Security Directory

Z

Zweckverband Städtedreieck

zv-staedtedreieck.de

59

Zweckverband Städtedreieck is a regional public association serving three cities in Germany, focusing on intercommunal cooperation in areas such as recycling, social services, economic development, and cultural events. The website provides comprehensive information about their services, events, and community projects, targeting residents and stakeholders of the Städtedreieck region. The organization positions itself as a key regional public service entity with a focus on sustainability and community engagement. Technically, the website is built on TYPO3 CMS with modern JavaScript frameworks and libraries, offering good mobile optimization, accessibility, and SEO practices. The site is hosted on servers indicated by the nameservers and uses HTTPS, although explicit security headers were not detected in the provided data. Privacy compliance is strong, with a clear privacy policy, cookie consent mechanisms, and GDPR adherence. The security posture is adequate but could be improved by publishing explicit security policies and incident response information. Overall, the website is professional, trustworthy, and well-aligned with its public sector mission.

B

Bremische Landesmedienanstalt

bremische-landesmedienanstalt.de

55

The Bremische Landesmedienanstalt website represents a public regulatory authority responsible for media oversight in Bremen, Germany. It provides services including licensing, frequency allocation, media supervision, and media literacy promotion. The website is built on TYPO3 CMS with modern frontend technologies, offering a good user experience and clear navigation. While the site lacks explicit privacy and terms of service pages, it includes a cookie consent mechanism, indicating some level of privacy compliance. No contact emails or phone numbers were found in the provided content, which may limit direct user engagement. Security posture is moderate with HTTPS implied but lacking visible security headers or explicit security policies. No vulnerabilities or suspicious content were detected, and the site is safe for general audiences.

O

Obesity News

obesity-news.cz

41

Obesity News is a Czech Republic-based specialized healthcare information portal focused on obesity prevention and treatment. Founded in 2007, it provides educational content, expert interviews, recipes, and tools such as a BMI calculator targeting both the general public and healthcare professionals. The site maintains partnerships with reputable healthcare and publishing companies, enhancing its credibility and market position within the niche healthcare information sector. Technically, the website is built on WordPress using the Divi theme and several plugins, including Yoast SEO for optimization and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content relevance, although accessibility features are basic. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and formal privacy and cookie policies, which are compliance gaps. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Stadt Teublitz

teublitz.de

59

The website www.teublitz.de serves as the official municipal portal for the city of Teublitz in Germany. It provides residents, visitors, and local businesses with access to city information, government services, event calendars, and community news. The site is well-structured, professionally designed, and consistently branded with the city logo and government-related content. The target audience includes local citizens and tourists seeking information about the city and its offerings. Technically, the site is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, Stimulus, and Tiny Slider for interactive features. It employs Matomo analytics with user consent mechanisms, indicating a privacy-conscious approach. Hosting is managed via domaincontrol.com nameservers, suggesting a professional hosting environment. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the website enforces HTTPS and includes cookie consent banners, reflecting compliance with GDPR. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted as an area for improvement. Overall, the site demonstrates a solid security posture and digital maturity appropriate for a municipal government portal. It is trustworthy, safe, and compliant with privacy regulations, serving its community effectively.

U

UPLINK Network GmbH

uplink-network.de

54

UPLINK Network GmbH is a prominent German telecommunications and broadcasting service provider specializing in the planning, construction, and operation of critical decentralized IT and radio technology infrastructure. They hold a leading market position as Germany's largest operator of FM radio frequencies, serving a broad range of private and public radio broadcasters. Their key services include broadcasting network operation, audio streaming via their subsidiary UPLINK DIGITAL GmbH, radio technology solutions, and Industry 4.0 IoT network deployments such as LoRaWAN. The company targets broadcasting companies, telecom clients, and industrial IoT customers with a service-oriented business model focused on infrastructure and technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as WPBakery and Bootstrap, ensuring good mobile optimization and SEO. The site uses HTTPS with Google Analytics and reCAPTCHA for user interaction and tracking, complemented by a GDPR-compliant cookie consent mechanism. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, though security headers are not explicitly present. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, UPLINK Network GmbH presents a professional and credible online presence with good privacy compliance and technical implementation. Strategic improvements in security policy transparency and vulnerability disclosure could further enhance trust and security posture.

A

Aarstiderne

aarstiderne.com

70

Aarstiderne is a Danish company specializing in 100% organic food delivery services, including meal boxes, fruit, vegetables, and groceries. The website targets Danish consumers interested in organic and sustainable food options, operating primarily on a subscription e-commerce model. The company maintains a strong market position in Denmark with consistent branding and a professional online presence. Technically, the website uses AngularJS and jQuery, integrates Google Tag Manager, and employs a comprehensive cookie consent mechanism compliant with GDPR. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and privacy-focused consent management, though some security headers are missing and no incident response or security policy pages are found. WHOIS data is unavailable, which raises transparency concerns but does not detract from the site's operational legitimacy. Overall, the site scores well on content quality, technical implementation, security, and privacy compliance, with room for improvement in business credibility and transparency.

