Security Directory

B

Biological Records Centre

brc.ac.uk

66

The Biological Records Centre (BRC) is a well-established UK national organization focused on terrestrial and freshwater species recording, collaborating closely with volunteer recording communities and government research bodies. The website reflects a mature digital presence with comprehensive content supporting biological recording, research, and conservation efforts. It is supported by reputable partners such as the Joint Nature Conservation Committee and the UK Centre for Ecology & Hydrology, reinforcing its credibility and authority in the environmental research sector. Technically, the site is built on Drupal 10 with modern web technologies and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though there is room for improvement in security headers and published security policies. Overall, the site is trustworthy, professional, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection common for .uk domains. Strategic recommendations include enhancing security headers, publishing incident response information, and adding vulnerability disclosure details to further strengthen trust and security.

I

Iconoir | Free Icons

iconoir.com

65

Iconoir is an open source icon library offering a large collection of free, high-quality icons for developers and designers. It positions itself as a strong alternative to established icon resources like Noun Project and Flaticon, supporting multiple platforms including React, Flutter, and Figma. The website is professionally designed with excellent user experience and mobile optimization, leveraging modern technologies such as React and Next.js. Security posture is good with HTTPS enforced and domain registration consistent and transparent. However, the site lacks formal privacy and cookie policies, as well as explicit contact information and security incident response details, which are areas for improvement. Overall, Iconoir presents a trustworthy and valuable resource for its target audience, with room to enhance compliance and security transparency.

L

Landkreis Hof

landkreis-hof.de

49

Landkreis Hof operates as a regional government authority serving over 95,000 residents across 27 municipalities in Germany. The website provides comprehensive administrative information and services, supporting local businesses and citizens. It maintains a solid market position as the official digital presence of the Landkreis Hof government, offering key services such as local governance, public announcements, and administrative support. The target audience includes residents, local enterprises, and visitors seeking regional information. Technically, the website is built on WordPress with the LayersWP theme and utilizes modern web technologies including jQuery and Google Analytics for performance and user insights. Hosting appears stable with Inttech nameservers, and the site demonstrates good mobile optimization and accessibility features, including a dedicated accessibility tool. SEO practices are well implemented with proper metadata and structured data. From a security perspective, the site enforces HTTPS with HSTS, employs IP anonymization in analytics, and offers user opt-out for tracking. Security headers are partially implemented, though improvements like a full Content-Security-Policy and a published security.txt file would enhance posture. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear GDPR-aligned policies and cookie consent mechanisms. Overall, Landkreis Hof's website is a trustworthy, professional government portal with good content quality, technical implementation, and privacy compliance. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining regular security audits to sustain trust and compliance.

The website www.pudim.com.br is a minimalistic page primarily showcasing an image of a pudding dessert and providing a single contact email address. There is no detailed business description, no privacy or cookie policies, and no terms of service. The site appears to be a small-scale or personal project rather than a commercial business. Technically, the site uses Google Analytics and Google Tag Manager for visitor tracking but lacks modern security headers and does not disclose HTTPS status. The absence of privacy compliance documentation and minimal content limits its professional credibility. Security posture is weak due to missing security headers and lack of HTTPS confirmation. Overall, the site poses low risk but also offers limited trust signals or business information.

H

HSF System SK s.r.o.

hsfsystem.sk

44

HSF System SK s.r.o. is a Slovak construction company specializing in the design and delivery of industrial halls, commercial buildings, and steel constructions. The company operates primarily in the B2B sector, serving construction investors and commercial clients. It holds ISO certifications (9001, 14001, 45001) and is part of the PURPOSIA Group, indicating a solid market position and professional business model. The website reflects a medium-sized enterprise with a consistent brand and good content quality. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and performs moderately well, though some accessibility features are basic. Security posture is good with enforced HTTPS and no exposed sensitive data, but lacks some security headers and cookie consent mechanisms. Security-wise, the company demonstrates compliance with international standards and holds relevant certifications. However, the absence of an incident response contact and cookie consent banner indicates room for improvement in compliance and transparency. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and secure with minor gaps in privacy compliance and security best practices. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security posture and user trust.

T

Tappx

tappx.com

72

Tappx is a technology-driven AdTech company specializing in app monetization, user acquisition, and programmatic advertising across multiple platforms including mobile, web, and OTT/CTV. The company targets publishers, app developers, advertisers, and demand partners, positioning itself as a medium-sized player with a significant footprint evidenced by over 500 publishers and 160 billion monthly ad requests. The website is professionally designed with excellent SEO and mobile optimization, reflecting a mature digital presence. Technically, the site leverages WordPress with advanced performance optimizations such as lazy loading and integrates Google Analytics and Tag Manager for data collection. Security posture is solid with HTTPS and some security best practices, though it lacks explicit security headers and published policies. The absence of WHOIS data and domain registration details is a concern, slightly reducing trustworthiness. Overall, the site is credible and business-focused but would benefit from enhanced transparency in privacy, terms, and security disclosures.

