech hosting provider (VAS Hosting). The site demonstrates moderate performance and basic mobile optimization but lacks advanced frameworks or CMS detection. SEO and accessibility features are minimal but functional. From a security perspective, the site lacks visible security headers and does not present privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, and no analytics or advertising scripts are detected, indicating minimal user tracking. The domain registration data is consistent with the website's purpose and hosting location, supporting legitimacy. No WAF or blocking mechanisms are detected. Overall, the site is safe and suitable for a general audience, with no adult or questionable content. However, the lack of privacy and security policies, contact information, and security best practices lowers its security posture and privacy compliance. Strategic improvements are recommended to enhance trust and compliance.

P

Paměť žen

pametzen.cz

59

Paměť žen is an educational and cultural web platform dedicated to presenting Czechoslovak history through the everyday stories of women during the socialist era. The website targets educators, students, researchers, and the general public interested in women's perspectives on history. It offers thematic content, historical narratives, educational resources, and an interactive timeline to facilitate learning and engagement. The platform is professionally designed with consistent branding and a clear focus on education and cultural preservation.

The website rovneprilezitosti.cz operates as a nonprofit legal advisory portal managed by Gender Studies, o.p.s., focusing on legal issues related to gender and age discrimination, family-work balance, and parental leave in the Czech Republic. It serves primarily women and men facing discrimination or seeking advice on parental leave and flexible work arrangements. The site is supported by Czech government grants and EHP funds, reinforcing its nonprofit and public service nature. The content is primarily in Czech and includes a contact form for legal inquiries, answered by qualified legal professionals within 10 days. The site also provides an archive of answered questions and legal guidance.

N

Na volné noze

navolnenoze.cz

50

Na volné noze is a well-established Czech online platform serving as the largest community and open catalog of independent professionals and freelancers in the Czech Republic since 2005. It offers a searchable directory of freelancers across multiple sectors including technology, media, education, and other professional services. The platform facilitates direct client-freelancer contact without intermediaries or commissions, supporting networking and professional growth through events and newsletters. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and uses Cloudflare for DNS services. The site is moderately performant, mobile-optimized, and SEO-friendly, though it lacks some advanced accessibility features. The content is rich, professionally presented, and consistent with the brand identity. From a security perspective, the site uses HTTPS and secure forms but lacks explicit security headers and a formal security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Social media integration is strong, enhancing trust and community engagement. Overall, the website presents a low-risk profile with a solid business reputation and technical foundation. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security posture further.

P

Plinko

plinko.org

62

Plinko.org is an informational and affiliate marketing website focused on the Plinko casino game and its variants, including crypto gambling platforms. The site offers comprehensive guides, reviews, strategies, and promotional content targeting adult online gamblers interested in Plinko games. The business operates from the UK with clear contact details and a domain registered since 2019, indicating a stable presence in the niche gambling information market. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Microsoft Clarity for analytics. Hosting and DNS are managed via Cloudflare, providing performance and security benefits. However, the site lacks advanced security headers and explicit security or incident response policies, which could be improved to enhance trust and compliance. Privacy and cookie policies exist but lack explicit consent mechanisms, which may be a compliance gap under GDPR. Overall, the site is professionally designed with good content quality and user experience, but security and privacy practices could be strengthened. The domain registration details align well with the website content and business claims, supporting legitimacy. Strategic recommendations include implementing security headers, enhancing privacy compliance, and formalizing security policies to improve the security posture and user trust.

K

Köttermann Group

koettermanngroup.com

41

The Köttermann Group website presents a professional and coherent business focused on laboratory infrastructure solutions, encompassing manufacturing and turnkey design/build services through its subsidiaries Köttermann, Lab Concept, and Labflex. The group operates under the BHM investment firm, positioning itself as a European-based consortium serving global laboratory markets. The website content is well-structured, with clear branding and consistent messaging, targeting scientific research and commercial laboratory sectors. Technically, the site uses modern web standards with UIkit framework, delivering moderate performance and good mobile responsiveness. Hosting is provided by WEDOS Internet, a known registrar and hosting provider. However, the site lacks advanced SEO and accessibility features and does not implement DNSSEC or security headers, which are recommended for enhanced security. From a security perspective, the site uses HTTPS but lacks published privacy, cookie, or security policies, and no contact information or incident response channels are provided. No analytics or tracking scripts were detected, indicating minimal user tracking. The WHOIS data is consistent with the business founding date and shows no privacy protection, supporting legitimacy. Overall, the security posture is moderate but could be improved by adding policies, security headers, and incident response information. The overall risk is moderate with no critical vulnerabilities detected. Strategic improvements in privacy compliance, security best practices, and contact transparency would enhance trust and compliance with regulations such as GDPR.