E

EB expo

ebexpo.sk

42

EB expo is a well-established Slovak company specializing in advertising production, exhibitions, carpentry, and digital printing services. Founded in 1992, the company has a strong market presence with over 32 years of experience, serving both professional carpenters and general customers. Their business model includes service provision and product sales through an integrated eshop platform. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their target audience. Technically, the site employs modern web technologies such as jQuery, Bootstrap, Google Tag Manager, and Google Analytics, hosted likely on a MODX CMS platform. The site is mobile optimized and performs moderately well.

V

Viatris Inc.

viatris.com

65

Viatris Inc. is a global healthcare company founded in 2020, focused on empowering people worldwide to live healthier lives at every stage. The company operates in the pharmaceutical sector, offering a broad portfolio of healthcare products and services with a strong emphasis on access, affordability, and sustainability. The website reflects a mature digital presence with extensive international localization and professional branding. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Tag Manager, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or published security policies. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness but does not overshadow the overall professional presentation and business legitimacy. Strategic recommendations include enhancing security transparency, publishing privacy and terms policies explicitly, and investigating the WHOIS anomaly to ensure domain registration integrity.

F

Fox plan, s.r.o.

foxplan.cz

39

Fox plan, s.r.o. is a Czech architectural firm specializing in designing a variety of building projects including residential, administrative, industrial, and hospitality sectors. The company emphasizes aesthetic and functional design, aiming to create meaningful spaces for clients. Their portfolio includes projects in multiple countries, reflecting a growing market presence. The website is built on WordPress with modern plugins, offering a professional and visually appealing presentation primarily in Czech with English support. However, the site lacks explicit privacy, cookie, and security policies, and does not provide direct contact information on the homepage, which could impact user trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response details.

V

VOXPOT

voxpot.cz

56

VOXPOT is an independent Czech media outlet specializing in in-depth reports, analyses, and podcasts that connect Czech audiences with global perspectives. The website targets a discerning audience seeking high-quality journalism and offers subscription-based club memberships to unlock premium content. The business model focuses on content creation, membership, and e-commerce through a linked shop domain. Technically, the site is built on WordPress with a modern tech stack including Alpine.js, jQuery, and various analytics and marketing tools, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in incident response transparency and security contact availability. The absence of WHOIS data reduces domain trustworthiness but does not detract from the professional presentation and content quality. Overall, VOXPOT presents a credible, well-maintained digital presence with moderate tracking balanced by user consent.

M

Media.net

media.net

72

Media.net is a leading sell-side platform (SSP) specializing in programmatic advertising technology that helps brands and publishers optimize their digital advertising outcomes across multiple screens. The company offers a unique audience graph that integrates SearchSignals with first and third-party data, partnerships with industry-leading verification and measurement providers, and innovative ad formats tailored for the open web. Their platform targets both advertisers and publishers, providing premium curated inventory and monetization solutions. The website reflects a mature, professional digital presence with strong branding and comprehensive content that clearly communicates their value proposition and services. Technically, the website is built on modern web technologies including Webflow CMS, GSAP for animations, and integrates multiple marketing and analytics tools such as Google Tag Manager, Google Analytics, Facebook Pixel, Bing Ads, and Twitter tracking. The site is well-optimized for performance, mobile responsiveness, accessibility, and SEO. Consent management and privacy compliance mechanisms are implemented, indicating a commitment to GDPR and related regulations. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes multiple security headers. No obvious vulnerabilities or exposed sensitive data were detected in the HTML content. However, explicit security policies, incident response information, and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance trust and transparency. Overall, Media.net presents a trustworthy and professional online presence consistent with a large technology company in the digital advertising sector. The lack of public WHOIS data is likely due to privacy protection, which is common and justified for companies in this industry. Strategic recommendations include publishing detailed security policies, providing direct security contact channels, and maintaining regular audits of third-party scripts to mitigate potential risks.

S

Sdílení o.p.s.

sdileni-telc.cz

48

Sdílení o.p.s. is a Czech non-profit organization specializing in hospice and palliative care services, supporting elderly and seriously ill individuals to remain at home with their families. Established since 2007, it offers a comprehensive range of healthcare and social services including nursing care, respite care, social counseling, and equipment rental. The organization maintains a strong local presence with clear contact information, active social media channels, and a professional website designed to engage donors and clients alike. Technically, the website is built on WordPress with modern frameworks like Bootstrap and includes GDPR-compliant cookie consent mechanisms. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though the absence of HTTP security headers and missing WHOIS data are areas for improvement. Overall, the site is well-structured, content-rich, and trustworthy from a user perspective, but domain legitimacy verification is hindered by unavailable WHOIS information.

N

N+P Informationssysteme GmbH

nuptools.de

58

N+P Informationssysteme GmbH operates the NuPTools website offering proprietary productivity software components designed to enhance IT core systems in manufacturing and construction industries. With over 30 years of experience, the company provides tailored IT solutions including automation tools for Autodesk Inventor, Vault, APplus, and PRO.FILE, supporting digital transformation initiatives such as Industry 4.0 and BIM. The website is built on TYPO3 CMS and integrates modern marketing and analytics technologies including HubSpot, Google Analytics, and Usercentrics for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site presents a professional, trustworthy digital presence aligned with the company's business focus and market position.

