Security Directory

C

Catch.do Inc.

avco.at

51

Catch.do Inc. operates a specialized online platform for domain auctions, focusing on expiring and premium domains such as avco.at. The company targets domain investors and businesses seeking valuable domain names, providing a marketplace with bidding and backordering services. The website demonstrates a professional and consistent brand presence with clear legal terms and auction rules, supporting trustworthiness in the domain auction niche. Technically, the site leverages modern frontend technologies including Vue.js, delivering a responsive and user-friendly experience. Security posture is strong with HTTPS enforced and secure form handling, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the domain registration history and WHOIS data align with the business model, indicating legitimacy and maturity. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving accessibility to further strengthen trust and security.

北

北京世纪超星信息技术发展有限责任公司

chaoxing.com

56

The website www.chaoxing.com represents a large Chinese digital library and educational content platform operated by 北京世纪超星信息技术发展有限责任公司. It offers a variety of services including personal author authorization, publisher partnerships, academic video lectures, and extensive journal metadata search. The platform targets scholars, students, educational institutions, and publishers, positioning itself as a leading digital content provider in China. The site is primarily in Chinese and features rich multimedia content and partner integrations. Technically, the website uses standard web technologies such as jQuery, HTML5, and CSS3, with video content delivered via HTML5 video elements. The site is served over HTTPS, includes login/logout functionality, and integrates multiple internal subdomains for authentication, app downloads, and content delivery. However, the site lacks visible advanced security headers and cookie consent mechanisms, and mobile optimization is basic. From a security perspective, the site enforces HTTPS and performs input validation on forms but does not exhibit comprehensive security headers or published incident response policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and business information appear legitimate and consistent with a known Chinese educational technology company. Overall, the website is functional, content-rich, and professionally presented but would benefit from enhanced security practices, privacy compliance improvements, and better domain registration transparency to strengthen trust and compliance.

V

Valuuttakurssit – ajankohtainen valuuttakurssi | Valuuttakurssit-Euro.fi

valuuttakurssit-euro.fi

45

Valuuttakurssit-Euro.fi is a Finnish informational website providing up-to-date currency exchange rates, historical exchange rate data, and currency conversion tools primarily based on data from the European Central Bank. The site targets general users interested in currency rates, offering daily updated exchange rates for a wide range of currencies. Technically, the website uses standard web technologies including Google Fonts, Google Tag Manager, Google Adsense for advertising, and Facebook SDK for social media integration. The hosting appears to be provided by Websupport, indicated by the nameservers. The site is mobile optimized with a clear navigation structure and good SEO practices. Security-wise, the site uses HTTPS but lacks DNSSEC and important security headers, and does not publish privacy or cookie policies, which impacts its compliance posture. No contact or incident response information is provided, limiting transparency. The domain is registered since 2016 by a private person with no privacy protection, which is consistent with the website's informational nature but reduces corporate trust signals. Overall, the site is functional and trustworthy for currency information but would benefit from improved security and privacy compliance measures.

T

Team Zones.sk

cotacao-euro.pt

41

Cotacao-Euro.pt is a Portuguese language website providing daily updated currency exchange rates, historical data, and a currency converter tool, primarily sourcing data from the European Central Bank. The site targets individuals and businesses interested in currency exchange information, offering a niche service with a focus on the Portuguese market. The business appears to be small-sized, founded in 2016, and operated by Team Zones.sk. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, Google Fonts, Google Tag Manager, Google Adsense, and Facebook SDK. The site is mobile optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, but lacks some security headers and comprehensive privacy documentation. Advertising and analytics are implemented via Google and Facebook services, with a cookie consent mechanism in place. Overall, the website is trustworthy and safe, with no adult or questionable content detected.

G

Gransy s.r.o. d/b/a/ subreg.cz

wisselkoers-euro.nl

46

Wisselkoers-Euro.nl is a Dutch-language website providing daily updated currency exchange rates sourced from the European Central Bank. The site offers currency conversion tools and historical exchange rate data, targeting a general audience interested in currency information. The business operates as an informational service with a niche focus on currency rates, founded in 2016 and registered under Gransy s.r.o., a domain registrar. The website demonstrates good content quality and user experience with consistent branding and clear navigation. Technically, it employs modern web technologies including Google Fonts, Google Tag Manager, Google Adsense, and Facebook SDK for analytics and advertising. Mobile optimization is good, and SEO practices are adequately implemented. However, the site lacks explicit privacy and cookie policies, and no security headers were detected, which are areas for improvement. The domain is legitimate with consistent WHOIS data and no blocking or WAF detected, indicating reliable accessibility.

T

Team Zones.sk

wechselkurse-euro.de

44

Wechselkurse-Euro.de is a small-scale informational website operated by Team Zones.sk, providing daily updated currency exchange rates sourced from the European Central Bank. The site targets general users interested in currency conversions and historical exchange rate data, offering tools such as currency calculators and detailed currency information pages. The business model appears to be advertising-supported, with Google Adsense and Facebook social plugins integrated. Technically, the website uses modern web fonts, asynchronous loading of analytics and advertising scripts, and is hosted on websupport.sk, indicating a moderate level of digital maturity. The site is mobile optimized with good navigation and content relevance. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Overall, the website is trustworthy for general informational use but would benefit from enhanced privacy and security practices.

