Security Directory

S

Schloss Kummerow

schloss-kummerow.de

58

Schloss Kummerow is a cultural heritage site located in Mecklenburg-Vorpommern, Germany, offering photographic collections, exhibitions, and event hosting services including weddings and guided tours. The website targets visitors interested in cultural events and photography, positioning itself as a significant regional venue with a focus on baroque architecture and modern photographic art. The business model revolves around cultural tourism and event rental services. Technically, the site is built on WordPress with a mature plugin ecosystem including Yoast SEO, Borlabs Cookie for GDPR compliance, and Smart Slider 3 for visual content. Hosting is provided by kasserver.com, and the site uses HTTPS with good SSL configuration. Marketing and analytics tools include Facebook Pixel and Google Tag Manager, indicating moderate user tracking with GDPR-compliant consent mechanisms. Security posture is solid with HTTPS and cookie consent but lacks published security policies or incident response information. No critical vulnerabilities or suspicious WHOIS patterns were detected. Overall, the site is professional, well-branded, and trustworthy, serving a niche cultural audience effectively.

S

Schliemann-Museum

schliemann-museum.de

46

The Schliemann Museum Ankershagen is a cultural institution dedicated to preserving and presenting the life and work of Heinrich Schliemann, a notable archaeologist and businessman. The museum offers exhibitions, educational programs, and events targeting families, school groups, and cultural enthusiasts. It holds a respected position regionally with national cultural significance, operating under the MuSeEn gGmbH umbrella. The website reflects this mission with clear, well-structured content and a focus on accessibility and visitor information. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and jQuery, ensuring a responsive and user-friendly experience. Hosting is stable with German providers, and performance is moderate with good SEO and accessibility practices. The site employs a cookie consent mechanism compliant with GDPR, and integrates Google Tag Manager for analytics. From a security perspective, the site enforces HTTPS and uses cookie consent controls but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website content and hosting, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its cultural and educational purpose effectively. Strategic improvements could include publishing formal security and incident response policies and enhancing security headers to further strengthen the security posture.

M

Museumsverein Malchin e.V.

museum-malchin.de

53

The Museum Malchin website represents a small, regional non-profit museum focused on the cultural and historical heritage of Malchin and the Mecklenburgische Schweiz region in Germany. The museum offers exhibitions and guided tours, targeting tourists and local visitors interested in regional history. The website is built on the IONOS MyWebsite platform, using standard web technologies such as HTML5, CSS3, and JavaScript with jQuery. It is hosted by IONOS and uses HTTPS, ensuring secure connections. However, the site lacks advanced security headers and privacy compliance mechanisms such as a privacy policy or cookie consent banner. Contact information is clearly provided, enhancing business credibility. No forms or tracking scripts are present, indicating minimal data collection.

H

Höhenburg Stargard

hoehenburg-stargard.de

47

Höhenburg Stargard is a historic medieval hill castle located in Northern Germany, serving as a cultural heritage site and tourist attraction. The website presents detailed information about the castle's history, visitor experiences, events, and services such as weddings and gastronomy. It targets history enthusiasts, families, and tourists interested in medieval culture and regional heritage. Technically, the site is built on WordPress using the Avada theme and Slider Revolution plugin, with Borlabs Cookie managing GDPR-compliant cookie consent. The site is well-optimized for mobile and SEO, with moderate performance and basic accessibility features. Security posture is good with HTTPS and cookie consent, though some security headers could be improved. No critical vulnerabilities or suspicious indicators were found. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting its role as a regional cultural and tourism platform.

Luftfahrttechnisches Museum Rechlin e.V. is a small non-profit museum located in Germany, dedicated to the history and technology of aviation and military developments in the Rechlin region. The museum operates in historic buildings formerly used by the Luftwaffe and later Soviet forces, offering exhibitions on German and Soviet aviation, shipbuilding, and military history. It is supported by two volunteer associations and funded through entrance fees, donations, and memberships. The museum also engages in digital innovation through an augmented reality project funded by the German federal government. Technically, the website is built on the Contao CMS platform with Bootstrap and jQuery, providing a modern, mobile-optimized user experience. The site includes a cookie consent mechanism and basic SEO metadata but lacks advanced security headers and analytics tracking. Hosting appears to be managed via your-server.de, a known hosting provider. From a security perspective, the site uses HTTPS and implements cookie consent, but no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is minimal but consistent with a legitimate small non-profit entity. No WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and suitable for its target audience of history and aviation enthusiasts. Recommendations include enhancing security headers, publishing security and incident response policies, and considering a vulnerability disclosure policy to improve trust and compliance.

L

Leea MV GmbH

leea-mv.de

59

Leea MV GmbH operates as a regional competence center for renewable energies in Mecklenburg-Vorpommern, Germany. The company focuses on education, awareness, and community engagement through its Erlebniswelt, Energie Lab, Leea Akademie, and event hosting services. The website reflects a medium-sized organization with a clear mission to promote renewable energy understanding and participation among the general public. The business model is primarily educational and event-based, targeting families, schools, and stakeholders interested in sustainability and energy topics. Technically, the website is built on WordPress 6.8.1 with common libraries such as jQuery and Bootstrap, and uses modern sliders and carousels for content presentation. Cookiebot is integrated for GDPR-compliant cookie consent management, indicating a mature approach to privacy compliance. The site is mobile-optimized and SEO-friendly, though some accessibility features are basic. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms effectively. However, it lacks explicit security headers and does not provide a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website presents a professional and trustworthy digital presence with good privacy compliance and moderate technical sophistication. Strategic improvements in security headers, incident response transparency, and contact information clarity would enhance the security posture and user trust.