F

Fórum mobilních hospiců

mobilnihospice.cz

58

Fórum mobilních hospiců is a Czech non-profit organization dedicated to supporting mobile hospices, improving the quality and accessibility of hospice care, and providing education and networking opportunities within the hospice community. The organization represents a significant portion of mobile hospices in the Czech Republic and actively engages in campaigns, job offerings, and advocacy to enhance end-of-life care at home. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Google Tag Manager. The site is mobile-optimized, well-structured, and includes essential privacy and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and employs cookie consent with opt-in capabilities. However, it lacks explicit security headers and incident response contact information, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for the organization, with clear business information, active content updates, and social media engagement. The domain registration data aligns well with the organization's profile, supporting legitimacy. Strategic improvements in security headers and privacy compliance could further strengthen the site's security and trustworthiness.

A

Amazing Media, s.r.o.

reportazezprumyslu.cz

44

Reportáže z průmyslu, operated by Amazing Media, s.r.o., is a Czech media platform specializing in industrial sector news, interviews, and magazine publications. The website targets professionals and stakeholders in manufacturing, energy, and transportation industries, providing relevant content and advertising opportunities. The platform maintains a professional digital presence with modern web technologies and social media integration. Technically, the site uses popular JavaScript libraries and frameworks such as jQuery, Bootstrap, and carousel plugins, ensuring a responsive and user-friendly experience. Privacy and cookie policies are implemented with GDPR compliance and user consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though security headers and incident response contacts could be improved. The absence of WHOIS data reduces transparency and trust slightly, but the overall business credibility and content quality remain solid. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving contact transparency to strengthen trust and compliance.

I

i15.cz

i15.cz

43

i15.cz is a Czech-language financial magazine and information portal providing news, insights, and articles related to finance, investments, employment, and business. The website targets Czech-speaking individuals interested in financial topics and operates as an online media outlet without direct financial product offerings. The site uses WordPress CMS with common plugins such as Yoast SEO and Contact Form 7, and integrates Google services for analytics and advertising. The website is well-structured, mobile-optimized, and provides a cookie consent mechanism, indicating some level of privacy compliance. However, no explicit privacy policy or terms of service pages were found, which is a compliance gap. The WHOIS data for the domain is unavailable, which raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enabled but lacking explicit security headers. Overall, the site is professional and content-rich but would benefit from improved transparency and security hardening.

B

Bydlení21.cz

bydleni21.cz

45

Bydlení21.cz is a Czech language online content platform focused on home furnishing, interior design, gardening, and lifestyle trends of the 21st century. Established in 2013, it serves a niche audience interested in modern and stylish living solutions. The website operates on WordPress CMS, leveraging common plugins such as Yoast SEO and Redux Framework, and integrates advertising networks like Google Adsense and Seznam SSP. The technical infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No direct contact or incident response information is provided, which limits transparency and compliance. Overall, the site is legitimate and consistent with its domain registration data, but improvements in privacy compliance and security best practices are recommended.

J

Její svět

jejisvet.cz

51

Jejisvet.cz is an online magazine targeting modern women in the Czech Republic, offering content on fashion, beauty, health, lifestyle, travel, and home living. The website is built on WordPress and uses common plugins such as Yoast SEO and Ginger for cookie management. It integrates Google services including Adsense and Analytics for advertising and tracking. The site is well structured with clear navigation and regularly updated content, indicating a professional approach to content publishing. However, the absence of WHOIS data and lack of explicit privacy policy and contact information reduce the overall trustworthiness from a compliance and transparency perspective. Technically, the site uses HTTPS with good SSL configuration but lacks some security headers and a security.txt file for vulnerability disclosure. Cookie consent is implemented with a detailed consent management platform, supporting GDPR compliance to some extent. Overall, the site presents a moderate security posture with room for improvement in privacy and transparency.

S

Supr bydlení

suprbydleni.cz

45

Supr bydlení is a Czech language online magazine focused on modern housing, interior design, construction, gardening, and practical living tips. The website serves a niche audience interested in contemporary living solutions and home improvement. It operates as a content publishing platform with a small market presence in the Czech Republic. Technically, the site is built on WordPress CMS with common plugins such as Yoast SEO and Contact Form 7, and integrates Google Analytics and Google Adsense for analytics and advertising purposes. The site demonstrates good content quality, clear navigation, and mobile optimization, but lacks explicit privacy and terms of service pages. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though additional security headers could improve protection. WHOIS data is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the website is professional and functional but could improve privacy compliance and transparency.

B

Business Travel Show Asia Pacific

businesstravelshowapac.com

65

Business Travel Show Asia Pacific is a specialized event platform launched in 2025, focusing on connecting corporate travel and meetings professionals in the Asia Pacific region with leading suppliers and experts. The event is presented by the BTN Group, a well-established entity in the business travel industry. The website demonstrates a professional and modern digital presence with comprehensive content, clear navigation, and mobile optimization. Technically, it employs contemporary JavaScript libraries and tracking tools, with a good security posture including HTTPS and cookie consent mechanisms. However, the absence of WHOIS registration data raises concerns about domain legitimacy and registration status, which should be verified to ensure trustworthiness. Overall, the site is well-positioned as a credible event platform but would benefit from clearer public business contact information and enhanced security headers.

