Security Directory

T

True Grit Texture Supply

truegrittexturesupply.com

70

True Grit Texture Supply is a specialized e-commerce business offering high-quality digital brushes, textures, and effects for popular creative applications such as Procreate, Photoshop, Illustrator, Clip Studio Paint, and Affinity. The company targets digital artists and designers seeking professional-grade tools to enhance their digital artwork. The website is hosted on the Shopify platform, leveraging a mature e-commerce infrastructure with integrations for marketing, analytics, and customer reviews. The business model focuses on digital product sales with value bundles and tutorials to support customers. The company appears to be a small-sized Australian entity with a consistent brand presence and positive customer feedback.

N

Nicole S. Young

nicolesy.com

50

Nicolesy.com is the professional website of Nicole S. Young, a full-time photographer and author specializing in photography education and e-commerce. The site offers a variety of photography tutorials, books, presets, and overlays, targeting photography enthusiasts and learners. The business model combines content creation with digital and physical product sales, supported by a well-structured online store and community engagement. The website is well-established with a domain age of nearly 19 years, reflecting a mature and consistent online presence. Technically, the site is built on WordPress with WooCommerce and uses modern plugins and technologies such as Yoast SEO, Google Analytics, hCaptcha, and affiliate marketing tools. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Hosting is inferred to be with GoDaddy.com, LLC, consistent with the domain registration data. From a security perspective, the site uses HTTPS and employs hCaptcha for form protection, but lacks DNSSEC and some advanced security headers. There is no visible security policy or incident response information, and privacy and cookie policies are absent, indicating compliance gaps. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, nicolesy.com is a credible, professional photography education and e-commerce site with good technical and business maturity. Improvements in privacy compliance and security policy transparency are recommended to enhance trust and regulatory adherence.

The website mojekino.sk operates as an online platform primarily focused on providing cinema programs, ticket sales, and related information for a wide network of cinemas and cultural venues in Slovakia. It is managed by Ticketware SE, a company established in 2012, which positions itself as a regional service provider in the entertainment and cultural event sector. The platform targets cinema goers and cultural event attendees, offering a cinema finder tool and online ticket purchasing capabilities. The website's market position is regional with a focus on Slovak cultural venues, leveraging partnerships with numerous cinemas across the country. From a technical perspective, the website employs a custom or proprietary CMS with a technology stack that includes jQuery, Facebook SDK, and Google Analytics for user tracking and analytics. Hosting is provided by Forpsi, as indicated by the domain's nameservers. The site demonstrates moderate performance and basic mobile optimization, with room for improvement in accessibility and SEO practices. The design and content quality are basic but functional, with clear navigation and a straightforward user experience. Security-wise, the site uses HTTPS (assumed but not explicitly confirmed in the provided data) and implements a cookie consent mechanism, indicating some level of privacy compliance. However, it lacks explicit privacy policies, terms of service, and security headers such as CSP or HSTS, which are recommended for enhanced security posture. No incident response or vulnerability disclosure information is available, and no contact information is provided on the homepage, which limits transparency and user trust. The WHOIS data is consistent and indicates a legitimate, long-standing domain registration aligned with the business's regional focus. Overall, mojekino.sk is a functional regional ticketing platform with basic technical and security implementations. To improve trust, compliance, and security posture, the company should publish clear privacy and terms policies, enhance security headers, and provide transparent contact information. These steps will strengthen user confidence and align the platform with best practices in digital security and privacy.

D

DOOH s.r.o.

dooh.sk

45

DOOH s.r.o. operates the largest digital out-of-home (DOOH) advertising network in Slovakia, featuring 18 outdoor LED screens across 13 locations. The company targets businesses seeking impactful outdoor advertising solutions with fast deployment and measurable results. Their business model centers on renting LED advertising space and providing real-time campaign statistics, positioning themselves as market leaders in the Slovak digital outdoor advertising sector. The website content is professionally presented in Slovak, with clear calls to action and comprehensive contact information, supporting a strong business credibility profile. Technically, the website employs modern web technologies including Bootstrap, jQuery, Google reCAPTCHA v3, and Google Tag Manager, hosted behind Cloudflare DNS services. The site is mobile-optimized with good SEO practices and moderate performance. Security measures include HTTPS enforcement and invisible reCAPTCHA on forms, though no explicit security headers or published security policies were detected, indicating room for improvement in security posture. From a security perspective, the site shows a moderate maturity level with no critical vulnerabilities detected in the provided data. The absence of a privacy policy and security incident response information suggests compliance gaps, particularly regarding GDPR transparency. Cookie consent is implemented, reflecting basic privacy compliance. The WHOIS data is consistent with the business profile, showing a domain registered in 2021 without privacy protection, reinforcing legitimacy. Overall, the website is professional and trustworthy with a solid business foundation but would benefit from enhanced security headers, published privacy and security policies, and formalized incident response contacts to improve compliance and security posture.