B

Beckerbillett

ticketfritz.de

57

The website ticketfritz.de is an e-commerce platform operated by the company Beckerbillett, specializing in online ticket sales. The site targets a general audience primarily in Germany and offers multi-language support. The business model revolves around providing online shops for ticketing services, with a medium-sized operational scale. The website content is professionally presented with consistent branding and includes essential business information and contact details.

S

Schott Music

schott-music.com

68

Schott Music is a historic and leading publisher specializing in classical and contemporary music, offering a wide range of sheet music, books, and digital products. The company targets musicians, educators, and music enthusiasts globally, operating a professional e-commerce platform built on Magento. The website demonstrates a mature digital infrastructure with modern technologies, including Google Analytics, Tag Manager, and Usercentrics for privacy compliance. Security posture is strong with HTTPS, security headers, and CAPTCHA implementations, though explicit security policies and incident response contacts are absent. The lack of WHOIS data for the domain is a notable anomaly that impacts trustworthiness despite the professional presentation and comprehensive privacy compliance. Overall, the site is well-structured, user-friendly, and compliant with GDPR, serving a broad audience with high-quality content and services.

K

Kulturkurier

kulturkurier.info

44

Kulturkurier is a German-based company specializing in online marketing and public relations services tailored for the culture and media sectors. Established since 2001, it offers a secure, decentralized marketing cloud solution that facilitates collaboration among employees managing press contacts and materials. The company positions itself as a leading media service provider in the cultural domain with a strong emphasis on GDPR compliance and data hosting within Germany. Technically, the website is built on WordPress using Elementor and integrates Google Analytics for user tracking. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response details are absent. Overall, the site is professional, accessible, and trustworthy, supporting a medium-sized business model focused on B2B SaaS for cultural marketing.

G

Gehrmeyer Orthopädie- und Rehatechnik GmbH

gehrmeyer.com

61

Gehrmeyer Orthopädie- und Rehatechnik GmbH is a medium-sized healthcare company based in Osnabrück, Germany, specializing in orthopedics, rehabilitation technology, and home care services. The company offers a broad range of services including modern rehabilitation technology, pediatric care, mobility aids for the elderly, compression therapy, and pregnancy care. Their website reflects a professional and consistent brand presence targeting patients, healthcare providers, and elderly or disabled individuals. The business model focuses on providing specialized medical devices and support services regionally, supported by partnerships with recognized suppliers. Technically, the website is built on the Umbraco CMS platform and employs modern web technologies such as JavaScript, jQuery, FontAwesome, and integrates Google Analytics and FriendlyCaptcha for analytics and bot protection. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and implements captcha protection to mitigate automated abuse. However, the absence of explicit security headers and a visible security policy or incident response contact reduces the overall security maturity. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is missing, which is unusual and slightly reduces trust, but the active and professional website presence supports legitimacy. Overall, Gehrmeyer demonstrates a solid digital presence with good privacy and security practices, though improvements in security header implementation and transparency around incident response would enhance their security posture. The missing WHOIS data warrants monitoring but does not currently indicate malicious intent.

C

CHVÁLEK ATELIÉR s.r.o.

chvalekatelier.cz

47

CHVÁLEK ATELIÉR s.r.o. is a Czech Republic based architectural and engineering firm specializing in 3D architecture, urbanism, engineering preparation, and interior design services. The company targets clients seeking comprehensive and individualized architectural solutions, positioning itself as a professional and reliable service provider in the regional real estate and construction sector. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies and CMS platforms to deliver a good user experience across devices. From a technical perspective, the site uses a variety of contemporary JavaScript libraries and frameworks such as jQuery, Swiper.js, and Google Tag Manager, integrated with analytics and social media SDKs. The site is hosted securely with HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy policy documentation. Security posture is moderate with HTTPS enforced and no visible sensitive data exposure, but the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap, limiting the ability to fully verify domain legitimacy and ownership, which slightly reduces overall trustworthiness. Overall, the website is a credible and professional representation of the business with good content quality and user experience. Strategic improvements in security policies, privacy documentation, and domain registration transparency would enhance trust and compliance.