The Meetings Show Asia Pacific is a prominent event platform focused on the meetings, incentives, conferences, and exhibitions (MICE) industry in the Asia Pacific region. It offers a comprehensive hosted buyer program, education sessions, and networking opportunities, positioning itself as a leading trade show in this sector. The website is professionally designed, mobile-optimized, and integrates modern web technologies and tracking tools such as Google Tag Manager and Crazy Egg. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data reduces transparency but the business branding and content quality suggest legitimacy. Overall, the site serves its target audience effectively with clear navigation and relevant content.

S

SRMG

srmg.com

67

SRMG is a well-established global media group originating from the Middle East, with a history spanning over 50 years. The company operates through multiple integrated companies providing comprehensive media services including journalism, content creation, advertising, and distribution. It boasts a large workforce and a significant global audience reach, positioning itself as a leading media conglomerate in the region. Technically, the website is built on modern technologies such as Webflow CMS, jQuery, GSAP, and integrates third-party services like Mailchimp and Google Tag Manager. The site is well-designed, mobile-optimized, and provides a professional user experience. Security-wise, the site uses HTTPS and secure forms but lacks some security headers and explicit incident response information. Privacy policies are present and GDPR compliance is indicated, though cookie consent mechanisms could be improved. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trust but does not outweigh the professional presentation and content quality. Overall, the website reflects a mature digital presence with room for security and privacy enhancements.

T

TriCore Techincal Services

core-systems.co.uk

53

TriCore Technical Services operates a web portal at portal.core-systems.co.uk, providing a login interface for its users, likely clients or employees. The website is focused on technology services, offering a secure access point to internal or client-facing applications. The branding and content indicate a small technology service provider based in the United Kingdom. The portal uses a modern technology stack including jQuery, Knockout.js, Bootstrap, and various UI libraries to deliver a functional and responsive user experience. However, the site lacks visible privacy, cookie, or terms of service policies, which are important for compliance and user trust. Security-wise, while HTTPS is implied, no explicit security headers or advanced protections are detected, and no anti-CSRF tokens are visible in the login form, indicating room for improvement in security posture. The WHOIS lookup for the subdomain failed due to domain naming rules, which is expected for subdomains, but limits direct domain registration trust analysis. Overall, the site is functional and moderately professional but would benefit from enhanced security and compliance features.

C

Coworking Switzerland

coworking.ch

63

Coworking Switzerland operates as the Swiss Coworking Federation, providing a platform and community for coworking spaces, individuals, and companies interested in coworking within Switzerland and Liechtenstein. The website offers a coworking space map, membership options, events, and resources to support the coworking ecosystem. It targets individuals, companies, and coworking operators, positioning itself as a leading federation in the Swiss coworking market. Technically, the site is built on Webflow with modern web technologies including Weglot for multilingual support, Google Tag Manager for analytics, and a cookie consent mechanism ensuring GDPR compliance. The site is hosted on a CDN with HTTPS enforced, providing good performance and security. Security posture is solid with no critical vulnerabilities detected, though the site lacks explicit security policies and incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting a positive user experience and community engagement.

M

Movato

movato.de

55

Movato is a German-based technology company specializing in innovative software solutions for the mobility sector. Their offerings include intelligent in-car applications compatible with platforms such as CarPlay, Android Auto, and Android Automotive, scalable cloud environments for processing large mobility datasets, and location intelligence services leveraging Open Street Maps data. The company targets businesses and developers in the automotive and mobility industries, positioning itself as an innovative provider of connected driving experiences and data-driven mobility insights. Technically, the website is built on the Webflow CMS platform, hosted with Cloudflare for DNS and security, and employs modern web technologies including jQuery and Cloudflare's Turnstile CAPTCHA for form protection. The site demonstrates good performance, mobile optimization, and SEO practices, although accessibility features are basic. Security posture is strong with HTTPS enforced and CAPTCHA on forms, but could be improved by adding explicit security headers and cookie consent mechanisms. From a security perspective, no critical vulnerabilities or exposed sensitive data were detected. The site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. The WHOIS data is consistent with legitimate business use, showing no privacy protection or suspicious patterns. Overall, the site is professional, trustworthy, and compliant with GDPR through a comprehensive privacy policy. The overall risk assessment is low, with recommendations focusing on improving privacy compliance with cookie consent, enhancing security headers, and providing clearer direct contact information. These steps will strengthen the security posture and user trust, supporting Movato's position as a credible technology provider in the mobility sector.

H

Hampidjan Advant

hampidjan-advant.com

63

Hampidjan Advant is a specialized manufacturer and global supplier of advanced synthetic ropes and accessories, primarily serving the offshore oil and gas, maritime, seismic, mooring, and heavy lifting industries. As part of the Hampidjan Group, the company leverages nearly 90 years of rope manufacturing expertise, operating modern production facilities in Lithuania and Norway. Their business model focuses on B2B supply of high-performance ropes engineered for demanding industrial applications, supported by strong technical expertise and customer service. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Fonts, and third-party services such as Microsoft Clarity for analytics and Basin for form handling. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation structure. From a security perspective, the site enforces HTTPS and implements cookie consent with an opt-in mechanism, reflecting good privacy compliance. The presence of ISO 9001, 14001, and 45001 certifications indicates a mature approach to quality, environmental, and occupational health and safety management. However, the absence of WHOIS domain registration data and lack of a published incident response or vulnerability disclosure policy represent areas for improvement. Overall, the website presents a trustworthy and professional image with strong business credibility and compliance posture, though verification of domain registration and enhancement of security transparency would further strengthen trust and reduce risk.

