Security Directory

L

Living Hotels

living-hotels.com

59

Living Hotels operates a professional hospitality website offering serviced apartments and business hotels primarily in Germany with an additional location in South Africa. The site targets business travelers and long-stay guests, providing booking capabilities and detailed location information. The technical infrastructure is modern, leveraging TYPO3 CMS, Google Tag Manager, and consent management tools, ensuring a good user experience and compliance with privacy regulations such as GDPR. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit security policies are absent. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not detract from the site's professional presentation and trustworthiness. Overall, the website is well-designed, accessible, and compliant, supporting a medium-sized hospitality business.

The website www.wir-bewegen-alle.de serves as a comprehensive career portal for the Karlsruher Verkehrsverbund (KVV) and its associated companies VBK and AVG, which are key players in regional public transportation in Karlsruhe, Germany. It offers detailed job listings, career information, and multimedia content to attract a diverse range of candidates including professionals, students, and career changers. The site is well-structured, mobile-optimized, and incorporates accessibility features to enhance user experience. Technically, it is built on Silverstripe CMS with modern JavaScript libraries such as Swiper.js and HTMX, hosted on rzone.de infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some advanced security headers and explicit security policies are absent. Overall, the site reflects a mature digital presence aligned with the business's public transportation focus.

N

Noerr

noerr.com

76

Noerr is a prominent European law firm specializing in corporate legal advisory services, including finance, M&A, regulatory compliance, and real estate. The website reflects a mature digital presence with professional design, clear navigation, and rich content such as legal insights, briefings, and press releases targeting corporate clients and legal professionals. The technical infrastructure leverages modern web technologies including React, Next.js, and Material-UI, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data introduces some uncertainty about domain registration transparency, but the overall website professionalism and content quality support the legitimacy of the business. Strategic recommendations include publishing a dedicated security policy, incident response information, and improving WHOIS transparency to enhance trust.

F

Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej

fop2024.pl

44

The website represents the XVIII Forum Organizacji Pacjentów (Patient Organizations Forum) 2024, a significant non-profit conference in Poland focused on patient advocacy and healthcare system challenges. Organized by the Fundacja Instytut Praw Pacjenta i Edukacji Zdrowotnej, it targets patient organizations and healthcare stakeholders, providing a platform for dialogue, education, and recognition of contributions in healthcare. The site is professionally designed using WordPress and the Divi theme, with multilingual support and integration of modern web technologies. Security posture is adequate with HTTPS enabled, but lacks some advanced security headers and cookie consent mechanisms. WHOIS data confirms the domain is recently registered, aligning with the event timeline, and shows no suspicious indicators. Overall, the website is credible, well-structured, and serves its business purpose effectively.

H

Hrvatski zavod za mirovinsko osiguranje

mirovinsko.hr

64

Hrvatski zavod za mirovinsko osiguranje (HZMO) is a Croatian government public institution responsible for managing the pension insurance system. Established by law in 2001, it serves employees, agricultural workers, craftsmen, and other insured persons by administering pension rights and benefits based on generational solidarity. The website provides comprehensive information about pensions, child allowances, insurance registrations, and electronic services, targeting Croatian residents and pensioners. It holds a strong market position as the official national pension authority with a large organizational size and a well-established digital presence. The site is professionally designed with consistent branding and clear navigation, supporting multiple languages and accessibility features.

P

PRIMOPRO Sp. z o.o. Sp. k.

programedukacjionkologicznej.pl

58

The Program Edukacji Onkologicznej website is a Polish national educational platform focused on oncology, targeting patients, their families, and medical professionals. It offers comprehensive educational content including modular courses, guides, multimedia, and events. The platform is supported by numerous pharmaceutical companies and medical organizations, indicating a strong market position within healthcare education in Poland. The business operates under PRIMOPRO Sp. z o.o. Sp. k., with a clear focus on oncology education and patient support. Technically, the website employs modern JavaScript libraries such as Swiper.js and Choices.js, and integrates Google Tag Manager for analytics. The site is mobile-optimized with good navigation and content structure, though some accessibility features are basic. Performance is moderate, with no critical technical issues detected. Privacy compliance is well addressed with clear cookie and privacy policies, including a consent mechanism. From a security perspective, the site uses HTTPS (implied by external scripts loaded via HTTPS), but lacks visible HTTP security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is typical for .pl domains with privacy protection and does not raise immediate concerns given the professional nature of the site and its sponsors. Overall, the website presents a trustworthy, professional, and well-maintained educational resource with moderate technical sophistication and good privacy practices. Strategic improvements in security headers and incident response transparency would enhance its security posture and trustworthiness.