M

Mailänder Consult

mic.de

48

Mailänder Consult GmbH is a well-established German engineering consultancy specializing in transportation, environmental planning, and construction project management. With over 35 years of experience and multiple offices in Karlsruhe, Frankfurt/Main, and Stuttgart, the company offers comprehensive consulting, planning, and construction supervision services. Their website reflects a professional and consistent brand image, targeting business and public sector clients in relevant industries. Technically, the site is built on the ProcessWire CMS with modern frameworks like UKit and integrates consent management and tracking tools responsibly. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious activities were detected. Overall, the company demonstrates strong business credibility and digital maturity.

P

Performance iN Lighting Deutschland

performanceinlighting.com

66

Performance iN Lighting Deutschland is a professional lighting company specializing in interior and exterior lighting projects with over 40 years of experience. The website targets professional clients seeking lighting solutions and project development services in Germany. The digital infrastructure includes modern web technologies, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and privacy compliance mechanisms in place, though explicit security headers and incident response policies are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is professional and functional but could improve transparency and security documentation.

B

Bundesanstalt für Gewässerkunde (BfG)

bafg.de

61

The Bundesanstalt für Gewässerkunde (BfG) is a German federal government scientific institute specializing in hydrology, water body usage, water quality, ecology, and water protection. The website serves as an authoritative platform providing comprehensive information about the institute's organizational structure, research activities, advisory roles, and public information services. It targets government agencies, researchers, environmental professionals, and the interested public. The site is built on the Government Site Builder CMS, reflecting official government standards and practices. The content is well-structured, professionally presented, and accessible, with clear navigation and mobile optimization. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with no detected use of third-party advertising or tracking services. The site enforces HTTPS and includes a cookie consent mechanism, demonstrating good privacy compliance aligned with GDPR. However, explicit security policies and incident response contacts are not found, which could be improved to enhance transparency and security posture. From a security perspective, the site shows a solid baseline with HTTPS and no visible vulnerabilities or exposed sensitive data. The WHOIS data and DNS configuration align with German government infrastructure, supporting the legitimacy and trustworthiness of the domain. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Overall, the website presents a trustworthy, professional, and comprehensive digital presence for a federal scientific institution. Strategic recommendations include publishing explicit security policies, incident response contacts, and vulnerability disclosure information to further strengthen security and compliance transparency.

O

One.com A/S

onetoso.com

49

The website onetoso.com appears to be a placeholder or parked page hosted by One.com A/S, a web hosting provider established in 2017. The site content is minimal, primarily branding for One.com hosting services, with no substantive business or security-related content. The domain registration details are consistent and legitimate, registered with One.com A/S and expiring in 2026. However, the website lacks critical elements such as privacy policies, cookie consent mechanisms, terms of service, contact information, and security headers. No HTTPS or SSL information was detected in the provided data, indicating a poor security posture. Overall, the site does not provide sufficient information to assess business credibility or compliance effectively.

B

Bundesanstalt für Wasserbau

baw.de

64

The Bundesanstalt für Wasserbau (BAW) is a German federal government agency specializing in waterway engineering, infrastructure maintenance, and environmental protection related to federal waterways. It operates under the Federal Ministry for Digital and Transport (BMDV) and serves as a technical and scientific advisory body. The website reflects a well-established institution with a clear mission to support safe, efficient, and environmentally sound waterway management. The target audience includes government entities, researchers, and professionals in waterway infrastructure and environmental sectors. Technically, the website employs standard modern web technologies such as HTML5, CSS3, JavaScript, and jQuery, with additional libraries for UI enhancements like FontAwesome and BaguetteBox. The site is well-structured, mobile-optimized, and accessible, with good SEO practices. No CMS or hosting provider details are explicitly detected, suggesting a custom or government-managed platform. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies. No cookie consent mechanism was detected, which could be improved for GDPR compliance. The site shows minimal user tracking and no advertising, aligning with government standards for privacy and transparency. Overall, the website is professional, trustworthy, and well-aligned with its government agency role. Strategic recommendations include enhancing security headers, publishing security policies, and implementing cookie consent to improve compliance and security posture.

W

Wasserstraßen- und Schifffahrtsverwaltung des Bundes

elwis.de

59

The website elwis.de is an official German federal government portal operated by the Wasserstraßen- und Schifffahrtsverwaltung des Bundes (Federal Waterways and Shipping Administration). It provides comprehensive electronic waterway information services (ELWIS) including navigation data, shipping notifications, water level forecasts, regulatory information, and online application portals for permits and certifications related to inland and sea shipping. The site targets maritime professionals, shipping companies, government agencies, and the general public interested in waterway information. The business model is a government service focused on regulatory compliance and information dissemination, positioning it as a key official source in Germany's waterway management sector. Technically, the site is built on the Government Site Builder CMS platform, using standard web technologies such as HTML5, CSS, and JavaScript. It demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The site uses HTTPS with strong SSL configuration but lacks explicit security headers in the HTML response. Forms are secured via HTTPS, and no sensitive data is exposed in the content. Privacy and legal policies are present and comprehensive, indicating GDPR compliance, but no cookie consent mechanism was detected. From a security perspective, the site shows a solid posture with HTTPS enforcement and no visible vulnerabilities or exposed sensitive information. However, improvements could be made by implementing security headers, publishing a vulnerability disclosure policy or security.txt, and providing explicit incident response contact details. No WAF or blocking mechanisms were detected, and the domain WHOIS data aligns with official German government infrastructure, supporting high legitimacy and trustworthiness. Overall, elwis.de is a professional, trustworthy government portal with excellent content quality and good technical implementation. Strategic recommendations include enhancing security headers, adding cookie consent mechanisms, and improving transparency around incident response to further strengthen security and compliance.