K

Kanonie premonstrátů v Želivě

zeliv.eu

45

Kanonie premonstrátů v Želivě operates a culturally significant tourist resort in the Czech Republic, offering a diverse range of services including hotel accommodation, brewery tours, restaurant dining, wellness spa, spiritual services, and cultural events. The website reflects a well-established niche business focused on cultural tourism and spiritual community engagement, targeting tourists and visitors interested in heritage and hospitality. The site is professionally designed with clear navigation and multilingual support, enhancing accessibility for a broader audience. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Tiny-slider, hosted by a reputable Czech provider, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security headers and incident response information are absent. Privacy compliance is strong, with GDPR-aligned cookie and privacy policies. Overall, the website presents a trustworthy and professional digital presence aligned with its business goals.

K

Klášter Želiv s.r.o

hotelklasterzeliv.cz

59

Klášter Želiv s.r.o operates the Resort Klášter Želiv, a hospitality and cultural tourism business located in the Czech Republic. The resort offers hotel accommodation, wellness services, a restaurant, a brewery, conference facilities, and various cultural and outdoor activities. The website presents a professional and well-structured digital presence with clear navigation and multimedia content, targeting general audiences interested in tourism and leisure in the region. Technically, the site uses modern frameworks such as Bootstrap and jQuery, with responsive design and good SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks explicit security headers and incident response information. The absence of WHOIS data for the domain reduces trust from a registration standpoint, though the business information on the site appears legitimate and consistent. Overall, the site is safe, compliant with GDPR, and provides a trustworthy user experience.

The website vecerychval.cz serves as a platform for organizing and promoting worship and praise events primarily in the Czech Republic. It targets individuals interested in religious community gatherings and provides event schedules, blog content, and online streaming options. The site is small-scale and community-focused, with a domain age of over 15 years, indicating a stable presence. Technically, the site uses common web technologies such as jQuery, Bootstrap, and Google Analytics, hosted likely by WEDOS, a Czech hosting provider. The design is professional and mobile-optimized, offering a good user experience with clear navigation. However, the site lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is moderate, with HTTPS presumably enabled but missing important security headers and vulnerability disclosures. No contact emails or phone numbers are provided, limiting direct communication channels. Overall, the site is legitimate and functional but would benefit from enhanced privacy compliance and security hardening.

K

Klášter Želiv s.r.o

pivovarzeliv.com

48

Klášterní pivovar Želiv is a small brewery business located in the Czech Republic, integrated within a resort offering hotel, restaurant, and wellness services. The company produces a variety of beers, including traditional and special brews, and sells them via an e-shop and on-site. The website is professionally designed with good navigation and mobile optimization, targeting beer enthusiasts and tourists. The technical infrastructure uses modern frontend technologies such as Bootstrap and jQuery, hosted by WEDOS Internet, a reputable Czech hosting provider. Security posture is moderate with HTTPS enabled and age verification implemented for alcohol compliance, but lacks advanced security headers and DNSSEC. Privacy compliance is good with a clear cookie consent mechanism and GDPR privacy policy linked. Overall, the website presents a trustworthy and professional image consistent with a small hospitality business.

V

Verein Lüneburger Kaufleute e. V.

verein-lueneburger-kaufleute.de

54

Verein Lüneburger Kaufleute e. V. is a historic business association based in Lüneburg, Germany, with a legacy spanning nearly 600 years. The organization focuses on fostering economic exchange, networking, and community engagement among local entrepreneurs and merchants. Their key offerings include exclusive events such as the Handelsball and Herrenessen, regular networking evenings, and political representation for their members. The website reflects a well-established regional presence with a professional and consistent brand image targeting business professionals in the region. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site is hosted on Webflow's CDN infrastructure, ensuring moderate performance and good mobile optimization. Accessibility features are basic but present, and SEO practices are adequately implemented with proper metadata and structured content. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA to protect forms from abuse. A cookie consent mechanism compliant with GDPR is implemented, providing users control over data processing. However, the site lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a trustworthy and professional digital presence for the Verein Lüneburger Kaufleute e. V., with strong content quality and compliance posture. Strategic recommendations include enhancing security headers, publishing incident response information, and providing direct contact details for security matters to further strengthen trust and resilience.

F

FARMFRONT SPA

farmfront.com

52

Farmfront SPA is a medium-sized Italian company specializing in irrigation technology and services, aggregating several leading irrigation providers to deliver integrated solutions globally. The company positions itself as a market leader in irrigation, focusing on sustainable and efficient farming solutions. Their website reflects a professional digital presence built on WordPress, utilizing modern JavaScript libraries and SEO plugins. The technical infrastructure is solid but could benefit from enhanced security measures such as DNSSEC and security headers. The security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response information are absent. Overall, the website is trustworthy and well-aligned with the company's business claims, but improvements in privacy policy transparency and security hardening are recommended.

