Security Directory

C

CHOPOS, s.o.

chopos.cz

58

CHOPOS, s.o. is a voluntary association of municipalities in the Benešov district of the Central Bohemian Region, Czech Republic, focused on regional development and tourism. Founded in 1999, it serves 21 municipalities and operates an Information and Coordination Center to support regional management and advisory services. The website reflects a well-structured regional government/non-profit entity with clear community focus and government funding support. Technically, the site uses modern web technologies including Google Fonts, Swiper.js for sliders, and Google reCAPTCHA for form protection. The site is mobile optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though security headers could be improved. No explicit security or incident response policies are published. Overall, the domain registration data aligns well with the website content and business history, indicating a trustworthy and legitimate entity.

Obec Mirošovice operates an official municipal website serving the local community in the Středočeský kraj region of the Czech Republic. The site provides essential information about the municipality, including administrative contacts, local news, public services, and official documents. It targets residents and visitors seeking authoritative local government information. The business model is typical for a local government entity, focusing on transparency and public service rather than commercial activities. Technically, the website uses a custom CMS with standard web technologies such as HTML5, CSS, JavaScript, and jQuery. The site includes basic accessibility and SEO features but lacks advanced mobile optimization and modern frameworks. Performance is moderate, with no significant issues detected. The site employs a cookie consent mechanism, indicating some awareness of privacy compliance. From a security perspective, the website uses HTTPS and implements cookie consent but lacks several important security headers and explicit security policies. No incident response or vulnerability disclosure information is provided. The absence of advanced security controls and headers suggests room for improvement in security posture. However, no critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, reflecting its role as an official municipal portal. The risk level is low, but strategic improvements in security headers, mobile responsiveness, and privacy documentation would enhance its security and compliance standing.

H

Hvozdnice

hvozdnice.eu

42

Hvozdnice.eu is the official municipal website for the village of Hvozdnice in the Czech Republic. It serves as a community portal providing news updates, official documents, contact information, and public service announcements relevant to residents and visitors. The website is positioned as a local government informational resource with a focus on transparency and community engagement. The content is primarily in Czech and includes sections on urban planning, local governance, cultural events, and infrastructure projects. Technically, the site is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, indicating a moderate level of digital maturity. The site is mobile responsive and optimized for search engines, though accessibility features are basic. Security posture is good with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response information. Overall, the website is trustworthy and professionally maintained, suitable for its purpose as a municipal information portal.

M

Městský úřad Jílové u Prahy

jilove.cz

48

The website represents the official municipal portal for the town of Jílové u Prahy, Czech Republic. It serves as a comprehensive information and service hub for residents and visitors, offering access to local government services, news, event calendars, and citizen portals. The site is well-positioned as a trusted local government resource with a clear focus on community engagement and public service delivery. The presence of social media links and regular content updates further enhance its outreach and relevance. From a technical perspective, the website employs a custom CMS platform (Vismo) and integrates common web technologies such as jQuery, Google reCAPTCHA, and Google Translate. The site is hosted with a reputable provider (Active24) and uses HTTPS to secure communications. Mobile optimization and accessibility features are adequately implemented, contributing to a positive user experience. Security posture is solid with HTTPS enforcement and anti-bot measures on forms, though there is room for improvement in implementing security headers and explicit incident response policies. Privacy compliance is basic but present, with a privacy policy and cookie information available, though no active consent mechanism is detected. Overall, the site demonstrates a good balance of usability, security, and compliance appropriate for a municipal government entity. Strategically, the website should focus on enhancing security headers, formalizing incident response contacts, and improving cookie consent mechanisms to strengthen GDPR compliance and user trust. These steps will help maintain the site's integrity and protect citizen data while supporting its role as a reliable public service platform.

G

Web design - Glips.eu

glips.eu

57

The website glips.eu serves as an informational resource focused on web design principles and tips, primarily targeting a general audience interested in creating quality websites. The content is presented in Czech and includes educational text, images, and embedded video content. The site appears to be a small-scale informational platform without commercial transactions or direct contact information. Technically, the site uses standard web technologies such as HTML5, CSS3, Google Fonts, and embedded YouTube videos. It includes a third-party tracking script from redistats.com but lacks privacy or cookie consent mechanisms, which may raise compliance concerns. Security posture is minimal with no evident security headers or HTTPS status visible from the data provided. WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains, and no suspicious patterns were detected. Overall, the site is functional and informative but lacks key compliance and security features.

N

NewDefinition GmbH

newdefinition.de

48

NewDefinition GmbH is a specialized software solutions provider focusing on niche markets of Alumni Management and Politics Management. Their flagship products, ND Alumni and ND Politik, offer comprehensive management systems tailored for alumni organizations and political entities respectively. The company positions itself as a leading solution provider in the German-speaking market, emphasizing complete software solutions combined with consulting and support services. The website content is professionally crafted in German, targeting B2B clients in education, politics, and related sectors. Technically, the website uses standard web technologies with custom CMS elements, is mobile-optimized, and performs moderately well. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a trustworthy and professional business with room for improvement in security transparency and privacy practices.