M

MitID

mitid.dk

66

MitID.dk is the official digital identification platform for Denmark, providing secure authentication services for online banking, government services, and self-service solutions. The website is professionally designed with a clear focus on user guidance, privacy, and security. It targets Danish residents and users requiring trusted digital identity verification. The platform holds a strong market position as Denmark's primary digital ID provider. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with responsive design and accessibility features. The presence of session timeout modals and secure login forms indicates a mature security posture. However, some security headers are not explicitly detected, and no vulnerability disclosure or incident response contacts are published. Overall, the security posture is strong with HTTPS enforced and good session management. Privacy compliance is evident through comprehensive privacy and cookie policies with consent mechanisms. The absence of contact emails or phone numbers on the main page slightly reduces business credibility, but the official nature of the domain and content supports trustworthiness. The domain WHOIS data is unavailable, limiting verification of registration details. Despite this, the website's content and domain strongly suggest it is a legitimate government service. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing clearer contact information for incident response.

C

Chanz

chanz.com

63

Chanz operates as an online casino platform targeting adult users interested in gambling services. The website enforces geographical restrictions, blocking access from certain locations and IP addresses, which is clearly communicated on the blocked country page. The platform uses modern web technologies including JavaScript and CSS, and is hosted behind Cloudflare, which provides security and performance benefits. However, the site content on the blocked page is minimal, lacking privacy, cookie, or terms of service policies, and no phone or physical contact information is provided beyond a support email. The WHOIS data for the domain is unavailable, indicating either privacy protection or a lack of proper registration, which raises concerns about transparency and legitimacy. Overall, the site demonstrates a moderate security posture with HTTPS enabled but lacks comprehensive compliance and trust indicators.

N

National Supercomputing Centre Slovakia (NSCC)

nscc.sk

53

The National Supercomputing Centre Slovakia (NSCC) is a specialized organization focused on supporting and coordinating high-performance computing (HPC) activities within Slovakia. Established in 2020, NSCC collaborates with academic institutions, the Slovak Academy of Sciences, and industry partners to develop HPC infrastructure, provide user services, raise awareness, and offer education and training programs. The website reflects this mission with detailed content about their goals and activities, targeting researchers, universities, and SMEs interested in HPC solutions. Technically, the website is built on WordPress using the Neve theme, indicating a modern and maintainable platform. The site is mobile-optimized and offers good navigation and user experience. However, it lacks advanced SEO and accessibility features and does not implement privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks security headers and does not provide vulnerability disclosure or incident response information. No tracking or analytics scripts were detected, suggesting minimal user tracking. The domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness. Overall, the NSCC website is professional and informative but would benefit from enhanced privacy compliance, security practices, and transparency to improve trust and regulatory adherence.

The Fachverband Glücksspielsucht e.V. is a German non-profit organization dedicated to supporting individuals affected by gambling addiction, their families, and professionals in the field. The website serves as an information hub offering resources such as self-help group coordination, event announcements, press releases, and advocacy materials. It targets a broad audience including affected individuals, relatives, healthcare professionals, and journalists. The organization has a longstanding presence with over 37 years of activity, positioning itself as a key player in gambling addiction support in Germany. Technically, the website employs basic web technologies including HTML5, CSS, jQuery, and Twitter widgets. It appears to be hosted with DNS services from DomainControl (GoDaddy). The site shows moderate performance and basic mobile optimization but lacks modern CMS indications or advanced frameworks. SEO and accessibility features are minimal but functional. There is no evidence of HTTPS enforcement or advanced security headers, which indicates room for improvement in security posture. From a security perspective, the site lacks visible security headers, cookie consent mechanisms, and does not demonstrate GDPR compliance fully. No incident response or vulnerability disclosure policies are evident. The WHOIS data is minimal but consistent with a small non-profit entity, with no privacy protection or suspicious patterns detected. The domain age aligns with the organization's history, supporting legitimacy. Overall, the website is functional and provides valuable content for its target audience but requires enhancements in security, privacy compliance, and technical modernization to improve trust and resilience. Strategic recommendations include implementing HTTPS with HSTS, adding security headers, establishing cookie consent, and updating the technical stack to modern standards.

C

Circles s.r.o.

kraita.io

67

Circles s.r.o., operating under the Kraita brand, provides AI-driven tools aimed at simplifying and automating complex business processes. Their product suite includes cybersecurity management, AI chatbots for customer support, knowledge management assistants, and process automation platforms. The company targets businesses seeking to enhance operational efficiency through modern AI technologies. The website is professionally designed, well-structured, and showcases a clear product portfolio, reflecting a mature digital presence. Technically, the site leverages Webflow CMS, integrates multiple analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook Pixel, and LinkedIn Insight Tag, and employs Cookiebot for GDPR-compliant cookie consent. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of explicit security headers and a public privacy policy page suggests room for improvement. Overall, the domain appears legitimate with privacy-protected WHOIS data, consistent branding, and no suspicious indicators. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels for security incidents.

J

John Deere

deere.com

66

John Deere is a globally recognized enterprise specializing in manufacturing and selling agricultural, construction, forestry, and turf care equipment. The website serves as a comprehensive portal for product information, dealer location, parts and service, financial offerings, and digital tools, targeting professionals and businesses in agriculture, construction, landscaping, and related sectors. The site demonstrates a mature digital presence with extensive content and clear navigation. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Adobe Analytics and OneTrust for privacy compliance. The site is mobile-optimized and accessible, with good SEO practices and performance. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly detailed. The WHOIS data for the domain is missing or unavailable, which is unusual for a major corporate domain and reduces transparency. However, the website content, branding, and linked official domains strongly support the legitimacy of the site. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms. Overall, the website presents a professional, secure, and user-friendly experience suitable for its enterprise audience, with recommendations to enhance transparency around security policies and domain registration details.