R

RSJ Foundation

nadacersj.com

48

Nadace RSJ is a Czech non-profit foundation dedicated to supporting gifted children, mental health of youth, education, and philanthropy. The foundation operates under the parent company Finanční skupina RSJ and has a clear market position within the Czech philanthropic and educational sectors. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information. Technically, the site uses modern frameworks such as Bootstrap and GSAP, with Google Analytics for user insights. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and security headers, which are recommended for improvement. Privacy compliance is basic, with no explicit privacy policy or terms of service pages found. Overall, the site is trustworthy and safe for general audiences.

M

Marktplatz Design und Software GmbH

marktplatz-agentur.de

61

Marktplatz Design und Software GmbH is a well-established German digital agency founded in 1999, specializing in innovative web and app development solutions. The company serves a diverse clientele including medium-sized businesses, institutions, and municipalities, offering a broad range of services from website creation and app development to corporate design and online marketing. Their portfolio includes proprietary digital products such as BIWAPP and KatS-Plan, positioning them as both a service provider and product innovator in the technology sector. Technically, the website leverages modern web technologies including Webflow CMS, Google reCAPTCHA for form security, Matomo for analytics, and GSAP for animations, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Security measures include HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit HTTP security headers are not detected. From a security perspective, the site demonstrates good practices with secure forms and privacy compliance, but lacks a published security policy or incident response contact, which could enhance trust and preparedness. The absence of WHOIS data limits domain registration trust verification, but the professional presentation and detailed business information mitigate concerns. Overall, the website presents a professional, trustworthy, and user-friendly digital presence with strong business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to further strengthen trust and compliance.

R

Racing Club de Strasbourg Alsace

rcstrasbourgalsace.fr

55

The Racing Club de Strasbourg Alsace official website serves as a comprehensive digital platform for fans, partners, and stakeholders of the professional football club. It provides detailed information about the club's teams, schedules, ticketing, merchandise, and corporate hospitality. The site demonstrates a strong market position within French professional football, leveraging digital channels to engage its audience effectively. Technically, the website is built on WordPress with a modern tech stack including jQuery, Font Awesome, and Google Analytics, ensuring a good user experience and SEO optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved and WordPress updated to the latest version. Privacy compliance is moderate, with cookie policies present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and safe for general audiences.

Fortuna Kulturfabrik is a local government cultural institution based in Höchstadt, Germany, providing a broad range of cultural, educational, and youth services including event hosting, a youth center, city library, music school, and adult education via VHS. The website serves as a community portal targeting local residents, families, and youth, emphasizing cultural engagement and education. The institution holds a stable market position as a key cultural hub in the region. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacks advanced security headers and published incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, but could improve in security transparency and vulnerability disclosure. The domain WHOIS data aligns with the website's public identity, supporting legitimacy.

T

Tourist-Info Bad Segeberg

badsegeberg-tourismus.de

60

The website www.badsegeberg-tourismus.de serves as the official tourism portal for the city of Bad Segeberg, Germany. It provides comprehensive information on local attractions, events such as the Karl-May-Spiele, accommodation booking assistance, and regional products. The site targets tourists and visitors seeking detailed and reliable information about the region. The business model appears to be a government or municipal tourism service focused on promoting local tourism and supporting visitors. Technically, the website is built on the ikiss CMS platform, utilizing jQuery and jQuery UI libraries, with responsive design elements such as slicknav for mobile navigation. The site includes accessibility features and SEO best practices, with a moderate performance profile. Integration with Google Translate enhances usability for international visitors. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows consistency with the design and hosting provider, Advantic GmbH, supporting legitimacy. Overall, the website is professional, trustworthy, and well-suited for its purpose. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and trust.

S

Stadt Ilmenau

ilmenau.de

54

The website www.ilmenau.de serves as the official digital portal for the city of Ilmenau, Germany, providing comprehensive information and services related to municipal governance, citizen services, tourism, economic development, and cultural events. It targets a broad audience including residents, visitors, and businesses, positioning itself as a central hub for local government communication and engagement. The site demonstrates a consistent and professional brand presence aligned with its governmental role. Technically, the website employs a modern technology stack including Bootstrap 4.5, jQuery, and various accessibility and UI enhancement libraries. The CMS appears to be REDAXO, a popular German CMS. The site is mobile-optimized and includes accessibility features such as font resizing and contrast adjustments, enhancing usability for diverse users. From a security perspective, HTTPS is enforced as indicated by the base URL, but explicit security headers are not evident in the HTML source. No security or incident response policies are published, and no vulnerability disclosure mechanisms are present. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a cookie consent mechanism. Social media presence is official and consistent with the city’s identity. Overall, the website is trustworthy and professionally maintained, with room for improvement in security headers, cookie consent, and incident response transparency. The risk level is low given the nature of the site and its content, but enhancements in security posture would strengthen user trust and compliance.