K

Kampanile

kampanile.de

41

Kampanile is a small creative communication agency based in Münster, Germany, specializing in strategy, corporate design, editorial design, web design, and audio-visual services. The agency targets clients who value sustainability, authenticity, and social engagement, with a strong focus on churches, associations, and educational institutions. Their website is built on TYPO3 CMS and uses Matomo for analytics, reflecting a moderate level of digital maturity and privacy awareness. The site is well-designed, mobile-optimized, and accessible, providing a professional user experience. Security posture is adequate with HTTPS assumed, but lacks advanced security headers and cookie consent mechanisms. No forms are present on the main page, reducing attack vectors. WHOIS data is minimal but consistent with the business location and hosting provider. Overall, the website is trustworthy and professionally maintained, though improvements in privacy compliance and security best practices are recommended.

S

Stadtwerke Böhmetal

swbt.de

65

Stadtwerke Böhmetal is a regional utility company based in Germany, providing essential energy services including electricity, gas, and water supply to residential and commercial customers in the Böhmetal region. The company positions itself as a reliable local energy provider with a focus on customer service and regional presence. Their website is built on the Neos CMS platform using the Flow PHP framework, indicating a modern and maintainable technical infrastructure. The site is well-optimized for mobile devices and accessibility, with good SEO practices and clear navigation. Security measures include HTTPS enforcement, standard security headers, and a GDPR-compliant cookie consent mechanism powered by Cookiebot. However, there is no publicly available security policy or incident response information, which could be improved to enhance trust and transparency. Overall, the website reflects a professional and trustworthy business with moderate technical maturity and compliance with privacy regulations.

K

Konzervatoř České Budějovice

konzervatorcb.cz

43

Konzervatoř České Budějovice is a specialized educational institution offering secondary and higher vocational music education, including classical singing and a wide range of musical instruments. The institution has a strong regional presence with unique offerings such as an on-site dormitory for students. The website reflects a well-structured and informative platform targeting students, parents, and the music education community. Technically, the site uses modern frameworks like Bootstrap and Mobirise, ensuring good mobile responsiveness and user experience, though performance is moderate. Security posture is limited due to lack of visible security headers and absence of published privacy or cookie policies. No forms or data collection mechanisms were detected, reducing immediate privacy risks but also indicating limited interactivity. Overall, the domain age and WHOIS data support the legitimacy and trustworthiness of the institution.

D

Danone

danone.com

78

Danone is a globally recognized food and beverage company operating in over 120 countries, focusing on essential business lines such as Waters and Early Life Nutrition. The website reflects a mature digital presence with a professional design, comprehensive content, and clear navigation. Technically, the site leverages Adobe Experience Manager and modern technologies, ensuring good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The absence of WHOIS data limits domain registration trust verification but the overall branding and external links strongly support legitimacy. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates a high level of digital maturity and business credibility.

A

Agence Pan !

pan-lesite.com

52

Agence Pan ! is a French digital communication agency founded in 2011, specializing in bespoke website design, digital strategy, branding, and social media management. The agency targets a broad range of clients from small to large enterprises seeking creative and personalized digital solutions. Their market position is that of a creative and experimental agency with a recognized reputation for excellence. Technically, the website is built using modern frameworks such as Nuxt.js and Vue.js, hosted by OVH sas, and integrates WordPress CMS for content management. The site demonstrates good performance, mobile optimization, and SEO practices. Security-wise, the site uses HTTPS with domain protections but lacks some security headers and DNSSEC. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-maintained.

S

StreetArtMap.eu

streetartmap.eu

54

StreetArtMap.eu is a niche community-driven platform dedicated to mapping and showcasing street art and graffiti in Strasbourg, France. It offers an interactive map, user submissions, categorized artworks, and a blog to engage local and visiting street art enthusiasts. The website leverages WordPress CMS with modern web technologies including Google Maps API and SEO optimizations. Social media integration and active content updates enhance its community presence. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and formal incident response policies. Privacy compliance is basic but present, with GDPR considerations evident in cookie management. Overall, the site is trustworthy and professionally maintained, serving a small but engaged audience.

S

STUDIO MAX MEDIA SK, s.r.o.

maxmedia.sk

53

STUDIO MAX MEDIA SK, s.r.o. is a small Slovak technology company specializing in comprehensive web solutions, graphic design, and content management services. Founded in 2005, the company has a strong portfolio including localization and management of websites for major automotive brands and public institutions. Their expertise centers around the MODX CMS platform, multimedia production, and integration of data services. The website reflects a professional and consistent brand image with clear navigation and rich content tailored to a broad audience. Technically, the website employs modern web technologies including HTML5, CSS, JavaScript with jQuery, and integrates Google Analytics and Tag Manager for tracking. The site is mobile optimized and SEO friendly, though accessibility features are basic. Performance is moderate, with asynchronous loading of scripts enhancing user experience. However, no explicit hosting provider or advanced frameworks beyond MODX CMS are identified. From a security perspective, the site uses HTTPS (assumed from domain and modern standards though not explicitly confirmed in data), but lacks visible security headers and published security or privacy policies. No forms or sensitive data collection points are present, reducing immediate risk. The absence of privacy and cookie policies is a compliance gap, especially under GDPR. No vulnerability disclosures or incident response contacts are provided. Overall, the website is trustworthy and professional with a solid business foundation. Strategic improvements in privacy compliance, security headers, and transparency would enhance the security posture and regulatory adherence, supporting long-term business credibility.