W

Waren (Müritz) Kur- und Tourismus GmbH

waren-tourismus.de

49

Waren (Müritz) Kur- und Tourismus GmbH operates a comprehensive regional tourism website focused on the Mecklenburg Lake District in Germany. The site provides extensive information on accommodation, events, and visitor services, targeting tourists and visitors to the region. The business model centers on tourism promotion and facilitating bookings, positioning itself as a key regional tourism authority. The website content is well-structured, professionally designed, and consistent with the brand identity, offering a positive user experience with clear navigation and mobile optimization. Technically, the website is built on Drupal CMS, leveraging modern JavaScript libraries such as Leaflet for maps, Swiper for sliders, and Klaro for consent management. It integrates Google Analytics for visitor tracking with privacy-conscious settings like IP anonymization. The site uses HTTPS and demonstrates good security practices, although some security headers could be improved. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site enforces HTTPS and manages cookie consent effectively, aligning with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of a published security policy or incident response contact suggests room for maturity in security governance. The WHOIS data is limited but consistent with a legitimate regional tourism entity. Overall, the website presents a trustworthy, professional, and user-friendly platform for regional tourism promotion. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen the site's security posture and user trust.

I

Inselstadt Malchow

inselstadt-malchow.de

65

Inselstadt Malchow operates as a municipal government website serving the local community and tourists in the Mecklenburgische Seenplatte region of Germany. The site provides comprehensive information about local government services, tourism, events, and community resources. It is well-positioned as an official source for residents and visitors, with a clear focus on public administration and regional promotion. The website leverages a modern technical infrastructure based on Bootstrap, jQuery, and a specialized CMS platform (verwaltungsportal.de), hosted on rzone.de servers. The site is mobile optimized, accessible, and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and aligned with its governmental purpose.

M

Mecklenburgische Kleinseenplatte

klein-seenplatte.de

52

The website www.klein-seenplatte.de serves as a regional tourism portal for the Mecklenburgische Kleinseenplatte area in Germany. It provides visitors with information about the natural landscape, outdoor activities such as cycling, hiking, and water sports, as well as accommodation and event details. The site targets tourists and outdoor enthusiasts seeking to explore this scenic region. Technically, the website is built on Joomla CMS, utilizing common web technologies including jQuery, Google Analytics, and Facebook SDK for social media integration. The site is moderately optimized for mobile devices and SEO, with clear navigation and consistent branding. Security-wise, the site uses HTTPS with anonymized IP tracking in Google Analytics and includes CSRF tokens in Joomla scripts, but lacks advanced security headers and a vulnerability disclosure policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is functional, professional, and trustworthy for its purpose, though improvements in security and privacy compliance are recommended.

L

Literaturzentrum Neubrandenburg e.V.

literaturzentrum-nb.de

47

Literaturzentrum Neubrandenburg e.V. is a well-established cultural non-profit organization founded in 1971, dedicated to promoting literature and reading culture in Neubrandenburg and its region. It operates the Brigitte-Reimann-Literaturhaus, offering literary programs, archival resources, and exhibitions. The organization enjoys regional, national, and international recognition, supported by local government and cultural ministries. The website reflects this mission with clear content and a professional presentation. Technically, the website is built on Joomla CMS with Bootstrap 5 and jQuery, ensuring a modern and responsive design. Hosting is managed via kasserver.com, and the site employs HTTPS with a cookie consent mechanism, indicating awareness of privacy compliance. However, some security headers and advanced security policies are not evident, suggesting room for improvement. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a privacy policy and cookie consent present. No incident response or vulnerability disclosure information is provided, which could be enhanced to improve trust. Overall, the website is trustworthy, professionally maintained, and suitable for its cultural non-profit purpose. Strategic recommendations include enhancing security headers, adding explicit security and incident response policies, and possibly integrating analytics with privacy considerations.

A

AGRONEUM Alt Schwerin

agroneum-altschwerin.de

45

AGRONEUM Alt Schwerin is a well-established open-air museum located in Alt Schwerin, Germany, dedicated to showcasing the agricultural history of Mecklenburg. With a history spanning over 60 years, the museum offers extensive exhibitions, workshops, events, and hospitality services including a restaurant and farm shop. The website reflects a regional cultural institution targeting families, school groups, and tourists interested in agriculture and history. The business model combines cultural heritage preservation with educational and hospitality services, positioning AGRONEUM as a key regional attraction with a consistent brand and trust indicators such as certifications and social media presence. Technically, the website is built on the Contao CMS platform, utilizing modern frontend technologies like jQuery and Swiper.js, hosted on a stable provider with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and consent mechanisms. Overall, the site is professional, trustworthy, and content-rich, supporting the museum's mission effectively.