Č

ČECH-ENGINEERING, a.s.

cech-eng.cz

42

ČECH-ENGINEERING, a.s. is a Czech Republic-based company providing comprehensive construction and engineering services including investor activities, project management, and technical supervision. The company targets clients in the construction and real estate sectors, offering a broad range of services from project preparation to realization. The website reflects a medium-sized enterprise with a consistent brand presence and professional content tailored for local clients. Technically, the site is built on Joomla CMS using modern libraries such as jQuery, UIkit, and Bootstrap, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and performs moderately well, though some accessibility and SEO enhancements are possible. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and published security policies. WHOIS data is unavailable, which reduces trust but the presence of official business registration details on the site supports legitimacy. Overall, the site is professional and functional but could improve privacy compliance and security transparency.

F

FoodDrinkEurope

fooddrinkeurope.eu

72

FoodDrinkEurope is a prominent industry association representing the European food and drink manufacturing sector, the largest manufacturing sector in the EU by turnover and employment. The organization focuses on advocacy, policy influence, and providing resources related to food safety, nutrition, environmental sustainability, and competitiveness. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industry stakeholders and policymakers. Technically, the website is built on WordPress with modern performance optimizations including WP Rocket, Google Analytics, and Cookiebot for privacy compliance. The site is well-optimized for mobile and accessibility, with strong SEO practices evident from meta tags and structured data. Security posture is solid with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. While the WHOIS data is privacy protected, which limits transparency on domain registration details, the website's professional content and consistent branding support its legitimacy. No security policy or incident response information is published, representing an area for improvement. Overall, the site demonstrates a strong balance of business credibility, technical maturity, and privacy compliance, with room to enhance explicit security disclosures and vulnerability reporting. Strategic recommendations include publishing a formal security policy and incident response plan, implementing a vulnerability disclosure program, and providing clear contact details for data protection and security inquiries to further strengthen trust and compliance.

S

Specialised Nutrition Europe

specialisednutritioneurope.eu

51

Specialised Nutrition Europe operates as an information and advocacy platform focused on specialised nutrition within the European region. The website serves professionals and stakeholders by providing relevant content and engagement opportunities. The business model centers on information dissemination and sector advocacy, positioning itself as a niche player in the specialised nutrition market. The website was first published in 2019 and maintains consistent branding and professional content quality. Technically, the website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a modern and flexible CMS infrastructure. It employs standard web technologies including jQuery and integrates Google Analytics for visitor tracking, with Cookiebot managing cookie consent to comply with privacy regulations. The site demonstrates good mobile optimization and moderate performance, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, which are positive indicators. However, it lacks visible security headers and does not provide explicit privacy policy or terms of service pages, which are important for compliance and trust. No WHOIS registrant data is available due to EURid privacy policies, but the domain appears legitimate and consistent with the business's stated purpose. Overall, the website presents a moderate risk profile with room for improvement in privacy compliance, security best practices, and transparency. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and providing clear contact information for incident response. These steps will enhance trustworthiness and regulatory compliance.

K

Kérastase

kerastase.cz

64

The website www.kerastase.com/hair-salon-locator serves as a professional hair salon locator for the Kérastase brand, a premium hair care line under the L'Oréal Group. It targets consumers seeking expert hair diagnosis and tailored hair and scalp care routines. The site leverages modern web technologies including Vue.js and Google Maps API to provide an interactive and user-friendly experience. The presence of OneTrust cookie consent indicates attention to privacy compliance, although no explicit privacy policy or terms of service were found on the analyzed page. Security posture is moderate with HTTPS implied but lacking visible security headers and vulnerability disclosures. WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the branding and content align with the known Kérastase brand, suggesting authenticity. Overall, the site is professionally designed, mobile-optimized, and provides relevant services to its target audience.

S

ST. JAKOB

jakobskirche-nuernberg.de

36

ST. JAKOB is a historic Evangelical Lutheran church located in Nuremberg, Germany, with a rich heritage of approximately 950 years. The website serves as a community portal offering information about religious services, cultural events, a kindergarten, and community support initiatives. The target audience includes local residents, church members, pilgrims, and families. The business model is non-profit, focusing on community engagement and religious activities. Technically, the website is built on WordPress 4.7.31 using the Hi-Response theme, with embedded multimedia content and Google Analytics for visitor tracking. While the site is functional and well-structured with good mobile optimization, it uses outdated software components that pose potential security risks. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional but would benefit from technical updates and enhanced security measures.