S

Sanjotec

sanjotec.com

56

Sanjotec is a technology and science park based in São João da Madeira, Portugal, focused on supporting entrepreneurship and accelerating technology and creative projects. Positioned in a strongly industrial region, it aims to foster an ecosystem linked to Industry 4.0 and new product development. The website is professionally designed with good content quality and mobile optimization, but lacks critical compliance and security documentation such as privacy policies, cookie consent, and terms of service. The absence of WHOIS registration data raises concerns about domain legitimacy, which should be verified. Technically, the site uses modern web standards but lacks visible security headers and analytics tools. Overall, the security posture is moderate with room for improvement in compliance and transparency.

T

Turismo Industrial S. João da Madeira

turismoindustrialsjm.pt

50

Turismo Industrial S. João da Madeira is a small tourism promotion entity focused on industrial heritage tourism in São João da Madeira, Portugal. The website serves as a portal to promote the city's industrial past and cultural tourism offerings, targeting tourists interested in industrial and cultural experiences. The business operates primarily as a local/regional tourism promoter with a focus on heritage and visitor engagement. Technically, the website is built on WordPress using Bootstrap and Font Awesome, with moderate performance and good mobile optimization. It integrates Google Analytics and Facebook tracking for visitor insights but lacks comprehensive privacy and cookie policies, which impacts GDPR compliance. Security posture is moderate with HTTPS enabled but missing important security headers and incident response information. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

P

Prometeus

iperweb.com

44

IperWeb is a small, established hosting provider founded in 1997, offering a variety of hosting solutions including cloud infrastructure, virtual private servers, and business web hosting. The company emphasizes customer satisfaction, performance, and scalability. The website is professionally designed with clear navigation and relevant content targeting businesses and individuals seeking reliable hosting services. Technically, the site uses standard web technologies including jQuery and Flickity for UI components, and employs Google Analytics and Piwik for visitor tracking. However, there is no visible cookie consent mechanism, and privacy policies are hosted on a related domain rather than the main site. Security posture is moderate; the domain is protected with clientTransferProhibited status but lacks DNSSEC and visible security headers. WHOIS data is consistent with the business claims, showing a long domain age and no privacy protection, supporting legitimacy. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

The domain webb.se is registered since 2001 and is currently protected behind a Cloudflare security challenge page (Turnstile captcha), which blocks direct access to website content. Due to this, no business information, contact details, or policies are publicly accessible. The website appears to rely on Cloudflare for security and bot mitigation. The WHOIS data is consistent and indicates a legitimate registration with no privacy protection, suggesting transparency in ownership. However, the lack of accessible content and policies limits the ability to assess the business model, services, or compliance posture. The technical infrastructure is modern in terms of security tooling but lacks visible SEO and accessibility features. Overall, the site is currently inaccessible for full analysis and scores low on content quality and privacy compliance.

F

FOSDEM

fosdem.org

55

FOSDEM is a well-established, non-profit event focused on free and open source software development, held annually in Brussels, Belgium. It serves thousands of developers worldwide, providing a platform for collaboration, knowledge sharing, and community building. The website reflects this mission with clear event information, schedules, and sponsor details, targeting software developers and open source enthusiasts. Technically, the website is built using the nanoc static site generator, delivering a simple and maintainable infrastructure. The site is moderately optimized for performance and mobile devices, with good SEO practices evident through meta tags and structured content. However, there is room for improvement in accessibility and modern security practices. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks DNSSEC and security headers such as Content-Security-Policy or Strict-Transport-Security. No privacy or cookie policies are present, which is a compliance gap especially under GDPR. No incident response or vulnerability disclosure information is provided, limiting transparency in security matters. Overall, the website is trustworthy and professional, with strong business credibility supported by long domain age and reputable sponsors. The lack of privacy and security policies lowers the compliance score, but the site poses low risk given its informational nature and minimal data collection. Strategic improvements in security headers, privacy documentation, and DNS security would enhance the site's posture and user trust.