3

3 Königinnen Palais

3koeniginnen.de

45

3 Königinnen Palais is a cultural and historical exhibition center located on the Schlossinsel Mirow in Germany. It offers an interactive exhibition focused on the history of the Mecklenburg-Strelitz region and the lives of three princesses who became European queens. The site targets tourists, families, school groups, and history enthusiasts, providing guided tours, special exhibitions, events, a museum shop, and a café. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. It uses the Contao CMS platform with modern frontend libraries such as jQuery and Swiper.js. Hosting is provided via rzone.de nameservers, indicating a stable infrastructure. The website enforces HTTPS and includes a GDPR-compliant cookie consent mechanism and privacy policy. Contact information is clearly presented, including phone, email, and physical address. Social media presence on Facebook and Instagram supports community engagement. However, no explicit security policy or incident response information is published, and no terms of service page was found.

T

Todos

todos.sk

60

Todos is a well-established authorized vehicle dealership and service provider operating multiple branches across Slovakia. The company specializes in the sale and servicing of popular automotive brands including Škoda, Toyota, SEAT, Cupra, and several premium American brands. Their business model focuses on comprehensive vehicle sales, authorized servicing, fleet management for companies, and an e-commerce platform for vehicle accessories. The website reflects a strong market position with clear branding and multiple service offerings tailored to Slovak customers seeking reliable automotive solutions. Technically, the website is built on the Webflow platform, leveraging modern web technologies and integrated with Google Analytics, Google Tag Manager, and Mouseflow for user behavior tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses IP anonymization for analytics, but lacks visible security headers and explicit security or incident response policies. Privacy compliance is addressed with a cookie consent mechanism and a basic cookie policy, though a dedicated privacy policy page is not explicitly found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

GRAFOBAL, akciová spoločnosť

grafobal.sk

48

GRAFOBAL a.s. is a well-established European manufacturer specializing in packaging solutions, including smooth and corrugated cardboard packaging, offset printing, and finishing technologies. With a 119-year tradition and a leadership position in Central and Eastern Europe, the company serves primarily B2B clients requiring high-quality packaging products. The website reflects a professional digital presence with clear business information, product offerings, and contact details. Technically, the site employs modern frameworks such as Bootstrap and jQuery, integrates marketing and analytics tools like Google Tag Manager and Facebook Pixel, and implements cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and a dedicated security policy page are absent. WHOIS data confirms the domain's legitimacy and consistency with the company's identity. Overall, the website is trustworthy, compliant, and well-positioned to support the company's business objectives.

SIA Cesars is a well-established Latvian wholesale company specializing in Asian and European food products. The company operates both a wholesale business and an online store targeting customers interested in Eastern cuisine ingredients and specialty food products. Their market position is strong within Latvia as a leading distributor in their niche. Technically, the website uses standard modern web technologies including Google Tag Manager and Google Analytics, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and secure form handling, but lacks advanced security headers and a formal security policy. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information and business legitimacy are clearly presented, supporting trustworthiness. Overall, the website is professional and functional with room for improvement in security and privacy compliance.

M

Mandala Tours S.L

turismomarruecos.com

62

Turismo Marruecos, operated by Mandala Tours S.L, is a Spanish-based travel agency specializing in customized and private trips to Morocco. The company offers a variety of travel packages including luxury tours, desert excursions, group travel, and wellness trips, targeting Spanish-speaking travelers seeking exclusive Moroccan experiences. The website is professionally designed with good content quality and clear navigation, supporting the business's niche market position. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder and Slider Revolution, enhanced with NitroPack for performance optimization. The site is mobile-optimized and uses HTTPS, but lacks some security headers and formal privacy and cookie policies, indicating room for improvement in security and compliance maturity. From a security perspective, the site enforces HTTPS and uses modern web technologies but does not implement advanced security headers or provide incident response information. The absence of WHOIS data raises concerns about domain registration legitimacy, although the active social media presence and detailed business content suggest a legitimate operation. Overall, the site presents moderate risk with recommendations to enhance security and compliance. Strategically, the company should focus on publishing comprehensive privacy and cookie policies, implementing security headers, and verifying domain registration details to strengthen trust and compliance. Enhancing incident response readiness and transparency will further improve the security posture and customer confidence.

A

Adning

adning.com

48

Adning is a specialized WordPress advertising management plugin provider, offering a comprehensive all-in-one solution for website owners to manage ads efficiently. The company positions itself as a market leader with a product history dating back to 2011, supported by a domain registered in 2017. The website is professionally designed with good SEO practices, structured data, and a focus on user experience for WordPress users. Technically, the site leverages WordPress CMS, jQuery, Google Analytics, and Google Adsense, among other technologies, providing a modern and responsive platform. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and security headers, which are recommended for enhanced security. Privacy compliance is basic with a privacy policy and cookie consent banner present, though no direct contact information or detailed security policies are published. Overall, the site is trustworthy and functional with room for security and compliance improvements.

P

Peter Konecny / zacweb.net e.U.

zacwebber.net

53

ZACWEB, legally registered as Peter Konecny / zacweb.net e.U., is a small Austrian technology and telecommunications service provider specializing in professional hosting, VoIP telephony solutions, Nextcloud cloud services, and web design. The company targets local businesses and individuals in the Waldviertel region, positioning itself as a trusted local partner with a focus on quality and personalized service. The website is built on WordPress using the Divi theme and incorporates modern web technologies and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and domain transfer protection, though improvements such as DNSSEC and enhanced security headers are recommended. The site includes a GDPR-compliant cookie consent mechanism but lacks explicit privacy and terms of service pages. Overall, the website presents a professional and trustworthy digital presence aligned with the company's business model and market position.