D

die neue welle

die-neue-welle.de

55

Die neue welle is a regional German radio station focused on delivering a diverse music mix spanning several decades. It targets listeners primarily in Baden-Württemberg and the Südpfalz region, offering broadcasts via traditional FM, digital DAB+, and online streaming platforms including apps and smart speakers. The website reflects a professional digital presence with good design and user experience, supporting the station's market position as a trusted regional media outlet. Technically, the site employs modern JavaScript libraries and analytics tools such as Matomo and Google Tag Manager, hosted on 1&1 IONOS infrastructure. Security posture is adequate with HTTPS enabled but lacks some advanced security headers and explicit privacy and cookie policies, indicating room for compliance improvement. Overall, the site is safe, trustworthy, and well-structured but would benefit from enhanced transparency and security practices.

H

Hobby media

doma.sk

58

Doma.sk is an online Slovak lifestyle and home living magazine operated by Hobby media. The website serves as a digital extension of the print magazine Pekné bývanie, targeting general audiences interested in home decoration, construction, gardening, and DIY inspiration. It holds a regional media position with a focus on quality content and advertising revenue through subscriptions and ad placements. Technically, the site is built on WordPress, leveraging modern JavaScript libraries such as Swiper.js and jQuery, and integrates Google Tag Manager and advanced ad networks for monetization. The site is mobile optimized and demonstrates good SEO practices. Security-wise, the site enforces HTTPS and uses GDPR-compliant consent management, but lacks visible privacy policy and incident response contact details. Overall, the domain registration and business information align well, indicating a legitimate and trustworthy media outlet.

U

Universitat Pompeu Fabra

upf.edu

63

Universitat Pompeu Fabra (UPF) is a well-established public university based in Barcelona, Spain, founded in 1990. The website presents a comprehensive digital presence with detailed information about academic programs, research activities, and university services targeting students, researchers, alumni, and other stakeholders. The site uses modern web technologies including Liferay CMS, React, and Usercentrics for privacy compliance, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and content security policies, although explicit security policies and incident response contacts are not published. The absence of WHOIS data for the www.upf.edu subdomain is a notable anomaly but does not detract from the overall legitimacy of the site. Strategic recommendations include enhancing security transparency and verifying domain registration details.

S

Skybound Game Studios, Inc.

invinciblevs.com

10

Invincible VS is a newly launched video game project by Skybound Game Studios, Inc., focusing on a brutal 3v3 tag fighting game set in the Invincible universe. The website serves as a promotional and community engagement platform, offering detailed character profiles, game highlights, and closed alpha registration. The business targets gamers and fans of the Invincible franchise, positioning itself within the niche superhero fighting game market. Technically, the site is built on WordPress with modern plugins and integrates Cloudflare DNS and Google Tag Manager for performance and analytics. Security posture is solid with HTTPS, CAPTCHA on forms, and an age gate for mature content, although some security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and mature-content appropriate, with a domain registration consistent with the business timeline.

T

Tesla Electrontubes s.r.o.

electron-tubes.cz

41

Tesla Electrontubes s.r.o. operates a professional website focused on the manufacture and supply of industrial electron tubes and related accessories, targeting industrial and manufacturing sectors. The company presents a clear business model centered on B2B sales of vacuum tubes and replacement parts, supported by product datasheets and a multilingual website. The website is built on WordPress with WooCommerce, indicating a mature digital infrastructure suitable for e-commerce and product catalog management. Technical implementation includes modern libraries and plugins, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enforced and secure forms, though explicit security headers and cookie consent mechanisms are absent, indicating room for improvement in compliance and security best practices. The absence of WHOIS data reduces domain trustworthiness, but the website content and business information appear legitimate and professional. Overall, the site is well-structured and serves its niche market effectively.

I

ilogs healthcare GmbH

ilogs.care

47

ilogs healthcare GmbH is a medium-sized Austrian company specializing in innovative digital services and software solutions for telecare, eHealth, and workplace safety. With over 25 years of experience, the company offers a cloud-based IoT platform (JAMES® TeleCare Plattform) and a range of products including emergency watches, apps, tablets, and smart rings. Their target audience primarily consists of B2B partners such as care organizations, senior care providers, and workplace safety entities. The company has established itself as a recognized specialist in the European eHealth market with international operations and partnerships with research institutions. Technically, the website is built on WordPress 6.8.3 using the Breakdance page builder plugin, with multilingual support via TranslatePress. The site demonstrates good content quality, mobile optimization, and a modern tech stack, although some SEO and accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and vulnerability disclosure policies. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are absent. Overall, the website presents a professional and trustworthy image consistent with a legitimate healthcare technology provider. The domain WHOIS data is privacy protected, which aligns with GDPR requirements. No critical security issues or suspicious patterns were detected. Strategic recommendations include enhancing security headers, implementing a cookie consent mechanism, and publishing vulnerability disclosure information to strengthen trust and compliance.