L

Lichterwelt Magdeburg – Eröffnung am 20. November 2025

lichterwelt-magdeburg.de

43

The website www.lichterwelt-magdeburg.de serves as the official online presence for the Lichterwelt Magdeburg, a large-scale public Christmas and winter lighting event in Magdeburg, Germany. The event features over a million LEDs illuminating the city with artistic light installations, free to the public from November 20, 2025, to February 2, 2026. The site targets local residents and tourists interested in cultural and festive events, providing event details, highlights, maps, and social media links. The business model focuses on event promotion and enhancing regional tourism appeal. Technically, the website is built on TYPO3 CMS, employing modern web standards including responsive design, optimized images, and JavaScript-based interactive elements such as countdown timers and image galleries. It integrates Matomo Analytics and Facebook Pixel for visitor tracking, alongside a GDPR-compliant cookie consent mechanism powered by Klaro. The site demonstrates good mobile optimization and SEO practices but lacks explicit security headers and detailed security or incident response policies. From a security perspective, the site uses HTTPS and implements cookie consent, indicating awareness of privacy regulations. However, no explicit security policies, incident response contacts, or vulnerability disclosure mechanisms are present. No forms collecting personal data were detected, reducing immediate data protection risks. The WHOIS data shows a legitimate domain setup with UI-DNS name servers and no privacy protection masking, consistent with the event's public nature. Overall, the website is professionally designed and trustworthy, with moderate technical sophistication and good privacy compliance. The absence of contact emails or phone numbers is a minor limitation for direct communication. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and compliance.

C

Collectivité européenne d'Alsace

bas-rhin.fr

68

The Collectivité européenne d'Alsace (CeA) is a regional government entity serving the Alsace region in France. The website provides comprehensive information about public services, social aid, cultural events, transport, environment, and citizen engagement initiatives. It targets residents, professionals, and associations within the region, positioning itself as the authoritative source for regional governance and services. The business model is governmental, focusing on public administration and community support. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with integration of FontAwesome icons and the OreJime library for cookie consent management. Matomo analytics is used for user tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks visible security headers such as Content-Security-Policy or X-Frame-Options, which could be improved. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected, which is typical for government domains, and no suspicious patterns were found. Overall, the security posture is solid but could benefit from additional header configurations and a published security policy. The overall risk assessment is low, with a trustworthy and professional web presence that aligns with the organization's public service mission. Strategic recommendations include enhancing security headers, publishing a security policy or incident response contact, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

WISS is a Czech-based company currently preparing a new website, as indicated by the 'coming soon' placeholder page. The site provides direct contact information for key company personnel including management, sales, and service technicians, suggesting a service-oriented business model likely focused on technical or industrial sectors. However, the lack of detailed business descriptions or marketing content limits insight into their market position or scale. Technically, the website is minimalistic, built with basic HTML and CSS, and optimized for mobile devices. There is no evidence of advanced frameworks, CMS, or analytics tools. The absence of HTTPS and security headers indicates a low security posture, and no privacy or cookie policies are present, which raises compliance concerns. The external background image is hosted on a related Polish domain, indicating some cross-border digital asset usage. Security-wise, the site lacks fundamental protections such as SSL/TLS encryption and security headers, and no incident response or vulnerability disclosure information is provided. The WHOIS data is unavailable, which reduces domain trustworthiness and complicates legitimacy verification. Contact details are transparent, which partially mitigates trust concerns. Overall, the website is in an early stage of deployment with significant gaps in security, compliance, and content. Strategic improvements in HTTPS implementation, policy publication, and domain registration transparency are recommended to enhance trust and compliance.

H

Holík International, s.r.o.

holik-international.cz

48

Holík International, s.r.o. is a Czech-based manufacturer specializing in protective equipment for firefighters, rescue workers, and defense personnel. Their product portfolio includes firefighting boots, gloves, and specialized defense gloves designed for police and military use. The company positions itself as a trusted regional supplier with a focus on innovation and collaboration with end users such as firefighters. Technically, the website is built with modern web technologies including JavaScript, CSS, and uses Google Analytics for tracking. It is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms but lacks advanced security headers and explicit security policies. The absence of WHOIS data reduces domain trust slightly, but the overall business credibility remains high based on available company information and social media presence. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving privacy compliance documentation.

P

PROIZS

proizs.cz

48

PROIZS.cz operates as a specialized e-commerce platform providing professional equipment primarily for emergency services such as firefighters and rescuers. The website offers a comprehensive catalog of products including firefighting gear, rescue tools, protective clothing, and accessories, targeting emergency responders and related professionals in the Czech Republic. The business model focuses on retail sales supported by workshops, training, and customer engagement through newsletters and loyalty programs. The company maintains partnerships with recognized brands enhancing its market position in the niche emergency equipment sector. Technically, the website is built on a custom CMS with a modern tech stack including jQuery, Google Analytics, Facebook SDK, and Google reCAPTCHA for security. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and anti-bot measures in place, though it lacks some HTTP security headers which could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security-wise, the site shows good practices such as encrypted connections and consent mechanisms but could enhance its defenses by implementing additional security headers and publishing incident response information. No vulnerabilities or malware indicators were found. The absence of WHOIS data reduces transparency and slightly impacts trustworthiness, but the professional content and clear contact information mitigate concerns. Overall, PROIZS.cz presents a trustworthy and professional online presence with a clear focus on emergency service equipment retail. Strategic improvements in security headers and WHOIS transparency would further strengthen its credibility and security posture.