L

Levická televízna spoločnosť s.r.o.

levickatelevizia.sk

50

Levická televízna spoločnosť s.r.o. operates a local television broadcasting website focused on news, sports, public affairs, and advertising for the Levice region in Slovakia. The company has an established presence since 2007 and provides a range of multimedia content primarily hosted on Vimeo. The website uses Joomla CMS and integrates common web technologies such as jQuery, Bootstrap, and FontAwesome, delivering a good user experience with mobile optimization and clear navigation. Contact and business information are transparently provided, including GDPR-compliant privacy policies and cookie consent mechanisms. Security posture is adequate with HTTPS enforced, though additional security headers and policies could enhance protection. Overall, the site is trustworthy, professionally maintained, and serves its local audience effectively.

A

Asociácia kultúrnych inštitúcií miest a obcí Slovenska

1akis.sk

55

The website represents the Asociácia kultúrnych inštitúcií miest a obcí Slovenska, a Slovak non-governmental organization focused on promoting cultural education and supporting local cultural institutions. The site provides information about the association's mission, activities, and offers downloadable documents relevant to cultural policies and COVID-19 impact mitigation. The organization targets Slovak municipalities, cultural institutions, and the general public interested in cultural development. Technically, the website is built on Joomla CMS using the Gantry5 framework, with modern JavaScript libraries such as jQuery, Swiper, and AOS for animations. It is hosted by Websupport, a Slovak hosting provider, and uses HTTPS with DNSSEC enabled for domain security. The site includes Google Analytics and Tag Manager for user tracking and has a cookie consent banner, indicating basic privacy compliance. However, it lacks a dedicated privacy policy, terms of service, and security incident response information, which are important for full compliance and trust. Security posture is moderate with HTTPS and DNSSEC but missing HTTP security headers and vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

The website 'Projekt na obnovu národnej kultúrnej pamiatky Židovská škola Levice' is a cultural and educational initiative focused on preserving and promoting the heritage of the Jewish school in Levice, Slovakia. It offers a variety of workshops, cultural events, and festivals aimed at children, youth, and adults interested in Jewish history and culture. The project appears to be a small-scale non-profit entity with a local community focus. Technically, the website is built on WordPress using the Elementor page builder, supplemented by plugins for photo galleries and analytics. It is hosted on Websupport servers with DNSSEC enabled and uses HTTPS, indicating a secure baseline infrastructure. The site is moderately optimized for performance and mobile devices, with good SEO practices including structured data and Open Graph metadata. From a security perspective, the site employs HTTPS and DNSSEC but lacks explicit security headers and does not provide visible security or incident response policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable gap given GDPR requirements. Overall, the website is trustworthy and professional in its presentation and content but would benefit from enhanced privacy compliance and security policy transparency to improve user trust and regulatory adherence.

B

Bates Wells

bateswells.co.uk

68

Bates Wells is a well-established UK-based law firm specializing in legal services for charities, social enterprises, and impact investors. The firm positions itself as a City law firm with a difference, emphasizing positive impact and sustainability, evidenced by its status as the highest scoring B Corp globally in the legal activities category. The website reflects a professional and comprehensive digital presence, targeting businesses and organizations seeking expert legal advice in various sectors including charity, corporate, data privacy, and employment law. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Swiper.js for enhanced user experience. It employs HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, though it could improve by implementing additional security headers and publishing a formal security policy. From a security standpoint, the site demonstrates good practices such as secure forms and no visible vulnerabilities or exposed sensitive data. However, there is room for improvement in incident response transparency and vulnerability disclosure. The domain registration data is consistent with the firm's business history, enhancing trustworthiness. Overall, Bates Wells presents a low-risk profile with strong business credibility and a mature digital infrastructure. Strategic recommendations include enhancing security headers, publishing security policies, and adding a security.txt file to further improve security posture and compliance.

K

Kinderschutzbund Kreisverband Unna e.V.

kinderschutzbund-kreisunna.de

62

Kinderschutzbund Kreisverband Unna e.V. is a German non-profit organization dedicated to protecting children from violence, combating child poverty, and promoting children's rights. The organization offers systemic counseling, therapy, prevention projects, and advocacy at local, state, and federal levels. Their services are free and include specialized support for children, youth, and families. The website reflects a well-structured, community-focused entity with clear contact channels and donation options. Technically, the site uses a specialized CMS platform with modern JavaScript libraries and is optimized for accessibility and mobile use. Security measures include HTTPS, cookie consent with opt-in/out, and captcha on forms, though additional security headers could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no signs of adult or questionable content.

Slovakia.travel is the official national tourism portal managed by the Slovak Tourist Board, a government entity dedicated to promoting Slovakia as a travel destination. The website offers comprehensive information about Slovak culture, nature, events, and travel tips, targeting tourists and travelers interested in exploring Slovakia. It features multilingual support and rich content including blogs, event calendars, and online publications. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The hosting and DNS setup leverage Amazon AWS services, ensuring reliability and scalability. Security-wise, the site enforces HTTPS and has domain transfer protections but lacks advanced security headers and DNSSEC, which are recommended for enhanced protection. Privacy compliance is addressed with cookie consent mechanisms and a privacy policy, though explicit security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-positioned as a government tourism resource with a good balance of content quality, technical implementation, and business credibility.

