Security Directory

Freizeitreitstall Schammelsdorf is a small, local equestrian leisure and therapy service provider based in Germany. The website presents a professional and consistent brand image focused on riding lessons, pony school, riding therapy, and related services. The business targets local families, children, and riding enthusiasts. Technically, the site is built on WordPress with common plugins and uses Cookiebot for GDPR-compliant cookie management. Hosting is provided by kasserver.com, and the site is served over HTTPS with moderate performance and good mobile optimization. Security posture is solid with HTTPS and CAPTCHA protections, though some security headers could be improved. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. No critical vulnerabilities or suspicious patterns were detected. Overall, the site is trustworthy and professionally maintained, suitable for its business purpose.

I

Incsub, LLC

edublogs.org

71

Edublogs is a well-established educational blogging platform founded in 2005 and operated by Incsub, LLC. It serves educators and students worldwide, offering free and paid blogging services tailored specifically for educational use. The platform is trusted by numerous leading educational institutions and emphasizes student privacy, content safety, and ease of use. Technically, the website is built on WordPress multisite with modern web technologies, including Google Analytics, Tag Manager, reCAPTCHA, and Cookiebot for privacy compliance. Security posture is strong with HTTPS, form protections, and SOC 2 Type II certification, though some security headers could be explicitly declared. Overall, the site demonstrates a mature digital presence with good performance, accessibility, and SEO.

W

Welcome Hotels GHG Beteiligungsgesellschaft mbH

welcome-hotels.com

55

Welcome Hotels GHG Beteiligungsgesellschaft mbH operates a network of 14 hotels across Germany, offering accommodation, wellness, and event hosting services. The company emphasizes sustainability, demonstrated by its GreenSign certification, and targets a broad audience including tourists, business travelers, and event organizers. The website is professionally designed, mobile-optimized, and provides comprehensive information about hotel locations, amenities, and special offers. Technically, the site uses modern JavaScript libraries and integrates cookie consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and trust indicators.

C

Cineplex

cineplex.de

67

Cineplex operates a network of cinemas in Germany, offering movie programs, ticket booking, and promotional activities. The website is professionally designed with consistent branding and targets a general audience interested in cinema entertainment. The technical infrastructure leverages modern JavaScript frameworks, Cloudflare for DNS and security, and Cookiebot for GDPR-compliant cookie management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and Cloudflare protection, though there is room for improvement in security headers and published policies. The site integrates multiple advertising and analytics services, maintaining good privacy compliance through explicit consent mechanisms. Overall, Cineplex's website reflects a mature digital presence suitable for a large hospitality business.

R

Region Fulda

region-fulda.de

72

Region Fulda operates as a regional government portal providing information and services related to the Fulda region in Germany. The website emphasizes tradition and innovation, targeting residents and visitors interested in regional development and community events. The business model centers on public service and regional promotion, positioning itself as a key information hub within the government sector. Technically, the site is built on WordPress using the Divi theme, enhanced with multilingual support via Weglot and cookie consent management through Cookiebot. The infrastructure is modern and includes SEO optimizations and analytics tracking via Etracker. Security posture is strong with HTTPS and Content Security Policy headers implemented, though there is room for improvement in privacy compliance documentation and contact transparency. Overall, the site is professional, trustworthy, and well-structured, serving its public sector audience effectively.

K

Kreisverwaltung Alzey-Worms

kreis-alzey-worms.eu

58

The website www.kreis-alzey-worms.de represents the official online presence of the Kreisverwaltung Alzey-Worms, a regional government administration in Germany. It provides comprehensive information and services for citizens and businesses within the district, including access to eServices, online appointment scheduling, and detailed information on political bodies and local governance. The site is well-structured and targets local residents and enterprises seeking administrative support. Technically, the website is built on the TYPO3 CMS platform, a robust and widely used content management system. It employs Cookiebot for cookie consent management and Matomo for analytics, both configured to respect user privacy and consent. The site is hosted on infrastructure associated with domaincontrol.com, indicating professional domain management. The design is responsive and accessible, with clear navigation and good SEO practices. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms aligned with GDPR requirements. However, explicit privacy policies, terms of service, and security policies are not clearly published, which represents a compliance gap. No critical vulnerabilities or suspicious activities were detected in the content. The absence of security headers and explicit contact information for security incidents suggests areas for improvement. Overall, the website demonstrates a solid digital maturity level appropriate for a government entity, with good trust indicators and user experience. Strategic enhancements in privacy documentation, security headers, and contact transparency would further strengthen its security posture and compliance standing.

M

Home - Mein AWB

meinawb.de

51

Mein AWB is a German government-related website focused on waste management services including collection schedules, disposal facilities, bins, fees, and commercial waste services. The site targets residents and businesses in Germany seeking local waste disposal information. Technically, the site is built on Craft CMS and uses modern web technologies such as Cookiebot for consent management and Google services for fonts and maps. The site demonstrates moderate digital maturity with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS and cookie consent but lacks visible security headers and published security policies. Privacy compliance is partial, with a cookie consent mechanism but no visible privacy policy or terms of service. The domain WHOIS data is minimal and shows an unusual status, which slightly reduces trust. Overall, the site is functional and safe but would benefit from enhanced transparency and security documentation.