N

Noteo Hosting

noteo.cz

41

The website noteo.cz currently serves as a default hosting placeholder page with minimal content, indicating a new homepage setup by Voltage Multimedia Studio. The business overview is limited due to lack of detailed content, but the site appears to be related to hosting or web services. The domain is registered since 2013 with a consistent registrar and name servers, suggesting a stable presence. Technically, the site uses basic HTML and CSS with no advanced frameworks or CMS detected. The performance and mobile optimization are basic, and SEO features are minimal. Security posture is weak, with no HTTPS detected and no security headers present. There are no privacy or cookie policies, nor any contact or incident response information, which limits compliance and trust. Overall, the site is low in content quality and business credibility, with a low security score and minimal technical sophistication.

V

VaK Jesenicka

jesenickavoda.cz

57

Jesenickavoda.cz is a Czech regional water utility website focused on providing information and services related to potable and utility water supply in the Jeseník region. The site features news articles, community engagement content, and water management updates, positioning itself as a key local resource for residents and stakeholders. The business operates in the energy sector, specifically water utilities, and targets local consumers and environmental professionals. Technically, the website is built on the Webnode CMS platform, leveraging Amazon Cloudfront CDN for hosting and Google Analytics for visitor tracking. It employs modern web technologies including JavaScript and CSS, and is optimized for mobile devices with a moderate performance profile. Security-wise, the site uses HTTPS and basic security headers but lacks advanced security headers and explicit security policies. The absence of WHOIS data and privacy policy reduces transparency and compliance confidence. Overall, the site is professional and trustworthy in content and design but would benefit from enhanced security and privacy disclosures.

V

Voltage Multimedia Studio

voltage.cz

47

Voltage Multimedia Studio is a small Czech technology company specializing in the creation of internet websites, e-shops, corporate intranets, and applications for touch panels. Established in 2004, the company serves regional clients primarily in the Jeseník area, offering tailored digital solutions with a focus on modern design, usability, and extensibility. Their website reflects a professional approach with clear service offerings and client references, supported by social media presence and Google site verification. Technically, the site is built on the Noteo Engine CMS, leveraging modern web technologies including HTML5, CSS3, JavaScript, jQuery, and FontAwesome icons. It uses HTTPS and integrates Google Tag Manager and Smartsupp chat for analytics and user engagement. However, the site lacks explicit privacy and terms of service pages, which are important for compliance and trust. Security headers are also missing, representing an area for improvement. Overall, the website is well-structured, mobile-optimized, and trustworthy, but could benefit from enhanced privacy and security practices.

Ú

Únia klastrov Slovenska

uksk.sk

40

Únia klastrov Slovenska is a Slovak non-profit association established in 2010 to support the development of clusters and cluster policy in Slovakia. The organization represents 18 members including technological clusters, regional development clusters, and consulting companies. It actively participates in regional and European projects and collaborates with various partners to promote cluster excellence and innovation. The website serves as an informational platform primarily targeting cluster stakeholders and policy makers in Slovakia and the Danube region. Technically, the website is built on WordPress with common web technologies such as jQuery and Google Fonts. Hosting is provided by Websupport, a known Slovak hosting provider. The site has moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. The site lacks advanced security headers and privacy compliance mechanisms such as cookie consent or privacy policies. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and incident response information. No vulnerability disclosure or security.txt files are present. The absence of privacy and cookie policies indicates a gap in GDPR compliance. Overall, the security posture is moderate but could benefit from enhancements in security best practices and compliance. The domain registration is consistent with the organization's profile, showing a stable and legitimate presence since 2012. No WAF or blocking mechanisms were detected, allowing full content access. The website content is safe for general audiences with no adult or questionable material. Strategic recommendations include implementing security headers, adding privacy and cookie policies, publishing incident response and vulnerability disclosure information, and improving technical SEO and accessibility.

Czech Smart City Cluster (CSCC) is a Czech Republic-based organization focused on fostering partnerships among companies, government, academia, and citizens to advance Smart City technologies. Their mission centers on integrating intelligent solutions in energy, transport, buildings, and ICT to improve urban living and economic growth. The website reflects a small but professional cluster organization with a clear business focus and consistent branding. Technically, the site is built with basic HTML and CSS, featuring custom fonts but lacking modern frameworks or CMS. Performance and mobile optimization are moderate to basic, with no detected analytics or tracking scripts. Security posture is weak due to missing security headers, lack of DNSSEC, and no visible HTTPS enforcement details. Privacy and cookie policies are absent, indicating compliance gaps. Contact information is limited but includes a valid company email and physical address. Overall, the site is functional and professional but requires improvements in security and privacy compliance to enhance trust and resilience.

N

Novatin s.r.o.

novatin.com

47

Novatin s.r.o. is a Czech Republic-based company specializing in the distribution and sale of medical devices and pharmaceuticals, primarily focused on diabetes care and related healthcare products. The company has established a stable market presence in the Czech Republic since its founding in 2007 and has expanded activities into other EU countries such as Croatia and Spain. Their product portfolio includes medical devices like POCT analyzers, glucometers, and pharmaceutical products for diabetes and associated conditions. The website is professionally designed, mobile-optimized, and provides clear navigation and product information, targeting patients, healthcare providers, and pharmacies. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor tracking with a cookie consent mechanism compliant with GDPR. The site is served over HTTPS with good SSL configuration, though it lacks some advanced security headers. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS and includes cookie consent, but does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is missing or unavailable, which is inconsistent with the active website presence and requires further verification to confirm domain legitimacy. Overall, the website presents a professional and trustworthy front for a healthcare business, but improvements in security headers, transparency of security policies, and verification of domain registration would enhance trust and compliance.