F

Förderverein für regionale Entwicklung e.V.

terminbuchungstool.de

65

The website terminbuchungstool.de is operated by the Förderverein für regionale Entwicklung e.V., offering an online appointment and course booking tool primarily targeting public sector entities, healthcare providers, and businesses in Germany. The platform facilitates efficient scheduling with features like Outlook synchronization, customizable calendars, and automated email confirmations. The site is well-positioned in its niche, supported by positive customer testimonials and a clear focus on GDPR compliance and data security. Technically, the site employs modern JavaScript libraries and CSS frameworks, is mobile-optimized, and uses SSL encryption to secure data transmission. Security best practices are observed, including CAPTCHA on forms and cookie consent management, though additional security headers and a formal security policy could enhance posture. Overall, the site is professional, trustworthy, and compliant with relevant privacy regulations, making it a reliable solution for appointment management in its target sectors.

F

Förderverein für regionale Entwicklung e.V.

mobile-ansichten.de

57

The website www.mobile-ansichten.de represents a service initiative by the Förderverein für regionale Entwicklung e.V., focused on providing mobile-optimized web views tailored for smartphones and tablets. The service targets municipalities and organizations seeking to improve mobile user experience and Google search rankings without additional costs or complex app installations. The business model is non-profit oriented, offering free creation and reduced licensing fees for project partners, supported by personalized telephone assistance and continuous updates. Technically, the website employs a custom CMS platform with common JavaScript libraries such as jQuery, jQuery UI, and parallax effects. It integrates cookie consent management and basic analytics cookies, ensuring GDPR compliance. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and good content quality. Hosting appears to be managed via domaincontrol.com DNS services, typical for small organizations. From a security perspective, the site lacks explicit HTTP security headers and does not provide a public security policy or incident response contacts. The contact form includes CAPTCHA and GDPR consent, but no vulnerability disclosure or security.txt is present. SSL configuration details are not directly visible in the provided data, and no WAF or blocking mechanisms were detected. Overall, the website demonstrates a solid business credibility and privacy compliance posture, with room for improvement in security best practices and transparency. The domain registration data is minimal but consistent with the business claims. No suspicious or malicious indicators were found, and the content is safe for general audiences.

F

Förderverein für regionale Entwicklung e.V.

intranetdienst.de

61

The website www.intranetdienst.de represents a small German-based organization, Förderverein für regionale Entwicklung e.V., offering a secure, web-based intranet system tailored for various sectors including companies, municipalities, educational institutions, and non-profits. The platform provides a comprehensive suite of modules such as document management, event planning, user rights management, and mobile app integration, positioning itself as a niche provider focused on efficient workplace communication and organization. The site is professionally designed with good content quality, clear navigation, and responsive design, supporting a positive user experience.

R

Ratsinformationsdienst

ratsinformationsdienst.de

58

The Ratsinformationsdienst website offers a specialized software solution, PortUNA.ris, designed to facilitate efficient council and committee work for municipalities in Germany. The business targets administrative staff, council members, and citizens by providing a cost-effective, easy-to-use, and mobile-optimized platform for managing meeting documents and schedules. The company positions itself as a niche provider with a clear focus on simplicity, affordability, and ongoing support through 2035. Technically, the website employs standard web technologies including jQuery, Nivo Slider, and a proprietary CMS hosted on infrastructure linked to domaincontrol.com. The site is moderately optimized for performance and accessibility, with good mobile responsiveness and SEO practices. Cookie consent is implemented with detailed categorization, and analytics usage is moderate, likely using Matomo. From a security perspective, the site shows basic best practices such as session management and use of ReCaptcha, but lacks visible security headers and published security policies or incident response contacts. No WAF or blocking mechanisms are detected, and the site is fully accessible. The WHOIS data is minimal but consistent with a small business using common DNS providers, with no suspicious patterns. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve its security posture by adding security headers, publishing a security policy, and enhancing incident response transparency. The risk level is moderate with no critical vulnerabilities detected.

F

Förderverein für regionale Entwicklung e.V.

foerderverein-regionale-entwicklung.de

61

Förderverein für regionale Entwicklung e.V. is a small non-profit organization based in Brandenburg, Germany, focused on supporting regional development through digitalization and information networking. The organization offers cost-free or reduced-cost funding programs aimed at public and private institutions, social organizations, and trainees. Their services include assistance with internet presence, digital tools, and regional information integration. The website reflects a well-structured, professional presence with clear navigation and accessibility features. Technically, the website leverages a modern tech stack including jQuery, Bootstrap, Material Design Lite, and various UI libraries hosted on the verwaltungsportal.de platform. It is mobile optimized and includes accessibility options such as font resizing and contrast adjustments. The hosting is managed via DomainControl nameservers, and HTTPS is enforced, ensuring secure communication. From a security perspective, the site implements cookie consent with granular user control, uses CAPTCHA on forms, and manages sessions securely. However, explicit security headers are not detected, and no published security or incident response policies are found. Privacy compliance is strong with a comprehensive privacy policy and GDPR indicators. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It serves its target audience effectively with relevant content and partner integrations. Strategic improvements could focus on enhancing security headers and publishing incident response information.