R

Reinsberg Group

reinsberg.com

46

Reinsberg Group is a well-established European healthcare holding company managing multiple subsidiaries specializing in medical technology and hospital equipment manufacturing. The group focuses on innovation, research, and providing comprehensive healthcare solutions globally, supported by a strong parent investment firm, BHM group. The website presents detailed information about the group, its subsidiaries, and recent business developments, positioning it as a leading player in the European MedTech sector. Technically, the website uses modern frontend frameworks (UIkit), is mobile optimized, and hosted on a known provider. However, it lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. The domain is long-standing and consistent with the business history, enhancing trustworthiness. Overall, the website is professional and informative but could improve in privacy compliance and security best practices.

Z

Maps - zjazdnost.sk

zjazdnost.sk

53

The website www.zjazdnost.sk serves as a specialized public information platform focused on providing real-time and planned traffic and road condition updates for Slovakia. It offers detailed maps, traffic restrictions, roadworks, and weather-related road information, targeting drivers, transport authorities, and the general public. The site uses modern web technologies including jQuery and Fomantic-UI for user interface and map rendering, and integrates Google Analytics for visitor tracking. Hosting appears to be managed by a Slovak governmental or meteorological institute, ensuring reliable data sources and infrastructure. From a security perspective, the site enforces HTTPS but has minimal security headers, with HSTS configured but effectively disabled due to max-age=0. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a copyright page serving as a proxy for privacy policy, but no explicit cookie consent mechanism is present. Contact information is referenced but not directly visible on the analyzed page, which may impact user trust and support accessibility. Overall, the website demonstrates a solid technical foundation and provides valuable, relevant content for its audience. However, improvements in privacy compliance, security header implementation, and clearer contact information would enhance trust and regulatory adherence. The site is not blocked by any WAF or security mechanisms, allowing full content access and analysis.

Workday is a leading enterprise cloud platform specializing in AI-powered management solutions for HR, Finance, IT, and Legal sectors. The company offers a comprehensive suite of products including Human Capital Management, Financial Management, Planning, and Legal Contract Management, targeting large enterprises globally. Their market position is strong, supported by a consistent brand presence and a broad partner ecosystem. Technically, the website is built on Adobe Experience Manager with modern JavaScript frameworks and integrates advanced analytics and marketing tools, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, comprehensive security headers, and no visible vulnerabilities, although explicit incident response and vulnerability disclosure information are not publicly available. Overall, the website demonstrates high professionalism, excellent content quality, and good privacy compliance, though the absence of WHOIS data slightly reduces trustworthiness. Strategic recommendations include publishing incident response contacts and vulnerability disclosure policies to enhance transparency and trust.

V

Volvo Group

volvogroup.com

75

Volvo Group is a global leader in manufacturing commercial vehicles and industrial engines, operating across 14 brands with over 100,000 employees and presence in 190 markets. Their product portfolio includes trucks, buses, construction equipment, marine and industrial engines, serving a broad corporate and industrial audience worldwide. The website reflects a mature digital infrastructure leveraging Adobe Experience Manager and Adobe marketing and analytics tools, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforcement, modern security headers, and no visible vulnerabilities, although explicit security policies and incident response information could be enhanced. Privacy compliance is robust with comprehensive privacy and cookie policies and consent mechanisms in place. Overall, the website demonstrates high professionalism, trustworthiness, and alignment with Volvo Group's corporate brand.