N

Niedersächsische Landesmedienanstalt

nlm.de

57

The Niedersächsische Landesmedienanstalt (NLM) is a regional media regulatory authority in Niedersachsen, Germany, responsible for licensing private radio and television broadcasters and supervising broadcast and telemedia content. The organization also promotes media competence, supports citizen broadcasting, and facilitates the digitalization of broadcasting technology. The website reflects a professional and government-oriented presence with clear communication of its mission and services. The target audience includes broadcasters, media professionals, educators, and the general public interested in media regulation and education. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Cookiebot for consent management. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears professional with DNS servers linked to vision-connect.de and xlink.net, indicating stable infrastructure. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms with granular user controls. While no explicit security headers were detected in the provided data, no vulnerabilities or exposed sensitive data were found. The absence of a published security or incident response policy is noted as an area for improvement. Overall, the security posture is solid for a public-facing regulatory website. The website is fully accessible without any WAF or security challenge blocking content. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Contact information is clearly presented, including phone numbers and a physical address, enhancing business credibility. Social media presence on LinkedIn and YouTube further supports trust and outreach. Strategic recommendations include implementing security headers, publishing a security.txt file for vulnerability disclosure, and enhancing incident response transparency. These steps would strengthen the site's security maturity and user trust further.

The Thüringer Landesmedienanstalt (TLM) is a government-affiliated institution responsible for media regulation, media education, and promotion of media literacy in the German state of Thüringen. The website serves as a comprehensive portal for information on media oversight, educational projects, events, and resources targeted at educators, parents, seniors, and media professionals. It reflects a strong commitment to public service and digital literacy. Technically, the site is built on Craft CMS, employs modern JavaScript libraries like Swiper.js and DFlip.js, and is hosted on regional servers consistent with the organization's profile. The website is well-optimized for mobile devices, accessible, and SEO-friendly. Security-wise, it uses HTTPS, implements CSRF tokens, and provides a robust cookie consent mechanism, although some security headers could be explicitly confirmed or enhanced. Overall, the site demonstrates a mature security posture with no critical vulnerabilities detected. The domain registration aligns with the organization's identity, reinforcing legitimacy and trust. The site is free from adult or questionable content, making it safe for general audiences.

Z

Zentrum für Allgemeine Wissenschaftliche Weiterbildung (ZAWiW), Universität Ulm

zawiw.de

68

The Zentrum für Allgemeine Wissenschaftliche Weiterbildung (ZAWiW) at Universität Ulm is a university department dedicated to lifelong learning and educational programs primarily targeting older adults and multiple generations. It offers a variety of educational and research programs including Akademiewochen, Forschendes Lernen, and the Ulmer 3-Generationen-Uni. The website is professionally designed, well-structured, and provides comprehensive information about its services, events, and contact details. It maintains a strong presence in the education sector with a focus on geragogics and participatory science. Technically, the site is built on TYPO3 CMS, uses Matomo for privacy-conscious analytics, and implements a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and session management, though explicit security headers could be improved. Overall, the site is trustworthy, accessible, and serves its educational mission effectively.

A

Audiolibrix

audiolibrix.com

62

Audiolibrix is a well-established e-commerce platform specializing in Slovak and Czech audiobooks and podcasts, offering over 13,000 titles. The company provides a subscription-based club for discounted audiobooks, a loyalty rewards program, and supports multiple platforms including mobile and desktop applications. The website is professionally designed with excellent content quality and user experience, targeting audiobook listeners primarily in Slovak and Czech markets. Technically, the site uses modern web technologies and CDNs for fast performance and good mobile optimization. Security posture is strong with HTTPS and secure forms, though some security headers could be improved. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. The absence of WHOIS data raises concerns about domain registration legitimacy, warranting further investigation. Overall, the site is trustworthy and professional but could enhance privacy and security transparency.

G

Gemeinschaftswerk der Evangelischen Publizistik gGmbH

gep.de

42

GEP (Gemeinschaftswerk der Evangelischen Publizistik gGmbH) is a small, German-based non-profit media organization focused on evangelical public relations and media outreach. Established in 1996, it serves a niche audience interested in evangelical media content and public relations within Germany. The website provides news, media brand information, and company details relevant to its mission. The digital infrastructure is basic, utilizing standard HTML, CSS, JavaScript, jQuery, and Mapbox for mapping features. There is no detected CMS or advanced frameworks, and hosting details are limited to name servers from a third party. Security posture is modest with no visible HTTPS confirmation or security headers, and no incident response or security policy pages are present. Privacy compliance is partially addressed with a privacy policy and cookie policy page, but no active cookie consent mechanism is implemented. The website is safe with no adult or questionable content detected. Overall, the site is functional but could benefit from modernization and enhanced security and privacy features.

L

Landesanstalt für Medien NRW

medienanstalt-nrw.de

71

The Landesanstalt für Medien NRW is the official media regulatory authority for private broadcasting in North Rhine-Westphalia, Germany. It focuses on ensuring freedom of expression, media diversity, licensing private broadcasters, promoting media literacy, citizen media, and digital innovation. The website reflects a professional government entity with clear regulatory and public service functions. The technical infrastructure is based on TYPO3 CMS, with modern cookie consent management via Cookiebot, indicating a mature digital presence. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response policies could be improved. Overall, the site is trustworthy, GDPR compliant, and serves its target audience effectively.