Č

Český hokej

ceskyhokej.cz

48

Český hokej is the official national ice hockey federation of the Czech Republic, providing comprehensive information, news, and services related to Czech ice hockey. The website serves a broad audience including fans, players, coaches, referees, and other stakeholders, offering news updates, team details, ticket sales, fan engagement zones, and an official merchandise shop. The domain is well-established since 2001, reflecting a mature and authoritative presence in the sports sector. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and integrates analytics tools like Google Tag Manager and Facebook Pixel, ensuring good performance and user experience across devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit privacy and security policies are not found in the provided content. Overall, the site demonstrates high professionalism, consistent branding, and trustworthy digital presence, with room for improvement in explicit privacy disclosures and contact information visibility.

B

Bohemia

bohemiahokej.cz

42

The website www.bohemiahokej.cz is a Czech-language promotional platform centered around interactive hockey-themed games and contests sponsored by Bohemia Chips. It targets Czech consumers interested in hockey and promotional sweepstakes, offering prizes such as cars and branded merchandise. The site features multiple interactive games, user registration with consent for data processing, and social media integration. Technically, it employs modern JavaScript libraries and tracking tools like Google Tag Manager and Facebook Pixel, with a responsive design optimized for mobile devices. Security posture is generally good with HTTPS enforced and consent mechanisms in place, though minor backend PHP notices indicate some error handling issues. The absence of WHOIS data reduces domain trustworthiness, but the website content and branding appear professional and consistent with a legitimate marketing campaign.

A

ABX software s.r.o.

kestolu.cz

41

kestolu.cz is a Czech-based software solution specializing in providing an integrated e-shop module for the ABX Harsys gastro program. The company, ABX software s.r.o., founded in 2021, targets restaurants and gastro businesses seeking seamless online ordering and payment integration. The website offers demos, customer references, and detailed feature descriptions, positioning itself as a niche player in the hospitality technology sector. Technically, the site uses modern frontend libraries such as Bootstrap, FontAwesome, and Swiper.js, with responsive design and moderate performance. However, it lacks visible backend CMS indicators and advanced SEO or accessibility features. Security posture is moderate with HTTPS implied but missing explicit security headers and privacy policies, indicating compliance gaps. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional and functional but would benefit from improved privacy compliance and security hardening.

M

Metrostav Development

viladomyumlyna.cz

50

Viladomy U Mlýna is a real estate development project focused on creating a new urban residential quarter in Vysočany, Prague. The website represents a medium-sized real estate developer, Metrostav Development, offering above-standard housing solutions. The site targets potential home buyers and residents interested in modern city living combined with natural surroundings. The business model centers on property development and sales within the Czech Republic real estate market. Technically, the website is built on the ProcessWire CMS and employs modern front-end technologies such as Swiper.js, Tippy.js, and Google Tag Manager, ensuring a good user experience with mobile optimization and SEO best practices. The site uses HTTPS and integrates a comprehensive cookie consent mechanism via Cookiebot, reflecting good privacy compliance and transparency in advertising and tracking practices. However, the WHOIS data shows a suspicious domain creation date in the future, which raises concerns about registration legitimacy. No explicit contact information or terms of service pages were found, which slightly impacts business credibility. Overall, the website is professional, secure, and compliant with GDPR, but improvements in transparency and WHOIS data accuracy are recommended.

S

SIKO KOUPELNY A KUCHYNĚ

siko.cz

62

SIKO KOUPELNY A KUCHYNĚ is a leading Czech retailer specializing in stylish bathroom and kitchen solutions, offering a wide range of quality products, project planning, and turnkey realization services. The company targets general consumers primarily in the Czech Republic and neighboring countries, positioning itself as a market leader in home improvement retail. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on a modern Angular framework integrated with SAP Commerce Cloud, leveraging multiple marketing and analytics tools with user consent mechanisms. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response information is noted. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy. Strategic recommendations include publishing security policies, enhancing incident response transparency, and verifying domain registration details to improve trust. Overall, SIKO demonstrates a mature digital presence with room for security and compliance enhancements.

C

CarSoul

carsoul.cz

49

CarSoul.cz is a Czech-based automotive company specializing in operational leasing and sales of new and certified used vehicles. The company aggregates offers from multiple dealers, providing customers with a wide selection of cars including financing options. The website presents a professional and user-friendly interface with clear navigation, customer testimonials, and certifications such as CEBIA, indicating a trustworthy market presence. The target audience includes both individual customers and companies seeking fleet management solutions. Technically, the site employs modern JavaScript frameworks and libraries including Laravel Livewire, Swiper.js, and Google Tag Manager, supporting a responsive and interactive user experience. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks visible security headers and explicit privacy or security policies. WHOIS data for the domain is unavailable, which slightly impacts trustworthiness but does not detract from the overall professional presentation. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and verifying domain registration details to improve legitimacy and compliance.