Z

ZACWEB.NET

zacweb.at

52

Konecny & Friends operates as a small Austrian technology and telecommunications service provider, focusing on web design, hosting, cloud solutions, VoIP, and WiFi services. The company leverages a partner network to extend its offerings and serves small to medium businesses and individual entrepreneurs. The website is built on WordPress with the Divi theme, incorporating modern plugins for GDPR compliance and analytics. Security posture is good with HTTPS, security headers, and consent-based tracking. However, the site lacks explicit security policies and incident response information. Overall, the business presents a professional and trustworthy online presence with room for enhanced transparency in security and contact details.

The website www.co2-ampelshop.de is an e-commerce platform operated by come2print eK, specializing in CO2 measuring devices targeted primarily at schools, kindergartens, and municipal institutions in Germany. The business has been established since at least 2013 and positions itself as a niche provider in the education sector for indoor air quality monitoring solutions. The site offers clear product information, legal pages, and customer contact options, reflecting a professional and focused business model. Technically, the website is built on WordPress with WooCommerce, utilizing common plugins such as Rank Math SEO and Contact Form 7. The site is moderately optimized for performance and mobile use, with good SEO practices including structured data. Hosting is provided via rzone.de, and the site uses HTTPS, though lacks advanced security headers and cookie consent mechanisms. From a security perspective, the site demonstrates basic best practices such as HTTPS and nonce tokens in forms but lacks published security policies, incident response contacts, and cookie consent banners, which are important for GDPR compliance. No critical vulnerabilities or malicious content were detected. The WHOIS data aligns well with the business claims, indicating legitimacy and consistency. Overall, the website presents a trustworthy and professional front for a small specialized e-commerce business. Improvements in security headers, privacy compliance (cookie consent), and incident response transparency would enhance the security posture and regulatory compliance.

R

RNG Forum

rngforum.com

58

RNG Forum is a specialized event organizer focused on the renewable natural gas industry in Canada, hosting its flagship event in April 2026. The website serves as a hub for event information, registration, sponsorship, and exhibitor details, targeting industry professionals and stakeholders. The business positions itself as the largest RNG event in Canada, providing networking and knowledge-sharing opportunities. Technically, the site is built on WordPress with WooCommerce and enhanced by popular plugins like Yoast SEO and Google reCAPTCHA, indicating a moderate level of digital maturity. The site is mobile-optimized and uses structured data for SEO benefits. Security posture is adequate with HTTPS and spam protection on forms, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve compliance and security transparency.

B

Biogas Community

biogascommunity.com

56

Biogas Community is a specialized online platform serving professionals in the biogas and biomethane industry worldwide. It facilitates networking, business development, funding connections, and access to industry news and opportunities. The platform is relatively new, founded in 2021, and operates under the parent brand Biogas World. The website is professionally designed with a clear focus on its niche audience, offering services such as project funding, supplier connections, and talent recruitment. Technically, the website is built on WordPress using the BuddyBoss platform and WooCommerce for e-commerce capabilities. It leverages modern JavaScript libraries like GSAP and jQuery, and is hosted behind Cloudflare DNS, ensuring good performance and security. Mobile optimization and SEO practices are well implemented, although accessibility features are basic. From a security perspective, the site uses HTTPS and Cloudflare DNS but lacks DNSSEC and important security headers. There is no visible cookie consent mechanism or detailed security and incident response policies, which are areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration is consistent and transparent. Overall, the website presents a trustworthy and professional front for its business niche, with moderate technical maturity and room for enhanced security and privacy compliance.

W

Woodcote Media Ltd

biofuels-news.com

70

Biofuels International Magazine, operated by Woodcote Media Ltd, is a well-established UK-based publication specializing in biofuels, biodiesel, bioethanol, and biomass sectors. The website serves as a leading global platform providing news, features, events, and subscription services to professionals and stakeholders in the renewable energy industry. The business model centers on media publishing, advertising, and event hosting, positioning itself as a key information source in the biofuels market. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Facebook Pixel, and LinkedIn Insight Tag for analytics and marketing. Hosting is provided by Nimbushosting with a stable DNS setup. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Cookie consent and privacy policies are implemented, reflecting compliance with GDPR requirements. From a security perspective, the site uses HTTPS with a good SSL configuration and domain status flags that prevent unauthorized transfers. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. No explicit security or incident response policies are publicly available. The site uses reCAPTCHA to protect forms and has no visible vulnerabilities or malicious content. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It effectively serves its niche audience with relevant content and maintains a solid technical and security posture. Strategic improvements in security headers and vulnerability disclosure could further enhance its security maturity.

L

Landesverband der CDU Mecklenburg-Vorpommern

cdu-mv.de

50

The website for Landesverband der CDU Mecklenburg-Vorpommern serves as the official digital presence of the regional political party branch. It provides comprehensive information about the party's political decisions, organizational structure, events, and membership services, targeting citizens and politically engaged individuals in Mecklenburg-Vorpommern. The site features a podcast and news updates, enhancing engagement with its audience. Technically, the website is built on WordPress using the Divi theme and several plugins including Ultimate Member and Podlove Podcasting, indicating a mature and extensible infrastructure. The hosting appears to be managed via kasserver.com, a known hosting provider. Security-wise, the site enforces HTTPS, uses Google reCAPTCHA to prevent spam, and implements a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected, though some security headers could be improved. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and trust signals. The domain registration is consistent with the website's purpose and shows no suspicious patterns. Strategic recommendations include enhancing security headers, documenting incident response policies, and continuing regular updates to maintain security and compliance.