The website deva-fm.cz currently displays a 403 Forbidden error page, indicating that access to the content is restricted or blocked. Due to this, no meaningful business or service information is available from the site itself. The domain is registered since 1999 with a reputable Czech registrar and uses name servers associated with websupport.cz, suggesting a legitimate hosting setup. However, the lack of accessible content and absence of privacy, cookie, or contact information severely limits the ability to assess the business or security posture comprehensively. Technically, the site uses basic HTML and CSS with Google Fonts, but no advanced frameworks or analytics are detected. Security headers and policies are not present in the HTML content, and no forms or data collection mechanisms are visible. Overall, the site appears to be either under maintenance, restricted by access controls, or misconfigured, resulting in a poor user experience and low trustworthiness.

P

Požární ochrana Perspekta

perspekta.cz

57

Požární ochrana Perspekta is a Czech Republic based e-commerce retailer specializing in fire protection products and safety equipment. The website offers a comprehensive catalog of products including fire hoses, extinguishers, protective clothing, breathing apparatus, and related accessories targeting fire departments, rescue services, and safety professionals. The business operates primarily online using the Shoptet platform and serves a niche market focused on fire safety and protection. The site is professionally designed with clear navigation and product categorization, supporting a positive user experience.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) rather than an actual public website. This page is generated locally by the Chrome browser to indicate an error or offline status and includes the offline dinosaur game code. There is no business-related content, metadata, or contact information available. The page lacks privacy, cookie, and terms of service policies, and no external links or social media references are present. The technical infrastructure is limited to client-side JavaScript for the game, with no server-side or hosting information. Security posture is minimal due to the nature of the page being a local error display, with no HTTPS or security headers applicable. Overall, this is not a public-facing website and cannot be assessed for business or security credibility.

U

UTILO KG

utilo.eu

47

UTILO KG, led by DI Christian Osterrieder-Schlick, is a specialized web development and software consultancy firm based in Salzburg, Austria. With over 20 years of experience, the company offers bespoke web applications, custom software solutions, and certified expert witness services for IT projects. The website showcases a professional portfolio with detailed client projects, emphasizing long-term collaborations with notable clients such as SPAR, Brantner Gruppe, and Salzburg AG. The business model focuses on delivering tailored digital solutions and expert legal consulting in IT, targeting businesses and organizations requiring high-quality, technically sound web and software services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and frameworks like Bootstrap and Grails. It integrates CMS Joomla for content management and uses Docker microservices for some client projects. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with minimal user tracking via UMAMI Analytics, reflecting a moderate digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms, representing an area for improvement. The business credibility is high, supported by clear contact information, professional content, and trust indicators such as certifications and client references. Overall, UTILO KG presents a trustworthy and professional digital presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and establish a vulnerability disclosure or incident response channel.

The website rosalint.de currently serves as a placeholder domain reserved page hosted by STRATO, a German hosting provider. The site contains no business content, contact information, or policies, indicating it is newly registered and inactive. The technical infrastructure is minimal, consisting of basic HTML and SVG graphics with no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no privacy or cookie policies. No vulnerabilities or tracking technologies are present, but the site lacks essential compliance and trust indicators. Overall, the domain appears legitimate but inactive, with a low risk profile due to minimal exposure. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, and publishing business and contact information to improve credibility and compliance.

Winamax operates a professional online sports betting platform targeting the German market, offering a wide range of sports and leagues for betting, including live betting and VIP programs. The website is well-branded, consistent, and provides a good user experience with modern technical infrastructure including React and jQuery, hosted on AWS. Security posture is strong with HTTPS and implied security headers, though explicit privacy and terms of service documents were not found in the provided content. The platform uses cookie consent mechanisms and tracking tools such as Google Analytics and Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate and trustworthy, catering to adult users interested in sports betting.

T

Transtech

transtech.pt

33

Transtech is a Portuguese technology-focused company specializing in qualification, digitalization, innovation, and technological development projects. The website presents a professional and consistent brand image targeting businesses interested in technological innovation and digital transformation. The technical infrastructure uses modern front-end technologies such as Google Fonts, FontAwesome, and popular JavaScript libraries for UI components, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information, which are recommended for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

A

Aflac

aflac.com

73

Aflac is a leading supplemental insurance provider in the United States, offering a broad portfolio of insurance products including accident, cancer, critical illness, dental, life, Medicare supplement, pet, hospital, and disability insurance. The company targets individuals, families, business owners, brokers, and agents, positioning itself as a market leader in supplemental insurance coverage. The website reflects a mature, enterprise-level business with consistent branding, comprehensive product information, and clear segmentation for different customer types. Technically, the website employs modern web technologies such as jQuery, RequireJS, and asynchronous script loading, alongside integrations with analytics (Dynatrace, Tealium) and chatbot services (Sutherland AI, Pega). The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses best practices like asynchronous script loading and cookie consent mechanisms. However, explicit security headers (CSP, HSTS) are not evident, and no public security or incident response policies are found. The WHOIS data is unavailable, which is unusual but the website's professional presentation and legal disclosures support its legitimacy. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations including GDPR. Recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust further.