M

mediaService Fuchshuber

panotour.info

46

mediaService Fuchshuber operates the website mediaservice360.com, providing specialized services in creating 360° virtual tours, panorama photography, video production including drone and 360° videos, graphic design, and web design primarily targeting hotels, businesses, tourism, and real estate sectors in Germany. The company positions itself as a niche provider with a strong focus on immersive virtual experiences and integrated marketing solutions. Their offerings include Google StreetView integration, enhancing visibility and customer engagement. Technically, the website is built using Nicepage CMS with jQuery and integrates Google Tag Manager and Google Analytics for tracking. The site employs Elfsight widgets for chatbot, accessibility, and appointment booking functionalities, indicating a moderate level of digital maturity. The website is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. HTTPS is enabled, but security headers are lacking, suggesting room for improvement in security hardening. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive privacy policy, cookie consent mechanisms, and GDPR compliance indicators. However, no explicit security policy, incident response contacts, or vulnerability disclosure policies are published. The WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the professional content and consistent branding mitigate immediate risks. Overall, mediaservice360.com is a professional and trustworthy business website with solid content and compliance posture but could enhance its security posture by adding security headers and publishing security-related policies. Monitoring domain registration status is recommended to ensure ongoing legitimacy.

G

GMK GmbH & Co. KG

gmk.de

55

GMK GmbH & Co. KG is a professional advertising agency based in Bayreuth, Germany, specializing in creative and strategic marketing services including corporate design, content creation, web development, online marketing, and brand building. The company serves a diverse clientele ranging from medium-sized businesses to global players, positioning itself as a full-service agency with a strong regional presence and multiple industry awards. Technically, the website is built on TYPO3 CMS with modern web technologies and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

C

Codevibrant

codevibrant.com

39

Codevibrant is a small technology company specializing in WordPress themes and plugins, offering customizable and user-friendly web solutions primarily targeting WordPress users and businesses seeking web development services. The company has been operational since 2017 and maintains a professional online presence with a focus on SEO and user experience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Easy Digital Downloads, and various performance and UI libraries. The site is optimized for mobile and SEO, with fast loading times and clear navigation. Security posture is good with HTTPS enabled and standard domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website demonstrates a solid business credibility and technical maturity suitable for its market niche.

HeyLink.au is a technology-focused business offering Australian customers the ability to register .AU domains combined with a smart link-in-bio page platform. The service targets Australian businesses, creators, and professionals seeking a localized and credible digital presence. The website is well-designed, mobile-optimized, and leverages modern web technologies such as Next.js and React. It integrates Google Analytics for user tracking but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and incident response policies suggests room for improvement. Overall, the domain registration data is limited but consistent with a legitimate Australian-based service. The risk profile is low, with recommendations to enhance privacy compliance and security headers to strengthen trust and regulatory adherence.

S

Sviečky - zdravé sviečky zo Slovenska pre váš domov | svetlusa.sk

svetlusa.sk

59

The website svetlusa.sk is an e-commerce platform specializing in healthy candles produced in Slovakia, targeting general consumers interested in home decor and wellness products. The business appears to be a small local retailer established in 2021, with a clear focus on selling natural and healthy candles. The website uses modern web technologies including Bootstrap 5, Google Tag Manager, Microsoft Clarity, and other marketing and analytics tools, indicating a moderate level of digital maturity. Hosting is provided by websupport.sk, a Slovak hosting provider, and the domain is secured with HTTPS and DNSSEC, reflecting good technical infrastructure. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is functional and professional but could improve transparency and compliance by adding privacy and security policies and explicit contact information.

A

act legal

actlegal.com

54

act legal is a German-based legal services provider established in 2014, offering legal advice and consultancy primarily to German-speaking clients. The website presents a professional design with moderate content quality and good user experience, targeting individuals and businesses seeking legal support. The technical infrastructure includes modern web technologies such as Bootstrap, Google Tag Manager, and CookieHub for cookie consent management. Hosting and domain registration are managed via GoDaddy.com, LLC, with a domain age consistent with a mature business presence. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages detected. Overall, the website is functional and trustworthy but would benefit from enhanced privacy disclosures and security practices.

L

LX media GmbH

lx-media.at

75

LX media GmbH is a professional digital agency based in Austria, specializing in UX/UI design, digital communication, and development expertise. Founded in 2018, the company positions itself as a leading innovator in creating meaningful digital experiences for businesses undergoing digital transformation. Their website reflects a high level of professionalism, with clear business information, comprehensive privacy and cookie policies, and a modern technical infrastructure leveraging Next.js, React, and Storyblok CMS. The company actively uses marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, all managed with user consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information.

F

Fundacja Centrum im. prof. Bronisława Geremka

geremek.pl

48

Fundacja Centrum im. prof. Bronisława Geremka is a Polish non-profit foundation established in 2008 to preserve and promote the legacy and public values represented by Professor Bronisław Geremek. The foundation engages in educational programs, public debates, monitoring disinformation, and publishing relevant materials. The website reflects a professional and consistent brand image targeting a general audience interested in culture, education, and European values. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility features, though some improvements in security headers and DNSSEC could enhance its posture. The security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with the foundation's mission.