D

DocuWare

docuware.com

68

DocuWare is a well-established enterprise software provider specializing in document management and workflow automation solutions. The website serves as a comprehensive marketing and resource portal targeting businesses seeking to digitize and automate their document processes. The company positions itself as a leader in the technology sector with a strong emphasis on security, compliance, and customer support. The site is professionally designed, mobile-optimized, and rich in content, including multilingual support and extensive resources such as webinars, case studies, and product tours. Technically, the site leverages HubSpot CMS, modern analytics tools like Matomo and Google Tag Manager, and implements robust privacy and cookie consent mechanisms. Security posture is strong with HTTPS enforced and multiple certifications displayed, though explicit security headers could be improved. Overall, the site reflects a mature digital presence aligned with enterprise standards.

Š

ŠK Slovan Bratislava futbal, a.s.

skslovan.com

60

ŠK Slovan Bratislava is a historically successful Slovak football club with a strong online presence through its official website. The site serves as a hub for club news, match schedules, ticket sales, merchandise, and multimedia content, targeting football fans and the Slovak sports community. The website is professionally designed, mobile-optimized, and integrates modern web technologies and third-party services for analytics and advertising. However, the absence of publicly available WHOIS data for the domain raises concerns about domain registration transparency. The site employs HTTPS and cookie consent mechanisms, but lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Overall, the digital infrastructure is solid, but improvements in compliance documentation and domain registration transparency are recommended.

F

FC Zbrojovka Brno

fczbrno.cz

47

FC Zbrojovka Brno operates an official website serving as the primary digital platform for the Czech football club. The site delivers comprehensive content including news, team rosters, match schedules, ticket sales, and fan engagement features. It targets football fans and the local community, supporting the club's brand and commercial activities. The domain is well-established since 2010, reflecting a mature online presence. Technically, the website uses modern web technologies such as Bootstrap, jQuery, Flickity, and integrates analytics and advertising tools like Google Tag Manager, Google Analytics, and Facebook Pixel. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit privacy policies are missing. No critical vulnerabilities were detected in the content. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

F

Fruitisimo

fruitisimo.cz

48

Fruitisimo is a well-established fruit bar chain operating primarily in the Czech Republic with a presence in Slovakia, Hungary, Germany, and Poland. Founded in 2008, the company offers a variety of fresh fruit drinks, iced coffee specials, ice creams, healthy snacks, desserts, and coffee through over 80 physical locations and an online shop. The website is professionally designed using WordPress and Elementor, supporting multiple languages and providing a seamless user experience. Social media integration and a club membership program enhance customer engagement. Technically, the site uses modern web technologies and maintains good security practices including HTTPS and security headers. However, there is room for improvement in publishing dedicated security policies and incident response information. Overall, Fruitisimo demonstrates a strong market position in retail with a solid digital presence and moderate tracking practices.

M

MagePal LLC

magepal.com

62

MagePal LLC operates a professional eCommerce website specializing in Magento 2 extensions designed to enhance online store functionality and customer experience. The company offers a broad portfolio of extensions including Google Analytics 4 integration, Google Tag Manager, checkout and shipping enhancements, and email tools. The website demonstrates a strong market position with over 11 years of experience and more than 30 extensions available, targeting Magento store owners and developers. The business model focuses on software development and support services within the eCommerce technology sector. Technically, the website is built on Magento 2 platform leveraging modern JavaScript libraries such as RequireJS, jQuery, and Knockout.js. It integrates Google Tag Manager and uses invisible Google reCAPTCHA for form security. The site is mobile optimized, SEO friendly, and provides a good user experience with clear navigation and professional design. Performance is moderate with room for improvement in loading speed and security headers. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect forms, but lacks explicit security headers like CSP and HSTS. No vulnerabilities or exposed sensitive data were detected in the HTML content. However, the absence of privacy and cookie policies and lack of vulnerability disclosure mechanisms indicate gaps in compliance and incident response readiness. The WHOIS data is missing or inconsistent, which reduces domain trustworthiness despite the professional website content. Overall, MagePal.com is a credible and professional eCommerce extension provider with a solid technical foundation and good security practices. To enhance trust and compliance, the company should publish comprehensive privacy and cookie policies, implement security headers, and provide clear vulnerability disclosure and incident response information. Addressing the WHOIS data inconsistency would also improve legitimacy perception.

P

Parador

parador.de

66

Parador.de is a professional e-commerce website specializing in high-quality flooring products including parquet, laminate, vinyl, and related accessories. The company positions itself as a leading global brand in interior design flooring solutions, targeting both consumers and professionals. The website offers a comprehensive product catalog, dealer locator, sample ordering, and installation guides, reflecting a mature digital presence. Technically, the site is built on Magento 2 with modern JavaScript frameworks and libraries, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and explicit security policies. Overall, the site is trustworthy, well-branded, and professionally maintained, but lacks visible privacy and terms of service documentation in the provided content.