The website wyboryksiazek.pl is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct content access. The domain is registered to PERSKIMEDIA Szymon Perski since 2014, indicating a stable and legitimate registration. However, no business information, contact details, or policies are accessible on the landing page. The technical infrastructure includes Cloudflare security services, but no further technology or CMS details are available due to the blocking. Security posture is difficult to assess fully, but the presence of Cloudflare WAF indicates some level of protection. Overall, the site lacks visible privacy and cookie policies, and no forms or data collection mechanisms are present in the accessible content.

C

Just a moment...

czytamy.org

54

The website czytamy.org is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any substantive content. The domain is registered since 2016 with Key-Systems GmbH and uses Cloudflare nameservers, indicating reliance on Cloudflare for security and performance. No business, contact, or policy information is visible on the landing page, preventing a full assessment of the company's operations or compliance posture. Technically, the site uses modern web standards and Cloudflare security features but lacks visible SEO, accessibility, or privacy compliance elements. Security posture is limited to Cloudflare protections with no additional headers or policies detected. Overall, the site presents a low trust profile due to lack of accessible content and transparency.

The website podstawaprogramowa.pl is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to the site's content. This prevents extraction of meaningful business, security, or compliance information from the site itself. The domain is registered to PERSKIMEDIA Szymon Perski since 2017, indicating a stable registration but no further business details are available. The site appears to be a small-scale or personal project given the registrant information and lack of visible corporate data. Technically, the site uses Cloudflare's security services including Turnstile CAPTCHA, but no other technologies or CMS platforms are detectable from the challenge page. Security posture cannot be fully assessed due to lack of content access, but the presence of Cloudflare WAF indicates some level of protection. Privacy and cookie policies, contact information, and other compliance indicators are not found on the challenge page. Overall, the site is safe in terms of content but inaccessible for detailed analysis.

The website wszystkodlaszkoly.pl is currently inaccessible due to a Cloudflare Turnstile security challenge page, which blocks direct access to any business or content information. The domain is registered since 2006 to PERSKIMEDIA Szymon Perski, consistent with a Polish entity, but no further business details or contact information are available from the accessible content. The technical infrastructure relies on Cloudflare for security and performance, but no CMS or additional technologies are detectable due to the content block. Security posture cannot be fully assessed, but the lack of DNSSEC and security headers indicates room for improvement. Privacy and compliance information such as privacy policy, cookie policy, and terms of service are not found, limiting GDPR compliance assessment. Overall, the site appears to be protected by a strong WAF, but this also prevents meaningful content and security analysis.

V

VT Centrum

vtcentrumbrod.cz

55

VT Centrum is a modern driving school based in Český Brod, Czech Republic, offering professional driving courses primarily for category B licenses. The business targets individuals seeking to obtain their driver's license with a focus on quality instruction and modern training equipment. The website reflects a local service provider with a clear and professional presentation, catering to a regional audience. Technically, the site is built on the Webnode CMS platform and hosted via AWS Cloudfront, employing standard web technologies such as JavaScript and CSS. The site is mobile-optimized and performs moderately well, with good SEO practices and clear navigation. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and a published privacy policy, which impacts GDPR compliance. The absence of WHOIS data reduces transparency and trustworthiness, though the website content suggests a legitimate business. Overall, the site scores moderately well in content quality, technical implementation, and business credibility, but improvements in privacy and security policies are recommended.

N

NA CESTÁCH BEZPEČNĚ z.s.

nacestachbezpecne.cz

59

NA CESTÁCH BEZPEČNĚ z.s. is a registered non-profit association founded in 2021 focused on road safety education and prevention across all road user groups, including children and the growing community of caravan enthusiasts. The organization positions itself as a specialized entity within the Czech transportation safety sector, delivering educational content, public awareness campaigns, and interactive activities such as quizzes and lectures at events like Caravaning Brno. The website reflects this mission with relevant content and a clear target audience of road users of all ages. Technically, the website is built on the Webnode CMS platform and leverages Amazon Cloudfront CDN for content delivery. It employs modern web technologies including JavaScript and CSS, and is optimized for mobile devices with good SEO practices. The site includes a cookie consent mechanism and uses Google Tag Manager for analytics, indicating a moderate level of digital maturity. However, some accessibility features and security headers are lacking, which could be improved. From a security perspective, the site enforces HTTPS and provides a cookie consent banner, but lacks visible security headers and explicit privacy or terms of service pages. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness, although the website content and structure appear professional and transparent. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with room for improvement in compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and resolving the domain registration transparency issue to enhance trust and credibility.