F

Ferrit s.r.o.

ferrit.cz

59

Ferrit s.r.o. is a Czech-based company specializing in manufacturing and servicing global mining transport solutions, including suspended monorail systems, rail transport, trackless machinery, mining processing equipment, and safety devices for mining rescue operations. The company targets mining and industrial transport sectors worldwide, boasting a client base across multiple countries as evidenced by their interactive client map. Their business model focuses on providing comprehensive transport and safety solutions for underground mining operations, supported by over 25 years of industry experience and EU funding projects. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, ensuring responsive design and moderate performance. The site integrates cookie consent mechanisms and secure login/registration forms, indicating attention to privacy and user security. However, some security headers are not explicitly detected, and no public security or incident response policies are found, suggesting room for improvement in transparency and security maturity. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data and domain registration details introduces uncertainty about domain legitimacy. The website shows GDPR compliance through privacy and cookie policies, though terms of service and vulnerability disclosure mechanisms are not evident. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security documentation and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

Polska Federacja Producentów Żywności Związek Pracodawców (PFPŻ ZP) is a well-established Polish federation representing food producers and employers. The organization focuses on providing legal information, educational programs, and industry news related to food safety, legislation, and nutrition. The website serves as a resource hub for industry professionals and the general public interested in food-related regulatory matters. The federation has a strong market position in Poland with over 20 years of history and recognized certifications such as 'Teraz Polska'. Technically, the website uses a custom or legacy CMS with JavaScript libraries including jQuery, Prototype.js, and Google Analytics for tracking. The site is hosted by home.pl S.A., a known Polish hosting provider. While the site is functional and content-rich, it shows some outdated technologies and lacks advanced security headers and DNSSEC, which could be improved. Mobile optimization and accessibility are basic but present. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security policies or incident response information. No critical vulnerabilities or malicious content were detected. WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, appropriate for the organization's transparency. Overall, the site is trustworthy but could benefit from modern security enhancements and improved technical infrastructure.

I

Ingka Centres Holding B.V.

avion.cz

64

Avion Shopping Park is a large retail shopping center located in Ostrava, Czech Republic, operated under the parent company Ingka Centres Holding B.V. The website presents a professional and well-structured digital presence showcasing a variety of retail shops, restaurants, services, and events aimed at the general public and local community. The business model focuses on providing retail space and customer services, supported by a strong brand association with IKEA. Technically, the website leverages modern web technologies including React and Gatsby, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website reflects a trustworthy and professional retail business with moderate to good technical maturity and security awareness.

Vila48.cz is a professionally designed website representing a residential rental business located in Ostrava, Czech Republic. The company offers six modern, fully equipped apartments combining hotel comfort with private rental flexibility, targeting firms, managers, tourists, students, and individuals seeking transitional housing. The business has a credible market position supported by an award-winning renovation and a clear focus on premium residential services. Technically, the website is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google services for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data implementation. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

N

Nadace ČEZ

pomahejpohybem.cz

54

Pomáhej Pohybem is a charitable initiative supported by Nadace ČEZ and Skupina ČEZ, focused on encouraging physical activity through a mobile application that converts user activity into points for charitable projects. The platform targets a broad audience interested in fitness and social good, leveraging a modern React-based web infrastructure and mobile app presence on iOS and Android. The website demonstrates good digital maturity with a comprehensive cookie consent mechanism and integration of analytics tools. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature non-profit operation backed by a major energy group.

A

ABSTRACT s.r.o.

stylove.cz

9

STYLOVE.CZ is a Czech media website operated by ABSTRACT s.r.o., focusing on stylish living, architecture, interior design, wellness, and home improvement. The site offers rich editorial content including articles, series, contests, and partnerships with manufacturers and service providers. It targets consumers interested in enhancing their living spaces with style and modern design. The website is part of a network of related sites including BYDLENI.CZ and INTERIER.CZ, indicating a strong presence in the Czech home and lifestyle media market. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various slider and carousel plugins. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is mobile optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate with room for improvement in security headers and privacy compliance. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy, though the website content and business information appear professional and trustworthy. Overall, the website is a credible media outlet with good content quality and business credibility but needs to improve privacy compliance and security practices. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness.