D

destination.one

hubermedia.de

61

destination.one is a specialized SaaS platform providing modern digital destination management solutions tailored for the tourism industry. The platform offers innovative tools for guest information, booking management, and digital content optimization, targeting tourism stakeholders and destination managers primarily in Germany. The website is built on TYPO3 CMS and integrates modern technologies including Cookiebot for privacy compliance. The technical infrastructure demonstrates good digital maturity with responsive design, accessibility features, and solid SEO practices. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not published. Overall, the website presents a professional and trustworthy business presence with comprehensive privacy and cookie policies, supporting GDPR compliance. The lack of WHOIS data is mitigated by the site's transparency and contact availability, indicating legitimacy. Strategic recommendations include publishing a dedicated security policy, vulnerability disclosure, and incident response information to enhance trust and compliance.

G

G DATA Software Sp. z o.o.

gdata.pl

74

G DATA Software Sp. z o.o. is a well-established Polish company specializing in antivirus and IT security software solutions for both businesses and individual users. Founded in 1995, the company boasts a long history and a strong market position as a leading provider of cybersecurity products. Their website, gdata.pl, reflects a professional and comprehensive digital presence, offering a range of security products and services with clear branding and consistent messaging. The company targets a broad audience including small to medium enterprises and private customers, emphasizing protection against internet threats and hacking attacks. Technically, the website is built on WordPress with WooCommerce and Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, SalesManago, and Cookiebot for consent management. The site demonstrates good SEO optimization, mobile responsiveness, and moderate performance. Privacy compliance is well addressed with explicit privacy and cookie policies, including GDPR consent mechanisms. From a security perspective, the site uses HTTPS with good SSL configuration and employs cookie consent to manage tracking. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information published. No vulnerabilities or suspicious content were found, indicating a solid security posture but with room for improvement in transparency and formal security documentation. Overall, gdata.pl presents a trustworthy and professional online presence consistent with its business claims. The domain's long age and WHOIS data support legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to further strengthen trust and compliance.

S

Sergio Aleksovski - Friseur in Stuttgart

sergioaleksovski.com

50

Sergio Aleksovski Hair is a professional hair salon located in Stuttgart Mitte, Germany, specializing in high-quality haircuts, coloring, and hair extensions using premium brands such as Aveda and Great Lengths. The salon is staffed by award-winning stylists with extensive training and experience, positioning it as a top-tier service provider in the local hospitality sector. The website reflects a strong brand presence with clear service offerings and customer engagement channels including online booking and social media integration. Technically, the site is built on WordPress with modern plugins and tools, providing a good user experience and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers are recommended. However, the absence of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the site is professional, user-friendly, and compliant with privacy regulations, serving its target audience effectively.

M

Momentum

momentum.se

64

Momentum is a Swedish company providing a property management system designed to increase profitability, reduce climate impact, and improve tenant satisfaction. The platform is trusted by over 500 property owners, indicating a solid market position within the real estate sector in Sweden. Their business model appears to be SaaS-based, focusing on delivering software solutions tailored for property owners and managers. The website content is professional and well-structured, targeting property owners seeking efficient and sustainable management tools. Technically, the website is built on WordPress with modern SEO practices via the Yoast plugin. It integrates multiple marketing and analytics tools such as Google Analytics, HubSpot, Upsales, and Cookiebot for consent management, reflecting a mature digital infrastructure. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and security headers could enhance the technical posture. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, no explicit security policy, incident response, or vulnerability disclosure pages were found, which could be areas for improvement. The absence of WHOIS data for the exact subdomain www.momentum.se limits full verification of domain legitimacy, though the overall digital footprint suggests a trustworthy business. Overall, Momentum presents a professional and secure online presence suitable for its business domain. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving transparency around contact information to further strengthen trust and compliance.

IESA, operating under the parent company Aareon, is a leading Spanish technology firm specializing in software solutions for property management and administration of communities. With over 38 years of experience, the company offers a comprehensive platform, Gesfincas, alongside a suite of integrated solutions aimed at digitalizing and optimizing the daily operations of property administrators and communities. Their market position is strong within Spain and Europe, supported by continuous innovation and a broad product portfolio. Technically, the website employs modern web technologies including Bootstrap, jQuery, and FontAwesome, complemented by advanced analytics tools such as PostHog and Hotjar. The site is well-optimized for mobile devices, features clear navigation, and maintains good SEO practices. Security measures include HTTPS enforcement, secure form handling, and cookie consent mechanisms, although some security headers could be enhanced. From a security perspective, the site demonstrates a mature posture with no evident vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear policies and GDPR adherence. The presence of a whistleblower channel and a documented security policy further reinforce their commitment to security and compliance. Overall, the risk profile is low with a high degree of trustworthiness and professionalism. Strategic recommendations include enhancing security headers, implementing a security.txt file for vulnerability disclosures, and increasing visibility of incident response contacts to further strengthen security culture and compliance.

Nordfriesen Glasfaser is a regional telecommunications provider specializing in delivering high-speed fiber optic internet, telephone, and TV services to private customers in southern Nordfriesland, Germany. The company emphasizes reliable, fast, and future-proof connectivity solutions tailored to residential users. Their website is built on TYPO3 CMS and integrates Cookiebot for comprehensive cookie consent management, reflecting a commitment to privacy compliance. The site offers clear navigation, detailed service descriptions, and social media engagement, supporting a positive user experience and trustworthiness. Technically, the website demonstrates a modern infrastructure with HTTPS enabled and a moderate performance profile. However, security headers and explicit security policies are absent, indicating room for improvement in security posture. No blocking or WAF challenges were detected, allowing full content access and analysis.