Städtische Friedhöfe Gelsenkirchen operates as a municipal service providing cemetery management and related services in Gelsenkirchen, Germany. The website offers comprehensive information about the city's twelve cemeteries, various burial options, and support for bereaved families. It serves a local audience seeking guidance on funerary arrangements and cemetery facilities. The site is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence for a government entity. Technically, the website is built on WordPress, leveraging popular plugins such as Yoast SEO for search optimization and Borlabs Cookie for privacy compliance. Hosting is provided by Hetzner, a reputable German hosting provider. The site employs HTTPS and cookie consent mechanisms, indicating a commitment to user privacy and security. However, some security headers are not explicitly detected, suggesting room for improvement in hardening the security posture. From a security perspective, the site demonstrates good practices including encrypted connections and no visible vulnerabilities or exposed sensitive data. Analytics are conducted via Matomo, a privacy-friendly tool, with clear cookie policies and user consent. The absence of incident response contacts or vulnerability disclosure mechanisms is noted, which could be enhanced to improve transparency and readiness. Overall, the website is a trustworthy and professional platform for municipal cemetery services, with solid privacy compliance and a good user experience. Strategic recommendations include enhancing security headers, publishing incident response information, and maintaining up-to-date software to mitigate risks.

V

Verschenkmarkt Gelsenkirchen

verschenkmarkt-gelsenkirchen.de

43

Verschenkmarkt Gelsenkirchen operates a regional non-profit online marketplace focused on facilitating the free exchange of goods to reduce waste and promote sustainability within the Gelsenkirchen area and surrounding regions. The platform offers users the ability to publish, edit, and delete listings without requiring registration or displaying advertisements, emphasizing community engagement and environmental responsibility. The website is built on the Osclass CMS platform with a technology stack including jQuery, Bootstrap, and FineUploader, providing a functional and moderately performant user experience with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced protection and regulatory compliance. The absence of explicit contact emails or phone numbers limits direct communication channels, relying solely on a contact form. No vulnerability disclosure or security policy pages are present, indicating room for improvement in transparency and incident response readiness. Overall, the website presents a trustworthy and professional image consistent with its non-profit mission, supported by clear navigation, relevant content, and GDPR-compliant privacy and terms pages. The lack of advertising and tracking scripts further strengthens its privacy posture. Strategic enhancements in security headers, cookie consent, and contact information would elevate its compliance and security maturity.

Kufer Software GmbH is a well-established German company specializing in intelligent software solutions for seminar and course management in adult education. With over 30 years of experience and a customer base exceeding 1,900 clients, the company offers products such as KuferSQL, KuferWEB, and KuferTools. Their business model focuses on software development, sales, and comprehensive customer support including training and updates. The website reflects a professional and consistent brand image targeting educational institutions and seminar organizers. Technically, the website is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery. It integrates Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management. Hosting is provided by kasserver.com, and the site demonstrates good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. From a security perspective, the site uses HTTPS and employs cookie consent mechanisms. Remote support is facilitated via trusted third-party tools TeamViewer and pcvisit. However, explicit HTTP security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the content. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The domain WHOIS data aligns with the business claims, supporting legitimacy. The site poses low risk, but could enhance security posture by adding security headers and publishing security policies.

Demokratie leben is a local government-backed initiative based in Herten, Germany, focused on promoting democracy, diversity, and preventing extremism through community projects and funding. The website serves as an information hub and application portal for project funding under the federal program 'Demokratie leben!'. The target audience includes local citizens, civil society actors, and project applicants. The business model is non-profit and government-supported, emphasizing community engagement and democratic participation. Technically, the website uses standard web technologies including JavaScript, jQuery, and Font Awesome, hosted on INWX nameservers. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The CMS is not explicitly identified but appears custom or proprietary. The website is secured with HTTPS and includes a cookie consent mechanism, though lacks advanced security headers and published security policies. From a security perspective, the site demonstrates good baseline practices such as HTTPS enforcement and cookie consent. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The site does not use analytics or advertising scripts, minimizing privacy risks. Overall, the website is trustworthy, professional, and compliant with GDPR requirements. It effectively supports its mission to promote democracy locally. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving mobile optimization and SEO for broader reach.

G

GREENZERO GmbH

greenzero.eu

59

GREENZERO GmbH is a German sustainability consulting company specializing in environmental impact analysis, reduction strategies, and renaturation projects. Their services include scientifically grounded ecological assessments such as product and corporate life cycle analyses, supported by AI-driven tools for rapid product portfolio analysis. The company targets businesses aiming to meet sustainability goals with a comprehensive, interdisciplinary approach. Technically, the website is built on WordPress using Elementor and Yoast SEO, with cookie consent managed by Borlabs Cookie. The infrastructure is modern and moderately performant with good mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks explicit security headers and published security policies. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional and trustworthy digital presence aligned with its business objectives.