A

Aftermarket.pl Limited

edukoopolskie.pl

52

The website edukoopolskie.pl is currently a parked domain managed by Aftermarket.pl Limited, a major domain registrar and marketplace in Poland. The site content is minimal and serves primarily as a landing page to facilitate domain sale inquiries via a contact form linked to the aftermarket.pl platform. The business behind the domain is focused on domain registration, hosting, and domain marketplace services, targeting domain buyers, sellers, and wholesale clients in Poland. The domain parking page lacks original content, privacy policies, or direct contact details, indicating it is not actively used for business operations but held for resale or future use. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. It is mobile responsive with moderate performance and basic SEO. Security posture is moderate with HTTPS redirect and DNSSEC enabled, but no security headers or detailed security policies are present. Tracking is minimal via a single tracking pixel from aftermarket.pl. No privacy or cookie policies are implemented, and no direct company contact emails or phone numbers are provided. The WHOIS data shows the domain is registered with Aftermarket.pl Limited, but the creation date is anomalously set in the future (March 2025), which is likely a data error or placeholder. This inconsistency reduces trustworthiness but does not indicate malicious intent. Overall, the domain is legitimate but inactive, serving as a placeholder for potential resale. Recommendations include adding privacy and cookie policies to improve compliance, implementing security headers, providing direct contact information for security and business inquiries, and correcting WHOIS data if possible. These steps would enhance trust, security posture, and compliance readiness.

M

město Jeseník

nasjesenik.cz

60

The website nasjesenik.cz serves as the official digital presence for the city of Jeseník in the Czech Republic. It provides residents and visitors with information about city projects, news updates, strategic plans, and public services. The site is well-branded with consistent city logos and offers a user-friendly experience with clear navigation and search functionality. The target audience primarily includes local residents and stakeholders interested in municipal developments. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, and Mapbox for interactive maps. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and integrates consent management for analytics. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and there is no published security policy or incident response contact. No vulnerabilities or sensitive data exposures were detected in the analyzed content. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, the website is trustworthy and professional, suitable for a municipal government entity. Strategic recommendations include publishing comprehensive privacy and terms of service documents, enhancing security headers, and providing clear contact information for security incidents to improve compliance and user trust.

S

SARIO, Slovak Investment and Trade Development Agency

findin.sk

9

The website belongs to SARIO, the Slovak Investment and Trade Development Agency, a government entity focused on promoting investment and trade in Slovakia. The domain is relatively new, created in 2023, and uses Slovak government DNS servers with DNSSEC enabled, indicating legitimacy and alignment with official government infrastructure. The website uses modern web technologies including Bootstrap 5 and custom web fonts, providing a basic but functional user experience with mobile optimization. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which are important for compliance and user trust. No WAF or blocking mechanisms were detected, and the site content is accessible and safe for general audiences.

W

Weltoffenes Thüringen

thueringen-weltoffen.de

62

Weltoffenes Thüringen is a non-profit initiative dedicated to promoting democracy, human dignity, pluralistic democracy, and European unity within the Free State of Thuringia, Germany. The website serves as a platform for organizations and individuals to support and engage with the initiative, offering resources such as logos, banners, and a registration form for supporters. The initiative enjoys broad regional support, with thousands of supporters and numerous partner organizations displayed prominently. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and basic accessibility. It uses HTTPS for secure communication but lacks advanced security headers and cookie consent mechanisms. The site does not employ advertising or tracking technologies, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and anti-spam measures in forms but could improve by implementing security headers and publishing security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent banner. Overall, the website is trustworthy, professionally presented, and aligned with its non-profit mission. It is accessible without WAF or blocking mechanisms, and the domain WHOIS data supports legitimacy. Strategic improvements in security and privacy compliance would enhance its posture further.

1

1&1 Versatel GmbH

versatel.de

71

1&1 Versatel GmbH is a leading German telecommunications provider specializing in fiber optic internet, telephony, networking, and security solutions for business customers. The company operates under the umbrella of United Internet AG and targets medium to large enterprises seeking high-performance digital infrastructure. Their website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. Technically, the site is built on Drupal CMS with modern frontend technologies, optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and vulnerability disclosure are recommended. Overall, the domain's WHOIS data is unavailable, which slightly impacts trust but does not detract from the company's legitimacy given the strong business signals and market position.

R

Ran an die Maus

rananmausundtablet.de

35

The website 'Ran an die Maus' is an educational platform primarily focused on media literacy and technology use within families and educational settings. It provides informational content, recommendations, and resources aimed at helping families and educators navigate media and technology effectively. The site is in German and targets a German-speaking audience, particularly families and educators interested in media education. The business model appears to be informational and educational without commercial transactions or services. From a technical perspective, the website uses a basic technology stack including HTML5, CSS3, Bootstrap, and jQuery. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern backend platform. The site does not appear to use HTTPS, which is a significant technical and security shortcoming. Security posture is weak due to the absence of HTTPS, security headers, and privacy or cookie policies. No contact information or incident response mechanisms are provided, limiting trust and compliance with GDPR or other regulations. The site does not collect user data or use analytics or advertising scripts, which reduces privacy risks but also limits business insights. Overall, the website is a small-scale educational resource with basic technical implementation and limited security and privacy compliance. Strategic improvements should focus on implementing HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers to improve trust and compliance.