E

EOS

eosclub.app

54

EOSclub.app is a well-established SaaS platform specializing in sports club and association management. It offers a comprehensive suite of tools including member database management, payment processing linked to e-banking, communication channels, attendance tracking, match nominations, GDPR-compliant registration, document sharing, and mobile applications for iOS and Android. The platform targets a broad range of sports clubs, from small to large organizations, and boasts over 222,000 active members and 980+ clubs across 71 sports, positioning itself as a significant player in the sports management software market. Technically, the website employs modern JavaScript frameworks such as Alpine.js and Swiper.js, integrates analytics tools like Google Tag Manager and Hotjar, and uses a custom CMS hosted on eoscz.eoscms.zone. The site is well-optimized for mobile devices, features fast loading times, and demonstrates good SEO and accessibility practices. The presence of cookie consent mechanisms indicates attention to privacy compliance, although explicit privacy and terms of service documents are not found. From a security perspective, the site enforces HTTPS with strong SSL configuration and includes standard security headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in security transparency and readiness. Overall, EOSclub.app presents a professional, trustworthy, and technically mature platform with strong business credibility. To enhance its security posture and privacy compliance, it should publish clear privacy policies, terms of service, and security incident contacts. These steps will further solidify trust and compliance with regulatory standards.

Chemie Akademie is a specialized educational institution in Austria focusing on chemistry education and training. It offers full-time, part-time, and continuing education programs tailored to students, apprentices, and professionals. The academy maintains strong partnerships with industry and research institutions, providing practical and career-oriented learning experiences. The website is professionally designed, mobile-optimized, and rich in relevant content, reflecting a mature digital presence. Technically, it is built on WordPress with modern frameworks like Vuetify and uses popular plugins for forms and GDPR compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility with clear contact information and trust signals. No critical vulnerabilities or blocking mechanisms were detected, making it a trustworthy and well-maintained platform.

P

Pädagogische Hochschule Steiermark

phst.at

47

Pädagogische Hochschule Steiermark is a regional higher education institution in Austria specializing in teacher education and professional development. The website provides comprehensive information about degree programs, continuing education, research activities, and international mobility opportunities. It targets students, educators, and academic professionals primarily in the Styria region. The institution maintains a consistent and professional online presence with clear navigation and rich content tailored to its audience. Technically, the website is built on TYPO3 CMS with modern front-end technologies such as Bootstrap and Swiper.js. It uses Matomo analytics to track user interactions while respecting privacy. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with room for optimization. Security posture is solid with HTTPS enforced and cookie consent implemented. However, there is no explicit security policy or incident response contact information published. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professional, and well-maintained, reflecting the institution's credibility and commitment to education. Strategic improvements in security transparency and technical performance could further enhance its posture.

P

PK - stavební s.r.o.

pkstavebni.cz

40

PK - stavební s.r.o. is a small Czech construction company specializing in transportation infrastructure such as roads, parking lots, sidewalks, and cycle paths. Founded in 2021, the company leverages over 15 years of prior experience in the sector. Their website presents a professional image with clear descriptions of services, a gallery of completed projects, and references to reputable partner companies, positioning them as a credible player in their niche market. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted by WEDOS. It demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and privacy compliance features. The site uses HTTPS, ensuring secure communications, but does not provide privacy or cookie policies, which is a compliance gap. From a security perspective, the site shows a moderate posture with no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and incident response information suggests room for improvement. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the company's founding date, supporting legitimacy. Overall, the website is functional, professional, and trustworthy for its business purpose but should enhance privacy compliance and security best practices to improve its risk profile and user trust.

E

Platforma EOS pro sportovní kluby a jiné organizace | eos.cz

eos.cz

53

EOS.cz is a Czech-based SaaS platform designed to streamline administration, communication, and web presence for sports clubs and other organizations such as communities, associations, and clubs. The platform offers a comprehensive suite of tools including member management, payment processing, communication channels, attendance tracking, nominations, electronic applications, GDPR compliance features, document sharing, and mobile applications. It serves a significant user base with over 222,000 active members and 980+ clubs across 71 sports, positioning itself as a leading solution in its niche. The website is professionally designed, mobile-optimized, and features rich multimedia content including video testimonials and app store badges, enhancing user trust and engagement. Technically, the site employs modern JavaScript frameworks like Alpine.js and Swiper.js, integrates analytics and tracking tools such as Google Tag Manager and Hotjar, and implements cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and standard security headers present, though explicit privacy policies and terms of service documents are not found, representing an area for improvement. WHOIS data is unavailable, which slightly impacts domain trustworthiness, but the overall professional presentation and extensive client testimonials support legitimacy. No adult or questionable content is present, making the site safe for general audiences.

S

stkprochlapy – Web pacientské organizace STK pro chlapy pro muže s urologickým nádorovým onemocněním

stkprochlapy.cz

43

The website stkprochlapy.cz represents a patient organization dedicated to supporting men with urological cancers in the Czech Republic. It provides information on prevention, diagnosis, treatment, and patient support, positioning itself as a specialized non-profit entity in the healthcare sector. The site targets Czech-speaking men affected by urological tumors and their families, offering guidance and updates relevant to their health journey. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Colibri Page Builder Pro, Swiper.js, and Fancybox, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is enabled, and a cookie consent mechanism is implemented, indicating GDPR awareness. However, no explicit privacy policy or terms of service pages were found, and no security headers were detected, which are areas for improvement. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is understandable for a patient support organization. Overall, the website is functional, informative, and moderately secure, serving its niche audience effectively.

