Security Directory

V

VGP

vgpparks.eu

74

VGP is a European real estate company specializing in the ownership, management, and development of logistics and commercial properties across Europe. The website presents a professional image with a clear focus on their extensive portfolio of over 100 parks in prime locations. The business targets companies seeking high-quality logistics real estate solutions. Technically, the site is built on WordPress, utilizing modern SEO and performance optimization plugins such as Yoast SEO and WP Rocket. The presence of Google Tag Manager indicates moderate analytics and tracking capabilities. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and detailed privacy or incident response policies. The WHOIS data is privacy protected, which is common for corporate domains, but limits direct verification of registrant details. Overall, the site is professional and trustworthy but could improve transparency on privacy and security policies.

S

SPECTRA Centre of Excellence

spectra-perseus.org

53

SPECTRA Centre of Excellence is a European research centre specializing in spatial and urban planning, sustainable development, and regional integration. The website presents a professional and content-rich platform targeting researchers, policy makers, and stakeholders in Europe. The business model revolves around research projects, collaborations, and knowledge dissemination. Technically, the site uses the eZ publish CMS with a moderate performance profile and basic mobile and accessibility features. Security posture is moderate with domain lock protections but lacks DNSSEC and security headers. Privacy compliance is basic with cookie consent and privacy policy present but no advanced GDPR indicators. Overall, the site is trustworthy and legitimate with a long domain history and consistent WHOIS data.

V

Výskumný ústav spojov, n.o.

vus.sk

43

Výskumný ústav spojov, n.o. is a Slovak non-profit research institute specializing in electronic communications, testing, and metrology. The organization has a well-established presence since 2003, supported by EU funding and governmental partnerships. Their website provides information about their services, projects, and collaborations with educational and research institutions. Technically, the website is built with basic HTML, CSS, and JavaScript, hosted under a Slovak registrar with no detected advanced CMS or frameworks. Security posture is moderate with cookie consent implemented but lacks advanced security headers and explicit HTTPS enforcement details. Privacy compliance is basic with a cookie banner and some information on data provision but no dedicated privacy or security policies. Overall, the website is professional and trustworthy but could benefit from enhanced security and privacy features.

Cummins Czech Republic s.r.o. operates as the exclusive distributor of Cummins diesel engines and related products in the Czech Republic and Slovakia. The company focuses on supplying engines ranging from 55hp to 3500hp, filtration and acoustic systems, gas engines, and electronic components, serving sectors such as automotive, construction, agriculture, marine, rail, and power generation. Their business model centers on direct sales, spare parts supply, and comprehensive service and support, positioning them as a key regional player within the global Cummins network. Technically, the website employs basic web technologies including HTML, CSS, and an outdated version of jQuery (1.7). Hosting is provided by a Czech hosting provider, with no advanced frameworks or CMS detected. The site is moderately performant with basic mobile optimization and accessibility features. SEO and metadata are minimal, and no analytics or tracking tools are evident. From a security perspective, the site lacks visible security headers and uses an outdated JavaScript library, which may expose it to vulnerabilities. There is no evidence of HTTPS enforcement or security policies published on the site. Contact information is clearly provided, including a data protection officer email, but privacy and cookie policies are absent, indicating compliance gaps. Overall, the website is functional and provides relevant business information but requires improvements in security posture, privacy compliance, and technical modernization to enhance trust and resilience.

Grace Themes operates as a small business specializing in professional WordPress themes, targeting WordPress users and developers seeking quality themes. The website content is minimal, primarily serving as a demo or landing page linking to the main company site gracethemes.com. The technical infrastructure is basic, utilizing standard HTML and CSS with Google Fonts, hosted on servers associated with BigRock Solutions Ltd. There is no evidence of advanced frameworks or CMS detection beyond the business focus on WordPress themes. Security posture is weak, with no HTTPS or security headers visible in the provided data, and no privacy or cookie policies published, indicating low compliance with modern web security and privacy standards. The domain registration is consistent and legitimate, with no privacy protection or suspicious patterns, supporting moderate business credibility. Overall, the website is functional but lacks comprehensive content, security features, and compliance documentation, resulting in a moderate risk profile.

P

Pěší pouť k Božímu milosrdenství - Pěší pouť

pout.cz

41

The website pout.cz is dedicated to organizing and providing information about the annual walking pilgrimage to Slavkovice, Czech Republic, focused on spiritual and religious activities related to Divine Mercy. The site targets a niche audience interested in religious pilgrimages and community events. The business model is non-commercial and community-driven, with offerings including event information, registration forms, and merchandise such as T-shirts. The domain is well established since 2006, supporting the site's legitimacy and history. Technically, the website uses a traditional HTML/CSS/JavaScript stack with jQuery libraries and embeds Google Forms for data collection. The site is hosted likely via the registrar Active24, a Czech hosting provider. The design and navigation are basic but functional, with moderate performance and limited mobile optimization. SEO and accessibility features are minimal but present. From a security perspective, the site uses HTTPS but lacks visible security headers and employs multiple versions of jQuery, which may introduce vulnerabilities. There are no privacy or cookie policies, and no explicit contact emails or phone numbers are provided, which impacts compliance and trust. The embedded Google Forms handle user data collection without visible privacy disclosures, representing a compliance gap. Overall, the website is safe and appropriate for general audiences, with no adult or questionable content. The domain registration data is consistent with the website's purpose and location. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance the site's security posture and user trust.

