Security Directory

B

Banner Engineering

bannerengineering.com

71

Banner Engineering is a globally recognized leader in industrial automation, specializing in sensors, remote I/O, IIoT products, machine safety, and visual indicators. The company targets industrial manufacturers and automation professionals, providing essential solutions to smart factories worldwide. Their market position is strong, supported by a professional and comprehensive digital presence. Technically, the website is built on Adobe Experience Manager, leveraging modern web technologies such as jQuery, Google Tag Manager, and Adobe Scene7 for rich media content. The site is mobile optimized, accessible, and SEO-friendly. Security posture is robust with HTTPS enforcement, reCAPTCHA integration, and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional site and clear business information. Overall, Banner Engineering presents a credible, secure, and well-maintained online presence aligned with its industry leadership.

Radioengineering is an established academic journal focused on wireless communication and related technologies, publishing original research since 1992. It operates as an open access journal affiliated with Czech and Slovak Technical Universities and the IEEE Communications Society, with indexing in major scientific databases. The journal targets researchers and academics in the field of radioengineering and wireless technologies, offering peer-reviewed papers and special issues on emerging topics. The business model includes mandatory publication fees for authors and incentives for reviewers. Technically, the website uses standard web technologies including HTML, CSS, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced accessibility and SEO features. No CMS or hosting provider information is evident. The site is accessible without WAF or security challenges. From a security perspective, the site uses HTTPS (assumed from URL), but no security headers are detected. There is no explicit privacy or cookie policy, which impacts privacy compliance. No vulnerabilities or exposed sensitive data were found in the HTML content. Contact information is limited to email addresses with no phone or physical address provided. Overall, the site is trustworthy and professional for its academic purpose but would benefit from enhanced security headers, explicit privacy and cookie policies, and improved mobile and accessibility features to strengthen compliance and user experience.

H

Hedin Automotive

hedinautomotive.fi

64

Hedin Automotive is a well-established automotive dealership in Finland offering new and used cars, financing, and servicing. The website presents a professional image with consistent branding and clear business focus on automotive sales and services. The technical infrastructure includes modern web technologies such as JavaScript, Google Tag Manager, and Cookiebot for cookie consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business claims, supporting legitimacy. Overall, the website is safe, user-friendly, and compliant with privacy regulations to a good extent.

A

Albertinen Krankenhaus

albertinen.de

61

Albertinen Krankenhaus is the largest non-profit hospital in Hamburg, Germany, offering a wide range of specialized medical and nursing services. It operates under the parent organization Immanuel Albertinen Diakonie and maintains multiple specialized centers such as heart and vascular, tumor, and geriatric medicine centers. The website is professionally designed using TYPO3 CMS, providing comprehensive information for patients, healthcare professionals, and referring doctors. The hospital emphasizes medical expertise and patient care quality, supported by testimonials and certifications. Technically, the site is well-structured, mobile-optimized, and accessible, though some modern security headers and privacy compliance features are missing. Contact information is clearly presented, including phone and physical address, with a functional search form.

E

Evangelisches Amalie Sieveking Krankenhaus

amalie.de

60

Evangelisches Amalie Sieveking Krankenhaus is a regional hospital located in Hamburg-Volksdorf, Germany, providing a wide range of inpatient and outpatient medical services including orthopedics, endocrine surgery, cardiology, and birth assistance. The hospital operates under the parent organization Immanuel Albertinen Diakonie and maintains a strong focus on quality management, patient safety, and ethical standards. The website is professionally designed using TYPO3 CMS, offering comprehensive information for patients, medical professionals, and prospective employees. Technical infrastructure is modern with good mobile optimization and accessibility features. Security posture is solid with HTTPS and consent mechanisms for third-party content, though some security headers and incident response details could be improved. Overall, the hospital demonstrates high business credibility and trustworthiness with clear contact information and extensive partnerships.

L

LKwebs

swskola.cz

46

LKwebs is a small Czech Republic-based web development company specializing in creating websites using Joomla and Wordpress CMS platforms. The company offers a range of services including website creation, redesign, hosting, server management, mobile app development, and training, although the training service is currently not active. The website is professionally designed with clear navigation and good content quality, targeting small businesses and individuals in the Plzeň region. Technically, the site uses Joomla CMS with the Gantry framework and modern web fonts and icons, providing a moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage implied but lacking explicit security headers and cookie consent mechanisms. Privacy compliance is basic with a GDPR policy page present but no cookie banner. WHOIS data is unavailable due to privacy protection, limiting domain registration trust verification. Overall, the website is safe, professional, and trustworthy but could improve security and privacy compliance aspects.

S

Setra Buses

setra-bus.com

61

Setra Buses operates a professional and comprehensive website showcasing their premium bus and coach models, sales services, and after-sales support. The company targets transport operators and fleet managers with a strong emphasis on quality and design. The website is built on a modern technical stack with Adobe Experience Manager CMS, uses Matomo analytics, and implements Usercentrics for GDPR-compliant consent management. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. The absence of WHOIS data for the domain is a notable concern, potentially indicating a new registration or privacy protection, which slightly reduces trustworthiness. Overall, the site is well-designed, user-friendly, and compliant with privacy regulations.