slovensko.help is a Slovak community-driven initiative primarily composed of IT sector volunteers aiming to assist Slovakia in managing the COVID-19 pandemic. The website offers several projects including a chatbot for COVID-19 information, an improved official infoline, and downloadable posters to promote responsible behavior. The target audience is the general Slovak public seeking reliable pandemic-related information and support. The initiative operates as a non-profit with a small organizational size and has been active since at least 2016, as indicated by domain registration data. Technically, the website is built using the Jekyll static site generator and incorporates Google Analytics and Google Tag Manager for visitor tracking. Hosting appears to be provided by Websupport.sk, a Slovak hosting provider. The site is mobile optimized with good SEO practices and clear navigation. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and security headers such as Content Security Policy or HSTS, which are recommended to enhance security posture. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. No forms or input fields are present, reducing attack surface. WHOIS data is consistent with the website's Slovak focus and shows no privacy protection, enhancing transparency. Overall, slovensko.help is a trustworthy, well-intentioned community resource with good content quality and business credibility. Security and privacy compliance can be improved by adding policies, enabling DNSSEC, and implementing security headers. These improvements would enhance user trust and regulatory compliance.

I

Immanuel Albertinen Diakonie gGmbH

amalie-pouch-zentrum-hamburg.de

59

The Amalie Pouch Zentrum Hamburg website represents a specialized healthcare center focused on plastic reconstructive surgeries of the gastrointestinal tract, particularly pouch surgeries. It operates under the umbrella of Immanuel Albertinen Diakonie gGmbH, a reputable healthcare group in Germany. The website targets patients and medical professionals seeking expert surgical solutions as alternatives to artificial bowel outlets. The site showcases detailed service offerings, a professional medical team, and multiple certifications, reinforcing its market position as a trusted specialist center. Technically, the website is built on TYPO3 CMS, employing modern web standards with good mobile optimization and accessibility features. It includes comprehensive metadata, Open Graph tags, and a cookie consent mechanism compliant with GDPR. The site uses Matomo for privacy-conscious analytics, avoiding third-party tracking services. Performance is moderate, with room for optimization. From a security perspective, HTTPS is enforced, and no sensitive data is exposed. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided. The domain WHOIS data is limited but consistent with the business claims. No WAF or blocking mechanisms are present, allowing full content access. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy digital presence for the healthcare entity. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

T

Total Avengers s.r.o.

idsbk.sk

52

The website www.idsbk.sk serves as the official portal for the Integrated Transport System in the Bratislava Region, Slovakia. It provides comprehensive public transportation information including schedules, ticketing options, news updates, and mobile application access. The site targets residents and visitors of the Bratislava region, positioning itself as a key regional transport information hub. The business behind the site is Total Avengers s.r.o., a Slovak company, which aligns with the domain registration and website content. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses the Componentator SPA framework alongside Google Analytics and Facebook Pixel for tracking. The site is mobile optimized with good navigation and content structure, although accessibility features are basic. The CMS appears to be TotalJS, consistent with the author metadata. Security-wise, the site uses HTTPS and asynchronous script loading, but lacks visible security headers and a privacy or cookie policy, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. The absence of a security.txt file and vulnerability disclosure policy indicates room for improvement in security transparency and incident response readiness. Overall, the website is professional, trustworthy, and functional with a moderate to good security posture. However, it should enhance privacy compliance and security best practices to reduce risk and improve user trust.

P

Pierer Industrie AG

gasgas.com

66

GASGAS, operated by Pierer Industrie AG, is a well-established brand specializing in offroad motorcycles and e-bikes. The company targets enthusiasts seeking adrenaline and high-performance vehicles, positioning itself strongly in the transportation sector with a focus on quality and adventure. The website reflects a professional digital presence with clear branding and comprehensive product information. Technically, the site is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent tools to ensure compliance and user tracking. Security posture is moderate with room for improvement in security headers and vulnerability management. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data is a notable anomaly requiring monitoring.

M

MSC Suzuki Slovensko

suzuki.sk

55

MSC Suzuki Slovensko operates as the exclusive importer and dealer of Suzuki automobiles and motorcycles in Slovakia. The website serves as a corporate portal providing information about Suzuki vehicles and related services targeted primarily at Slovak customers. The business holds a stable market position as the official Suzuki representative in the country, founded in 2014, with a medium-sized operational scale. The website content is professionally presented in Slovak language with consistent branding and clear navigation.

C

Catapult

catapult.be

10

Catapult is a well-established branding and design agency based in Belgium, operating since 1997. The company specializes in brand strategy, graphic design, art direction, digital design, and web development, targeting businesses seeking strong and unique brand identities. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies including Barba.js for page transitions, Google Fonts, and Google Analytics for tracking. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and CSRF tokens in forms, but lacks some security headers and explicit privacy policy documentation. The WHOIS data for the domain is restricted, which is common for privacy reasons but slightly reduces trust. Overall, the website is trustworthy, professional, and safe for general audiences.

Z

Združenie mladých podnikateľov Slovenska

zmps.sk

54

Združenie mladých podnikateľov Slovenska (ZMPS) is a Slovak non-profit association founded in 2010 that supports young entrepreneurs through education, networking, advocacy, and assistance with business expansion. The organization targets young businesspeople in Slovakia and positions itself as a key voice for this demographic. The website reflects this mission with relevant content, event information, and active social media channels. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Facebook SDK, hosted behind Cloudflare for performance and security. The site is mobile optimized and includes a comprehensive cookie consent mechanism compliant with GDPR requirements. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. The website provides a professional and trustworthy user experience with clear navigation and relevant content.

Z

Združenie podnikateľov Slovenska

zps.sk

57

Združenie podnikateľov Slovenska is a Slovak non-profit business association focused on improving the business environment for Slovak entrepreneurs and SMEs. Founded in 1989, it represents companies contributing to the Slovak economy and actively participates in legislative consultation and advocacy. The website provides news, legislative updates, and engagement opportunities for members and the public. Technically, the site uses modern web technologies including Google Tag Manager and cookie consent mechanisms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and secure forms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its business mission.