E

Startseite – Einfach Kirchlich Heiraten

einfach-kirchlich-heiraten.de

10

Einfach Kirchlich Heiraten is a German-language online platform dedicated to facilitating the planning of church weddings, primarily serving the Baden region within the Archdiocese of Freiburg. The website offers users the ability to browse available churches and priests, submit requests for preferred venues and dates, and access informational content including explanatory videos and testimonials from couples. The platform positions itself as a niche service provider focused on simplifying the traditionally complex process of arranging a church wedding. From a technical perspective, the website employs standard modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics. It is hosted on servers associated with kasserver.com, a recognized hosting provider. The site is mobile-optimized with a moderate performance profile and basic SEO and accessibility features. No content management system or advanced frameworks were detected in the provided HTML. Security-wise, the site enforces HTTPS with a valid SSL certificate, ensuring encrypted communications. However, it lacks several recommended security headers such as Content-Security-Policy and X-Frame-Options, which could enhance protection against common web attacks. There is no visible cookie consent mechanism, which is a compliance gap under EU regulations. Additionally, no explicit security policies, incident response contacts, or vulnerability disclosure information are published, limiting transparency in security governance. Overall, the website presents a professional and trustworthy front for its target audience of couples planning church weddings. The absence of contact emails or phone numbers on the homepage and footer is a minor usability limitation. The site is free from adult or explicit content and does not employ tracking or advertising technologies, supporting user privacy. Strategic improvements in security headers, privacy compliance, and contact transparency would strengthen the platform's security posture and user trust.

S

Sächsische Landesmedienanstalt (SLM)

slm-online.de

47

The Sächsische Landesmedienanstalt (SLM) operates as the official regulatory authority for private broadcasting and new media in the German state of Saxony. The website serves as a comprehensive information portal for media professionals, broadcasters, journalists, and the general public interested in media regulation, licensing, funding, and media competence initiatives. The organization provides key services including licensing of private radio and TV broadcasters, media funding programs, educational projects, and public transparency. The site is well-structured, professionally designed, and accessible, reflecting its government affiliation and target audience.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ)

bmbfsfj.de

11

The Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ) is a German federal government ministry focused on education, family, seniors, women, and youth policies. The website serves as an official information portal providing policy updates, publications, and public service tools targeted at a broad audience including families, seniors, and youth. It holds a strong market position as a government entity and offers comprehensive content with consistent branding and high trust indicators. Technically, the website employs a modern tech stack including Matomo for privacy-conscious analytics, custom JavaScript and CSS, and a proprietary or custom CMS. The site is hosted with DNS managed by the German Research Network, indicating a secure and reliable infrastructure. Performance and mobile optimization are good, with strong accessibility and SEO practices. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. While some advanced security headers are missing, no vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear policies and data retention rules. Contact information is available, enhancing business credibility. Overall, the website is professional, secure, and trustworthy, with no signs of blocking or WAF interference. It is safe for general audiences and aligns well with government standards. Strategic recommendations include enhancing security headers and publishing a vulnerability disclosure policy to further strengthen security posture.

K

Kommission für Forschungsinformationen in Deutschland (KFiD)

kfid-online.de

50

The Kommission für Forschungsinformationen in Deutschland (KFiD) is a small, non-profit commission dedicated to promoting the KDSF-Standard for harmonizing research information exchange within the German scientific community. The website provides detailed information about the commission's goals, members, events, and services such as the FIS-Landkarte. The target audience includes scientific institutions and data stakeholders in Germany. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr, hosted by Variomedia. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced, but lacks security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and content-rich, supporting the commission's mission effectively.