I

IDnetwork s.r.o.

do-lead.eu

53

DO LEAD, operated by IDnetwork s.r.o., is a Czech-based technology company offering a SaaS platform focused on identifying and converting website visitors into business leads. The platform provides tools for visitor tracking, lead analysis, and communication facilitation, targeting B2B customers seeking to enhance their sales funnel effectiveness. The website is professionally designed with clear business messaging and consistent branding, primarily in Czech language, reflecting a small but focused enterprise. Technically, the website uses AngularJS framework with standard web technologies (HTML5, CSS, JavaScript). Hosting is provided by WebSupport s.r.o., a known registrar and hosting provider. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. No CMS is detected, indicating a custom or lightweight solution. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks visible security headers such as CSP or HSTS, which are recommended best practices. No incident response or security policy information is provided, and cookie consent mechanisms are absent, representing compliance gaps. Tracking is limited to proprietary scripts with no third-party trackers detected, reducing privacy risks. Overall, the website is legitimate and functional with moderate security and privacy posture. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance. The domain registration is consistent with the business profile, and no suspicious patterns are detected.

K

Komunitní nadace Tři Brány

tribrany.cz

56

Komunitní nadace Tři Brány is a Czech non-profit community foundation focused on supporting arts, knowledge, and civilization primarily in the Vyškov region. The foundation operates grant programs and awards such as the Cena Jana Hona to young individuals demonstrating excellence in various fields. The website is built on WordPress and uses modern web technologies, providing a good user experience with clear navigation and relevant content. However, it lacks visible privacy and cookie policies, which are important for GDPR compliance. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and incident response contacts. Overall, the domain is legitimate with a long history and consistent registration data.

Z

Základní organizace Českého svazu ochránců přírody Veronica

veronica.cz

59

Ekologický institut Veronica is a Czech non-profit organization dedicated to environmental protection, ecological education, and sustainable development. The website serves as a comprehensive platform offering information on ecological programs, consulting services, publications, and events targeting a broad audience including municipalities, schools, companies, and active citizens. The organization is well-established with a clear mission and recognized affiliations, such as membership in the Český svaz ochránců přírody (CSOP). Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and includes user-friendly features like a cookie consent banner and donation forms. However, no advanced CMS or hosting details are evident, and performance is moderate with good mobile optimization. Security posture is adequate but could be improved by implementing HTTP security headers and verifying SSL configurations. The absence of WHOIS data reduces domain trustworthiness, but the website content and external references strongly indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit terms of service and incident response information.

K

Komunitní nadace Blanicko – Otavská

konabo.cz

59

Komunitní nadace Blanicko – Otavská is a Czech community foundation dedicated to supporting local projects that benefit residents and foster regional development. The foundation operates primarily in the Blanicko – Otavská region, providing grants and managing donor funds to support social services, environment, culture, education, and local development. The website reflects a small but established non-profit organization with a clear mission and local focus. Technically, the site is built on the Webnode CMS platform, uses HTTPS with Cloudfront CDN for asset delivery, and implements a cookie consent mechanism, indicating a moderate level of digital maturity. However, the absence of WHOIS domain registration data and lack of published privacy and terms policies represent gaps in transparency and compliance. Security posture is adequate with HTTPS but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is professional and trustworthy in content but would benefit from enhanced compliance and security practices.

H

Hello Glocal Ltd.

coworkiesbook.com

65

Coworkiesbook.com is a professionally developed website dedicated to promoting and selling the book 'Around the World in 250 Coworking Spaces' published by Hello Glocal Ltd. The business operates in a niche market focused on coworking spaces, offering a comprehensive guidebook, a readers club subscription, and related services such as workshops and consulting. The site demonstrates a mature digital presence with strong SEO, structured data, and secure payment processing via Stripe. The technical infrastructure is modern and optimized for performance and mobile devices. Security posture is good with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is partial due to the absence of explicit privacy and cookie policies. Overall, the site is trustworthy and professional, targeting coworking professionals, entrepreneurs, and related audiences worldwide.

Č

Černovická dechovka

cernovickadechovka.cz

57

Černovická dechovka is a traditional Czech brass band with a rich history dating back to 1933. The band performs a variety of traditional music styles including polkas, waltzes, tangos, marches, and seasonal music such as Christmas carols. It actively participates in festivals, concerts, and community celebrations, and has recorded CDs and DVDs that have been broadcast on Czech radio and television. The website serves as an informational and promotional platform for the band, targeting music enthusiasts and local community members interested in traditional Czech brass music. Technically, the website is built using the Webnode CMS platform and hosted on AWS Cloudfront CDN, employing modern web technologies such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. It uses HTTPS for secure communication and implements a cookie consent banner to comply with basic privacy regulations. However, it lacks advanced security headers and comprehensive privacy or terms of service documentation. From a security perspective, the site shows a moderate security posture with HTTPS enabled and cookie consent mechanisms in place. The absence of WHOIS data for the domain raises concerns about domain legitimacy and trustworthiness, as it conflicts with the band's claimed long history. No critical vulnerabilities or exposed sensitive data were detected. The site does not collect user data through forms beyond cookie consent, reducing privacy risks. Overall, the website is a well-maintained informational site for a cultural music group with good content quality and user experience. Security and privacy compliance can be improved by adding security headers, privacy policies, and domain registration transparency. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trust and legitimacy.