The website sicher-melden.de serves as an informational landing page for a digital whistleblowing reporting platform operated by otris software AG. The platform enables anonymous reporting for companies via secure, cloud-based technology. The site targets corporate clients seeking compliant whistleblowing solutions and positions itself as a neutral authority in this niche. The business model is primarily B2B SaaS focused on compliance and risk management services. Technically, the site is simple and lightweight, built with standard HTML and CSS, and hosted behind Cloudflare DNS services which provide performance and security benefits. The site is mobile responsive and accessible at a basic level but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from Cloudflare's infrastructure but lacks explicit security headers and published security or incident response policies. No forms or direct data collection occur on this page, reducing attack surface. Contact information is clearly provided, but cookie consent mechanisms and privacy policy details are minimal. Overall, the security posture is moderate but could be improved with enhanced headers and transparency. The overall risk is low given the nature of the site as an informational platform without direct user data collection. Strategic recommendations include implementing security headers, publishing detailed privacy and security policies, and adding cookie consent mechanisms to improve compliance and trust.

N

NewDefinition GmbH

nd-alumni.de

51

NewDefinition GmbH operates NDAlumni, a comprehensive alumni management system tailored for universities, alumni associations, and companies primarily in German-speaking countries. The platform offers an integrated SaaS solution covering website CMS, communication, community engagement, event and member management, and financial processing. The company positions itself as a customer-focused provider with transparent pricing and strong service support, targeting small to medium-sized alumni organizations. Technically, the website is well-structured, mobile-optimized, and uses modern web technologies with ISO-certified hosting and SSL encryption. Security practices align with GDPR and German data protection laws, though some improvements in security headers and cookie consent are recommended. Overall, the website is professional, trustworthy, and content-rich, supporting a strong market presence in the alumni management niche.

T

Thomas-Krenn.AG

thomas-krenn.com

52

Thomas-Krenn.AG is a European-based technology company specializing in customized server and IT system solutions for professional applications. The company offers a wide range of products including rack servers, tower systems, workstations, industrial systems, and storage solutions, targeting businesses and IT professionals. Their business model focuses on B2B e-commerce combined with personalized consulting and support services, positioning them as a trusted provider in the server hardware market. The website reflects a mature digital presence with comprehensive product information, clear navigation, and professional design. Technically, the website employs modern web technologies such as Handlebars.js for templating, SwiperJS for sliders, and Salesforce Live Agent for live chat support. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained technical infrastructure. Security measures include HTTPS enforcement, CSRF tokens in forms, and inferred security headers, contributing to a strong security posture. However, explicit security policies and incident response information are not published, representing an area for improvement. The WHOIS data is notably absent or inaccessible, which raises some concerns about domain registration transparency. Despite this, the website's professional content, detailed legal pages, and active customer support channels suggest legitimate business operations. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, Thomas-Krenn.AG demonstrates a solid business and technical foundation with good security practices. Strategic recommendations include publishing explicit security and incident response policies, implementing a vulnerability disclosure program, and improving domain registration transparency to enhance trust and compliance.

P

Portugal Empreende 4.0

ptempreende40.pt

50

Portugal Empreende 4.0 is a Portuguese business ecosystem platform focused on Industry 4.0 entrepreneurship. The website serves as a hub for businesses and entrepreneurs interested in the digital transformation and industrial innovation within Portugal. The platform positions itself as a niche player supporting Industry 4.0 initiatives, targeting Portuguese companies and stakeholders in manufacturing and technology sectors. The website content is professionally presented with a consistent brand identity and good user experience, although it lacks explicit contact and policy information. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript with Google Fonts and icon libraries, delivering moderate performance and good mobile optimization. Security posture is limited due to missing security headers and absence of privacy or cookie policies, which impacts compliance with GDPR and best practices. No incident response or vulnerability disclosure information is provided. WHOIS data confirms the domain is registered since 2019 with consistent registrant information matching the website's Portuguese business focus, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

C

Catrapum

catrapum.com

48

Catrapum is a Portuguese e-commerce business specializing in the sale of used auto parts for major automotive brands such as Volkswagen, Audi, Toyota, and Mazda. The website offers a catalog of used parts, enabling vehicle owners and drivers to find reliable components for their vehicles. The business appears to be small-sized and focused on the transportation sector, with a market position as a specialized supplier of used auto parts. The website is professionally designed with good content quality and consistent branding, targeting Portuguese-speaking customers primarily, with an English language option available. Technically, the website uses standard web technologies including jQuery and implements HTTPS for secure communication. It employs Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and has good SEO practices, although accessibility features are basic. However, there is a lack of advanced security headers and no visible privacy or terms of service policies, which are areas for improvement. From a security perspective, the site enforces HTTPS but lacks important security headers and detailed privacy compliance documentation. No critical vulnerabilities were detected in the visible content, but the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. The cookie consent mechanism is present, supporting GDPR compliance to some extent. Overall, while the business and website present a professional front with relevant services, the missing WHOIS data and limited privacy/security policies suggest a moderate risk profile. Strategic improvements in security headers, privacy documentation, and domain registration transparency are recommended to enhance trust and compliance.