M

Město Lovosice

tclovosice.cz

38

The website www.tclovosice.cz represents the Technologické centrum Lovosice, a technology center serving the town of Lovosice in the Czech Republic. It primarily provides IT services such as record management (spisová služba), server hosting, internet, email, and web services targeted at local government and public administration entities. The site content is in Czech and includes historical updates about service maintenance and upgrades, indicating an operational presence since at least 2011. The business model is focused on public sector IT support with a small-scale local footprint. Technically, the website is built on BlazeBlogger CMS, with basic HTML and CSS. It lacks modern frameworks or advanced technical features. Performance and mobile optimization are basic, and SEO and accessibility features are minimal. No analytics or tracking scripts were detected, indicating a low level of digital marketing maturity. From a security perspective, the site uses HTTPS for some services but lacks visible security headers and formal privacy or cookie policies. No WHOIS data was retrievable, which raises concerns about domain registration transparency. The absence of contact emails or phone numbers on the main page limits direct communication channels. Overall, the security posture is moderate but could be improved by implementing standard security headers, privacy compliance, and clearer contact information. The overall risk assessment suggests the site is functional and serves its intended audience but has gaps in compliance and security best practices. Strategic recommendations include adding privacy and cookie policies, improving security headers, verifying domain registration details, and enhancing contact transparency to build trust and compliance.

S

Svazek obcí Podřipsko

svazekpodripsko.cz

44

Svazek obcí Podřipsko is a voluntary association of 23 municipalities in the Litoměřice district of the Czech Republic, focused on regional development and cooperation. Founded in 2004, it operates as a non-profit government entity headquartered in Roudnice nad Labem. The website serves as an official informational portal providing contact details, news, and links to member municipalities. The technical infrastructure is basic, relying on standard HTML and CSS without modern frameworks or CMS detected. Hosting and domain registration are managed by WEDOS, a reputable Czech provider, with the domain registered since 2010, consistent with the organization's history. Security posture is minimal with no detected HTTPS enforcement or security headers, and no privacy or cookie policies are published, indicating room for compliance improvements. No forms or tracking scripts are present, reducing data privacy risks but also limiting user engagement features. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy practices.

The website twofifty.com serves as a personal homepage for Hisashi T Fujinaka, featuring minimal content such as a résumé in PDF format and a ham radio page. The site appears to be a simple, static HTML site without modern web technologies or dynamic content. It targets a general audience interested in the individual's personal and professional information. The domain is well-established, registered since 1999, and maintained with transfer protections, indicating legitimacy and stability. From a technical perspective, the site uses basic HTML and CSS with no detected CMS or frameworks. Hosting appears to be through Name.com based on nameservers. The site lacks mobile optimization and accessibility features, and no security headers or HTTPS status were identified from the provided data, suggesting room for improvement in security and user experience. Security posture is minimal; no privacy or cookie policies are present, and no incident response or security contact information is provided. The absence of HTTPS is a critical security gap. No forms or data collection mechanisms are present, reducing exposure to input-based vulnerabilities. Overall, the site is low risk but would benefit from modern security and privacy enhancements. The overall risk assessment is low due to the site's static nature and limited functionality, but strategic recommendations include enabling HTTPS, adding privacy and cookie policies, improving mobile responsiveness, and implementing basic security headers to enhance trust and compliance.

B

BVH Bitumen Vertrieb und Handel GmbH

bvh-bitumen.de

41

BVH Bitumen Vertrieb und Handel GmbH is a specialized German company founded in 2001 that focuses on the distribution and trading of bitumen products for road construction and industrial applications. Their website reflects a niche business model targeting B2B customers in the energy and construction sectors, offering products such as oxidized and modified bitumen. The company positions itself as an experienced supplier adhering to industry standards. Technically, the website is built on the namRED CMS, an older open-source framework, with basic JavaScript and CSS usage. The site lacks modern mobile optimization and advanced SEO features, indicating a moderate level of digital maturity. Security posture is minimal with no detected HTTPS enforcement or security headers, and no visible incident response or security policies. Privacy compliance is limited, with a basic privacy policy but no cookie consent mechanism. Overall, the site is functional but could benefit from modernization and enhanced security and privacy practices.

N

Nikodémova noc - Pokyny

nikodemovanoc.sk

41

Nikodémova noc is a Slovak non-profit pastoral project affiliated with the Catholic Church, focused on organizing night adoration events to facilitate spiritual encounters with Jesus Christ. The website serves as an informational and organizational platform for local parishes to participate and promote these events. The project targets church attendees and the broader public interested in spiritual activities, operating primarily within Slovakia and neighboring countries. The domain is well-established since 2012 with consistent registration data and DNSSEC enabled, indicating a legitimate and stable online presence. Technically, the website uses basic web technologies including HTML, CSS, and older versions of JavaScript libraries such as jQuery 1.4.1 and Fancybox 1.3.0. Hosting appears to be provided by Websupport.cz. The site shows moderate performance and basic mobile optimization but lacks modern frameworks or CMS platforms. SEO and accessibility features are minimal but functional. Security posture is moderate with DNSSEC enabled but lacks visible security headers and uses outdated JavaScript libraries that may expose vulnerabilities. The login form for program management lacks visible advanced security features. Privacy and compliance are weak, with no privacy policy, cookie policy, or GDPR compliance indicators present on the site. No contact emails or phone numbers are provided, only a login form for authorized users. No incident response or security policy information is available. The site content is safe, religious in nature, and suitable for general audiences without any adult or questionable content. Overall, the website is functional and serves its niche purpose but requires improvements in security, privacy compliance, and modernization of technical components to enhance trust and resilience against vulnerabilities.