S

SK Rapid Psáry

rapid-psary.cz

45

SK Rapid Psáry is a local Czech football club with a long tradition dating back to 1931. The website serves as an information hub for club members, fans, and the local community, providing news, match schedules, team information, and an e-shop for merchandise. The club targets football enthusiasts and community members interested in local sports activities. The business model is typical for a community sports club, focusing on engagement, membership, and local sponsorships. Technically, the website is built on a modern stack using EOS CMS, Alpine.js, Swiper.js, and other JavaScript libraries loaded from reputable CDNs. The site is mobile-optimized with good navigation and content structure, though some accessibility features could be improved. Performance is moderate, with no critical errors detected. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries. However, there is a lack of visible security headers and no privacy or cookie policies, which are important for compliance and user trust. The absence of WHOIS data limits domain trust assessment, but the website content and active social media presence support its legitimacy. Overall, the site is functional and professional for its purpose but would benefit from enhanced privacy compliance, security headers, and clearer contact information to improve trust and security posture.

V

Vladimíra Ludková

vladimiraludkova.cz

56

The website represents Vladimíra Ludková, a political candidate for the Senate in district 23, Prague 8. It highlights her extensive experience in social work and community engagement, targeting local voters with a professional and content-rich platform. The site is built on WordPress using the Avada theme, incorporating modern JavaScript libraries and responsive design elements, ensuring good user experience across devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies indicates room for improvement. The lack of WHOIS data limits domain trust assessment but the professional presentation and contact information support legitimacy. Overall, the site is a credible political campaign platform with moderate technical maturity and compliance gaps.

A

Amerigo Vespucci Tour Mondiale 2023-2025

tourvespucci.it

58

The website tourvespucci.it represents a cultural and maritime tourism business centered around the Amerigo Vespucci world tour scheduled from 2023 to 2025. It provides detailed tour stop information, booking options, and media content to engage tourists and maritime enthusiasts. The business appears to be newly established in 2024, consistent with the domain registration date. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and multimedia integrations such as Vimeo videos. The site is mobile optimized and includes accessibility features, enhancing user experience. From a security perspective, the site enforces HTTPS, uses DNSSEC, and implements cookie consent mechanisms, but lacks explicit privacy and security policy pages, which are recommended for compliance and trust. Tracking pixels from major ad networks are present, indicating extensive user tracking with moderate privacy transparency. Overall, the site is professionally designed and functional, with room for improvement in privacy compliance and security documentation.

T

Tritón Pardubice, spol. s r. o.

garderobenspinde.de

38

Tritón Pardubice, operating the website garderobenspinde.de, is a medium-sized manufacturing company specializing in equipment for changing rooms, workshops, and offices, including lockers, storage boxes, and specialized furniture. The company targets primarily the German market, offering a comprehensive product range supported by detailed catalogs and certifications. The website is professionally designed using WordPress with WooCommerce and Elementor, providing a good user experience and mobile optimization. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, although dedicated security policies and incident response contacts are absent. Overall, the site reflects a trustworthy and mature business with a solid digital presence.

HC Slavoj Velké Popovice is a local Czech ice hockey sports club with a focus on youth and adult teams, public skating sessions, and community engagement. The website serves as an information hub for news, schedules, events, and fan merchandise. It targets local sports enthusiasts, families, and community members interested in ice hockey and skating activities. The club maintains partnerships with local businesses and promotes its activities through social media channels such as Facebook and Instagram. The domain is well-established since 2005, reflecting a stable presence in the community. Technically, the website uses modern frontend technologies including TailwindCSS for styling and Swiper.js for interactive content sliders. It employs Google Analytics for visitor tracking, activated upon user consent via a cookie banner. The site is mobile-optimized and provides a good user experience with clear navigation and consistent branding. However, it lacks some standard compliance pages such as a privacy policy and terms of service, and no direct contact emails or phone numbers are visible on the homepage. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but it lacks visible security headers and explicit security or incident response policies. No forms or data collection fields are present on the homepage, reducing immediate attack surface. The WHOIS data aligns well with the website's business claims, showing a consistent and legitimate registration history. Overall, the website is functional and professional for its purpose but could improve in privacy compliance and security best practices. Adding privacy and terms pages, security headers, and clear contact information would enhance trust and compliance.