D

Dienstleistungsgesellschaft der Norddeutschen Wirtschaft mbH (DNW)

dnw-online.de

50

Dienstleistungsgesellschaft der Norddeutschen Wirtschaft mbH (DNW) is a small regional service company affiliated with Unternehmerverbände Niedersachsen e.V. and Institut der Norddeutschen Wirtschaft e.V. The company focuses on consulting and services related to telecommunications, energy, data protection, and organizing purchasing cooperations for medium-sized businesses in Northern Germany. The website is built on Joomla CMS with a modern responsive design and includes essential business information and partner affiliations. Technically, the site uses standard web technologies and is hosted by Alfahosting. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

ALEA Music

alea-music.com

41

ALEA Music is a small, professional live band service based in Germany specializing in event entertainment including background music and party performances. The website presents a well-structured, content-rich platform showcasing their services, band members, and multimedia content to engage potential clients. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content itself is professional and consistent with a legitimate business. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

M

Museen der Stadt Aschaffenburg

stiftsschatz.de

38

The website represents the Stiftsschatz exhibition of the Museen der Stadt Aschaffenburg, a cultural institution showcasing medieval treasures. It serves a local/regional audience interested in historical and religious artifacts. The site provides basic information and navigation in multiple languages but lacks comprehensive contact and policy information. Technically, the site uses standard web technologies including HTML, CSS, JavaScript, and jQuery, with Google Analytics for visitor tracking. The security posture is moderate with IP anonymization in analytics but lacks visible security headers and privacy compliance documentation. Overall, the site is functional but would benefit from enhanced privacy, security, and contact transparency to improve trust and compliance.

S

Stiftung Kunst und Natur

stiftung-nantesbuch.de

63

Stiftung Kunst und Natur is a German non-profit foundation dedicated to fostering engagement with art, culture, and nature through interdisciplinary programs and conservation efforts. The foundation operates at two main locations, Nantesbuch and Museum Sinclair-Haus, offering cultural events, workshops, and nature preservation activities. The website reflects a professional and consistent brand image, targeting a general audience interested in cultural and environmental topics. Technically, the site employs modern JavaScript libraries, Google Analytics for visitor insights, and Cookiebot for GDPR-compliant cookie management. Security measures include HTTPS enforcement and Rollbar error monitoring with anonymized IPs, though explicit security headers and policies are not publicly detailed. Privacy compliance is strong with a comprehensive privacy policy linked externally and an active cookie consent mechanism. No contact emails or phone numbers are explicitly provided on the site, which may limit direct user engagement. Overall, the website is well-structured, accessible, and trustworthy, with moderate technical performance and good privacy practices.

H

Human Care Group

humancaregroup.com

54

Human Care Group operates a professional website offering safe patient handling products and walking aids targeted at clients and caregivers within the healthcare sector. The company appears to be established since 2019 and positions itself as a reliable supplier in this niche. The website is built on WordPress with modern SEO and consent tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security policies and WHOIS transparency. Overall, the site is trustworthy but would benefit from enhanced compliance and transparency measures.

E

Embreis AB

embreis.com

59

Embreis AB operates a specialized e-commerce website focused on orthoses, prostheses, and related materials, targeting healthcare professionals and patients in Sweden. The company has a well-established domain since 2008 and uses a WordPress CMS with WooCommerce and the Avada theme for its online presence. The website integrates analytics and customer engagement tools such as Google Analytics and Intercom, indicating a moderate level of digital maturity. However, the absence of visible privacy and cookie policies suggests gaps in privacy compliance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and security headers. Overall, the website presents a professional and trustworthy front but would benefit from enhanced compliance and security practices.

Ortho Baltic is a Lithuanian company specializing in the development and production of high-quality custom-made orthopedic products, including footwear and orthoses. The company targets individuals requiring personalized orthopedic solutions and operates within the healthcare sector. Their website presents a professional image with clear navigation and relevant content focused on their niche market. Technically, the site uses legacy technologies such as jQuery 1.6.4 and integrates Google Analytics and Tag Manager for tracking. While HTTPS is enabled, the absence of modern security headers and the use of outdated libraries present moderate security risks. Privacy compliance is addressed through a visible privacy policy and cookie consent mechanism, though terms of service and security policies are missing. Overall, the website is accessible, safe, and moderately optimized for mobile and SEO.

P

Pohlig GmbH

pohlig.net

57

Pohlig GmbH operates in the healthcare sector specializing in orthopedic technology, providing orthoses, prostheses, and functional aids tailored for children and adults. The company positions itself as a specialized provider with a focus on clinical needs and treatment solutions. The website reflects a professional and consistent brand image with clear navigation and relevant content aimed at patients and healthcare professionals. Technically, the site employs modern tracking technologies such as Google Analytics and Meta Pixel, alongside a robust cookie consent mechanism powered by Cookiebot, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and consent management in place, though the absence of explicit security headers and privacy policy pages suggests room for improvement. The WHOIS data is notably absent or inaccessible, which slightly undermines trustworthiness despite the professional presentation. Overall, the website is functional, secure, and compliant with basic privacy standards but would benefit from enhanced transparency and security documentation.