S

Společnost katolického apoštolátu (Pallotini)

pallotini.cz

47

The website represents the Society of the Catholic Apostolate (Pallotini), a religious non-profit organization founded in 1835. It provides information about the organization's mission, global presence, and apostolic activities including parish work, education, healthcare, and social outreach. The site targets Catholic faithful and those interested in religious apostolate work. Technically, the site uses a custom PHP-based CMS with legacy JavaScript libraries such as jQuery 1.4.1 and basic CSS styling. Hosting is likely provided by Active24, consistent with the domain registrar data. Security posture is moderate with no visible HTTPS confirmation or security headers in the provided data, and outdated JavaScript libraries present potential vulnerabilities. Privacy and cookie policies are absent, indicating compliance gaps with GDPR. Contact information is clearly provided with physical addresses, phone numbers, and a company email. Overall, the site is functional and informative but would benefit from technical modernization and improved security and privacy compliance.

Smartcityvpraxi.cz is a Czech information portal and consulting service focused on smart city concepts, sustainable urban development, and modern technologies in energy and transportation sectors. The website provides news, articles, and event information targeting professionals and stakeholders interested in smart city implementation in the Czech Republic and Central Europe. The domain is well-established since 2015, supporting its credibility in the niche market. Technically, the website uses a traditional HTML/CSS/JavaScript stack with integrations of Google Analytics and Google Custom Search Engine for analytics and search functionality. The site shows moderate performance and basic mobile optimization but lacks modern CMS or frameworks. Security measures are minimal, with no visible security headers or explicit privacy and cookie policies, indicating room for improvement in compliance and security posture. Security-wise, the site uses HTTPS for external scripts and analytics but does not demonstrate advanced security practices such as CSP or HSTS headers. No forms collecting sensitive data are present, reducing immediate risk, but the absence of privacy and cookie policies is a compliance gap. No incident response or vulnerability disclosure information is provided. Overall, the website is a moderately credible and content-rich portal serving a specialized audience. However, it requires enhancements in privacy compliance, security headers, and contact transparency to improve trust and regulatory adherence.

Proelektrotechniky.cz is a specialized Czech online portal focused on electrical engineering, industrial automation, electronics, and energy sectors. It provides curated news, expert articles, event invitations, and consulting services primarily targeting professionals and experts in these technical fields. The website has a long-standing presence since 2012, indicating established market positioning within its niche. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, Google Analytics, and Google Custom Search Engine, hosted under Czech domain infrastructure. The design and user experience are functional but basic, with moderate mobile optimization and SEO practices. Security posture is moderate with HTTPS usage but lacks explicit security headers and privacy policies. No direct contact emails or phone numbers are found, which may impact user trust and compliance. Overall, the site is safe, professional, and content-rich but would benefit from enhanced privacy compliance and security practices.

The website ecrime.cz represents a regional government initiative by Kraj Vysočina focused on promoting internet safety through educational e-learning modules targeted at children, youth, social workers, police officers, parents, and the general public. The project is co-financed by the Ministry of Interior's crime prevention program and supported by partners such as Microsoft and Servodata. The site serves primarily as an informational portal linking to e-learning content and partner resources. Technically, the website is built with basic HTML and CSS, lacking modern frameworks or CMS platforms. There is no evidence of advanced analytics, tracking, or security headers. The site appears to have moderate performance and basic mobile optimization but lacks SEO and accessibility enhancements. No forms or user data collection mechanisms are present, reducing privacy risks but also limiting interactivity. From a security perspective, the site does not demonstrate strong security posture: no HTTPS status was confirmed from the data, no security headers are present, and no privacy or cookie policies are published. The WHOIS data is consistent and appropriate for a government-backed project, with no suspicious indicators. The overall security score is moderate but could be significantly improved by implementing HTTPS, security headers, and compliance documentation. Overall, the site is safe and trustworthy for its intended audience but would benefit from technical and security improvements to enhance user trust, compliance, and resilience against threats.

N

Nikodémova noc - Slovo biskupa

nikodemovanoc.cz

43

Nikodémova noc is a small-scale religious non-profit initiative based in the Czech Republic, focused on organizing spiritual events that offer unique encounters with Jesus. The website serves as a platform for program registration and dissemination of spiritual messages, supported by the Brno bishopric and the Pallotini order. The target audience is primarily Christian communities and church attendees in the region. Technically, the website uses basic web technologies including HTML, CSS, JavaScript with jQuery and Mapy.cz API for maps. However, it relies on outdated JavaScript libraries which pose security risks. The site lacks modern security headers and visible privacy or cookie policies, indicating compliance gaps. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the website is functional with good content quality but requires improvements in security and privacy compliance to enhance trust and protection.

M

Missmaturita.cz - doména na prodej

missmaturita.cz

38

The website missmaturita.cz is a domain parking page offering the domain for sale or rent. It does not represent an active business or service but serves as a marketplace listing for domain investors or buyers interested in Czech domains. The site is minimalistic, with basic HTML and JavaScript, hosted likely by netiq.biz, a domain parking and hosting provider. The technical infrastructure is simple, lacking modern CMS or frameworks, and shows basic mobile optimization and accessibility. Security posture is weak, with no HTTPS enforcement visible in the content, no security headers, and no privacy or cookie policies. The site also includes an automatic redirect to an unrelated external domain, which may reduce trust. WHOIS data shows the domain was registered recently in December 2023, consistent with its use as a domain for sale. Overall, the site scores low on professionalism, security, and privacy compliance, reflecting its nature as a parked domain rather than a full business website.