A

Ansiedlungs- und Wohnungsbaugesellschaft mbH Soltau

aws-soltau.de

59

The Ansiedlungs- und Wohnungsbaugesellschaft mbH Soltau (AWS) is a municipal real estate and economic development company focused on the city of Soltau, Germany. Their core business includes the development and marketing of residential and commercial properties, as well as providing rental services. The website targets local businesses, investors, and residents seeking housing or commercial space. The company positions itself as a trusted local partner with decades of experience and strong regional networks. Technically, the website is built on WordPress 5.6.16 with common plugins such as Contact Form 7 and accessibility enhancements. The site uses HTTPS and includes a CAPTCHA on its contact form to mitigate spam. Performance and mobile optimization are good, with clear navigation and professional design. Analytics are implemented via Google Tag Manager, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and uses CAPTCHA on forms but lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and appear GDPR compliant, though terms of service and vulnerability disclosure mechanisms are absent. Overall, the website is professional, trustworthy, and well-suited for its municipal real estate purpose. Strategic improvements include adding security headers, publishing security policies, and enhancing privacy transparency to further strengthen trust and compliance.

A

Aflac Childhood Cancer Foundation, Inc.

aflacchildhoodcancer.org

66

The Aflac Childhood Cancer Foundation is a nonprofit organization primarily supported by charitable contributions from Aflac Incorporated. The foundation focuses on supporting families with children diagnosed with cancer or blood disorders such as sickle cell disease, as well as the medical professionals caring for them. The website highlights a legacy of philanthropic giving dating back to 1955, including the My Special Aflac Duck® program that provides therapeutic support to children undergoing treatment. The foundation operates with a clear mission and strong corporate backing, positioning itself as a trusted entity in pediatric healthcare support. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery and Google Analytics 4 for tracking. It is hosted on a CDN infrastructure ensuring fast performance and excellent mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent managed by OneTrust. The site demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is unavailable due to privacy protection, which is reasonable for this nonprofit entity. Overall, the site exhibits a strong security posture with room for improvement in formal security disclosures. The overall risk assessment is low, with the website presenting a professional, trustworthy, and compliant digital presence. Strategic recommendations include enhancing security header implementation, publishing a security.txt file, and providing clearer contact channels for security incidents to further strengthen trust and compliance.

E

Empath Labs Inc.

clinicalcompanions.com

64

Clinical Companions is a healthcare-focused SaaS solution developed by Empath Labs Inc., designed to improve retention and engagement in pediatric clinical trials. The platform offers an interactive app that educates and supports children and their caregivers throughout the clinical trial process, aiming to reduce anxiety and improve patient experience. The company has received industry recognition, including the DIA Americas 2024 Inspire Award for Outstanding Contribution to Health. The website is professionally designed, mobile-optimized, and includes multimedia testimonials and detailed service descriptions. Privacy and cookie consent mechanisms are well implemented, reflecting a commitment to user data protection and GDPR compliance. From a technical perspective, the website leverages modern web technologies including Webflow CMS, GSAP animations, Wistia video hosting, and Google Analytics for tracking. The site is hosted on Webflow's CDN, ensuring fast performance and good mobile responsiveness. Security posture is generally good with HTTPS enforced and no exposed sensitive data; however, the absence of security headers and explicit security policies suggests room for improvement. The WHOIS data for the domain is missing or the domain appears unregistered, which is unusual for a professional business and reduces trustworthiness somewhat. Overall, the website presents a credible and professional business offering in the healthcare technology sector, with strong content quality and privacy compliance. The main risk factor is the unclear domain registration status, which should be verified to enhance trust. Strategic recommendations include adding security headers, publishing security and incident response policies, and clarifying domain ownership to improve business credibility and security posture.

E

Empath Labs Inc.

empathlabs.com

10

Empath Labs Inc. is a healthcare technology company specializing in pediatric patient engagement programs designed to improve adherence, retention, and emotional support for children undergoing medical treatments. Their market position is strong within pediatric healthcare, supported by over 165,000 families and 500 hospitals leveraging their programs. Key services include innovative social robots and toys that aid children with chronic illnesses such as diabetes, cancer, and sickle cell disease. The company targets healthcare providers, clinical trial participants, and families, operating primarily in the United States. Technically, the website is built on the Webflow platform, utilizing modern JavaScript libraries such as jQuery, GSAP for animations, and Google Analytics for user tracking. The site is well-optimized for performance and mobile responsiveness, with a professional design and clear navigation. Privacy compliance is robust, featuring a comprehensive privacy policy and a cookie consent mechanism that respects GDPR requirements. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA to mitigate bot activity. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. The absence of WHOIS registration data for the domain is a notable concern, potentially impacting trustworthiness despite the professional presentation and clear business identity. Overall, Empath Labs presents a credible and professional online presence with strong content quality and privacy compliance. The primary risk lies in the missing domain registration transparency, which should be addressed to enhance legitimacy and trust. Strategic recommendations include publishing security policies, adding security headers, and verifying domain WHOIS information to strengthen the company's security posture and business credibility.