B

Business Metropole Ruhr

business.ruhr

57

Business Metropole Ruhr is a regional economic development organization focused on promoting the Ruhrgebiet area in Germany. The website serves as a platform to showcase innovative projects, regional business interests, and economic transformation initiatives. It targets businesses, investors, municipalities, startups, and scientific communities within the region. The organization positions itself as a key driver of economic growth and sustainability in one of Germany's largest metropolitan areas. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including JavaScript and Cookiebot for cookie consent management. Google Tag Manager and Google Analytics are used for analytics and marketing purposes, with consent mechanisms in place to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site uses HTTPS and implements cookie consent with blocking mechanisms for tracking scripts. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not evident in the provided content. There is no visible security policy or incident response contact information, and no vulnerability disclosure or security.txt file is found. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and compliant with basic privacy requirements, though it could improve by publishing explicit privacy and security policies and enhancing security header configurations. The risk level is moderate with no critical vulnerabilities detected.

S

SOMI Systems a.s.

somi.sk

61

SOMI Systems a.s. is a well-established Slovak company specializing in cybersecurity, GDPR compliance, and IT security services with over 28 years of market presence. Their offerings include NIS2 compliance, risk analysis, network protection, and professional training, targeting organizations requiring robust data protection and cyber defense. The website reflects a mature business with consistent branding and a clear focus on security solutions. Technically, the site uses modern JavaScript libraries and analytics tools with cookie consent mechanisms, indicating a moderate to good digital maturity. Security posture is solid with HTTPS and consent management, though improvements are recommended in security headers and incident response transparency. Overall, the company demonstrates strong legitimacy and trustworthiness, supported by WHOIS data and partner affiliations.

K

Kreis Recklinghausen

kreis-re.de

71

Kreis Recklinghausen operates as a governmental authority providing a wide range of public services to residents and businesses within the Recklinghausen district in Germany. The website serves as an information portal and service gateway, offering access to citizen services, administrative information, economic development, education, and leisure activities. The site is well-positioned as a regional government entity with a clear focus on serving its local community. Technically, the website employs standard web technologies including jQuery and Cookiebot for cookie consent management. The site is hosted on INWX infrastructure and demonstrates good mobile optimization and accessibility features. While the site lacks a detected CMS or advanced frameworks, it maintains a moderate performance level and basic SEO optimizations. From a security perspective, the site enforces HTTPS and integrates a comprehensive cookie consent mechanism with blocking capabilities. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected, indicating a generally secure posture appropriate for a governmental website. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, particularly in privacy and cookie management. The absence of direct contact emails or phone numbers is mitigated by the presence of a contact form. Strategic recommendations include enhancing security headers, publishing security policies, and improving SEO and technical modernization to further strengthen the site's security and user experience.

M

mediaprint infoverlag gmbh

mediaprint.info

58

mediaprint infoverlag gmbh operates as a market leader in advertising-funded publications, specializing in supporting marketing strategies through various print products. The company targets marketing professionals and businesses seeking effective print advertising solutions within Germany. Their business model revolves around leveraging print media to optimize advertising reach and impact. The website reflects a professional and consistent brand image, supported by active social media channels and a cookie consent mechanism, indicating awareness of privacy regulations. Technically, the website is built on WordPress, utilizing popular plugins such as WPBakery Page Builder and LayerSlider, with integration of Google Tag Manager and Cookiebot for analytics and consent management. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and employs cookie consent, but lacks explicit security headers and detailed privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of a security.txt or vulnerability disclosure page suggests room for improvement in incident response readiness. WHOIS data is unavailable due to privacy protection, which is reasonable for this business type. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and establishing formal vulnerability disclosure mechanisms to strengthen trust and compliance.

W

Wohnungsgenossenschaft Duisburg-Hamborn eG

hamborner-woge.de

62

Wohnungsgenossenschaft Duisburg-Hamborn eG operates as a housing cooperative focused on providing rental apartments and related housing services in the Duisburg-Hamborn area of Germany. The website serves as an information portal for tenants and prospective members, offering details about housing offers, membership, events, and contact information. The organization maintains a local market position with a medium-sized operational scale and targets residents seeking affordable and community-oriented housing solutions. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and Font Awesome, with integrated accessibility features and mobile optimization. Analytics are handled via Piwik, and cookie consent is managed through Cookiebot, reflecting a strong commitment to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

R

Ruhr Tourismus GmbH

mein-ruhrgebiet.blog

50

Mein Ruhrgebiet is a German-language travel blog operated by Ruhr Tourismus GmbH, focusing on providing travel inspiration, local tips, and cultural insights about the Ruhrgebiet region. The website targets tourists and travelers interested in exploring this area, offering curated content such as travel guides, event information, and regional highlights. The business model centers on digital content creation and regional tourism promotion, positioning itself as a trusted source for Ruhrgebiet travel information. Technically, the website is built on WordPress 6.8.1 with modern plugins like Yoast SEO and WP Rocket for SEO and performance optimization. It uses Bootstrap for responsive design and integrates third-party services such as Cookiebot for cookie consent management, Google Tag Manager for analytics, and Facebook Pixel for marketing. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with anonymized IP tracking in Google Analytics and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection slightly impacts trust but is common for such sites. Overall, the website presents a professional and trustworthy digital presence for regional tourism, with moderate technical maturity and a solid security posture. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its risk profile and compliance standing.