The website represents an educational portal for the Sdružení pro dopravní telematiku, a Czech association focused on transport telematics and intelligent transport systems. It provides information about workshops, conferences, and projects related to transport telematics, targeting professionals and stakeholders in this sector. The site content is primarily in Czech and includes extensive listings of past and upcoming events, indicating an active role in the transport telematics community. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks mobile optimization and advanced accessibility features. Security posture is weak due to the absence of HTTPS and security headers, and there are no visible privacy or cookie policies, which raises compliance concerns. The WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site serves as an informational and educational resource but requires significant improvements in security, privacy compliance, and technical modernization.

Anawe s.r.o. is a Czech small business specializing in comprehensive web presentation services including website creation, SEO optimization, graphic design, and corporate identity development. The company has a strong market presence with over a decade of experience and a broad portfolio of clients across various sectors. Their website reflects professionalism and a consistent brand image, targeting businesses and individuals seeking quality digital presentation solutions. Technically, the website employs standard web technologies with HTTPS and Google Analytics integration, though it lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS data limits domain trust verification, but the detailed contact and business information on the site support legitimacy. Security posture is moderate with room for improvement in headers and policy disclosures. Overall, Anawe s.r.o. presents a credible and professional digital presence with recommendations to enhance privacy compliance and security best practices.

U

Univention GmbH

software-univention.de

38

Univention GmbH operates a software update repository website for its Univention Corporate Server (UCS) product line, providing downloads of software versions, network installation files, and virtual machine images. The website is primarily targeted at IT professionals and organizations using Univention's enterprise Linux solutions. The business is positioned as an established player in the technology sector, focusing on software development, distribution, and support services. The website content is technical and functional, serving as a resource for software updates rather than marketing or customer engagement. Technically, the website uses basic HTML, CSS, and JavaScript, with Piwik analytics for user tracking. The site lacks advanced frameworks or CMS platforms and shows moderate performance and basic mobile optimization. The presence of PGP signatures for archive keys demonstrates a commitment to software integrity and security. However, the site does not implement advanced security headers or explicit privacy and cookie policies, indicating room for improvement in compliance and security best practices. From a security perspective, the website benefits from HTTPS and cryptographic signatures but lacks visible security headers and formal incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the company's identity and domain usage, supporting the legitimacy of the site. Overall, the security posture is moderate but could be enhanced by adopting additional security controls and compliance documentation. The overall risk assessment is low, with the main recommendations focusing on improving privacy compliance, security headers, and user transparency regarding data collection. Enhancing mobile optimization and accessibility would also improve user experience and SEO. The website serves its purpose as a software update portal effectively but would benefit from modernization and stronger security and privacy practices.

G

GoFox - Tecnologias de Informação

gofox.pt

54

GoFox - Tecnologias de Informação is a Portuguese technology company specializing in web design, development, and digital marketing services. With over 20 years of experience and a portfolio exceeding 1200 projects, GoFox positions itself as a trusted partner for businesses seeking tailored web solutions, including mobile applications, e-commerce platforms, and SEO optimization. The company emphasizes strategic vision and technical expertise to deliver measurable results for its clients. Technically, the website demonstrates a mature digital infrastructure leveraging modern technologies such as PHP, Django, React, and mobile development frameworks, hosted likely within the PTisp Partners Network. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a high level of digital maturity. Security-wise, the website employs HTTPS, secure forms with CAPTCHA, and cookie consent mechanisms, though it lacks a publicly stated security policy or incident response contacts. Overall, GoFox exhibits a strong security posture with room for improvement in formal security disclosures. The domain registration data aligns well with the company's claims, reinforcing legitimacy. The website is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

G

Global Sign and Design, Inc.

global-sign.com

47

Global Sign and Design, Inc. is a small business specializing in digital signage and LED display solutions primarily serving the Pennsylvania region. The company acts as a premier distributor and installer for top manufacturers in the visual communication industry, offering products such as outdoor and indoor LED displays, scoreboards, and custom signage. Their market position is regional with a focus on retail and manufacturing sectors requiring digital signage solutions. Technically, the website infrastructure is outdated, relying on deprecated Flash technology and lacking modern security features such as HTTPS enforcement and security headers. The site is hosted by Bluehost Inc. and uses basic JavaScript and CSS without modern frameworks or CMS. Performance and mobile optimization are poor, and accessibility features are minimal. From a security perspective, the website shows significant gaps including absence of privacy and cookie policies, no visible security headers, and no DNSSEC enabled on the domain. The use of Flash presents security and compatibility risks. Contact information is provided but limited, and no incident response or security policies are disclosed. Analytics tools like StatCounter and Google Analytics are used without clear privacy compliance disclosures. Overall, the website presents moderate business credibility but requires urgent technical and security improvements to enhance user experience, compliance, and trustworthiness. Strategic recommendations include modernizing the website technology stack, implementing HTTPS and security headers, adding privacy and cookie policies, and removing deprecated Flash content.