F

Frankfurt Secret

frankfurtsecret.de

60

Frankfurt Secret is a small event organization business based in Germany, specializing in fashion, vintage, and heritage festivals in Frankfurt. The website promotes upcoming events with detailed dates and locations, targeting fashion enthusiasts and cultural event attendees. The business operates primarily through event organization and promotion, leveraging a niche market in the local fashion and vintage scene. Technically, the website is built on the Squarespace platform, using modern web technologies and is mobile optimized with moderate performance. Security posture is good with HTTPS and HSTS enabled, but lacks comprehensive security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service pages, though a cookie consent banner is present. Contact information is minimal, limited to an email address and Instagram social media link. Overall, the website is professional and trustworthy for its niche but could improve in privacy and security transparency.

M

Massif Games Convention

massifgamesconvention.de

61

Massif Games Convention is a newly established event organizer focusing on gaming culture, technology, and economic exchange in Frankfurt, Germany. The website presents a professional and well-structured platform promoting a four-day convention targeting gaming experts, young professionals, and regional economic and political stakeholders. The event leverages a third-party app for ticket distribution, indicating a modern approach to event management. Technically, the website is built on the Squarespace platform, utilizing modern web technologies and fonts, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms but lacks advanced security headers and formal policies. Privacy compliance is limited due to missing privacy and terms of service pages. Overall, the domain registration data aligns with the website content, supporting legitimacy. Strategic improvements in privacy, security policies, and incident response disclosures are recommended to enhance trust and compliance.

V

VOGEL STRAUSS

vogelstrauss.store

55

Vogelstrauss.store is a small retail business based in Frankfurt, Germany, specializing in curated fashion and lifestyle brands. The website acts primarily as an informational landing page linking to a Shopify-hosted online store. The business targets fashion-conscious consumers in Germany and offers a newsletter subscription to engage customers. Technically, the site uses Shopify as its CMS and CreateSend for email marketing, with basic HTML, CSS, and JavaScript implementations. The website is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. Security posture is moderate; while HTTPS is assumed, no DNSSEC or security headers are present, and cookie consent mechanisms are missing. The domain registration is recent and consistent with the business profile, with no privacy protection used, which is appropriate for retail transparency. Overall, the site is functional but could benefit from enhanced security and privacy compliance measures.

K

Koch Klasse - Volkshochschule Kaiserslautern e.V.

kochklasse-kl.de

44

Kochklasse.de is the online presence of the VHS-Kochschule Kaiserslautern, a small educational institution focused on culinary arts and cooking culture. The website offers a variety of in-person and online cooking courses, workshops on culinary and drinking culture, and event-based cooking experiences. The business targets general consumers interested in cooking and culinary education within the Kaiserslautern region in Germany. Technically, the website is built on WordPress with common web technologies such as jQuery and Modernizr, hosted on RZone servers. The site is moderately optimized for performance and mobile use, with a professional design and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy present. Overall, the site is trustworthy and professional but could improve in security and privacy compliance to better protect users and meet regulatory requirements.

L

Lunds universitet

lu.se

61

Lunds universitet is a prestigious public university in Sweden, founded in 1666, and consistently ranked among the top 100 universities worldwide. The website serves a broad audience including students, researchers, academic staff, and the general public, providing comprehensive information about education programs, research, student services, and international collaboration. The digital presence is built on a modern Drupal 10 CMS platform, with good mobile optimization, accessibility, and SEO practices. The site uses Matomo analytics with privacy-respecting configurations and implements a cookie consent mechanism in compliance with GDPR. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be explicitly confirmed and enhanced. WHOIS data for the www.lu.se subdomain is missing, which is not uncommon for subdomains, and does not detract from the site's legitimacy given the strong branding and content quality. Overall, the website reflects a mature, professional, and trustworthy digital asset for Lund University.

H

Helmholtz-Zentrum Hereon

hzg.de

61

Helmholtz-Zentrum Hereon is a prominent German research institution specializing in climate, coastal, technology, and material research. It operates as part of the Helmholtz Association and serves a scientific and policy-oriented audience. The website is professionally designed using Imperia CMS and Foundation CSS framework, offering structured navigation through numerous institutes and departments. However, it lacks visible privacy, cookie, and security policies, as well as explicit contact information, which could impact user trust and compliance. No WAF or blocking mechanisms were detected, indicating full content accessibility.