M

Město Žirovnice

panistavkazirovnice.cz

50

The website 'Kemp Žirovnice' represents a small hospitality business operated by the municipal entity Město Žirovnice, offering camping and accommodation services in a natural setting. The business targets families, nature lovers, and organized groups such as schools and sports teams, providing modern amenities including cottages with kitchens and bathrooms. The site is well-branded and consistent with its local tourism focus. Technically, the website uses a modern CMS platform (Vismo) with frontend technologies including Vue.js and Google reCAPTCHA v3 for spam protection. The site is mobile-optimized, accessible, and SEO-friendly, though some security best practices like explicit security headers are missing. The domain is newly registered in early 2024, consistent with the business launch timeline. Security posture is good with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a formal security or incident response policy reduces the overall security maturity. Privacy compliance is basic, with cookie and privacy policies present but lacking active consent mechanisms. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, privacy consent, and published security policies would enhance compliance and trustworthiness.

Ú

Ústav pro propagaci díla a odkazu Vítězslava Nováka, z. ú.

vitezslavnovak.cz

45

The Ústav pro propagaci díla a odkazu Vítězslava Nováka is a small non-profit cultural institution dedicated to promoting the musical and pedagogical legacy of the Czech composer Vítězslav Novák. The organization focuses on concert activities, organizing annual events such as Novákovské dny, scholarly research, publications, and hosting the International Novák Piano Competition. The website serves as an official portal providing information about these activities and facilitating contact with the institution. Technically, the website is built on the vismo CMS platform, uses standard web technologies including HTML5, CSS, JavaScript, and integrates Google services such as reCAPTCHA and Translate. Hosting is provided by websupport.cz, a reputable Czech hosting provider. Security posture is adequate with HTTPS enforced and reCAPTCHA protecting forms, though there is room for improvement in security headers and explicit security policies. Privacy compliance is basic with privacy and cookie policies present but lacking active consent mechanisms. Overall, the website is professional, trustworthy, and well-suited for its cultural and educational mission.

Nová Lípa, s.o. is a voluntary association of municipalities in the Czech Republic focused on regional development and community projects. The website provides information about member municipalities, ongoing projects, official notices, and contact options primarily via a contact form. The organization appears to be a small, local government entity established in 2015, with a clear focus on serving local residents and stakeholders. Technically, the website uses a combination of Bootstrap, jQuery, and is hosted on the Estranky.cz CMS platform, with external integrations including Google Analytics and Facebook SDK for tracking and marketing purposes. Security posture is moderate but could be improved by updating JavaScript libraries and implementing security headers. Privacy compliance is lacking due to absence of privacy and cookie policies. Overall, the site is functional and professional but would benefit from enhanced compliance and security measures.

M

Město Lipnice nad Sázavou

lipnicenadsazavou.cz

46

The website represents the official municipal portal for Lipnice nad Sázavou, providing residents and visitors with comprehensive information about the city, local government services, schools, clubs, and cultural events. It serves as a central hub for official announcements, contact details, and community engagement. The site is positioned as a trusted local government resource with a clear focus on public service and community information. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It includes accessibility and basic mobile optimization features, though there is room for improvement in performance and modern responsive design. The integration of Google Translate enhances accessibility for non-Czech speakers. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks advanced security headers and explicit cookie consent mechanisms, which are recommended for enhanced privacy compliance. No vulnerabilities or malicious content were detected, indicating a generally secure posture appropriate for a municipal website. Overall, the site is a reliable and professional municipal resource with a good balance of content quality and technical implementation. Strategic improvements in privacy and security policies would further strengthen its compliance and trustworthiness.

Z

Základní umělecká škola Pelhřimov

zuspelhrimov.cz

45

ZUŠ Pelhřimov is a small educational institution specializing in arts education, including music, dance, visual arts, and literary-dramatic disciplines. The website targets students and parents in the Pelhřimov region of the Czech Republic, providing detailed information about courses, events, and contact options. The institution appears to be well-established locally, though no founding year or parent company information is available. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

P

Pelhřimovská vodárenská s.r.o.

pelhrimovska.cz

45

Pelhřimovská vodárenská s.r.o. is a local utility company providing water supply, sewerage, and wastewater treatment services in the Pelhřimov region of the Czech Republic. The website clearly targets residential and business customers in this area, offering essential information about services, billing, and emergency contacts. The company maintains a professional online presence with clear contact details and relevant service information. Technically, the website employs modern frontend technologies including JavaScript, Google reCAPTCHA v3 for bot protection, and Google Tag Manager for analytics. The site is mobile-optimized and uses HTTPS to secure communications. Security posture is generally good, with no visible vulnerabilities or exposed sensitive data, though the absence of security headers and explicit security policies suggests room for improvement. The lack of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small regional utility provider. Privacy and cookie policies are present and GDPR compliant, enhancing user trust. Overall, the website is functional, secure, and professional, but the missing WHOIS data and limited security disclosures suggest a moderate risk level.