B

Bezpotisku.cz - oblečení a móda bez potisku za rozumné ceny

bezpotisku.cz

47

Bezpotisku.cz is an e-commerce retailer specializing in unbranded clothing and fashion items for women, men, and children. The business emphasizes affordable, quality apparel without logos or prints, appealing to customers who prefer basic and versatile wardrobe pieces. The company operates both online and through physical showrooms and stores in the Czech Republic, targeting a niche market segment focused on sustainability and simplicity. The website features a professional design with clear navigation and a strong marketing presence via social media and advertising pixels.

Č

ČESKÝ INTERNET s.r.o.

realitniservery.cz

48

Realitní servery.cz is a Czech Republic-based real estate portal operated by Český Internet s.r.o., providing a comprehensive platform for property listings including sales, rentals, and auctions. The site aggregates listings from various regional real estate agencies and brokers, offering advanced search filters and a broker directory to facilitate user navigation. It targets individuals and businesses interested in Czech real estate, positioning itself as a trusted aggregator with a medium-sized market presence since 2008. Technically, the website employs modern web technologies including jQuery, Vue.js, Google Analytics, and Facebook SDK, ensuring a responsive and user-friendly experience. The site is served over HTTPS with good SSL configuration and includes cookie consent mechanisms compliant with GDPR. However, the absence of WHOIS data limits transparency regarding domain registration details. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and use of consent management platforms, but lacks explicit public security policies or incident response information. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site maintains a moderate to good security posture with room for improvement in security headers and transparency. The overall risk assessment is moderate with a legitimacy score of 50 due to missing WHOIS data but balanced by strong business presence and compliance indicators. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and resolving WHOIS data visibility to improve trust and compliance.

I

ISW Solutions s.r.o.

nemoreport.cz

56

NemoReport.cz is an online platform operated by ISW Solutions s.r.o. that provides comprehensive property risk verification services primarily for the Czech real estate market. The website offers users the ability to quickly obtain detailed reports on various property types, including apartments, houses, and land, helping buyers make informed decisions and avoid risks associated with real estate transactions. The company positions itself as a trusted advisor with additional consulting and technical inspection services, supported by partnerships with recognized industry players. Technically, the website employs a modern and robust technology stack including Bootstrap, jQuery, and specialized libraries such as Typed.js and Leaflet for interactive maps. The site is well-optimized for mobile devices and demonstrates good SEO and accessibility practices. Privacy and cookie policies are clearly presented with active consent mechanisms, reflecting compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses cookie consent banners, but lacks some advanced security headers and explicit incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data due to privacy protection is noted but does not detract from the overall legitimacy and professionalism of the site. Overall, NemoReport.cz presents a secure, user-friendly, and trustworthy service for real estate risk assessment, with strategic recommendations including enhancing security headers, publishing incident response policies, and adding vulnerability disclosure information to further strengthen its security posture.

G

Go Afrika s.r.o.

goafrika.cz

44

Go Afrika s.r.o. is a Czech travel agency specializing in customized safari and vacation packages primarily focused on East African destinations such as Kenya, Tanzania, Rwanda, Uganda, Botswana, and Zimbabwe. The company targets Czech-speaking travelers seeking personalized African travel experiences, including guided trips with notable figures like Jiří Kolbaba. The website presents a professional and consistent brand image with clear service offerings and partner affiliations, positioning itself as a niche player in the hospitality industry focused on African tourism. Technically, the website employs modern web technologies including Bootstrap, jQuery, Font Awesome, and Google Tag Manager, ensuring a responsive and user-friendly experience. Security features such as HTTPS and Google reCAPTCHA v3 are implemented, alongside GDPR-compliant privacy and cookie policies with consent mechanisms. However, the absence of WHOIS data and HTTP security headers indicates areas for improvement in domain transparency and security hardening. The security posture is solid with encrypted connections and anti-bot measures, but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected. Overall, the website is safe, trustworthy, and well-optimized for its target audience, though domain registration opacity slightly reduces trust. Strategically, Go Afrika should focus on enhancing domain registration transparency, implementing security headers, and publishing security policies to strengthen trust and compliance. These steps will improve their security posture and business credibility in a competitive travel market.

S

SnowTrex

snowtrex.cz

10

SnowTrex is an established online travel agency specializing in winter ski holidays, offering packages including skipasses and accommodations across numerous hotels and destinations. The website targets winter sports enthusiasts primarily in the Czech Republic and other European markets, supported by multiple localized sister sites. The business model focuses on providing comprehensive ski vacation options with a strong digital presence. Technically, the website employs modern frontend technologies such as Chakra UI and jQuery, hosted on Amazon Cloudfront CDN, with Google Tag Manager integrated for analytics and marketing. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages in the provided content. Overall, the site is professional and trustworthy, though transparency could be improved by publishing privacy and security policies and incident response contacts.

I

Italia Travel

italiatravel.cz

53

Italia Travel is a small Czech travel agency specializing in organizing holiday packages to Italy, targeting families and couples. Their offerings include summer vacations by the sea and winter holidays in the mountains, with options for bus and flight travel. The website is professionally designed with clear navigation and mobile optimization, supporting a positive user experience. Technically, the site uses common web technologies such as jQuery, Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. Security measures include HTTPS and reCAPTCHA on forms, but lack advanced security headers and a published privacy policy, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate. Overall, the site presents a moderate security posture with room for enhanced compliance and transparency.