R

Royal Ballet and Opera

roh.org.uk

66

The Royal Ballet and Opera website serves as a digital platform for promoting and selling tickets to ballet and opera performances, as well as streaming and cinema screenings. It targets cultural audiences and performing arts enthusiasts, providing detailed event information and a professional user experience. The site leverages modern web technologies including React, Google Analytics, and Google Tag Manager, and uses Prismic CMS for content management. The design is visually appealing, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though security headers and explicit privacy policies are absent. The WHOIS data for the domain www.rbo.org.uk is unavailable and indicates the domain is invalid or unregistered, suggesting a possible misconfiguration or placeholder domain. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security disclosures.

S

Staatsoper Unter den Linden

staatsoper-berlin.de

70

Staatsoper Unter den Linden is a prestigious cultural institution in Berlin, combining centuries of tradition with modern artistic performances. The website serves as a portal for opera and concert enthusiasts, offering detailed event schedules, ticketing options, and multimedia content. The institution holds a significant market position as one of the world's leading opera houses. Technically, the website employs modern JavaScript libraries, video content, and a privacy manager, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly visible. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

C

Carnegie Hall

carnegiehall.org

51

The analyzed URL is a queue/waiting room page powered by Queue-it for Carnegie Hall, designed to manage high traffic volume and control access to the main website. The page itself contains minimal content focused on queue status and instructions, with no direct business or contact information. The technical infrastructure relies on modern JavaScript libraries and multiple third-party analytics and marketing pixels, indicating a mature digital marketing setup. However, the page lacks visible privacy, cookie, or terms of service policies, and no contact or incident response information is provided. Security posture is moderate due to HTTPS usage and Queue-it's anti-bot mechanisms, but absence of security headers and policies reduces overall security confidence. The domain WHOIS data is unavailable due to privacy protection or query failure, which is common for large organizations but slightly reduces trust. Overall, the page is functional for its purpose but limited in content and compliance transparency.

NT-net is a regional internet and telephony service provider operated by Stadtwerke Nürtingen GmbH, serving primarily the Nürtingen area in Germany. The company offers highspeed internet packages with various bandwidth options and telephone flat rates, emphasizing local customer support and transparency. The website is professionally designed, mobile-optimized, and provides comprehensive product information, discounts, and customer support details. The business model focuses on regional utility and telecommunications services with preferential treatment in fiber optic rollout, positioning NT-net as a trusted local provider. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript and CSS technologies. It integrates cookie consent management, analytics tools like Google Analytics and Matomo, and provides secure mail server configuration details. The site demonstrates good SEO, accessibility, and performance characteristics, with no blocking or WAF challenges detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is unavailable due to privacy or technical reasons, but the website's consistent business information and local contact details support its legitimacy. Overall, NT-net's website presents a trustworthy and professional digital presence suitable for its regional telecommunications business. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance its security posture and customer trust.

V

Verein EMN Europäische Metropolregion Nürnberg e. V.

transform-emn.de

64

The website transform-emn.de represents the Verein EMN Europäische Metropolregion Nürnberg e. V., focusing on supporting the automotive supplier industry in the Nürnberg metropolitan region through a transformation network. The project aims to assist small and medium-sized enterprises in adapting to the mobility transition towards alternative drives, digitalization, and sustainability by offering free services such as networking, technology transfer, qualification, and new business field development. The site is well-structured, professionally designed, and optimized for SEO and accessibility, leveraging TYPO3 CMS and modern web components. Security posture is strong with HTTPS, security headers, and a cookie consent mechanism, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates a high level of business credibility and technical maturity, with a moderate level of user tracking via Google Analytics. The domain registration is consistent with the business claims, hosted by a professional provider. No critical vulnerabilities or suspicious patterns were detected.

Č

České dráhy, a.s.

ceskedrahy.cz

53

České dráhy, a.s. is the largest Czech railway carrier with a nearly 200-year tradition, providing passenger and freight transport services along with related services such as certification, testing, repairs, education, and IT solutions. The company holds a strong market position in the Czech Republic and is expanding its presence internationally. The website reflects a mature digital infrastructure built on Drupal 10, with modern web technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and user tracking is conducted responsibly with IP anonymization. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with the company's business profile.