T

Technické služby města Pelhřimova, p.o.

tspe.cz

46

Technické služby města Pelhřimova, p.o. is a municipal service provider responsible for various public services in the city of Pelhřimov, Czech Republic. Their official website offers information about waste management, public greenery, road maintenance, public lighting, cemetery management, sports and playground facilities, parking, and public contracts. The site targets local residents and visitors, providing operational updates and contact channels. The business operates as a small government entity with a domain established in 2003, reflecting a stable presence in the community. Technically, the website is built on the vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It incorporates Google services like reCAPTCHA for form security and Google Translate for multilingual support. The site is hosted likely via Forpsi, with a registrar in the Czech Republic. Performance and mobile optimization are moderate, with basic accessibility and SEO features implemented. From a security perspective, the website uses HTTPS and Google reCAPTCHA to protect forms. However, it lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is basic but present, with a privacy policy and cookie information available, though no active consent mechanism is implemented. Overall, the website is trustworthy and professional, serving its municipal function effectively. Recommendations include enhancing security headers, implementing cookie consent, and expanding privacy and security disclosures to improve compliance and user trust.

Scholz Promotion operates a retail business focused on promotional products, as indicated by the domain and contact email. The current website is inactive, displaying a simple notice that the shop is not active and providing a customer service email and a link to the main company website. The technical infrastructure is minimal, relying on basic HTML and CSS with Google Fonts, and no advanced frameworks or CMS detected. The domain is registered in Germany with a reputable registrar and shows no privacy protection, aligning with the business location and language. Security posture is weak due to lack of HTTPS confirmation, missing security headers, and absence of privacy or cookie policies. No analytics or tracking technologies are present, indicating minimal digital maturity. Overall, the website is low in content quality and professionalism, reflecting its inactive status.

Č

Český internet s.r.o.

prihlasse.cz

51

Přihlaš.se is a Czech-based user authentication platform operated by Český internet s.r.o., providing login services via popular social networks such as Facebook, Google, Seznam, and Apple, as well as traditional email and password methods. The service targets general internet users primarily within the Czech Republic, offering a streamlined authentication experience to reduce password management burdens. The website is professionally designed with consistent branding and clear navigation, supporting a good user experience. Technically, the website employs modern web technologies including Google Analytics, Google Tag Manager, and FontAwesome icons, hosted likely by Wedos based on registrar data. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers and cookie consent mechanisms, indicating room for improvement in privacy compliance and security hardening. From a security perspective, the site demonstrates a moderate security posture with secure form inputs and encrypted connections. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests limited transparency in security governance. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a moderate risk profile with a stable domain history and consistent business information. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance trust and security posture significantly.

I

Immanuel Albertinen Diakonie

immanuel.de

58

Immanuel Albertinen Diakonie is a large non-profit organization operating in the healthcare and social services sectors primarily in Hamburg, Berlin-Brandenburg, and Südthüringen regions of Germany. The website presents a comprehensive overview of their services including hospitals, specialized medical centers, rehabilitation, nursing care, hospices, addiction and disability assistance, psychosocial counseling, educational institutions, and child day care centers. Their market position is strong regionally with multiple subsidiaries and partner institutions. The website is built on TYPO3 CMS and demonstrates good technical maturity with modern design, mobile optimization, and accessibility features. However, it lacks visible privacy and cookie policies, and no explicit security headers were detected, which are areas for improvement. Contact information is clearly provided, and the site links extensively to related domains within their organizational ecosystem.

H

HELIOS Software GmbH

helios.de

52

HELIOS Software GmbH is a specialized technology company offering network software solutions including file servers, print servers, workflow automation, and cloud-based products. Their market position is that of an established provider with decades of experience, targeting enterprise and professional users requiring reliable cross-platform file and print services. The website presents a professional image with detailed product information and support resources, although some modern web practices like cookie consent and security policies are missing. Technically, the website uses legacy JavaScript libraries such as jQuery 1.9.1 and plugins like carouFredSel and prettyPhoto. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. No CMS or hosting provider details are explicitly identified. External links are primarily to trusted domains such as app stores and Google. From a security perspective, the site lacks visible security headers and published security or incident response policies. The use of outdated JavaScript libraries may pose vulnerabilities. No sensitive data is exposed in the HTML, and no tracking or analytics scripts were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance to better align with modern standards and regulations.

S

Spreadshop

spreadshop.de

60

Spreadshop is a German-based e-commerce platform specializing in print-on-demand merchandising solutions tailored for creators, companies, and institutions. It offers a free online shop setup with integrated design, printing, and fulfillment services, positioning itself as a risk-free and flexible partner in the creator economy. The platform supports over 350 customizable products and integrates with popular social media and e-commerce platforms to enhance reach and sales. Technically, the website leverages modern web technologies including React and Next.js, hosted on a CDN infrastructure ensuring fast performance and excellent mobile optimization. The site demonstrates good SEO and accessibility practices, with comprehensive metadata and structured content. Security is robust with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly detailed. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed through detailed privacy and cookie policies with active consent mechanisms, reflecting GDPR adherence. Business credibility is high, supported by certifications such as amfori and OEKO-TEX, and a consistent, professional brand presence across multiple social media channels. Overall, Spreadshop presents a trustworthy, professional, and technically mature platform with a strong market position in the print-on-demand e-commerce sector. Strategic improvements could include publishing dedicated security and incident response policies to further enhance transparency and trust.