C

CK FISCHER

fischer.sk

55

CK FISCHER is a Slovak travel agency specializing in holiday packages to Mediterranean and exotic destinations for 2025. The website offers last minute and first minute deals, family and wellness holidays, and special travel services. It targets general consumers seeking quality travel experiences with a broad range of destinations and services. The site is professionally designed with consistent branding and good content quality. Technically, it uses modern JavaScript frameworks including Vue.js, integrates Google Tag Manager, reCAPTCHA, and Usercentrics for cookie consent, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and bot protection, but lacks explicit security policies and vulnerability disclosure. Privacy compliance is basic with cookie consent but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and professional, suitable for its business domain.

K

KARTAGO Tours

kartagotours.hu

55

KARTAGO Tours is a Hungarian travel agency specializing in holiday packages, last minute and first minute travel deals, and family-friendly club hotels. The website targets Hungarian-speaking travelers and offers a broad range of travel destinations primarily in Europe, North Africa, and the Middle East. The business operates under the DER Touristik Group umbrella, indicating a strong market presence in Central Europe. Technically, the website employs modern web technologies including Vue.js, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, security headers, and bot protection via reCAPTCHA, though explicit security and incident response policies are not published. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable platform for travel bookings.

K

Kartago SK

kartago.sk

54

Kartago SK operates as a Slovak online travel agency specializing in vacation packages, last minute deals, and first minute offers targeting Slovak-speaking travelers. The website presents a professional and modern interface with a focus on multiple international destinations, leveraging a Vue.js-based frontend and integrating key marketing and analytics tools such as Google Tag Manager, Google Analytics, and Usercentrics for cookie consent management. The business model centers on providing comprehensive travel services including flight bookings and holiday packages, positioning itself as a regional player in the hospitality and transportation sectors. Security measures include HTTPS enforcement and reCAPTCHA integration, though the absence of security headers and formal privacy and terms of service pages indicates room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

EXIM S.A.

exim.pl

58

EXIM S.A. operates the website exim.pl, a prominent Polish travel agency and tour operator specializing in holiday packages, last minute deals, and flight tickets. Positioned as the fifth largest tour operator in Poland, EXIM targets Polish travelers seeking diverse vacation options including exotic destinations, group travel, and customizable plans. The website is professionally designed with a clear focus on user experience, offering rich content and easy navigation. Technically, the site leverages modern JavaScript frameworks such as Vue.js, integrates Google Tag Manager, Usercentrics for consent management, and employs reCAPTCHA for bot protection. Security posture is strong with HTTPS enforcement and multiple security headers, although explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanisms. Overall, the site demonstrates a mature digital presence with good business credibility and technical implementation.

D

Dertouristik RO

dertour.ro

57

DERTOUR Romania operates as an online travel agency specializing in vacation packages, last minute deals, and exclusive hotel offers primarily targeting Romanian customers. The website is professionally designed with a clear focus on travel services, offering a wide range of destinations and booking options. The technical infrastructure leverages modern JavaScript frameworks, Google Tag Manager, and Usercentrics for consent management, indicating a mature digital presence. Security posture is solid with HTTPS enforcement, cookie consent, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly available. Overall, the website presents a trustworthy and professional front for DERTOUR's travel services in Romania.

N

Napster

napster.com

65

Napster is a well-established global music streaming service offering over 110 million songs and official music videos with ad-free and offline listening options. The company also provides B2B branded music platform solutions, serving businesses seeking to launch their own music services. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site uses WordPress CMS with modern analytics and marketing tools such as Google Analytics, Amplitude, Braze, and Hotjar, alongside a consent management platform for GDPR compliance. Security posture is strong with HTTPS, security headers, and reCAPTCHA protections, though explicit security policies and incident response information are absent. The lack of WHOIS data limits domain trust assessment, but the overall digital footprint and branding indicate legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure mechanisms, and enhancing transparency on data retention.

A

ADAGP

adagp.fr

63

ADAGP is a well-established French collective rights management organization founded in 1953, specializing in the collection and distribution of authors' rights in the visual arts sector. The website presents a professional and comprehensive digital presence, targeting artists, rights holders, and users of artworks with a broad range of services including membership, authorization requests, and artistic support. The technical infrastructure is built on Drupal CMS with modern frontend technologies and integrates Google Tag Manager for analytics. Security posture is solid with HTTPS enforced, though improvements are recommended in security headers and explicit privacy compliance documentation. The absence of WHOIS data limits domain ownership verification but the website's content quality, contact transparency, and social media presence support its legitimacy. Overall, ADAGP's website is a trustworthy and authoritative resource in its domain.

L

La SCELF

scelf.fr

52

La SCELF is a French civil society organization representing French language editors, focusing on publishing and editorial services. The website is built on WordPress using the Divi theme and Yoast SEO plugin, indicating a moderate level of digital maturity. The site is accessible, uses HTTPS, and includes a cookie consent mechanism, but lacks visible privacy policies, terms of service, and explicit contact information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts overall trust. Security posture is moderate with HTTPS enabled but missing security headers and incident response information. Strategic recommendations include publishing privacy and security policies, improving security headers, and clarifying domain registration details to enhance trust and compliance.