V

Visit Hungary

visithungary.com

65

Visit Hungary is a tourism promotion website dedicated to showcasing Hungary's attractions, including Budapest, Lake Balaton, and famous thermal baths. The site targets tourists and travelers planning trips to Hungary, providing travel planning resources and destination highlights. The domain is well-established, created in 1999, and the website uses modern web technologies such as Angular, Cookiebot for cookie consent, and marketing pixels from Meta and TikTok to support its digital marketing efforts. The technical infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages, though cookie consent is implemented. Overall, the website is professional and trustworthy for its purpose but would benefit from enhanced privacy and security documentation.

Kufer Software GmbH is a well-established German company specializing in intelligent software solutions for seminar and course management in adult education. With over 30 years of experience and a customer base exceeding 1,900 clients, the company offers products such as KuferSQL, KuferWEB, and KuferTools. Their business model focuses on software development, sales, and comprehensive customer support including training and updates. The website reflects a professional and consistent brand image targeting educational institutions and seminar organizers. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery. It integrates Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management. Hosting is provided by kasserver.com, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms. Remote support is facilitated via trusted third-party tools TeamViewer and pcvisit. However, explicit HTTP security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the content. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The domain WHOIS data aligns with the business claims, supporting legitimacy. The site poses low risk, but could enhance security posture by adding security headers and publishing security policies.

M

Mein Mülheim | Heimaturlaub in der Stadt am Fluss

mein-muelheim.de

57

Mein Mülheim is a tourism-focused website promoting the city of Mülheim an der Ruhr, Germany, highlighting local attractions, weekend tips, and outdoor activities. The site targets general visitors and residents interested in exploring the city and its surroundings. The business model centers on local tourism promotion and community engagement. Technically, the website is built on TYPO3 CMS and employs Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and presents good content quality with consistent branding. Security posture is moderate, with HTTPS implied and cookie consent implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no visible privacy policy or terms of service pages. Overall, the website is accessible, safe, and professional but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

S

Slovenská komora fyzioterapeutov

komorafyzioterapeutov.sk

48

Slovenská komora fyzioterapeutov is a professional chamber representing physiotherapists in Slovakia, providing services such as registration, licensing, education, and ethical oversight. The website serves as an information and service portal for members and the public, with a focus on healthcare professionals in the physiotherapy sector. The domain is well-established since 2008, indicating a stable presence in the market. Technically, the site is built on WordPress using common libraries like jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is good regarding cookie consent, but a dedicated privacy policy page is not clearly found in the provided content. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements, serving its target audience effectively.

C

conversiontracking.io

conversiontracking.io

66

conversiontracking.io is a small digital agency specializing in conversion tracking services, including Google Tag Manager, Google Analytics, and Facebook Pixel integration. The website positions itself as a specialist helping marketers and businesses optimize their ad spend and improve conversion rates by implementing accurate tracking solutions. The business is recent, founded in 2024, and operates primarily online with a focus on data-driven marketing improvements. Technically, the site is built on Squarespace, uses modern analytics and tracking technologies, and is hosted via a reputable registrar with privacy protection enabled. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal privacy or cookie policies. The site is accessible without WAF or blocking mechanisms, and content is professional and safe for general audiences.

1

1artisan1site.fr

1artisan1site.fr

60

The website www.1artisan1site.fr appears to be a small business or artisan-focused site, likely offering services related to website creation or digital presence for artisans. The site uses modern web technologies such as Bootstrap 5.3.3 and Google Fonts, and implements a cookie consent mechanism via Cookiebot, indicating some attention to privacy compliance. However, critical business information such as company details, contact information, privacy policy, and terms of service are missing, which limits the site's credibility and trustworthiness. The WHOIS data for the domain is unavailable, which raises concerns about the domain's legitimacy and registration status. Technically, the site is moderately optimized for mobile and performance but lacks security headers and detailed privacy compliance documentation. Overall, the security posture is average with room for improvement in transparency and compliance.

Č

ČESKÁ HUTNICKÁ SPOLEČNOST, z.s.

steelsim2025.com

52

The website steelsim2025.com represents the 11th International Conference on Modelling and Simulation of Metallurgical Processes in Steelmaking, organized by the Czech Metallurgical Society. It serves as a professional platform for experts in numerical modelling and steelmaking industry professionals to share knowledge and advancements. The site is well-branded, with a consistent presentation of partners, sponsors, and organizational details, reflecting an established event with a history dating back to 2003. The conference targets a niche audience of metallurgical researchers and industry practitioners, positioning itself as a key event in this specialized manufacturing sector. From a technical perspective, the website employs modern JavaScript libraries such as jQuery, Blueimp Gallery, Owl Carousel, and integrates Google services including reCAPTCHA and Tag Manager. Cookiebot is used for comprehensive cookie consent management, ensuring GDPR compliance. The site is mobile-optimized with good accessibility and SEO practices, though no CMS or hosting provider details were detected. Performance is moderate, with room for optimization. Security posture is generally strong with HTTPS enforced and use of reCAPTCHA for form protection. However, no explicit security headers were detected, and no published security or incident response policies were found. The absence of WHOIS registration data raises some concerns about domain legitimacy, though the professional nature of the site and detailed contact information mitigate these risks. Overall, the website is a credible and professional representation of an international conference in the manufacturing sector. Strategic recommendations include enhancing security headers, publishing security policies, and clarifying domain registration details to improve trust and compliance.