T

triangl web

triangl-web.cz

37

The website triangl-web.cz represents a small Czech web design and development company offering services including website creation, e-commerce solutions, CMS integration, SEO optimization, and custom internet applications. The business appears to be established since 2007 and targets local businesses and individuals seeking professional web services. The site content is primarily in Czech and provides a clear overview of services but lacks detailed contact information and compliance documentation. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms detected. The site performance and mobile optimization are basic, and no advanced accessibility features are evident. Google Analytics is used for visitor tracking, but no privacy or cookie policies are present, indicating potential compliance gaps. From a security perspective, the site lacks HTTPS enforcement and security headers, which significantly lowers its security posture. The partner login form is present but no visible security measures are implemented. The absence of WHOIS data reduces domain trustworthiness, although the website content itself appears legitimate and professional. Overall, the site scores moderately on content and business credibility but poorly on security and privacy compliance. Strategic improvements in HTTPS implementation, privacy policies, and contact transparency are recommended to enhance trust and compliance.

Technické služby Votice s.r.o. is a small municipal utility company based in the Czech Republic, founded in 2023. The company provides essential water supply and sewage services to the town of Votice. The website serves as a basic informational portal with limited content, primarily displaying company name, address, and service description. The site was created using Web4u s.r.o.'s page editor, indicating a simple technical infrastructure with no advanced CMS or frameworks detected. From a technical perspective, the website uses basic HTML and CSS without modern frameworks or CMS platforms. There is no evidence of HTTPS or security headers, which poses a security risk. The site lacks privacy, cookie, and terms of service policies, indicating low privacy compliance. No analytics or tracking technologies are present, suggesting minimal user tracking. Security posture is weak due to missing HTTPS and security headers, absence of incident response contacts, and no vulnerability disclosure mechanisms. The domain registration is consistent with the business founding date, lending legitimacy to the site. However, the lack of contact emails and phone numbers reduces business credibility and user trust. Overall, the website is functional but minimalistic, with significant room for improvement in security, privacy compliance, and user engagement. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, providing clear contact information, and enhancing technical SEO and accessibility.

M

Mosaic

mosaicbuilder.com

59

Mosaic is a specialized technology company offering an advanced WordPress theme builder and design system aimed at enhancing website design, speed, and functionality. The company targets WordPress users, developers, and designers seeking to overcome design limitations inherent in standard WordPress page builders. The website presents a professional and modern digital presence with excellent design quality and SEO optimization, leveraging WordPress CMS and Yoast SEO plugin technologies. Hosting and domain registration are managed via Cloudflare, ensuring reliable infrastructure and security. Security posture is solid with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are absent. Privacy and cookie policies are not found, indicating compliance gaps. No contact information or incident response details are published, limiting direct communication channels. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency.

A

Naučná audiostezka v Teplicích

audioteplice.cz

50

Audioteplice.cz is a small-scale educational project offering an audio trail experience in Teplice, Czech Republic. It provides free downloadable MP3 audio guides and maps to visitors, spa guests, and locals, supported by donations through multiple payment gateways. The website content is primarily in Czech with options for German and English. Technically, the site uses basic HTML, CSS, and JavaScript with Google Analytics for tracking. The design and navigation are functional but basic, with limited mobile optimization and accessibility features. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy compliance mechanisms such as cookie consent or privacy policies. WHOIS data is inconsistent, showing a domain creation date in the future, which undermines domain legitimacy confidence. Overall, the site is safe, family-friendly, and focused on cultural education.

Salesiánské hnutí mládeže (SHM) is a Czech Christian non-profit organization dedicated to the education and upbringing of children and youth through various cultural, sports, and educational activities. The organization operates nationwide with over three thousand members across multiple clubs. The website serves as an information hub for events, news, and organizational details, targeting youth and their families. Technically, the site is built on the Vizus CMS platform, with a moderate performance profile and basic mobile optimization. Security measures include HTTPS and a comprehensive cookie consent mechanism, though security headers are not evident, suggesting room for improvement. The absence of WHOIS data reduces domain trust slightly, but the website content and structure indicate a legitimate and established organization. Overall, the site scores well in content quality, privacy compliance, and business credibility, making it a trustworthy resource for its audience.

B

Bichinger Software & Consulting

bichinger.de

58

Bichinger Software & Consulting is a small technology company based in Germany specializing in professional web platform software development using Ruby on Rails and Vue.js. The company targets businesses seeking custom web platform solutions and consulting services. The website is currently offline with a placeholder message indicating renewal, limiting content availability and detailed business information. The technical infrastructure leverages modern frameworks and technologies, including PostgreSQL and Docker, indicating a contemporary development environment. However, the website lacks visible contact information, privacy policies, and terms of service, which impacts trust and compliance perception. Security posture shows basic implementation with CSRF tokens but lacks visible security headers and documented policies. Overall, the site is functional but minimal, with moderate technical maturity and room for improvement in security and compliance documentation.

K

KaraFun Group

karafun-group.com

67

KaraFun Group is a French-based company specializing in the production and distribution of multi-track instrumental music and karaoke-related technologies. They operate a diverse ecosystem including consumer karaoke applications, business solutions for karaoke bars, private karaoke box venues, and applications for musicians. The company positions itself as a leader in the karaoke and instrumental music market with a strong international presence and a rich catalog of exclusive music content. Technically, the website and associated services leverage a modern and diverse technology stack including PHP, C++, Kotlin, Swift, and Node.js, supporting multiple platforms such as Android, iOS, Mac, WebAssembly, and Windows. The website is well-designed, mobile-optimized, and SEO-friendly, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no obvious vulnerabilities detected, though the absence of security headers and explicit incident response policies suggests room for improvement. The WHOIS data is missing or inaccessible, which reduces domain trustworthiness despite the professional appearance and consistent branding of the website. Overall, KaraFun Group presents a credible and professional business with a solid technical foundation but should improve transparency in domain registration and privacy compliance mechanisms.