P

Předškolní sport s.r.o.

hravelyzovani.cz

49

Předškolní sport s.r.o. operates the website hravesporty.cz, offering playful skiing and winter sports courses primarily for children aged 4 to 12. The company targets parents and schools near Prague, providing group lessons, individual instruction, and school ski trips in local ski resorts. The website is professionally designed with clear navigation, rich content, and strong trust signals such as Google reviews and partner logos. Technically, the site uses modern JavaScript libraries and frameworks, is mobile-optimized, and employs cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and compliant with GDPR, with comprehensive privacy and terms documentation.

Lehrlinge-fuer-bayern.de is a professionally designed, regionally focused website operated by Bayerischer Handwerkstag e.V., promoting vocational training and apprenticeships in Bavaria. The platform offers a variety of resources including a career checker, educational blog, interactive games, and local apprenticeship listings, targeting young people interested in trades. The website leverages WordPress with modern plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. Social media integration and official partner links enhance its outreach and credibility. Technically, the site is well-structured, mobile-optimized, and uses HTTPS with cookie consent mechanisms, reflecting a mature digital presence. Security posture is solid with no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, safe, and serves its educational mission effectively.

R

REMKO GmbH & Co. KG

remko.de

53

REMKO GmbH & Co. KG is a medium-sized German company founded in 1976, specializing in heating and climate technology products including warm air heating systems, dehumidifiers, climate systems, and heat pumps. The company operates primarily in the European market and maintains a professional online presence with a well-structured website powered by TYPO3 CMS. The website demonstrates good technical maturity with modern technologies, fast performance, and mobile optimization. Security posture is strong with HTTPS enforcement, cookie consent management, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, REMKO presents a credible and trustworthy business with clear contact information and active social media channels.

F

FENECON GmbH

fenecon.de

48

FENECON GmbH is a German company specializing in energy storage systems and energy management solutions aimed at supporting the transition to 100% renewable energy. Their product portfolio includes residential, commercial, and industrial battery storage systems, complemented by software solutions such as the FEMS energy management system. The company is recognized in the industry with multiple innovation awards and maintains a strong digital presence with multilingual support and comprehensive customer resources. Technically, the website is built on WordPress with modern plugins and frameworks, offering good performance and SEO optimization. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a professional and trustworthy business with a clear focus on sustainable energy solutions.

A

ABN GmbH by Schneider Electric

abn-electro.com

64

ABN GmbH by Schneider Electric is a well-established company specializing in metering and distribution technology products, with a history spanning over 75 years. The company operates under the Schneider Electric umbrella, offering a range of products including surge protection, field distributors, and transformer technology. The website reflects a mature digital presence built on TYPO3 CMS, featuring professional design, good mobile optimization, and comprehensive privacy compliance mechanisms such as OneTrust cookie consent. Security posture is solid with HTTPS and no visible vulnerabilities, although some security headers could be improved. The absence of WHOIS registration data for the domain raises concerns about domain legitimacy, which should be further investigated to ensure trustworthiness. Overall, the website presents a professional and trustworthy front aligned with its business sector.

M

MAS Rakovnicko o. p. s.

mas-rakovnicko.cz

48

MAS Rakovnicko o. p. s. is a non-profit local action group focused on regional development, social work, and education within the Rakovnicko area in the Czech Republic. The organization is supported by European Union funds and local municipal contributions, providing community projects and grant management services. The website serves as an official information portal for local stakeholders, project applicants, and community members, featuring news, events, and program details. Technically, the site uses a combination of jQuery, Bootstrap, and other JavaScript libraries to deliver a responsive and navigable user experience. While the site is accessible and well-structured, it lacks visible privacy policies and security headers, which are important for compliance and security posture. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and social media presence indicate a legitimate community organization. Overall, the site is safe for general audiences and provides relevant local content but would benefit from enhanced security and compliance documentation.

M

Město Sázava

mestosazava.cz

51

Město Sázava operates an official municipal website serving residents and visitors with comprehensive information about local governance, services, cultural events, and public notices. The site is well-structured, featuring news updates, event calendars, waste collection schedules, and contact details, reflecting a mature digital presence for a small government entity. The technical infrastructure leverages common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring responsive design and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data is a notable gap, potentially impacting domain trustworthiness, but the website's content and branding strongly indicate legitimacy as a municipal portal. Overall, the site balances usability and compliance well, serving its community effectively.

E

e-masters GmbH & Co. KG

intelligent-modernisieren.de

55

INTELLIGENT MODERNISIEREN is a German brand operated by e-masters GmbH & Co. KG, providing comprehensive information and services related to energy-efficient and smart modernization solutions for residential and commercial buildings. The website serves as a platform connecting users with a large network of qualified specialist companies and reputable manufacturers, offering expert knowledge, product showcases, and interactive planning tools. The company positions itself strongly in the energy sector with a focus on sustainable and modern technologies such as photovoltaics, heat pumps, and smart home systems. Technically, the website is built on TYPO3 CMS, integrates modern consent management via Usercentrics, and uses Google Tag Manager for analytics, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and consent-based tracking, though some security headers and explicit security policies are absent. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact information and strong branding consistency.