L

Landkreis Lüneburg / Hansestadt Lüneburg / Wirtschaftsfördergesellschaft mbH für Stadt und Landkreis Lüneburg

lueneburg.de

52

The website www.lueneburg.de serves as an official information portal for the Lüneburg region in Germany, providing details about the district administration, city services, tourism, and economic development. It targets residents, tourists, and local businesses, positioning itself as a regional government and municipal service provider. The site links to official partner domains representing the district, city, and economic development agency, reinforcing its legitimacy and regional focus. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript with jQuery, and Matomo analytics for privacy-conscious visitor tracking. The cookie consent mechanism is well implemented, supporting GDPR compliance. Security posture is moderate with no visible critical vulnerabilities but lacks explicit security headers and a published security policy. No contact emails or phone numbers are directly visible in the provided content, which may limit direct user engagement. Overall, the site is professionally designed, mobile-optimized, and trustworthy for general audiences with no adult or questionable content detected.

The website www.hoechstadt.de is the official municipal portal for the city of Höchstadt a.d. Aisch in Germany. It serves as a comprehensive information hub for residents, visitors, and local businesses, offering details on citizen services, political information, cultural events, tourism, and local news. The site is well-structured with clear navigation and uses the TYPO3 CMS platform, supported by modern JavaScript libraries such as jQuery and Stimulus for enhanced interactivity. The presence of a cookie consent mechanism and a privacy policy indicates attention to GDPR compliance. However, explicit contact details and security policies are not prominently found in the provided content.

A

ACOND a.s.

acond.cz

61

ACOND a.s. is a leading Czech manufacturer specializing in heat pumps, air conditioning, and floor heating solutions. With over 12,000 installations, the company serves residential and commercial customers primarily in the Czech Republic and abroad. Their business model focuses on manufacturing, direct sales, installation, and servicing, supported by a strong partner network and comprehensive customer support. The website reflects a professional and trustworthy brand with clear communication of product offerings, warranties, and customer testimonials. Technically, the website is built on the Webflow platform, leveraging modern JavaScript libraries and analytics tools such as Google Analytics, Microsoft Clarity, and Adform. It employs a consent management platform (Usercentrics) to ensure GDPR compliance. The site is mobile-optimized, fast-loading, and well-structured, providing an excellent user experience. From a security perspective, the site uses HTTPS and integrates consent mechanisms for privacy compliance. However, it lacks visible security headers and does not publish an incident response or vulnerability disclosure policy, which are areas for improvement. The absence of WHOIS data limits domain legitimacy verification, but the overall digital footprint and business information suggest a legitimate and established entity. Overall, the website demonstrates a mature digital presence with strong content quality and privacy compliance, though it would benefit from enhanced security practices and transparent domain registration information.

G

Group Mediterra a.s.

vamed-mediterra.cz

49

Group Mediterra a.s. is a Czech healthcare group operating six medical facilities and a secondary medical school, providing comprehensive healthcare services including preventive, acute, and follow-up care. The group serves both domestic and international patients, specializing in complex surgeries and intensive care. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress CMS, jQuery, and Google reCAPTCHA for security. Privacy and cookie policies are implemented with GDPR compliance, and multiple social media channels indicate active engagement. Security posture is good with HTTPS and reCAPTCHA, though additional security headers and policies could enhance protection. WHOIS data is unavailable, which slightly reduces domain trustworthiness, but overall the website and business information appear legitimate and professional.

D

Dagbladet Dagen As

dagenmarked.no

56

Dagen Marked operates as the advertising division of Dagbladet Dagen As, a prominent Norwegian Christian niche newspaper. The website showcases a professional and growing media business focused on delivering advertising solutions across digital, print, and audio channels. Their market position is strong within Norway's niche media landscape, supported by a growing subscriber base and a clear target audience of active churchgoers and digital consumers. Technically, the website is built on the Webflow platform, leveraging modern web technologies and delivering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and secure forms, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data suggests privacy protection or domain registration opacity, but the professional presentation and contact information support legitimacy. Overall, the website is a credible and well-maintained digital presence for a medium-sized media business.

U

UPMC

upmc.com

66

UPMC is a leading healthcare provider and hospital system prominently positioned as the #1 ranked hospital in Pittsburgh according to U.S. News. The website serves patients and healthcare consumers by providing services such as doctor search and appointment requests. The digital infrastructure is built on a modern CMS (Sitecore) and integrates multiple third-party analytics and marketing tools including Piwik PRO, Visual Website Optimizer, and Cookiebot for consent management. The site demonstrates professional design, mobile optimization, and good SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible security headers and explicit security policies in the provided content. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for large enterprises. Overall, the website is professional, trustworthy, and well-positioned in the healthcare sector.

M

Metaswitch Networks

metaswitch.com

71

Metaswitch Networks is a cloud native communications software provider specializing in voice core, unified communications, and robocall blocking solutions. The company is positioned as a pioneering software provider in the telecommunications sector and is now part of the parent company Alianza. Their website reflects a professional and modern digital presence built on the HubSpot CMS platform, integrating advanced marketing and analytics tools such as Google Analytics and Hotjar. The site is well-structured, mobile-optimized, and provides comprehensive legal and privacy documentation, indicating a strong commitment to compliance and user privacy. However, direct contact information such as emails or phone numbers is not readily available on the site, which may impact user engagement.