D

DIHK Unternehmensnetzwerk Klimaschutz

klima-plattform.de

50

The website www.klima-plattform.de serves as a German national platform under the DIHK umbrella, aimed at fostering a network for companies and multipliers engaged in climate protection. It provides a centralized resource for improving climate protection knowledge and facilitating collaboration across Germany. The platform is powered by TYPO3 CMS, indicating a stable and mature technical foundation. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. No advanced analytics or tracking scripts were detected, suggesting a minimal data collection approach. The domain registration details are limited but appear consistent with the business purpose. Overall, the site presents a professional and focused business presence but requires improvements in privacy, security, and contact transparency to enhance trust and compliance.

Logo-Solution GmbH is a small German technology company specializing in software solutions for logistics and online reservation systems, IT consulting for medium-sized businesses, and modern website design. Founded in 2014 and based in Berlin, the company presents itself as a local, experienced provider with a multidisciplinary team. The website is basic but functional, providing essential company information and contact details without advanced features or policies. Technically, the site uses standard HTML, CSS, and JavaScript with Google Fonts, hosted likely on kasserver.com. Security posture is modest, with no DNSSEC, no visible security headers, and no privacy or cookie policies, indicating room for improvement in compliance and protection. The domain registration is consistent and legitimate, supporting the company's credibility. Overall, the site is safe and professional but lacks advanced security and privacy features.

B

Burgenland Tourismus GmbH

burgenland.info

47

Burgenland.info is the official tourism website for the Burgenland region in Austria, providing comprehensive travel information, cultural highlights, and leisure activities. The site targets tourists and visitors seeking detailed guidance on visiting Burgenland, positioning itself as a trusted regional tourism authority. The business model focuses on tourism promotion and visitor engagement through digital content and event information. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including JavaScript, CSS, and HTML5. It integrates multiple marketing and analytics tools such as Cookiebot for consent management, Facebook Pixel for advertising, Google Tag Manager, and Matomo for analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response information are not evident, suggesting room for improvement in security posture transparency. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website presents a professional, trustworthy, and privacy-compliant digital presence for Burgenland tourism. The lack of WHOIS data limits domain registration insights, but the official nature and content quality support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a vulnerability disclosure channel to strengthen trust and security readiness.

The website petits-trains.com appears to be related to a business or service involving small trains, likely in a French context given the language and domain. However, the site content is minimal and lacks detailed business descriptions, contact information, or trust indicators. The technical infrastructure is based on WordPress with the Divi theme, indicating a standard CMS setup but with basic optimization and limited advanced features. Security posture is weak due to the absence of visible HTTPS/SSL details, security headers, and privacy policies. The WHOIS data is unavailable or indicates the domain may not be registered, which raises significant legitimacy concerns. Overall, the site presents a low trust profile and requires substantial improvements in security, compliance, and business transparency to be considered reliable.

D

Deutscher Turner-Bund e.V.

dtb-gymnet.de

56

The website dtb-gymnet.de serves as the official online management and booking portal for the Deutscher Turner-Bund e.V., the German gymnastics federation. It provides event registration and administrative login capabilities for members, clubs, and associations affiliated with the federation. The platform targets a niche audience within the sports federation community in Germany, offering essential services for event participation and organizational management. The business model focuses on facilitating membership and event administration digitally, supporting the federation's operational needs. Technically, the website is built using basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The hosting appears to be managed via generic German hosting providers, with no visible modern web technologies or analytics tools. The site performs moderately with basic mobile optimization and accessibility features. The absence of structured data and SEO enhancements suggests room for technical improvement. From a security perspective, the site uses HTTPS (implied by external links) and employs POST methods for login forms, but lacks visible security headers, anti-CSRF tokens, or bot mitigation measures. No incident response or security policies are publicly disclosed. Privacy compliance is partially addressed with a linked privacy policy PDF, but no cookie consent mechanism is present. The WHOIS data is minimal but consistent with the hosting environment, though lacking detailed registrant information. Overall, the website is functional and trustworthy for its intended audience but could benefit from enhanced security practices, improved privacy compliance, and technical modernization to strengthen its posture and user trust.

The website at ww1.asaplabs.io presents minimal accessible content, primarily consisting of an embedded iframe pointing to an external domain with obfuscated JavaScript and tracking pixels. There is no visible business information, contact details, or privacy-related policies on the site. The WHOIS data for the domain is malformed and provides no registrar, creation, or registrant information, which raises significant concerns about the legitimacy and transparency of the domain. Technically, the site lacks security headers and there is no confirmation of HTTPS usage, further diminishing trustworthiness. Overall, the site appears suspicious and potentially malicious, with a low security posture and poor compliance with privacy standards.