C

Caspersen Energie & Haustechnik GmbH

elektro-caspersen.de

63

Caspersen Energie & Haustechnik GmbH is a well-established German company specializing in electrical installations, photovoltaic systems, smart home solutions, and safety inspections such as DGUV V3 and E-Check. With over 60 years of experience, the company positions itself as a reliable and innovative service provider for both residential and commercial clients. The website reflects a professional and trustworthy business with clear service offerings and customer engagement features. Technically, the site is built on WordPress using Elementor and optimized with modern SEO and performance tools. Security posture is good with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the site is compliant with GDPR and provides comprehensive contact information, enhancing business credibility.

A

Artur Baasch GmbH

baasch-steinburg.de

51

Artur Baasch GmbH is a well-established regional Meisterbetrieb specializing in heating systems and bathroom renovation services in the Kreis Steinburg area of Germany. The company has a long history dating back to 1951 and offers a comprehensive range of services including new bathroom construction, 3D bathroom planning, heating installation, modernization, and maintenance. The website reflects a professional business model targeting residential and commercial customers seeking expert advice and quality workmanship. The presence of partner logos from reputable brands enhances trust and market positioning. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and includes GDPR-compliant cookie consent mechanisms via the Complianz plugin. Google Analytics is used with IP anonymization, reflecting attention to privacy compliance. Hosting appears to be with a German provider, consistent with the business location. From a security perspective, the site uses HTTPS and has implemented cookie consent, but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data shows no privacy protection but lacks detailed registrant information, which is common for small businesses. Overall, the domain and website appear legitimate and consistent with the business claims. The overall risk assessment is low with recommendations to enhance security headers, add incident response information, and consider a vulnerability disclosure policy. The website quality is good with clear navigation, relevant content, and professional design, supporting business credibility and customer trust.

H

Hans Andritter GmbH

andritter.de

49

Hans Andritter GmbH is a well-established regional company in Germany specializing in heating, sanitary, climate, and roofing services. With a history spanning approximately 160 years, the company offers comprehensive solutions from planning to implementation and maintenance, targeting regional customers seeking modern and reliable energy and sanitary services. The website reflects a professional and consistent brand image, emphasizing customer service and regional presence. Technically, the website is built on WordPress using the Elementor page builder, supported by plugins such as Borlabs Cookie for privacy compliance. The hosting is provided by agenturserver, indicated by the nameservers. The site is moderately performant, mobile-optimized, and SEO-friendly, with basic accessibility features. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and incident response documentation could further enhance trust and security posture.

I

Intercontinental Exchange

theice.com

66

Intercontinental Exchange (ICE) operates a comprehensive digital platform offering global exchanges, clearing services, market data, and technology solutions primarily in the energy and financial sectors. The website demonstrates a strong market position with a focus on innovation and digitization of traditional markets. Technically, the site uses modern web technologies including React and various JavaScript libraries, delivering a professional and responsive user experience. Security posture is solid with HTTPS and reCAPTCHA integration, though some security headers and explicit privacy policies are missing. The absence of WHOIS data is notable but likely due to privacy or registry restrictions rather than malicious intent. Overall, the site is professional, trustworthy, and business-focused.

T

Tour de Suisse

tourdesuisse.ch

58

Tour de Suisse is a prominent Swiss cycling event organizer, offering a range of services including race event management, hospitality, and fan engagement through digital platforms like TdS Explorer and Fanzone. The website reflects a mature digital presence with multilingual support and rich content tailored to cycling enthusiasts and event visitors. Technically, the site is built on WordPress with modern JavaScript frameworks and plugins, ensuring good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and consent management for third-party services, though explicit security policies and incident response information are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

J

Jugendcafé Camäleon

camaleon.li

50

Jugendcafé Camäleon is a small non-profit youth center based in Vaduz, Liechtenstein, providing a community space for youth engagement, projects, and events. The website serves as an informational and promotional platform targeting local youth and community members, offering details about their services, events, and gallery. The organization appears well-established since 2018 with a clear local focus and active social media presence. Technically, the website is built on WordPress with standard plugins such as Yoast SEO and Contact Form 7, ensuring basic SEO and contact functionalities. The site is mobile-optimized and uses modern libraries like Swiper.js and FontAwesome for UI enhancements. Security posture is adequate with HTTPS enforced and Google reCAPTCHA protecting forms, though it lacks advanced security headers and explicit incident response policies. Privacy and cookie policies are present but lack an explicit consent mechanism. Overall, the site is trustworthy, professional, and safe for general audiences.