K

Mapa kriminality v Benešově – MěP Benešov

kriminalita-city.cz

53

The website www.kriminalita-city.cz serves as an official municipal crime mapping and public safety information portal for the city of Benešov, Czech Republic. It provides residents and visitors with an interactive map detailing various categories of offenses and municipal police activities. The site is built on WordPress and leverages modern JavaScript libraries such as Leaflet for mapping. While the site is functional and provides relevant local information, it lacks critical compliance elements such as privacy and cookie policies, and no contact information is readily available. The absence of WHOIS data for the domain raises concerns about domain legitimacy, although the content and linked municipal domains suggest official use. Security posture is moderate with HTTPS enabled but missing security headers and policies. Overall, the site is a useful public service tool but requires improvements in compliance and security transparency.

M

Město Benešov

ssob.info

47

The website ssob.info serves as the official social services portal for the Benešov district in the Czech Republic. It provides comprehensive information on social service catalogs, community planning, family policies, crisis lines, and institutional contacts. The site targets local residents and social service users, operating as a government public service platform. The presence of ISO 9001 certification and official city links reinforces its credibility and trustworthiness. Technically, the site is built on the vismo CMS platform, employs standard web technologies including HTML5, CSS, and JavaScript, and integrates Google Translate for multilingual support. The website demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate.

F

Forest Resort

forestresort.cz

62

Forest Resort is a small luxury hospitality business located in the Czech Moravian Highlands, offering four-star accommodation, dining, conference facilities, and event hosting. The website is professionally designed with a strong focus on user experience and clear navigation, supporting the resort's market positioning as a niche luxury destination. Technically, the site uses modern JavaScript libraries and integrates a third-party booking system, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response information. WHOIS data is missing, which slightly reduces trustworthiness but the overall digital presence and content quality support legitimacy. Privacy compliance is basic with GDPR and terms documents available. Recommendations include enhancing security headers, adding incident response contacts, and publishing a vulnerability disclosure policy.

P

PROGLAS

proglas.cz

55

PROGLAS is a non-profit, non-commercial Christian radio station based in the Czech Republic, targeting informed families and the Christian community. The website serves as a digital platform for broadcasting, audio archives, news, and cultural programming, supported primarily through listener donations and fundraising campaigns. The station emphasizes a family-friendly and faith-based approach without advertising interruptions. Technically, the website is built on the Vizus CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though accessibility features could be improved. Performance is moderate, with a clean and professional design. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks visible security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces trust slightly but may be due to registry privacy policies. Overall, PROGLAS presents a trustworthy and professional online presence for a niche non-profit media entity. Strategic improvements in privacy policy visibility, security headers, and WHOIS transparency would enhance its security posture and compliance standing.

Dev.java is an official Oracle-backed platform dedicated to Java developers, offering a comprehensive suite of tutorials, news, videos, downloads, and community resources. The website serves as a central hub for Java programming education and engagement, targeting developers globally. The platform benefits from Oracle's strong market position and branding, reinforcing its credibility and trustworthiness in the technology sector. Technically, the site employs modern web technologies including Bootstrap, Algolia search, and privacy-conscious analytics, hosted on Oracle Cloud infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as DNSSEC and enhanced security headers could further strengthen defenses. Privacy compliance is well addressed through links to Oracle's comprehensive privacy and terms policies, though explicit cookie consent mechanisms are absent. Overall, the site presents a professional, trustworthy, and content-rich experience for its audience.

V

Verbund der Öffentlichen Bibliotheken Berlins

voebb.de

61

The Verbund der Öffentlichen Bibliotheken Berlins (VÖBB) operates as the central public library network in Berlin, providing access to over 80 libraries including mobile and school libraries, alongside extensive digital offerings. The website serves as a portal for catalog search, event information, and user account management, targeting Berlin residents and library users. The business model is public service funded primarily through membership fees and public funding, positioning VÖBB as a key cultural and educational institution in the region. Technically, the site is built on a custom aDIS library management system with JavaScript and CSS, hosted likely by Berlin city administration infrastructure. The site is well-structured, mobile-optimized, and accessible, with professional design and clear navigation. Security posture is solid with HTTPS enforced and session management features, though it lacks some modern security headers and explicit incident response policies. Privacy compliance is good with a comprehensive privacy policy, but no visible cookie consent mechanism is present. Overall, the site is trustworthy, professional, and serves its public mission effectively.

The website stech.cz is currently a parked domain with minimal content indicating that the domain is for sale. There is no active business presence or detailed company information on the site. The domain was registered in late 2019 and uses parking name servers, consistent with a domain resale or parking business model. The site lacks privacy policies, contact information, and any substantive content, which limits its utility and trustworthiness. Technically, the site uses basic HTML, CSS, and JavaScript with multiple external ad and tracking scripts from third-party domains. There is no evidence of HTTPS or security headers, which poses security risks. Overall, the site is low in professionalism and business credibility, serving primarily as a placeholder for domain sale.