U

UniCredit Factoring Czech Republic and Slovakia, a. s.

unicreditfactoring.cz

72

UniCredit Factoring Czech Republic and Slovakia, a. s. is a financial services company specializing in factoring and financing solutions for businesses primarily in the Czech Republic and Slovakia. The website presents a professional image with clear branding and structured data confirming company identity and contact information. The business targets companies needing receivables financing and supplier financing services. Technically, the site uses modern JavaScript libraries including jQuery and Google reCAPTCHA, and implements a cookie consent mechanism via Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages limits full compliance transparency. Security posture is moderate with HTTPS enforced but lacking explicit security headers. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, the site is functional, secure, and business-appropriate but could improve in privacy and security documentation.

S

Stadt Recklinghausen

recklinghausen.de

71

The website www.recklinghausen.de serves as the official online presence of the city of Recklinghausen, Germany. It provides comprehensive information and services related to city administration, politics, living, education, economy, culture, tourism, and public events. The site targets local residents, visitors, and businesses, positioning itself as a key municipal government resource. The business model is public service oriented, focusing on transparency and citizen engagement. Technically, the website employs a mix of JavaScript libraries including jQuery, EQCSS, Lightbox2, and Slick Slider, alongside Cookiebot for GDPR-compliant cookie management. Hosting is managed via INWX, a reputable German hosting provider. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO optimization is basic but present. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking capabilities. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. The site uses multiple third-party advertising and tracking services, all managed under user consent. Overall, the website is professional, trustworthy, and well-aligned with its governmental purpose. Recommendations include enhancing security headers, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

C

Conversion Tracking Specialist · Google Tag Manager · Analytics

codeandtonic.com

66

Conversiontracking.io is a small, specialized digital agency founded in 2024, focusing on improving conversion tracking and analytics for marketers using Google and Meta advertising platforms. The website is built on Squarespace and integrates modern tracking technologies such as Google Tag Manager, Google Analytics, and Facebook Pixel to deliver measurable improvements in ad performance. While the technical infrastructure is solid and the site is professionally designed with good user experience, there is a notable absence of visible privacy and cookie policies, which impacts compliance and privacy posture. Security practices are generally good with HTTPS and domain transfer protections, but DNSSEC and HSTS are not enabled, representing areas for improvement. Overall, the business appears legitimate and trustworthy, with a clear market niche and professional branding.

U

UniCredit Fleet Management

unicreditfleet.cz

74

UniCredit Fleet Management CZ operates as a specialized leasing and fleet management service provider under the UniCredit Group umbrella, targeting business clients in the Czech Republic. The company offers operational leasing, fleet management, and sales of nearly new and used vehicles, positioning itself as a reliable and flexible partner in the fleet management sector. The website content is professionally presented in Czech, with clear navigation and consistent branding aligned with the parent group. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google reCAPTCHA and Cookiebot for security and privacy compliance. However, the absence of a visible privacy policy and WHOIS registrant data slightly reduces trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers and published incident response information. Overall, the website is functional and business-appropriate but would benefit from enhanced transparency and security best practices.

K

Kreativní Česko – Novinky, Akce a Podpora Kreativních Odvětví

kreativnicesko.cz

67

Kreativní Česko is a Czech national portal dedicated to the cultural and creative industries, providing news, events, funding opportunities, and resources for artists, designers, and innovators. The website serves as an information hub and support platform for stakeholders in the creative sector within the Czech Republic. It positions itself as a key resource for cultural professionals and creative entrepreneurs, fostering innovation and collaboration in the industry. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with a good SSL configuration, ensuring secure communication. The design is responsive and optimized for mobile devices, with a clear navigation structure and good SEO practices. However, no specific CMS or hosting provider information was identified. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. Security headers like HSTS and X-Content-Type-Options are present, though the implementation of Content-Security-Policy and Subresource Integrity could further enhance security. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy front for its intended audience. The lack of publicly available WHOIS data limits transparency regarding domain registration, but the site content and technical setup support its legitimacy. Strategic recommendations include enhancing security headers, improving accessibility features, and publishing terms of service and incident response policies to strengthen trust and compliance.

P

Pixman

pixman.cz

74

Pixman.cz is a Czech digital agency specializing in web development, e-commerce solutions, and digital marketing services. The company offers a range of services including website and e-shop development, integration with Microsoft Dynamics 365 Business Central, online marketing strategies, creative visuals, and content management with Sitecore CMS. Their market position is that of a specialized small agency targeting businesses seeking modern digital solutions with a focus on fair play and digital innovation. Technically, the website employs a modern technology stack including PHP, JavaScript, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Visual Website Optimizer. The site uses Sitecore CMS and promotes integration with Microsoft Business Central, indicating a mature digital infrastructure. The website is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting good digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, but the website content and business information appear legitimate and professional. Overall, Pixman.cz presents a trustworthy and professional digital presence with good privacy compliance and a solid technical foundation. Strategic improvements in security header implementation and public security policies would enhance their security posture further.