F

FutuRSI

futursi.de

51

FutuRSI is a collaborative initiative supported by six partner institutions and funded by the Klaus Tschira Foundation, aiming to conceptualize a German research software institution. The website serves as an informational and advocacy platform targeting researchers, research software engineers, and academic stakeholders in Germany. The initiative focuses on fostering a sustainable future for research software and its developers through collaboration and career advancement. Technically, the website is built using the Hugo static site generator, leveraging modern web standards including HTML5, CSS, and JavaScript, with Google Fonts integration. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. No advanced CMS or dynamic backend is detected, indicating a lightweight and maintainable infrastructure. From a security perspective, the website uses HTTPS and does not expose sensitive data or vulnerable libraries. However, it lacks explicit security headers and formal security policies such as incident response or vulnerability disclosure. Privacy compliance is partially addressed with a privacy policy present, but no cookie consent mechanism is implemented. The absence of contact emails or phone numbers on the homepage limits direct communication channels, relying instead on a contact form. Overall, the website presents a trustworthy and professional image with a clear educational and collaborative mission. The security posture is adequate but could be improved with additional headers and policies. Privacy compliance is basic but acceptable given the nature of the site. The risk level is low, with no indications of malicious activity or content safety concerns.

The Gesellschaft für Informatik e.V. (GI) operates the GI Radar newsletter, a biweekly publication focused on informatics topics, primarily targeting its members and the broader informatics community in Germany. The website serves as an archive for these newsletters dating back to 2017, providing valuable historical and topical content. The organization is a well-established non-profit entity in the technology sector with a clear mission to disseminate information and foster community engagement. Technically, the website is built on TYPO3 CMS and hosted via domaindiscount24.net nameservers. The site demonstrates moderate performance and basic mobile optimization. While the content is well-structured and professionally presented, there is room for improvement in accessibility and SEO practices. The site lacks explicit privacy and cookie policies, and no advanced security headers or incident response information are present, indicating potential areas for enhancement in security posture. From a security perspective, the site is accessible without WAF or blocking mechanisms, but it lacks visible security best practices such as security headers and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of privacy and cookie policies reduces compliance confidence, especially regarding GDPR. Overall, the website is trustworthy and professional, with strong business credibility but moderate technical and security maturity. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance the site's security posture and user trust.

F

FERI

feri.de

71

FERI is a German-based financial services company specializing in multi-asset management and global investment solutions. With over 30 years of experience, it targets sophisticated private wealth and institutional investors, offering independent research and asset management services. The website reflects a professional and consistent brand image, emphasizing trust and expertise in the finance sector. Technically, the site uses modern web technologies including Cookiebot for consent management and Google Tag Manager for analytics, hosted on Colt's infrastructure. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a mature digital presence aligned with its business model and regulatory compliance requirements.

Ticker Technologies is a specialized financial content provider established since 1998, offering stock tickers, charts, and financial data solutions primarily to corporate clients for web, intranet, and extranet integration. The company maintains a stable market position with long-term partnerships and a licensing business model. Technically, the website uses basic but functional technologies including JavaScript and Google Analytics, with moderate performance and basic mobile optimization. Security posture is average with domain registration protections but lacks advanced DNS security and visible security headers. Privacy compliance is minimal with no cookie consent mechanisms and only a basic privacy policy. Overall, the website is professional and trustworthy but could improve in security and privacy practices.

The website automotivemag.sk operates as an online magazine focused on the automotive industry, engineering, and economic topics primarily targeting Slovak and Czech audiences. It provides industry news, articles, and advertising opportunities, positioning itself as a niche media outlet in the regional automotive sector. The business appears to be recently established in 2023, consistent with the domain registration date. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, hosted on Hetzner servers. The site has moderate performance and basic mobile optimization. SEO practices are adequate with proper meta tags and Open Graph data. However, no CMS or advanced frameworks are detected, indicating a simple custom or static site. From a security perspective, the site lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. Google Analytics is used for tracking without a visible consent mechanism. No contact information or incident response channels are provided, limiting transparency and trust. The SSL status is unknown but likely present given Google Analytics usage. Overall, the site is professional and content-rich but has notable gaps in privacy compliance and security best practices. The domain registration is consistent and legitimate, supporting the business credibility. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance trust and compliance.

W

Web Commerce GmbH

kath-musterhausen.de

47

The website www.kath-musterhausen.de represents SESAM, a web platform service designed for church institutions within the Erzdiözese Freiburg. It is developed and hosted by Web Commerce GmbH, providing a comprehensive web-building toolkit including event management, news, forms, newsletters, and room and duty scheduling. The site targets church organizations seeking a versatile and supported online presence. Technically, the site uses Edith CMS, jQuery, and Matomo analytics, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security headers, though cookie consent mechanisms and explicit security policies are lacking. Overall, the site is professional, trustworthy, and well-aligned with its niche audience.