M

Moroccan National Tourist Office (MNTO)

visitmorocco.com

10

The website www.visitmorocco.com is the official online presence of the Moroccan National Tourist Office (MNTO), dedicated to promoting tourism in Morocco. It offers comprehensive travel information, cultural insights, suggested tours, and practical advice for international tourists. The site targets a global audience interested in Moroccan heritage, nature, and leisure activities. The business model is government-driven tourism promotion, positioning itself as the authoritative source for Moroccan travel.

S

Sunseekers Tours

sunseekerstours.com

51

Sunseekers Tours is a well-established travel and tour operator specializing in bespoke and luxury tours primarily in Ghana and West Africa, with outbound tours to destinations such as Dubai and South Africa. The company emphasizes personalized travel experiences and vehicle rentals, supported by over 30 years of industry experience and multiple prestigious awards. Their website reflects a professional and consistent brand image, targeting travelers seeking customized and memorable journeys. Technically, the website is built on a modern WordPress platform using WooCommerce and Elementor, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and some security headers. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, though improvements in security and privacy compliance are recommended.

E

ERBIA

ckerbia.cz

48

ERBIA is a Czech travel agency specializing in vacations in Italy, offering accommodation bookings, bus transportation to Caorle from across the Czech Republic, and pet-friendly apartment options. The company has been established since 2003, indicating a stable presence in the hospitality sector. Their website targets Czech travelers interested in Italian holiday destinations, with additional offerings such as flights to the island of Ischia. The business operates a niche model focusing on regional travel services with a small company size. Technically, the website is built on WordPress CMS, utilizing WooCommerce for e-commerce capabilities and KingComposer for page building. The site integrates common web technologies including jQuery, Bootstrap, FontAwesome, and Google Fonts. Hosting and domain registration are consistent with Czech providers, specifically REG-ZONER and WEDOS DNS servers. The site demonstrates moderate performance and good mobile optimization, with SEO enhancements via Yoast SEO and All in One SEO plugins. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected in the provided data, and the Google Analytics tracking code contains a placeholder ID, suggesting incomplete analytics setup. No exposed sensitive data or vulnerabilities were identified in the HTML content. The absence of terms of service, security policies, or vulnerability disclosure pages indicates areas for improvement in transparency and security posture. Overall, the website presents a professional and trustworthy front for a small travel agency, with good content quality and compliance with privacy regulations. Strategic recommendations include enhancing security headers, completing analytics configuration, and publishing comprehensive security and terms policies to strengthen trust and compliance.

A

AGM TRAVEL spol. s r.o.

agmtravel.cz

57

AGM TRAVEL spol. s r.o. is a Czech travel company specializing in unique holiday experiences in Croatia, combining motorboat trips, cycling tours, and relaxation on Dalmatian islands. The company has a long-standing presence with 25 seasons of operation, targeting Czech-speaking tourists seeking active and leisure travel. Their offerings include guided tours, bus transportation, and half-board accommodations, supported by clear contact channels and certifications that enhance trust. Technically, the website employs common web technologies such as jQuery, Slick Slider, and Google Fonts, with legacy Google Analytics for traffic analysis. The site is mobile-optimized with good navigation and content quality, though some technical improvements could be made, such as updating analytics and adding security headers. From a security perspective, the site enforces HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data and security.txt reduces transparency and trustworthiness. No critical vulnerabilities or exposed sensitive data were detected, but security headers and incident response information are lacking. Overall, the website presents a professional and trustworthy business front with good privacy compliance and user experience. The main risk lies in the missing WHOIS data, which should be investigated further to confirm domain legitimacy. Strategic improvements in security headers and incident response disclosures would enhance the security posture and trust.

W

weiberwirtschaft

weiberwirtschaft.at

56

Weiberwirtschaft is a small Austrian creative agency specializing in concept and design, with a focus on text and textiles. The website serves as both a portfolio and an e-commerce platform showcasing various cultural and artistic projects. The business targets a general audience interested in creative services and products. Technically, the website is built on WordPress with WooCommerce, leveraging Bootstrap and jQuery for frontend functionality. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks published security policies and incident response information. Overall, the website is trustworthy and professionally presented, with room for improvement in security transparency and technical enhancements.

T

TECHCOMP.COM IS DIFFERENT

techcomp.com

60

Techcomp.com is a non-commercial domain sales website offering the premium domain techcomp.com for sale via GoDaddy. The site is minimalistic, serving primarily as a landing page to attract potential buyers and reserve the domain for future projects. The business model focuses on domain name sales and reservation, targeting domain investors and businesses seeking a strong brand domain in the technology sector. The website uses modern front-end technologies such as Bootstrap and FontAwesome Pro but lacks advanced CMS or dynamic content. Security posture is basic with no DNSSEC enabled and no visible security headers, though domain status locks are in place to protect domain integrity. Privacy and cookie policies are absent, indicating low compliance maturity. Overall, the site is functional but minimal, with moderate trustworthiness based on domain age and registrar reputation.

B

Bestattung Graz GmbH

bestattung-graz.at

53

Bestattung Graz GmbH is a well-established funeral services provider based in Graz, Austria, with over 115 years of experience. The company offers a range of services including traditional burial, cremation, alternative funeral forms, and related support services. Their market position is strong regionally, supported by transparent pricing and a customer-centric approach. The website reflects a professional and trustworthy business with clear contact information and a consistent brand presence. Technically, the site is built on WordPress using Elementor and several modern plugins, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers could be enhanced. Overall, the site is compliant with GDPR and provides a positive user experience.