V

Vadozner Huus

vadoznerhuus.li

57

Vadozner Huus is a community-oriented facility operated under the auspices of the Gemeinde Vaduz in Liechtenstein. It provides accessible communal spaces for residents and non-commercial groups to hold events, workshops, and meetings. The website reflects a local government service with a focus on inclusivity, creativity, and social engagement. The business model centers on offering shared spaces with flexible booking options, targeting local citizens and community organizations. Technically, the website is built on the concrete5 CMS platform, utilizing Bootstrap for responsive design and jQuery for interactivity. It integrates Matomo analytics for user tracking, emphasizing privacy. The site is mobile-optimized and presents a professional, consistent brand image aligned with the municipality. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses email obfuscation to protect contact information. However, it lacks visible security headers and does not provide explicit security or incident response policies. There is no cookie consent mechanism, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were found. Overall, the security posture is adequate but could be improved with additional best practices. The overall risk assessment is low given the nature of the site and its community focus. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing privacy compliance to strengthen trust and regulatory adherence.

E

easyfind.ch

easyfind.ch

65

easyfind.ch operates as a Swiss-based lost and found service platform connecting individuals who have lost or found items with over 2,500 participating lost property offices across Europe. The platform supports multiple languages and integrates with services like Swisspass and easyfind.com codes, positioning itself as the largest network in this niche. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Social media presence and customer ratings indicate a trustworthy and established service. Technically, the site uses modern web technologies and maintains good security practices with HTTPS and no exposed sensitive data. However, it lacks explicit security policies, incident response information, and cookie consent mechanisms, which are areas for improvement. Overall, the site is reliable, accessible, and serves a clear public service function.

M

Městys Vysoký Chlumec

vysoky-chlumec.cz

44

Městys Vysoký Chlumec operates as a local municipal government entity in the Czech Republic, providing residents and visitors with administrative services, community news, cultural and historical information, and tourism resources. The website serves as an official portal for local governance, public notices, and citizen engagement. The digital infrastructure is built on a modern tech stack including jQuery, Bootstrap, and Swiper.js, with a CMS platform likely tailored for municipal use. The site is mobile-friendly and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. GDPR compliance is evident with a dedicated Data Protection Officer contact and privacy policy. Overall, the site is trustworthy, professional, and well-suited for its public sector role.

B

BAVARIA Bratislava s.r.o.

bavariabratislava.sk

10

BAVARIA Bratislava s.r.o. operates as an authorized BMW dealership and service center located in Bratislava, Slovakia. The company offers a comprehensive range of BMW vehicles including new and used cars, alongside financial services, servicing, and original accessories. Positioned as the largest and most modern BMW showroom in Slovakia, it targets BMW customers seeking premium automotive products and services. The website reflects a professional and consistent brand image aligned with BMW standards. Technically, the website is built on the siteLAB CMS platform and incorporates modern JavaScript libraries such as Swiper.js and Owl Carousel for UI components, along with Google reCAPTCHA for form security and Facebook SDK for customer chat integration. The site is mobile-optimized and includes SEO best practices, although some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and integrates anti-bot measures via reCAPTCHA. However, it lacks explicit security headers and a published security policy or incident response contact, which are recommended for enhanced trust and compliance. Privacy and cookie policies are well implemented with clear consent mechanisms, supporting GDPR compliance. Overall, the website presents a low-risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further strengthen its posture.

V

Voith

voith.com

73

Voith is a family-owned enterprise specializing in industrial technology sectors such as drive technology, hydropower, and papermaking automation. The company positions itself as a responsible and sustainable technology provider with a global reach. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to industrial clients and partners. Technically, the site employs modern JavaScript libraries, Cookiebot for consent management, and Google Tag Manager for analytics, indicating a well-maintained infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of HTTP security headers and a public security policy suggests room for improvement. Privacy compliance is strong, with GDPR-aligned cookie consent and a detailed privacy policy. The lack of WHOIS data reduces transparency but does not significantly detract from the site's credibility given its professional presentation and business focus.

B

BEOS AG

giesserei-garching.de

46

The website represents a real estate project called GIESSEREI Garching, managed by BEOS AG, offering flexible and sustainable office and commercial spaces near Munich. The business targets companies seeking innovative hybrid workspace solutions in a prime location with strong infrastructure. The site is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Yoast SEO, and Matomo analytics. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the domain and hosting setup are consistent and legitimate, supporting the business credibility.

A

Adldinger Unternehmensgruppe

adldinger.de

51

Adldinger Unternehmensgruppe is a German construction and real estate company focused on building with tradition and solutions for the future. The website presents a professional and consistent brand image targeting general public and business clients in the real estate sector. The technical infrastructure is modern, leveraging Webflow CMS, JavaScript libraries such as Swiper.js, and third-party services like Cookiebot for cookie consent and Google Analytics for user tracking. Hosting is provided by rzone.de, consistent with the domain's WHOIS data. Security posture is adequate with HTTPS enabled and cookie consent implemented; however, the absence of explicit security headers and privacy policy pages indicates room for improvement. The website is accessible without WAF or security challenges, and no suspicious WHOIS patterns were detected, supporting the domain's legitimacy. Overall, the site scores moderately high in business credibility and technical implementation but should enhance privacy compliance and security best practices.