T

Ticketware SE

ticketware.sk

45

Ticketware SE operates a specialized ticket sales software platform targeting cinemas, cultural centers, theatres, museums, and castles primarily in Slovakia and the Czech Republic. The company offers a comprehensive SaaS solution including online ticket sales, seat reservation, ticket printing, and entry control, serving over 450 clients with monthly sales exceeding one million tickets. The website reflects a mature business with a clear market position and a focus on cultural institutions. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Analytics, Google Tag Manager, Facebook SDK, and reCAPTCHA for security and marketing. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and reCAPTCHA but lacks security headers and published security policies. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanism. Overall, the website is trustworthy and professional but could improve transparency and security practices.

G

Galéria Dobrá hračka

dobrahracka.sk

43

Galéria Dobrá hračka is a Slovak interactive children's gallery offering a variety of educational and entertaining attractions where children can role-play professions such as police officer, firefighter, archaeologist, and more. The business targets families and children, providing both on-site experiences and an online booking system, complemented by an e-shop for related products. The website is built on WordPress with modern plugins like Elementor and Slider Revolution, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and standard security headers, though explicit security policies and incident response contacts are absent. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Truefitt & Hill Prague

truefittandhill.cz

55

Truefitt & Hill Prague operates as a luxury men's grooming and barber service provider with a strong heritage dating back to 1805. The company offers premium grooming products and barber services, positioning itself as a world leader in the men's grooming industry with a presence in multiple global cities including Prague. The website is built on the Shoptet e-commerce platform, leveraging modern web technologies and integrating multiple analytics and marketing tools. Security posture is solid with HTTPS and consent-based cookie management, though explicit security policies and incident response details are absent. The domain WHOIS data is unavailable, which slightly impacts trust from a domain registration perspective. Overall, the website is professional, user-friendly, and compliant with privacy regulations, targeting gentlemen seeking luxury grooming experiences.

M

mediaprint infoverlag gmbh

total-lokal.de

46

mediaprint infoverlag gmbh operates the website total-lokal.de, providing regional and local informational brochures, news, and job listings across Germany. With over 50 years of experience, the company serves municipalities and local businesses by publishing both digital and print content focused on topics such as education, building, seniors, and local economy. The website is well-branded and targets residents and businesses seeking localized information. Technically, the site uses common JavaScript libraries and galleries, is mobile-optimized, and implements HTTPS with a DigiCert certificate, ensuring secure user interactions. Privacy compliance is addressed with a comprehensive privacy policy and a cookie consent mechanism. However, direct contact emails and phone numbers are not prominently displayed, relying mainly on contact forms. Security posture is solid but could be improved by adding explicit security policies and vulnerability disclosure information. Overall, the site is professional, trustworthy, and serves a niche media publishing market in Germany.

D

Dinslakener Flächenentwicklungsgesellschaft mbH (DIN FLEG mbH)

zukunft-trabrennbahn.de

50

The website Zukunft der Trabrennbahn is a municipal project platform managed by the Dinslakener Flächenentwicklungsgesellschaft mbH (DIN FLEG mbH) in cooperation with the city of Dinslaken, Germany. It focuses on the redevelopment of the former Trabrennbahn area into a residential neighborhood with community and green spaces. The site provides information, event updates, and opportunities for citizen participation, targeting local residents and stakeholders interested in urban development. Technically, the site is built on the Contao CMS platform, uses modern web standards, and includes multimedia content to engage visitors. Security posture is moderate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, though improvements in security and privacy transparency are recommended.

D

Das Abfallbündnis im Kreis Wesel

frag-mike.info

45

Frag Mike is a German local government initiative under the name 'Das Abfallbündnis im Kreis Wesel' focused on waste management, recycling, and environmental protection. The website serves as an educational and community engagement platform promoting proper waste disposal and recycling practices in the Kreis Wesel region. The business model is non-profit and government-oriented, targeting residents and workers in the local area. The site is professionally designed with consistent branding and clear navigation, supporting its mission effectively. Technically, the website is built on WordPress CMS with common plugins such as Contact Form 7 for user interaction, Rank Math for SEO, and Matomo for privacy-conscious analytics. The site is hosted under a registrar consistent with the domain's German origin and uses HTTPS with good SSL configuration. Mobile optimization and accessibility are well addressed, though DNSSEC is not enabled, which is a minor security gap. From a security perspective, the site enforces HTTPS, uses domain status locks to prevent unauthorized changes, and implements cookie consent mechanisms aligned with GDPR. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or suspicious content were detected. The privacy compliance is good, with clear privacy and cookie policies. Overall, Frag Mike presents a trustworthy, professional, and secure web presence for a local government environmental campaign. Strategic improvements could include adding security headers, publishing incident response and security policies, and enabling DNSSEC to enhance DNS security.

V

Volkshochschule der Stadt Bottrop

vhs-bottrop.de

53

The Volkshochschule der Stadt Bottrop is a municipal adult education institution providing a wide range of educational programs including integration courses, vocational training, and cultural events. It serves the local population of Bottrop, Germany, and operates under the city's auspices. The website is built on WordPress with a modern tech stack including Bootstrap and jQuery, offering a responsive and user-friendly experience. Privacy compliance is well addressed with GDPR-aligned policies and a cookie consent mechanism. Security posture is adequate with HTTPS and secure login forms, though it lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and focused on educational services.