L

Lentiamo s.r.o.

lentiamo.dk

65

Lentiamo.dk is a professional Danish e-commerce retailer specializing in contact lenses, prescription glasses, sunglasses, and related optical accessories. The company operates multiple country-specific websites, indicating a broad European market presence. The website is well-structured, localized in Danish, and targets consumers seeking affordable and quality optical products online. The business model focuses on direct online sales with a strong emphasis on customer service and product variety. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics 4, and Google Identity Services for authentication and tracking. The site is mobile-optimized, accessible, and uses structured data to enhance SEO and search engine visibility. Performance is moderate with good design and navigation clarity. Security posture is solid with HTTPS enforced and secure login mechanisms. However, there is room for improvement by adding more comprehensive security headers and publishing explicit security policies. Privacy compliance is well addressed with GDPR-compliant cookie consent and privacy policies. Contact information is clearly provided, enhancing business credibility. Overall, Lentiamo.dk presents a trustworthy and professional online retail platform with a good balance of technical maturity and business transparency. The lack of WHOIS data is due to registry restrictions and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing incident response contacts, and continuous monitoring of third-party scripts.

G

Generaldirektion Wasserstraßen und Schifffahrt

wsv.de

67

The Generaldirektion Wasserstraßen und Schifffahrt (GDWS) is a German federal government agency responsible for the operation, maintenance, and development of federal waterways and shipping infrastructure. The website serves as an official portal providing comprehensive information, news, and services related to waterway management, shipping, environmental considerations, and career opportunities. It targets shipping companies, government officials, professionals, and the general public interested in waterway affairs. The GDWS holds a central position in Germany's transportation sector, ensuring safe and efficient waterborne traffic. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript components such as the Slick Carousel for dynamic content display. The site is mobile-optimized, accessible, and SEO-friendly, with consistent branding and professional design. Security measures include HTTPS enforcement and standard security headers, though explicit privacy and cookie policies are missing, representing a compliance gap. The security posture is strong with no evident vulnerabilities or exposed sensitive data. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms limits transparency. The WHOIS data is minimal but consistent with a government subdomain, supporting legitimacy. Social media presence on official platforms enhances trust and outreach. Overall, the site is a reliable and authoritative source for waterway and shipping administration in Germany, with room for improvement in privacy compliance and direct contact information to enhance user trust and regulatory adherence.

J

Jungheinrich

jungheinrich.sk

70

Jungheinrich Slovakia operates as a localized branch of the global Jungheinrich AG, specializing in material handling equipment and intralogistics solutions. The website targets business customers requiring customized logistics and material handling systems, positioning itself as a key player in the transportation and manufacturing sectors. The site demonstrates a professional digital presence with consistent branding and multilingual support, reflecting a mature business infrastructure. Technically, the website employs modern web standards, including HTTPS, cookie consent management via Cookiebot, and Google Tag Manager for analytics, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS and basic best practices, though explicit security policies and incident response contacts are not evident. Privacy compliance is partially addressed through cookie consent but lacks a visible privacy policy page, which is a notable gap. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy and security documentation.

O

Obec Lipová-lázně

lipova-lazne.cz

55

Obec Lipová-lázně operates an official municipal website providing comprehensive information and services to residents and visitors. The site offers local government details, news updates, tourism information, and community resources. It targets local citizens and tourists interested in the region's natural and cultural offerings. The website is built on the VismoWeb5 CMS platform and integrates Google services such as reCAPTCHA and Translate for enhanced usability and security. While the site maintains a good security posture with HTTPS and spam protection, it lacks explicit security and incident response policies. Contact information is clearly presented, supporting trust and transparency. Overall, the site is a reliable digital presence for the municipality, though improvements in mobile optimization and security headers could enhance its robustness.

C

Cakir's Burger

cakirs.cz

41

Cakir's Burger is a small local burger restaurant based in Šumperk, Czech Republic, offering a variety of burgers and related menu items through an online e-shop and mobile application. The business focuses on providing diverse burger options including single, double, and triple burgers, along with sides and drinks, targeting general consumers seeking convenient food delivery and takeaway services. The website is professionally designed with good content quality and clear navigation, supporting online ordering and customer engagement features such as order tracking and bonus systems. Technically, the site employs modern web technologies including service workers and integrates external APIs like OpenStreetMap for geolocation services. However, the absence of WHOIS data and lack of visible security headers or explicit privacy and cookie policies indicate areas for improvement in transparency and compliance. The security posture is moderate with room for enhancement in SSL configuration and security best practices. Overall, the website presents a functional and user-friendly platform for its business model but should address privacy and security gaps to strengthen trust and regulatory compliance.

Penzion Mlýnský Dvůr is a small family-run hospitality business located near Třeboň in the Czech Republic, offering accommodation in farm-style apartments and rooms with additional services such as horse riding, fishing, and event hosting. The website presents a well-structured and content-rich platform targeting families, cyclists, and groups seeking a nature-oriented vacation experience. Technically, the site uses standard web technologies including Google Fonts and Font Awesome, but lacks advanced frameworks or CMS identification. Security posture is moderate with HTTPS assumed but no visible security headers or incident response information. Privacy policies exist but lack active consent mechanisms. The absence of WHOIS data is a concern for domain legitimacy and trust, requiring further verification. Overall, the website is professional and trustworthy from a content perspective but would benefit from enhanced security and compliance measures.