K

Katholische Arbeitsstelle für missionarische Pastoral

kamp-erfurt.de

46

The website kamp-erfurt.de represents a small non-profit Catholic organization focused on missionary pastoral work in Germany. The site provides informational content aimed at religious communities and pastoral workers. Technically, the website is built on TYPO3 CMS with Bootstrap 4, offering a responsive and moderately performant user experience. However, the site lacks explicit privacy and terms of service policies, and no contact information is readily available in the analyzed content. Security posture is basic, with no detected security headers or advanced protections, and no analytics or tracking scripts are present, indicating minimal user tracking. Overall, the domain registration aligns well with the website's purpose, suggesting legitimacy and consistency. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance trust and compliance.

D

Dana Petroleum

dana-petroleum.com

67

Dana Petroleum is a medium-sized exploration and production company operating primarily in the UK, Netherlands, and Egypt. It is a wholly owned subsidiary of the Korea National Oil Corporation, focusing on oil and gas extraction with significant operations in the North Sea. The website presents a professional corporate image with clear business descriptions, key service offerings, and a consistent brand presence. The company targets investors, partners, industry professionals, and potential employees through detailed sections on management, operations, and careers. Technically, the website uses modern web standards including HTML5, CSS3, and JavaScript, with integration of Google Analytics, Google Tag Manager, and Plausible Analytics for user tracking and performance monitoring. The site is mobile optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no CMS or hosting provider details were detected, and accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces confidence in domain legitimacy, but the professional content and company registration details support trustworthiness. Overall, Dana Petroleum's website is a well-structured, professional corporate site with good technical implementation and privacy compliance. The main risk is the lack of WHOIS transparency and limited published security policies, which could be improved to enhance trust and compliance.

Minimlékárna pod Řípem is a small family-owned dairy farm business based in the Czech Republic, specializing in fresh milk vending and production of various dairy products such as yogurts, kefir, and cheeses. The business leverages a combination of traditional farming heritage and modernized facilities funded partly by EU programs. Their market position is local and regional, supported by a recognized regional food award. The website serves as an informational and e-commerce platform targeting local consumers interested in fresh farm products. Technically, the website uses a simple but effective technology stack including HTML5, CSS3, jQuery, and Font Awesome. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. The hosting and domain registration are consistent with the business location and claims, with no signs of privacy protection or suspicious WHOIS data. From a security perspective, the site lacks visible HTTPS confirmation and security headers, which are critical for protecting user data and trust. The presence of a cookie consent banner indicates some GDPR awareness, but the absence of a privacy policy and terms of service is a compliance gap. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is functional and trustworthy for its business purpose but would benefit from improved security practices, formal privacy documentation, and enhanced technical optimization to increase user trust and compliance with data protection regulations.

ASTUR Straškov a.s. is a medium-sized agricultural company based in the Czech Republic, specializing in both crop and livestock production. The company operates over 3,100 hectares of agricultural land and offers a range of services including mechanization and land leasing. The website reflects a well-established business with a history dating back to 2004 and a strong local presence supported by partnerships with reputable agricultural machinery and service providers. Technically, the website uses modern web technologies and frameworks, providing a good user experience with mobile optimization and clear navigation. However, there are gaps in privacy and security policies, with no visible privacy policy or incident response information, and missing security headers. The cookie consent mechanism is implemented, indicating some level of GDPR awareness. Overall, the site is professional and trustworthy but could improve in compliance and security transparency.

S

stredohori-podripsko.cz

stredohori-podripsko.cz

46

The website stredohori-podripsko.cz operates as an online magazine focused on the beauty and cultural richness of the Středohoří and Podřipsko regions in the Czech Republic. It offers a variety of articles covering health, economy, culture, travel, and practical advice, targeting a general audience interested in local topics. The business model centers on content publishing with monetization through Google Adsense advertising. The site is relatively new, with a domain creation date indicating 2025, which appears inconsistent and may reflect a placeholder or data anomaly. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, Matomo analytics for user tracking, and Google Adsense for advertising. The site is mobile optimized with good navigation and SEO practices, though accessibility features are basic. Hosting is provided via vas-hosting.com, with domain registration through REG-GRANSY. Performance is moderate, and no content blocking or WAF mechanisms were detected. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks important security headers such as Content-Security-Policy and X-Frame-Options. There is no visible security or incident response policy, nor a vulnerability disclosure mechanism. Privacy compliance is partial; a privacy policy and terms of use are published, but no cookie consent mechanism is present, which is a compliance gap under GDPR. No direct contact emails or phone numbers were found, only a contact form. Overall, the website presents a professional and trustworthy front for a small regional media outlet, but the WHOIS data anomaly and lack of some security and privacy features suggest areas for improvement. Strategic enhancements in privacy compliance, security headers, and transparency would strengthen trust and regulatory adherence.

G

Gesellschaft für Informatik e.V.

gi.de

55

Gesellschaft für Informatik e.V. (GI) is a well-established German non-profit association dedicated to the field of informatics. The organization provides a broad range of services including membership, publications, events, and educational projects aimed at informatics professionals, academics, and students. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS with Bootstrap, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security policies and incident response contacts are not published. WHOIS data aligns with the website's legitimacy, showing consistent domain registration without privacy protection, appropriate for a professional association. Overall, the website scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional online presence for the GI association.