R

Ruhr Tourismus GmbH

ruhr-tourismus.de

57

Ruhr Tourismus GmbH operates as a regional tourism promotion organization for the Ruhrgebiet area in Germany, providing comprehensive travel planning, cultural, event, and gastronomy information to tourists and visitors. The website is professionally designed with good content quality, clear navigation, and multilingual support, reflecting a mature digital presence. Technically, it leverages WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance, and integrates Google Tag Manager and Facebook Pixel for analytics and marketing, all served over HTTPS with moderate performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. The domain registration is consistent with a legitimate business, though WHOIS details are minimal. Overall, the site is trustworthy, privacy compliant, and well-positioned as a regional tourism authority.

S

Stadt Bottrop

ratsinfo-bottrop.de

59

The Ratsinfosystem website is an official municipal portal operated by Stadt Bottrop, Germany, providing comprehensive public access to political information including committees, members, sessions, and archives. It serves citizens and mandate holders with a clear focus on transparency and accessibility. The site is built on the SD.NET RIM 4 platform, leveraging modern web technologies such as jQuery and CSS3, and includes a secure login mechanism for authorized users. Privacy and cookie policies are prominently linked, reflecting GDPR compliance. Security posture is strong with HTTPS enforced and CSRF protection on forms, though some security headers could be improved. Overall, the site is trustworthy, professionally designed, and well-maintained, with no signs of malicious content or blocking mechanisms.

L

Make Duisburg green again! | Let's DU it – Join us in transforming Duisburg into a sustainable urban paradise. Experience innovation and modern living in Europe's Hydrogen Capital.

lets-du-it.com

57

The website lets-du-it.com serves as a promotional platform for the city of Duisburg, Germany, emphasizing its transformation into a sustainable and innovative urban center, particularly highlighting its role as Europe's Hydrogen Capital. The site targets skilled workers, international talent, and innovators, offering information about economic sectors, quality of life, and job opportunities. Technically, the site is built on WordPress with a modern plugin stack including multilingual support and cookie consent management. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks DNSSEC and explicit security headers. Privacy compliance is limited due to the absence of a clear privacy policy. Overall, the site is professional and trustworthy but could improve in privacy transparency and security hardening.

S

Stadtwerke Sommerkino

stadtwerke-sommerkino.de

63

Stadtwerke Sommerkino is a well-established open-air cinema event held annually in Duisburg, Germany, since 1996. It offers a curated selection of films in a unique industrial park setting, supported by prominent local sponsors such as Stadtwerke Duisburg and König Pilsener. The event targets film enthusiasts and local visitors, combining cultural entertainment with hospitality services like a beer garden. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses performance and privacy-enhancing plugins such as Autoptimize and Borlabs Cookie. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are absent. No vulnerabilities or suspicious activities were detected. Overall, the website reflects a professional, trustworthy, and user-friendly digital presence for a regional cultural event.

D

Duisburg Live

duisburglive.de

43

Duisburg Live is an official event calendar platform for the city of Duisburg, Germany, providing comprehensive listings of cultural, sports, and community events. The website is well-branded and professionally designed, targeting residents and visitors interested in local activities. It operates on TYPO3 CMS with modern frontend technologies and integrates Matomo for analytics. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks explicit security headers and incident response policies. Privacy compliance is basic with a privacy policy and cookie policy present but no active cookie consent mechanism. Overall, the platform is trustworthy and serves as a key community resource.

E

EVENT FORUM Castrop-Rauxel

eventforum-castrop.de

49

EVENT FORUM Castrop-Rauxel operates as a regional event venue and organizer in the Ruhrgebiet area of Germany, offering multiple event locations including Stadthalle and Europahalle. The company provides comprehensive event planning support, ticket sales, and hospitality services, targeting event organizers and attendees in the region. The website reflects a professional and consistent brand presence with clear navigation and relevant content focused on event hosting and services. Technically, the website is built on WordPress using Elementor and integrates popular event management plugins such as The Events Calendar and Events Calendar Pro. It employs modern web technologies including Google Tag Manager and hCaptcha for security on forms. Hosting is provided by Alfahosting, a reputable German hosting provider. The site is mobile optimized and SEO friendly with structured data for events. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers like CSP and X-Frame-Options are not evident, and no published security or incident response policies exist. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

EUV Stadtbetrieb Castrop-Rauxel -AöR- is a municipal utility company serving the city of Castrop-Rauxel, Germany. The organization provides essential public services including waste disposal, street cleaning, winter services, infrastructure maintenance, environmental protection, and property tax collection. The website is designed to serve local residents and businesses with information and service portals. Technically, the site is built on TYPO3 CMS with common frontend libraries such as jQuery and Bootstrap, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks published security policies and incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting its public sector nature.

S

SAS ICESI

woah.fr

60

WOAH.fr is a French technology website operated by SAS ICESI, offering a Google visibility administration solution aimed at businesses seeking to improve their search engine presence. The website presents a professional design with clear navigation and a login form for user access. The technical infrastructure includes modern web technologies such as Bootstrap, jQuery, and FontAwesome, hosted by IONOS SE. While the site is accessible and functional, it lacks visible privacy and cookie policies, and security features such as security headers and advanced form protections are not evident. Social media integration is present, enhancing business credibility. Overall, the website demonstrates a moderate security posture with room for improvement in compliance and security best practices.