H

Holzwerk GmbH

holzwerk-celle.de

41

Holzwerk GmbH is a small regional German company specializing in carpentry, roofing, and renovation services, particularly focusing on traditional woodwork and altbausanierung (old building restoration). The company serves the Celle area and nearby cities such as Hannover and Braunschweig, positioning itself as a trusted master craftsman business with a focus on quality and customer orientation. Their website provides detailed service descriptions, references, and contact information, supporting their local market presence. Technically, the website is a static or custom-built site using basic HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. Hosting is managed via nsentry.de nameservers, indicating a professional hosting environment. SEO is adequately addressed with meta tags and structured navigation. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of a cookie consent banner and privacy policy indicates some GDPR compliance, but incident response and security policies are absent. Google Analytics is configured with IP anonymization, reflecting some privacy awareness. Overall, the website is functional and credible for a small business but requires improvements in security posture and technical modernization to enhance trust and compliance.

Transports Brevet is a French transportation company specializing in temperature-controlled logistics services. The website serves primarily as a private client login portal, indicating a B2B focus on clients requiring secure access to transport information. The company operates from two physical locations in France and has been registered since 2010, suggesting an established presence in its niche market. The website content is minimal, focusing on login functionality and contact information without broader marketing or informational content. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks visible security enhancements such as HTTPS confirmation or security headers. The security posture is weak, with no privacy or cookie policies, no visible incident response contacts, and potential vulnerabilities in form handling. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and user experience.

The website ww1.weluma.com appears to be a non-registered or parked subdomain with minimal content. The site primarily consists of an embedded iframe from an unrelated external domain and includes tracking pixels. There is no visible business information, contact details, or privacy policies, indicating a lack of legitimate business presence or operational website. The domain WHOIS data confirms no registration, which further undermines trust and legitimacy. Technically, the site lacks HTTPS enforcement and security headers, and the content quality is poor with minimal user engagement features. Security posture is weak due to the absence of best practices and the presence of third-party tracking without transparency. Overall, the site is likely a placeholder or proxy with WAF or security filtering mechanisms limiting content access.

W

Wohnbau Weil

wohnbau-weil.de

47

Wohnbau Weil is a small local real estate company based in Germany, specializing in housing market services, senior living facilities, social management, and tenant support. Their website provides information about available apartments, senior housing, social engagement initiatives, and tenant communications. The site is primarily informational with basic navigation and content structure, targeting residents and tenants in the Weil am Rhein area. Technically, the website is built with basic HTML and CSS without modern CMS or frameworks detected. Hosting appears to be provided by netcup based on DNS nameservers. The site lacks advanced technical features such as mobile optimization, accessibility enhancements, or SEO best practices. No analytics or tracking technologies are present, indicating minimal user data collection. From a security perspective, the website does not show evidence of HTTPS enforcement or security headers, which lowers its security posture. There are no visible privacy or cookie policies beyond a basic imprint/privacy page, and no incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website's business profile, indicating legitimacy. Overall, the website is functional for its purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

F

Francesco Diani

bibbia.net

53

The website www.lachiesa.it/bibbia/ is a niche religious platform offering the Italian Bible in three versions with synoptic comparison and search capabilities. It targets Italian-speaking Christian audiences seeking easy and free access to biblical texts and audio files. The business is small-scale and informational, managed by an individual named Francesco Diani. Technically, the site uses basic HTML, CSS, and JavaScript with integrations for Google Tag Manager and Iubenda cookie consent. The design and user experience are functional but basic, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.

The website e-lir.ch serves as an online historical lexicon focused on the Romansh-speaking region and the history of Graubünden, Switzerland. It provides access to approximately 3200 articles including biographies, geographic, thematic, and family history entries. The project is editorially completed as of 2012 and is linked to the official Swiss historical lexicon project (HLS/DHS). The target audience includes researchers, historians, and cultural enthusiasts interested in regional history and languages. The business model is non-commercial, likely supported by cultural or governmental institutions. Technically, the website is built with basic HTML, CSS, and JavaScript without modern CMS or frameworks. The site shows moderate performance but lacks mobile optimization and advanced accessibility features. SEO is basic with meta tags present but no structured data or Open Graph tags detected. No analytics or tracking technologies are used, indicating a privacy-respecting approach. From a security perspective, the site lacks visible security headers and explicit HTTPS confirmation in the content. Forms have basic JavaScript validation but no advanced security measures like CSRF tokens. No privacy or cookie policies are present, which is a compliance gap. Contact information is clearly provided, enhancing trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is a trustworthy, niche cultural resource with good business credibility but basic technical and security implementations. Strategic improvements in security headers, HTTPS verification, and privacy compliance would enhance its posture and user trust.

IT-Atelier is a small German engineering office specializing in media and information technology, offering IT coordination, management consulting, web-based software applications, and internet services primarily targeting businesses and public sector organizations such as municipalities. The company has over two decades of experience since its founding in 2003 and operates with a local/regional focus in Leipzig, Germany. The website content is basic but relevant, providing clear contact information and a concise description of services. Technically, the site uses legacy technologies such as jQuery 1.4.4 and basic CSS styling with some mobile optimization. There is no evidence of modern CMS or advanced frameworks. Security posture is moderate but limited by the use of outdated libraries and lack of visible security headers or HTTPS status information. No privacy or cookie policies are published, indicating compliance gaps. Overall, the domain registration data is consistent with the business claims, supporting legitimacy.