E

Emerald Technology Ventures

emerald.vc

68

Emerald Technology Ventures is a well-established venture capital firm specializing in sustainable industrial innovation. With over €1 billion in commitments and a portfolio of more than 90 companies, Emerald connects startups with corporate partners and institutional investors to accelerate green technologies. The website targets corporates, institutional investors, governments, and entrepreneurs, offering services such as CVC-as-a-Service and Emerald Sprints. The company is based in Switzerland and has a strong market position in the energy and industrial innovation sectors. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Fonts, Google Maps API, HubSpot forms, and advanced animation libraries like Lottie and GSAP. It demonstrates excellent performance, mobile optimization, accessibility, and SEO practices. Analytics and marketing tools such as Google Analytics, HubSpot, and LinkedIn Insight Tag are used with appropriate consent mechanisms. From a security perspective, the site enforces HTTPS, employs multiple security headers, uses reCAPTCHA on forms, and avoids exposing sensitive data. However, it lacks a dedicated security policy and incident response contact information, which are recommended for enhanced transparency and readiness. Privacy compliance is strong with clear privacy and cookie policies and GDPR indicators. Overall, the website presents a professional, trustworthy, and secure digital presence aligned with the company's business goals. Strategic recommendations include publishing a security policy, adding incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

B

Babiel GmbH

babieldns.de

67

Babiel GmbH is a German digital transformation and digital experience company with over 30 years of expertise, operating as part of the CONET Group. The company specializes in strategic consulting and implementation of digital business experiences, serving enterprises and public institutions. Their service portfolio includes digital advisory, customer and citizen experience management, data intelligence, AI, software development, and cloud services. The website is built on Drupal 11, featuring modern consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and cookie consent mechanisms, though the absence of a published security policy and incident response details indicates room for improvement. The missing WHOIS registration data for the domain raises concerns about domain legitimacy, though the website content and business information appear professional and trustworthy. Overall, Babiel GmbH presents as a credible and established digital services provider with a solid online presence but should address domain registration transparency and enhance security disclosures.

D

Deutsches Taubblindenwerk gemeinnützige GmbH

taubblindenwerk.de

57

Deutsches Taubblindenwerk is a leading non-profit organization in Europe dedicated to supporting individuals with dual sensory impairments, specifically Taubblindheit and Hörsehbehinderung. The organization offers a comprehensive range of services including early intervention, special education, residential care, rehabilitation, and vocational training. Their mission focuses on enabling self-determined lives and social participation for children, youth, and adults affected by these disabilities. The website reflects a well-structured and professional digital presence with clear navigation and accessibility features tailored to their audience. Technically, the site is built on WordPress with modern frameworks and includes essential SEO and privacy compliance elements such as GDPR-aligned cookie consent and privacy policies. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the domain and hosting setup appear legitimate and consistent with the organization's profile, supporting a trustworthy online presence.

E

EASYFITNESS

easyfitness.club

60

EASYFITNESS operates a large network of over 200 fitness studios across Germany, serving more than 450,000 fitness enthusiasts. The company offers a broad range of services including traditional gym memberships, franchise opportunities, corporate fitness programs, wellness offerings, and innovative automated microstudios branded as 'The Smart Gym'. Their digital presence is supported by a dedicated fitness app and extensive online resources. The website is professionally designed, well-structured, and provides comprehensive information to its target audience of fitness consumers and potential franchise partners.

K

kulturkurier

kulturkurier.de

62

kulturkurier.de is a well-established German media service specializing in cultural event information, press releases, newsletters, and cultural calendars. It positions itself as a leading media service in Germany's cultural sector, serving cultural institutions, event organizers, media professionals, and the interested public. The website offers comprehensive event listings and festival information, supporting the cultural community with timely and relevant content. Technically, the site uses modern JavaScript libraries, Google Analytics, and AWS hosting infrastructure, indicating a moderate to good level of digital maturity. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and CSRF tokens implemented, but lacks advanced security headers and explicit incident response or vulnerability disclosure policies. Privacy compliance is basic with a clear privacy policy and cookie consent banner, but no terms of service or security policies are evident. Overall, the site is professional, trustworthy, and safe for general audiences.

Afrika4teens is a German educational and cultural website targeting teenagers interested in African culture, history, music, and events. The platform provides diverse content including articles, blogs, media galleries, and youth participation opportunities. It operates as a non-commercial educational project with government funding acknowledgments, positioning itself as a niche cultural media platform in Germany. Technically, the site is built on WordPress 4.7.31 with Bootstrap and jQuery, hosted by Alfahosting. While the site is functional and moderately optimized for mobile, it uses outdated software versions that pose security risks. Security posture is moderate with HTTPS enabled and basic Google Analytics integration, but lacks modern security headers and cookie consent mechanisms. No explicit contact emails or phone numbers are provided, relying on contact forms instead. WHOIS data is minimal but consistent with hosting provider information, showing no suspicious patterns. Overall, the site is safe, professional, and trustworthy for its target audience but requires technical and security updates to improve resilience and compliance.