C

Citycom Telekommunikation GmbH

citycom.at

60

Citycom Telekommunikation GmbH is a regional market leader in Austria providing ICT solutions including internet, voice, datacenter, network, and cloud services. The company benefits from its affiliation with Holding Graz and holds certifications such as ISO 9001 and EN 50600, underscoring its commitment to quality and security. The website reflects a professional and business-oriented approach targeting enterprises seeking reliable telecommunications and ICT services. Technically, the site is built on WordPress with modern plugins and SEO tools, offering good performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, although incident response and vulnerability disclosure information are absent. Overall, the domain registration and WHOIS data align well with the business claims, supporting high legitimacy and trustworthiness.

E

Energie Graz

energie-graz.at

74

Energie Graz is a regional energy service provider based in Graz, Austria, offering electricity, natural gas, district heating, and a variety of energy-related services including photovoltaics and electromobility. The company positions itself as a sustainable and reliable energy partner with a strong focus on customer service and environmental responsibility. Their website reflects a mature digital presence built on Magento, featuring modern web technologies and integrated analytics tools. Security posture is solid with HTTPS enforcement, cookie consent mechanisms, and CSRF protections, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, accessible, and compliant with GDPR requirements, supporting a trustworthy user experience.

S

SC Networks - Evalanche

evalanche.net

48

SC-Networks GmbH operates Evalanche, a mature and well-established marketing automation platform focused on B2B clients primarily in Germany. The website presents a professional and comprehensive digital presence with strong emphasis on data protection, ISO 27001 certification, and GDPR compliance. The platform offers modular marketing automation, lead management, and email marketing services with a strong ecosystem of partners and professional services. Technically, the site is built on WordPress with modern JavaScript libraries and integrates Google Tag Manager and Cookiebot for analytics and consent management. Security posture is solid with HTTPS and certifications, though explicit security headers and incident response disclosures are lacking. WHOIS data is missing or privacy protected, which slightly reduces domain trustworthiness but does not detract from the overall professional presentation. Strategic recommendations include enhancing security headers, publishing incident response contacts, and clarifying domain registration details to improve transparency and trust.

P

Peoplecomm

peoplecomm.cz

44

Peoplecomm is a Czech-based small publishing company specializing in books that address social, ecological, and business topics with an ethical focus. The company operates an e-commerce platform offering physical books and ebooks, targeting a general audience interested in socially responsible literature. The website is professionally designed, mobile-optimized, and includes essential features such as newsletter subscription and social media integration. Technically, the site uses modern web technologies including jQuery, Google reCAPTCHA, and the Nette Framework, ensuring a functional and secure user experience. Security posture is solid with HTTPS enforced and spam protection on forms, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, the absence of WHOIS registration data reduces the overall trust score and suggests a need for verification of domain legitimacy. Overall, the site is trustworthy and professional but would benefit from enhanced transparency regarding domain registration and security policies.

H & Hotels Group is a Czech hospitality company operating since 1992, offering hotel accommodations, restaurants, event hosting, and wedding services primarily in Prague and surrounding areas. The company targets tourists and travelers seeking quality lodging and hospitality experiences. The website reflects a medium-sized business with a professional online presence and multiple service offerings. Technically, the site employs a modern JavaScript stack including jQuery, Google Analytics, Facebook Pixel, and reCAPTCHA, ensuring functional and interactive user experience. Mobile optimization and SEO practices are adequately implemented, though accessibility could be improved. Security posture is solid with HTTPS and CAPTCHA integration, but lacks explicit security headers and dedicated security policies. WHOIS data is missing, which slightly reduces trust but does not detract significantly from the overall legitimacy. The site includes cookie consent mechanisms and GDPR compliance indications, supporting privacy adherence. Overall, the website is professional, secure, and business-focused with room for enhanced transparency and security documentation.

S

Smart City Wettbewerb 2025 - Smartcity Wettbewerb

smartcitywettbewerb.com

48

The website smartcitywettbewerb.com serves as a platform for the Smart Green City competition 2025, focusing on innovative and sustainable urban development solutions in Dornbirn, Austria. It targets innovators, urban planners, and sustainability advocates to submit projects that contribute to a climate-neutral and technologically advanced city. The site is built on WordPress with Elementor and uses modern web technologies, providing a good user experience and mobile optimization. Structured data and SEO practices are well implemented, enhancing discoverability. Security posture is adequate with HTTPS and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is partial, with cookie consent implemented but no visible privacy or terms of service pages. Overall, the site is professional and trustworthy but would benefit from enhanced compliance documentation and security hardening.

FreeDNS.si is a Slovenian-based free DNS hosting service operated by Webtasy, d.o.o., established in 2009. The service targets individuals and small to medium businesses seeking free and easy DNS management with features such as unlimited domains, IPv6 support, and multiple geographically distributed DNS servers. The website is professionally designed with multilingual support and provides user registration, login with optional two-factor authentication, and Google reCAPTCHA to enhance security. The technical infrastructure leverages Bootstrap, jQuery, and Dojo Toolkit, with Google Analytics for traffic monitoring. Security posture is moderate with HTTPS enforced and secure login mechanisms, but lacks advanced security headers and explicit security policies. Privacy compliance is basic with presence of cookie and legal notices but no detailed GDPR statements. Overall, the website is trustworthy and functional with room for improvement in security and privacy transparency.