Malfini.com is a website associated with Pro-idea s.r.o., likely operating in the fashion or apparel sector given the brand name and styling cues. The domain is well-established, created in 2010, and shows consistent registration data. The website employs modern front-end technologies including Bootstrap, Swiper, and AOS, and integrates multiple third-party analytics and marketing tools such as Google Analytics, Hotjar, and Sales Manago. A comprehensive cookie consent mechanism is implemented, reflecting good privacy compliance practices. However, explicit privacy policy and terms of service pages are not found in the provided content, and no direct contact information is visible, which may impact user trust and compliance completeness. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies.

U

UniCredit Leasing

unicreditleasing.cz

73

UniCredit Leasing is a financial services company operating in the Czech Republic, specializing in vehicle and equipment financing through leasing and loans. The website presents a professional image with clear branding consistent with the UniCredit Group, offering services such as operativní leasing, finanční leasing, and insurance brokerage. The target audience includes both individual and corporate clients seeking financing solutions. Technically, the website uses modern JavaScript libraries including jQuery, Modernizr, and Google reCAPTCHA, and implements GDPR-compliant cookie consent via Cookiebot. However, the absence of WHOIS data and registrant information reduces trustworthiness from a domain registration perspective. Security posture is generally good with HTTPS and reCAPTCHA, but lacks explicit security headers and published security policies. Contact information and privacy policy pages are not found in the provided content, which are areas for improvement.

P

Pahamont | Pojďme stavět!

pahamont.cz

52

Pahamont.cz is a Czech website focused on construction or building services, as suggested by its slogan 'Pojďme stavět!'. The domain is well-established, created in 2008, and hosted on reputable Hetzner servers. The site uses WordPress with the Divi theme, indicating a standard CMS-based infrastructure. Cookiebot is implemented, showing attention to cookie consent and GDPR compliance. However, the site lacks explicit privacy policy, terms of service, and contact information in the analyzed content, which are important for trust and compliance. Security posture is moderate with HTTPS enabled but missing security headers and incident response details. Overall, the website is functional and moderately professional but would benefit from enhanced privacy, security, and contact transparency.

S

Symetro s.r.o.

cenyzaprojekty.cz

43

The website cenyzaprojekty.cz is a Czech-language platform offering specialized online tools for architects, project planners, and technicians to estimate construction project costs, plan schedules, and calculate professional fees. It is powered by Symetro s.r.o. and recommended by professional organizations such as ČKAIT and ČSSI, positioning it as a niche service in the construction and engineering consulting sector. The site provides multiple applications covering cost estimation for building and transport projects, honorarium calculations, professional roles budgeting, timelines, and documentation standards. Technically, the site employs modern web technologies including Vue.js, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and bot protection, though explicit security headers and incident response policies are absent. Privacy compliance is supported by cookie consent and published privacy and cookie policies. However, the absence of WHOIS registration data reduces domain trustworthiness and raises concerns about domain legitimacy. Overall, the site is professional and trustworthy from a content and technical perspective but would benefit from improved transparency in domain registration and security disclosures.

G

Griffith Foods

griffithfoods.com

63

Griffith Foods is a global leader in food product development and innovation, specializing in creating delicious, healthy, sustainable, and nutritious food solutions for top brands worldwide. Their website reflects a mature and professional business with a clear focus on culinary craftsmanship and sustainability. The company targets food industry professionals and partners seeking customized product development services. Technically, the website is built on WordPress with a modern tech stack including analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Cookiebot, ensuring good digital maturity and user experience. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though there is room for improvement in security headers and explicit security policies. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-branded, and professionally maintained.

The Academy of Motion Picture Arts and Sciences operates the official Oscars.org website, serving as the authoritative source for information about the Academy Awards, including history, events, press releases, and screenings. The site targets both the general public and film industry professionals, maintaining a strong market position as the leading organization behind the Oscars. The business model is non-profit and focused on cultural and media promotion. Technically, the website is built on Drupal 10, leveraging modern web technologies and integrating Google Tag Manager and Cookiebot for analytics and privacy compliance. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Security posture is strong, with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. Privacy compliance is robust, featuring a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, though it lacks publicly visible contact information and explicit security or incident response policies. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

P

PREVIO s.r.o.

previo.app

64

PREVIO s.r.o. operates an online hotel reservation and reception system primarily targeting hospitality businesses such as hotels, pensions, apartments, camps, motels, and chalets. The company offers a SaaS platform that facilitates reservation management, document printing including invoices and guest books, and statistical reporting. The website is professionally designed, consistent in branding, and provides relevant content tailored to its target audience in the Czech Republic. The business appears to be medium-sized and established since 2002, although domain registration details could not be verified due to missing WHOIS data. Technically, the website employs a modern technology stack including Google Tag Manager, Google Analytics, Facebook Pixel, Microsoft Clarity, Smartlook, and Cookiebot for cookie consent management. The site is mobile optimized with good SEO and basic accessibility features. Performance is moderate, with no critical technical issues detected. Security posture is good with HTTPS enforced and reCAPTCHA implemented, but lacks some security headers and published security policies. From a security perspective, the site shows adherence to some best practices such as encrypted connections and consent management, but could improve by publishing privacy and security policies, adding security headers, and providing explicit contact information for incident response. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS data reduces domain trustworthiness, but the website content and business presence suggest legitimacy. Overall, the website is professional, secure, and compliant at a basic level, suitable for its business purpose. Strategic improvements in privacy transparency, security headers, and domain registration visibility are recommended to enhance trust and compliance.