E

eVision Technologies Ltd.

ev-portal.com

61

The website common.ev-portal.com hosts a professional B2B platform named PowerTask B2B, developed by eVision Technologies Ltd. The platform focuses on spare parts management software, offering services such as creation and management of spare parts catalogues, sales catalogues, electronic parts catalogs, order and stock management, and technical documentation support. The site supports multiple languages, indicating an international target audience primarily in the B2B sector for spare parts and technical documentation management. The business model revolves around providing software solutions to streamline spare parts sales and management processes. Technically, the website employs modern web technologies including Modernizr and jQuery, and supports Progressive Web App (PWA) features for enhanced user experience on mobile devices. The site is served over HTTPS, ensuring encrypted communication. However, no advanced security headers were detected in the provided data, and there is no visible privacy or cookie policy on the login page. The site demonstrates good design quality, mobile optimization, and basic accessibility features, but could improve SEO and security configurations. From a security perspective, the platform uses secure form inputs and includes a password recovery mechanism. The absence of explicit security headers and privacy policies represents a moderate risk. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data for the subdomain common.ev-portal.com is unavailable, which is expected as it is a subdomain, not a registered domain. This does not negatively impact the legitimacy of the main domain or the business. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but requires improvements in privacy compliance and security best practices. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, enhancing accessibility, and providing clear contact and incident response information.

SZM s.r.o. operates SZM.sk, the largest Slovak internet directory offering categorized listings of companies, news, culture, education, technology, and more. The website serves Slovak internet users seeking organized access to local and national web resources. The business model centers on providing directory services combined with advertising placements, supported by partner sites in related sectors such as TV programming, banking, and insurance. The domain has a long history since 2003, indicating established market presence. Technically, the website uses a custom-built platform with legacy charset windows-1250, multiple JavaScript libraries including Google Tag Manager, Google Analytics, Microsoft Clarity, and Facebook Pixel for analytics and marketing. Hosting is provided by Platon, with multiple ad networks integrated. The site shows moderate performance and basic mobile optimization. SEO and accessibility are basic but functional. Security posture is moderate with HTTPS enabled and consent management for GDPR compliance. However, legacy HTTP resource loading and lack of modern security headers reduce the security score. No explicit privacy policy or terms of service were found, which is a compliance gap. No direct contact information is provided on the main page, limiting user trust and support access. Overall, SZM.sk is a moderately mature online directory with a stable business presence but requires improvements in privacy transparency, security hardening, and modernization of technical infrastructure to enhance trust and compliance.

Team-SOFT s.r.o. is a Slovak technology company specializing in ERP solutions, mobile and web application development, and consulting services primarily targeting small and medium-sized enterprises. Established in 1995, the company has a long-standing presence in the Slovak market and offers a range of products including ERP systems and mobile apps tailored to business needs. The website reflects a professional business with clear service offerings and contact information. Technically, the website uses modern web technologies such as Bootstrap and jQuery, supports mobile platforms, and integrates Google Analytics for user tracking. However, it lacks visible privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and security posture. The domain registration data aligns well with the company's claims, indicating legitimacy and stability. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

S

Slovenská komora fyzioterapeutov

komorafyzioterapeutov.sk

48

Slovenská komora fyzioterapeutov is a professional chamber representing physiotherapists in Slovakia, providing services such as registration, licensing, education, and ethical oversight. The website serves as an information and service portal for members and the public, with a focus on healthcare professionals in the physiotherapy sector. The domain is well-established since 2008, indicating a stable presence in the market. Technically, the site is built on WordPress using common libraries like jQuery and Bootstrap, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Privacy compliance is good regarding cookie consent, but a dedicated privacy policy page is not clearly found in the provided content. Overall, the website is professional, trustworthy, and compliant with basic GDPR requirements, serving its target audience effectively.

G

Gerthofer

gerthofer.sk

50

Gerthofer is a Slovak-based small graphic design and printing studio offering a range of services including digital, offset, letterpress, and intaglio printing, as well as finishing and specialty printing services. The website is professionally designed using WordPress with Elementor and Yoast SEO, providing good content quality and user experience. The company targets businesses and individuals seeking customized graphic and printing solutions, including wedding stationery. Technically, the site is built on a modern CMS platform with standard plugins, and it is mobile optimized with moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit privacy or terms of service documentation. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is trustworthy but could improve privacy compliance and security best practices.

A

Adam Žitník

adamzitnik.cz

41

Adam Žitník is a small independent design and web development service provider based in Ostrava, Czechia, founded in 2014. The website showcases a professional portfolio of client projects, emphasizing custom web design, CMS development, SEO, and consultation services. The business targets artists and companies seeking unique and creative digital presentations. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Google Analytics, with moderate performance and good mobile optimization. Security measures include Google reCAPTCHA for form protection, but lack explicit security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the domain registration data is consistent and supports the legitimacy of the business.