G

GETPIONEERS

getpioneers.com

45

GETPIONEERS is a German-based technology service provider specializing in visual and interactive digital solutions for B2B communication. Their offerings include interactive applications, AR/VR training, high-end visualization and design, film and video production, virtual events, and consulting services. The company positions itself as an innovative partner enabling clients to enhance their marketing, sales, and training through cutting-edge digital experiences. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive service descriptions. The domain registration aligns well with the company's founding date and business claims, indicating legitimacy and transparency. Technically, the website leverages modern web technologies including Bootstrap, jQuery, and various JavaScript libraries for animations and interactive elements. Hosting is provided by Hetzner Online GmbH, a reputable German hosting provider. Performance is moderate with good mobile optimization, though accessibility and SEO could be improved. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks security headers and explicit security policies on the site. Privacy compliance is partial; a privacy policy is present and GDPR compliant, but no cookie consent mechanism or terms of service are found. Contact information including phone and email is clearly provided, along with active social media profiles. No analytics or tracking scripts were detected in the provided HTML content, indicating minimal user tracking. Overall, GETPIONEERS presents a trustworthy and professional digital presence with room for improvement in security headers, privacy compliance, and SEO. The business is well-positioned in the technology visualization sector with a clear focus on B2B clients.

S

Spreadshop

spreadshop.com

61

Spreadshop is a well-established e-commerce platform specializing in print-on-demand merchandise creation and sales, targeting creators, influencers, and small to medium businesses. The platform offers a comprehensive suite of services including custom merch shop creation, product printing, shipping, and integration with major social media and e-commerce platforms. The website demonstrates a high level of digital maturity with modern technologies such as React and Next.js, optimized for performance and mobile responsiveness. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is robust, featuring comprehensive privacy and cookie policies with consent mechanisms. The absence of WHOIS data for the domain is a notable concern but does not detract significantly from the overall legitimacy and professionalism of the site. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance trust and transparency.

M

Marthy’s Kitchen

marthyskitchen.cz

57

Marthy’s Kitchen is a small hospitality business based in Prague, Czech Republic, specializing in high-quality breakfasts and brunches served in a cozy French-style interior. The website reflects a local restaurant with a focus on quality ingredients, home-style preparation, and friendly service. The business targets general audiences seeking elegant dining experiences. Technically, the website is built on the Wix platform, leveraging modern web technologies and providing a mobile-optimized experience. However, the site lacks comprehensive privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is enabled, but security headers are missing, and no incident response or vulnerability disclosure information is provided. The use of Facebook Pixel indicates moderate user tracking for marketing purposes. Overall, the website is professional and trustworthy but could improve in privacy compliance and security best practices.

B

BREDFORD Consulting, s.r.o.

bredford.cz

49

BREDFORD Consulting, s.r.o. is a well-established Czech boutique consulting firm specializing in tax advisory, accounting, payroll, and recruitment services. With over 20 years of market presence and a team of more than 20 professionals, the company targets small to medium-sized businesses primarily in the Czech Republic. Their service offerings are comprehensive, covering legal tax minimization, accounting accuracy, payroll management, and recruitment support, positioning them as a trusted partner for business clients seeking reliable financial and HR services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics, Google Tag Manager, and Google reCAPTCHA v3 for analytics and security. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and CSRF tokens on forms, though some security headers are missing. From a security posture perspective, the site demonstrates good practices with encrypted connections and anti-bot protections. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement in transparency and readiness. The lack of WHOIS data reduces domain trust slightly but is offset by the professional presentation and business registration details displayed on the site. Overall, BREDFORD Consulting's website is professional, trustworthy, and compliant with GDPR and cookie regulations. It effectively communicates its business services and contact information, making it a credible online presence for their consulting business.

Římskokatolická farnost sv. Martina v Jámách is a small local Roman Catholic parish serving the community of Jámy in the Czech Republic. The website provides information about religious services, announcements, and contact details for parishioners and visitors. It also references a pilgrimage church in Slavkovice, indicating community and religious outreach. The site is simple, with a focus on clear communication rather than advanced digital features. Technically, the website uses basic HTML and CSS without detectable CMS or advanced frameworks. There is no evidence of analytics, tracking, or advertising technologies. Mobile optimization and accessibility are basic but functional. The site lacks modern security headers and there is no visible HTTPS confirmation in the provided data, which is a concern for security best practices. Security posture is minimal with no privacy or cookie policies present, and no incident response or vulnerability disclosure mechanisms identified. The WHOIS data is unavailable, likely due to privacy protection, which is reasonable for a small non-profit religious entity. Contact information is clearly presented, enhancing trustworthiness despite the lack of formal policies. Overall, the website is functional and trustworthy for its purpose but would benefit from improved security measures, privacy compliance, and technical modernization to enhance user trust and protection.

G

Google

superbos.top

69

Google LLC is a global leader in technology, primarily known for its dominant search engine and extensive portfolio of internet-related services including advertising, cloud computing, and software products. As a subsidiary of Alphabet Inc., Google maintains a strong market position with a broad target audience ranging from individual users to enterprises worldwide. The website reflects Google's brand consistency and professionalism, offering a fast, mobile-optimized, and accessible user experience. Technically, the site employs modern web standards and technologies, ensuring high performance and SEO optimization. Security posture is robust with HTTPS enforcement and secure form handling, although explicit security headers were not detected in the provided data. Privacy compliance indicators such as privacy and cookie policies were not explicitly found in the analyzed HTML snippet, but given Google's global presence, compliance is expected. Overall, the domain is highly trustworthy and well-established, despite the lack of WHOIS data due to privacy protections.