T

Takentreprenørenes forening

taktekker.no

66

Takentreprenørenes forening (TEF) is a Norwegian professional association representing qualified and reputable roofing contractors. The organization focuses on safeguarding members' common interests and promoting collaboration and expertise in roofing and membrane roofing trades. The website serves as an informational and organizational platform for its members and stakeholders within the roofing industry in Norway. Technically, the website employs modern web technologies including HTTPS, JavaScript frameworks, Microsoft Application Insights, Siteimprove analytics, Google reCAPTCHA Enterprise, and Cookiebot for cookie consent management, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and bot protection mechanisms in place, though explicit security headers and privacy policies are lacking. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for professional associations. Overall, the site is professional, secure, and compliant with basic privacy standards, serving its target audience effectively.

Zingreen is a small Swiss garden construction company based in Gstaad, specializing in landscaping and garden building services. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with a focus on visual presentation. The site is accessible and mobile-optimized but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but no detected security headers or explicit security policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website presents a legitimate local business but would benefit from enhanced security and compliance measures.

IG Rottaler Ernte is a small regional non-profit organization focused on promoting high-quality regional food products and cultural heritage in the Rottal area of Switzerland. The organization primarily operates through the annual Rottaler Erntefest event and ongoing projects to support local producers and regional specialties. The website content is primarily informational, targeting local consumers and enthusiasts of regional foods. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, showing moderate performance and basic mobile optimization. Security posture is minimal with no detected security headers or privacy policies, indicating room for improvement in compliance and protection. Overall, the website is trustworthy but lacks advanced security and privacy features.

The website gmd-tg.ch currently serves as a default hosting start page provided by TRINTEC Hosting, indicating that the domain is hosted by TRINTEC and redirects users to the main site trintec.ch. The business focus appears to be web hosting services, targeting a general audience primarily in Switzerland. The site content is minimal, with no privacy, cookie, or terms of service policies present, and limited contact information consisting of an email and physical address. Technically, the site uses basic HTML and CSS without modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no incident response or vulnerability disclosure information is provided.

S

Systemantics

systemantics.net

49

Systemantics is a specialized web development company focusing on CMS implementation and website creation primarily for clients in the arts, culture, architecture, education, museums, and theater sectors. Their extensive portfolio demonstrates a strong market position within these niche industries, collaborating with various designers and agencies to deliver tailored digital solutions. The company operates primarily in Germany and targets organizations seeking professional and accessible web presence. Technically, the website employs modern JavaScript frameworks and CMS platforms such as Hylex and Wordpress, with Matomo analytics for user tracking. The site is well-designed, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Security posture is generally good with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. WHOIS data is unavailable or protected, which slightly impacts trust but is mitigated by the professional site content and clear contact information. Overall, Systemantics presents a credible and professional business with room to enhance privacy compliance and security transparency.

B

Bauhaus-Universität Weimar

bauhaus-kolloquium.de

44

The website www.bauhaus-kolloquium.de represents the XV International Bauhaus Colloquium, an academic event organized by Bauhaus-Universität Weimar. It serves as a platform for interdisciplinary research exchange in humanities, arts, and architecture, focusing on the politics of research. The event has a long-standing history dating back to 1976 and is positioned as a niche academic conference with a strong cultural and educational focus. Technically, the website is built on WordPress and hosted on university-managed DNS servers, indicating institutional support and reliability. The site demonstrates good content quality and mobile optimization but lacks advanced SEO and accessibility features. Performance is moderate, with no evident use of modern JavaScript frameworks or analytics tools. From a security perspective, the site uses HTTPS, ensuring encrypted communications. However, it lacks visible security headers and published security policies such as privacy, cookie, or incident response policies. No contact information or vulnerability disclosure mechanisms are provided, which could be improved to enhance trust and compliance. Overall, the website is safe, professional, and relevant to its academic audience but would benefit from enhanced privacy compliance and security best practices to improve its security posture and user trust.

Wissenschaft aktuell is a German media company specializing in delivering up-to-date news and articles on science, research, and technology. Operated by Scientec Internet Applications + Media GmbH, the website targets a general audience interested in scientific developments, offering press agency services, newsletters, and RSS feeds. The site maintains a professional presentation with consistent branding and a clear focus on scientific content. Technically, the website uses a custom CMS (onTEAM), standard web technologies, and monetizes via Google Adsense and Google Funding Choices. While the site is accessible and uses HTTPS, it lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie consent banner and a privacy policy page. No direct company contact emails or phone numbers are publicly listed, but a contact form is available. Overall, the site is trustworthy and well-positioned within its niche media segment.

IT-Atelier is a small engineering office based in Leipzig, Germany, specializing in IT coordination, consulting, and web-based software solutions primarily for businesses and public sector clients. The company emphasizes over two decades of experience since 2003, offering services including technical marketing and citizen participation platforms for municipalities. The website reflects a focused business model targeting IT management and public engagement solutions with a professional but basic online presence. Technically, the website uses legacy technologies such as jQuery 1.4.4 and basic CSS styling, hosted on SchlundTech servers. The site is mobile responsive at a basic level and contains no complex CMS or analytics integrations. Performance is moderate, with no advanced SEO or accessibility features detected. Security posture is limited, with no visible security headers and use of outdated JavaScript libraries posing potential risks. From a security perspective, the site lacks privacy and cookie policies, incident response contacts, and vulnerability disclosure mechanisms, indicating compliance gaps especially regarding GDPR. Contact information is clearly presented, but no forms or data collection reduce immediate privacy risks. The domain registration aligns well with the business claims, supporting legitimacy. Overall, the website is functional and trustworthy for its niche but requires improvements in security practices, privacy compliance, and modernization of technical components to enhance its risk posture and professional image.