T

Technische Hochschule Deggendorf

th-deg.de

62

Technische Hochschule Deggendorf is a reputable German technical university specializing in applied sciences, offering a range of academic programs and research opportunities primarily targeting students, researchers, and industry partners. The institution maintains a solid regional presence with a focus on engineering, computer science, and business disciplines. The website reflects a mature digital infrastructure leveraging modern web technologies such as Bootstrap, jQuery, and Pimcore CMS, ensuring a responsive and user-friendly experience. Security posture is robust with enforced HTTPS, cookie consent mechanisms, and use of reputable third-party services, although there is room for improvement in security headers and incident response transparency. Overall, the website demonstrates strong compliance with GDPR and privacy regulations, providing clear contact and legal information. The risk profile is low, with no indications of malicious activity or content safety concerns.

M

Vodní Mlýn Hoslovice – Muzeum Strakonice – Vodní Mlýn Hoslovice

mlyn-hoslovice.cz

58

Vodní Mlýn Hoslovice is a cultural heritage museum website representing a historic water mill in the Czech Republic. The site targets tourists and local visitors interested in history and cultural experiences. The business operates as a small-scale museum attraction with a focus on educational and cultural services. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, with modern web technologies such as Google Tag Manager and Cookiebot for consent management. The site is mobile optimized and performs moderately well, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with no visible privacy policy or terms of service, which should be addressed to improve trust and compliance. Overall, the website is professional and trustworthy for its niche, but could benefit from enhanced security and compliance documentation.

B

Budějovický Budvar, n.p.

slavapivu.cz

62

The website www.slavapivu.cz is a professionally designed event site dedicated to the Sláva pivu! beer festival organized by Budějovický Budvar, a well-known Czech brewery. The site provides comprehensive information about the festival dates, participating breweries, food vendors, entertainment programs, and ticket purchasing options. It targets beer enthusiasts and festival attendees primarily in the Czech Republic. The business model focuses on event organization and promotion, leveraging the strong brand presence of Budějovický Budvar to attract visitors. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as Google Analytics, Google Tag Manager, Cookiebot for cookie consent, and Typekit fonts. The site is mobile optimized with good SEO practices and moderate performance. However, some accessibility features are basic, and there is room for improvement in security headers and incident response transparency. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, indicating a good baseline for privacy compliance. However, no explicit security policy or incident response contacts are provided, and no WHOIS data is publicly available for the domain, which limits the ability to fully verify domain legitimacy. No vulnerabilities or malicious content were detected. Overall, the website presents a trustworthy and professional front for the festival, but the lack of WHOIS transparency and some missing security best practices suggest moderate risk. Strategic improvements in domain registration transparency, security headers, and incident response information would enhance trust and security posture.

P

Plzeňská vstupenka

plzenskavstupenka.cz

76

Plzeňská vstupenka is an established online ticket sales platform founded in 2004, specializing in cultural events such as theatre, concerts, musicals, opera, and ballet in the Pilsen region of the Czech Republic. The website offers a comprehensive range of event listings and ticket purchasing options, targeting residents and visitors interested in cultural experiences. The platform positions itself as the largest provider of event tickets in the region, emphasizing a broad and diverse catalog of cultural offerings. Technically, the website is built using modern web technologies including Next.js and React, with integration of Google Tag Manager, Facebook Pixel, and Cookiebot for analytics and privacy compliance. Hosting is provided by REG-WEBGLOBE, consistent with the domain registration data. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, although explicit security headers and incident response policies are not publicly visible. Privacy compliance is strong, with GDPR-aligned cookie consent and detailed cookie declarations. Overall, the website demonstrates a professional and trustworthy digital presence with good user experience and content quality.

B

BP2 Spółka z ograniczoną odpowiedzialnością

bp2.eu

65

BP2 Spółka z ograniczoną odpowiedzialnością is a well-established Polish manufacturer specializing in roofing and facade solutions for residential and industrial construction since 1995. The company maintains a professional online presence with a website optimized for multiple languages and equipped with modern digital marketing and analytics tools. Their market position is solid within the manufacturing sector, targeting construction professionals and businesses in Poland and potentially Central Europe. The website content is relevant and professionally presented, reflecting the company's expertise and product offerings. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Tag Manager, and Cookiebot for privacy compliance. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, but could benefit from additional security headers and regular audits of third-party scripts. Overall, the security and privacy compliance of the website are strong, with GDPR-compliant cookie consent and a comprehensive privacy policy linked via Cookiebot. No critical vulnerabilities or suspicious activities were detected. The domain registration data aligns well with the business claims, supporting the legitimacy of the company. Strategic recommendations include enhancing security headers, ensuring robust server-side validation on forms, and maintaining vigilance on third-party integrations to sustain security and compliance. This assessment indicates a mature digital infrastructure supporting a credible and professional business operation in the manufacturing sector, with room for incremental improvements in security and accessibility to further strengthen trust and compliance.