U

Uniworld

uniworld.com

64

Uniworld is a luxury river cruise company offering curated travel experiences across Europe, India, Vietnam, Cambodia, Peru, and Egypt. The website positions itself as the world's most renowned river cruise line, targeting travelers seeking intimate cultural and historical experiences. The business model focuses on high-end hospitality services with a global reach. Technically, the website employs modern marketing and analytics tools such as Google Tag Manager and Cookiebot for cookie consent management, indicating a mature digital marketing infrastructure. However, there is no visible privacy policy or terms of service in the provided content, which is a compliance gap. Security posture is moderate with cookie consent implemented but lacking visible security headers or detailed security policies. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for commercial entities. Overall, the website is professional and trustworthy but could improve transparency and security documentation.

T

Trafalgar

trafalgar.com

74

Trafalgar is a well-established travel company specializing in guided tours and travel packages primarily across Europe and other global destinations. The website presents a professional and user-friendly interface, targeting travelers seeking organized vacation experiences with flexible travel plan options. The company leverages modern web technologies including React and integrates multiple third-party analytics and marketing tools to optimize user engagement and advertising effectiveness. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response contacts are not evident in the provided data. The absence of WHOIS registrant information reduces transparency but is common for commercial entities protecting privacy. Overall, the website is credible, secure, and compliant with privacy regulations, serving a large audience in the hospitality sector.

S

SD Software-Design GmbH

software-design.de

63

SD Software-Design GmbH is a German IT company specializing in custom software development, including web portals, cloud software, cross-platform mobile apps, and data-driven systems. With over 13 years of experience, the company serves a diverse clientele including SMEs, startups, public sector entities, and associations primarily in Germany, Austria, and Switzerland. Their offerings extend to IT consulting, digital marketing, and data analysis, supported by multiple certifications and memberships that reinforce their market credibility. The website reflects a professional and comprehensive digital presence with clear service descriptions and strong trust signals. Technically, the site employs modern web technologies, is mobile-optimized, and demonstrates good SEO and accessibility practices. Security posture is robust with HTTPS, security headers, and privacy compliance, although no explicit incident response or vulnerability disclosure policies were found. Overall, the company presents a mature, trustworthy, and client-focused IT service provider profile.

B

Burge Agency

burgeagency.com

53

Burge Agency is a well-established creative and design agency based in Winchester, Hampshire, UK, founded in 2009. The company specializes in branding, graphic design, website design, packaging, advertising campaigns, and print media, serving a diverse clientele including both large and small brands. Their website reflects a professional and consistent brand image with a comprehensive portfolio showcasing their work. Technically, the website is built on WordPress with Bootstrap and uses modern web technologies and analytics tools, indicating a moderate to good level of digital maturity. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from improved privacy and security practices.

H

Hofmann Recycling

hofmann-recycling.de

56

Hofmann Recycling is a small, regionally focused certified waste disposal and recycling company based in Zwickau, Germany. The company offers a broad range of services including waste collection, recycling, container rental, and disposal solutions. Their website reflects a professional and consistent brand image targeting both private and commercial customers in the local area. Technically, the site is built on the Contao CMS platform, utilizing modern JavaScript libraries and a GDPR-compliant consent management platform. Analytics are implemented via Google Analytics 4 and Universal Analytics with IP anonymization, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and published security policies. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations, though improvements in security transparency and contact information availability could enhance credibility further.

H

Hugo na cestách

hugonacestach.info

42

Hugo na cestách is a Czech educational and cultural project centered around travel and heritage exploration within the Czech Republic and occasionally abroad. The website offers rich content including travel reports, photo galleries, and cultural insights, targeting a general audience interested in Czech history, architecture, and nature. The project appears to be run by an individual or small team, with the author identified as Michal Plaňanský. The site maintains a consistent brand and provides social media links to Google+, Facebook, and Twitter, enhancing its outreach. Technically, the website uses standard HTML5, CSS3, and JavaScript with jQuery and Lightbox libraries for interactive image galleries. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks. Security posture is limited due to missing HTTPS confirmation and absence of security headers. Privacy and cookie policies are not present, indicating compliance gaps. The WHOIS data is incomplete due to unsupported TLD WHOIS service, with no registrant or domain creation information available. This reduces trustworthiness from a domain registration perspective, although the website content itself appears legitimate and professional. No signs of malicious content or adult material were found. Overall, the site is a niche educational resource with good content quality but requires improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

G

Girasole, z. s.

girasole.cz

58

Girasole, z. s. is a Czech non-profit organization providing healthcare and social services focused on home hospice care, personal assistance, and emergency care for seriously ill and elderly individuals in the Hustopeče region. Their mission is to support patients and families to live dignified lives at home during serious illness. The website reflects a local healthcare service provider with a clear focus on palliative and hospice care, supported by community and regional partnerships.