E

Elektrika.info

elektrika.tv

41

Elektrika.TV is a Czech multimedia platform specializing in electrotechnical videocasts and related industry content. It serves professionals and enthusiasts in electrical engineering by providing live streaming, archived videos, and related legislative and discussion resources. The platform is part of a broader ecosystem under Elektrika.info, targeting a niche market with a focus on quality technical content. The website uses Plone CMS and integrates video streaming technologies such as Video.js and Flowplayer. While the site is functional and well-structured, some technical components like the outdated jQuery version and lack of DNSSEC indicate areas for improvement. Security posture is moderate with HTTPS enabled and cookie consent implemented, but missing advanced security headers and modern JavaScript libraries pose potential risks. The domain is long-established and registered in the Czech Republic with privacy protection, consistent with the business profile. Overall, Elektrika.TV presents a trustworthy and professional media service with room for technical and security enhancements.

T

Tereza Buchalová – fotograf

terezabuchalova.cz

58

The website www.terezabuchalova.cz represents a small local photography business based in the Czech Republic, specializing in portrait and lifestyle photography. The site offers services including studio rental and photography workshops, targeting a general audience primarily in the Pardubice region. The business model is service-oriented with a focus on personal photography sessions and educational offerings. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

S

Senior Point Zlín

senior-point-zlin.cz

57

Senior Point Zlín is a community-focused service providing a friendly contact point for seniors in the city of Zlín, Czech Republic. The website serves as an informational portal offering details about services, events, and leisure activities tailored for senior citizens. The organization appears to be a small, local non-profit or government-supported entity dedicated to senior welfare. Technically, the website is built on the Webnode CMS platform, hosted via AWS Cloudfront CDN, and uses modern web technologies including JavaScript and CSS. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and a privacy policy page, which are important for GDPR compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and hosting appear legitimate. Overall, the site is functional and trustworthy for its intended audience but would benefit from improved privacy and security practices.

Komunitní centrum Voticka is a small non-profit community center based in the Czech Republic, focused on providing social services and community support within the Voticko microregion. The website presents a clear description of its mission, services, and ongoing EU-funded projects, targeting local residents and clients of care homes. The business model is centered on social service provision and community engagement, supported by public funding and grants. Technically, the website is built on a CMS platform (likely Contao), uses modern web fonts, and is hosted on a Czech hosting provider. The site is mobile responsive with good design and navigation, though accessibility and SEO optimizations are basic. Security posture is moderate with HTTPS enabled but lacking security headers and formal privacy or cookie policies. Contact information is limited to a phone number, with no email or physical address provided. No forms or tracking scripts are present, indicating minimal data collection and user tracking. WHOIS data aligns well with the website's claims, showing a domain registered in 2021 with a Czech registrar and hosting provider, supporting legitimacy. Overall, the website is functional and trustworthy but could improve compliance and security practices.

P

POŽÁRY.cz

pozary.cz

50

POŽÁRY.cz is a specialized Czech media portal dedicated to firefighting news, emergency interventions, firefighting technology, education, and community engagement. It serves firefighters, emergency responders, and the general public interested in fire safety within the Czech Republic. The website offers news articles, podcasts, an e-shop, and discussion forums, supported by numerous industry partners and sponsors. Technically, the site uses modern web technologies including JavaScript, Google Tag Manager, and Matomo analytics, with a responsive design optimized for mobile devices. Security practices include HTTPS usage and secure cookie settings, though the absence of explicit security headers and privacy policies indicates room for improvement. The WHOIS data is unavailable, which reduces domain registration transparency but does not detract from the professional presentation and trust signals on the site. Overall, POŽÁRY.cz is a credible and well-maintained media platform with moderate technical maturity and a solid business presence in its niche.

L

Linka bezpečí, z.s.

klublinkyvbezpeci.cz

50

Klub Linky v bezpečí is a Czech non-profit organization dedicated to supporting children and young people facing difficult life situations through a free, anonymous helpline service. Established since 1994, the organization has handled over 10 million calls and provides continuous 24/7 support. The website serves as a membership club platform to keep supporters informed about risks facing youth and offers detailed anonymized stories illustrating the impact of their work. The organization is well-positioned in the Czech non-profit sector with strong government and foundation partnerships.

U

Unibind-menu | Jídelní lístky s puncem jedinečnosti

unibind-menu.sk

48

The website www.unibind-menu.sk is a small business site hosted on the Wix platform, primarily serving a Slovak audience. The site uses Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. The technical infrastructure is modern and benefits from Wix's hosting and security features, including HTTPS and security headers. However, the site lacks comprehensive business content, contact information, and privacy-related policies, which limits its credibility and user trust. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but the absence of incident response contacts and vulnerability disclosure mechanisms is a gap. Overall, the site is functional but basic, with room for improvement in privacy compliance and business transparency.