B

BP2 Spółka z ograniczoną odpowiedzialnością

solroof.eu

68

SOLROOF is a Polish company specializing in innovative photovoltaic roofing systems fully integrated with metal roofing. The company targets customers interested in clean energy solutions and offers a complete photovoltaic system embedded in roofing materials. The website is professionally designed using WordPress and supports multiple languages, indicating a focus on European markets. The business model centers on product sales and installation services in the energy sector. The company is registered as BP2 Spółka z ograniczoną odpowiedzialnością, based in Kraków, Poland.

M

Middle East Eye

middleeasteye.net

71

Middle East Eye is a professional online news media platform focused on delivering news, opinion, video, and analysis related to the Middle East and surrounding regions. The website demonstrates a strong market position as a regional news outlet with a consistent and professional brand presence. Technically, the site is built on Drupal CMS with modern web technologies including Font Awesome, Google Analytics, Google Tag Manager, and Cookiebot for consent management. The site is mobile optimized and accessible with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies are missing. The absence of publicly available WHOIS data and explicit privacy policies slightly reduce trust and compliance confidence. Overall, the site is well-maintained and trustworthy for general audiences interested in Middle East affairs.

B

Budějovický Budvar, n. p.

budweiser-budvar.cz

58

Budějovický Budvar, n. p. is the national brewery of the Czech Republic, with a strong heritage and a significant export presence in over 70 countries. The company produces a variety of beer products, including limited edition collaborations with microbreweries, and offers brewery tours and educational content through its website. The brand is well recognized and maintains consistent, professional digital branding. Technically, the website is built on Webflow with modern JavaScript libraries and integrates Google Analytics and Cookiebot for tracking and compliance. Security posture is solid with HTTPS enforced and age verification implemented to comply with alcohol advertising regulations. However, explicit security headers are not detected, and no incident response contact is provided. WHOIS data is unavailable, likely due to privacy protection, but the website's legitimacy is supported by its content and external references. Overall, the site is professional, secure, and compliant, targeting adult consumers and partners in the beer industry.

The website 'Danteho verejný zápisník' is a Slovak personal/public blog focused on literary content, including book reviews, quotes, and personal reflections. It operates primarily as a content publishing platform with affiliate marketing partnerships, notably with Martinus.sk, a Slovak book retailer. The site targets a general audience interested in literature and related topics. Technically, the site is built on WordPress 6.7.2, utilizing common plugins such as Yoast SEO and MonsterInsights for analytics. Cookie consent is managed via Cookiebot, indicating some level of privacy compliance. The site is served over HTTPS with good SSL configuration but lacks explicit security headers and formal privacy or terms of service pages. No contact information or security incident response details are provided, which limits business credibility and compliance transparency. Overall, the site is well-structured, mobile-optimized, and provides good user experience, but could improve in security and compliance documentation.

E

Etnetera Core a.s.

etnetera.cz

70

Etnetera Core a.s. is a Czech technology company specializing in custom software development and operation of innovative technology projects. The company targets business clients seeking tailored software solutions and positions itself as an established player in the software development industry. The website content reflects a professional and consistent brand image, emphasizing their expertise in technology innovation. Technically, the website is built on the Webflow platform, utilizing modern web technologies including Google Tag Manager, Microsoft Clarity, Cookiebot for cookie consent, and Google reCAPTCHA for form security. The site is mobile optimized and performs moderately well, with good SEO and accessibility basics in place. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and published security policies or incident response contacts are absent, representing areas for improvement. No vulnerabilities or suspicious domains were detected. Overall, the website presents a low-risk profile with strong privacy compliance and professional business credibility. The lack of public WHOIS data is mitigated by the legitimate and transparent business presence online. Strategic recommendations include enhancing security headers, publishing security policies, and adding incident response information to further strengthen trust and compliance.

M

Montáže Brož s.r.o.

montazebroz.com

67

Montáže Brož s.r.o. is a well-established company specializing in the installation of technologically advanced racking system solutions, operating globally across Europe, Australia, America, and Canada. Founded in the early 1990s, the company has grown to become a world leader in its niche, providing assembly services for automated storage equipment primarily targeting large distribution centers. Their market position is reinforced by certifications such as ISO 45001 and active engagement in health and safety and research and development initiatives. The website reflects a professional and consistent brand image with comprehensive content tailored to business clients seeking specialized installation services. Technically, the website is built on WordPress using modern plugins like Yoast SEO and WPBakery Page Builder, hosted on Wedos servers. It employs Google Analytics for traffic analysis and Cookiebot alongside Complianz GDPR plugin for privacy compliance. The site is mobile-optimized and SEO-friendly, though performance is moderate and accessibility could be improved. Security-wise, HTTPS is enforced, and cookie consent mechanisms are in place, but additional HTTP security headers are absent, representing an area for enhancement. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy, incident response contacts, or vulnerability disclosure mechanisms suggests room for maturity in security governance. Privacy compliance is strong, with a clear privacy policy and cookie consent banner, aligning with GDPR requirements. Business credibility is high, supported by clear company information, certifications, and trust signals such as social media presence and professional content. Overall, Montáže Brož presents a trustworthy and professional online presence with a strong business foundation and good technical implementation. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance their digital maturity and risk posture.