Security Directory

S

Středisko společných činností AV ČR, v. v. i.

academia.cz

57

Nakladatelství Academia is a leading Czech academic publisher affiliated with the Czech Academy of Sciences, specializing in scientific monographs, translations, popular science literature, encyclopedias, dictionaries, language textbooks, and fiction. The website reflects a mature digital presence with a modern CMS (OpenCms), responsive design, and privacy-conscious analytics (Plausible). The content is rich, professionally curated, and targeted at academics, students, and the general public interested in science and culture. Contact information and privacy policies are clearly presented, supporting GDPR compliance. However, the site lacks explicit security policies and incident response contacts, which could be improved to enhance trust and compliance. Overall, the website demonstrates a strong market position and credible business operations within the education and media sectors.

E

ERF Medien e.V.

bibleserver.com

64

ERF Bibleserver is a non-profit Christian media service operated by ERF Medien e.V., providing a comprehensive digital platform for Bible study with over 45 international Bible translations, study tools, and an AI chatbot assistant. The website is well-positioned in the religious media sector, leveraging partnerships with major Bible societies such as Biblica and Crossway to offer authoritative content. Technically, the site employs modern frameworks like Vue.js and Vuetify, ensuring a responsive and accessible user experience. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a mature approach to user data protection. Security posture is strong with HTTPS enforced and no evident vulnerabilities, although some security headers could be improved. Overall, the site presents a professional, trustworthy, and user-friendly platform for its target audience.

The website 'Učme se přežít' is an educational platform focused on motorcycle safety and road safety awareness primarily in the Czech Republic. It offers various training courses, publications, and organizes events aimed at improving motorcycle handling skills and safety knowledge. The site is supported by partnerships with government agencies and safety organizations, enhancing its credibility within its niche market. Technically, the website employs modern web technologies such as the Svelte framework and ES modules, providing a responsive and user-friendly experience. However, the absence of privacy and cookie policies indicates a gap in compliance with data protection regulations. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and formal incident response contacts. The missing WHOIS data reduces domain trustworthiness, though the content and partnerships suggest legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security practices.

nivia.de is a German technology company specializing in avalanche transceiver devices featuring advanced 3D technology for faster and more precise search capabilities. The website presents a professional and focused product offering targeting skiers, mountaineers, and rescue professionals. The company positions itself as an innovator in avalanche safety technology with a small business footprint. Technically, the site uses modern web technologies including JavaScript ES modules, SVG graphics, and the UIkit framework, hosted on kasserver.com. The site is mobile optimized with good SEO and accessibility basics. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. No direct contact emails or phone numbers are visible, with contact likely via forms. Overall, the site is trustworthy and professional but could improve in privacy compliance and security transparency.

K

Kulturní centrum Turnov, s.r.o.

kcturnov.cz

41

Kulturní centrum Turnov, s.r.o. operates as a regional cultural center in Turnov, Czech Republic, providing a variety of cultural events including theater, music concerts, and film screenings. The website serves as a portal for event programming, ticketing, and cultural information targeting a general audience interested in arts and culture. The business model focuses on event organization and venue management, positioning itself as a key cultural hub in the region. Technically, the website employs modern web technologies such as JavaScript ES modules, CSS, and HTML5, with asynchronous data loading via Fetch API. The site is mobile-optimized and includes SEO best practices like meta descriptions and keywords. However, no CMS or hosting provider details are evident, and some accessibility features could be improved. From a security perspective, the site uses HTTPS as implied by the base URL, includes a cookie consent mechanism, and integrates Google Analytics for visitor tracking. There is a lack of explicit security headers and no visible incident response or security policy pages. The absence of WHOIS domain registration data reduces trustworthiness and raises concerns about domain legitimacy. Overall, the website is professional and content-rich but would benefit from enhanced security practices, clearer business contact information, and verified domain registration details to improve trust and compliance.

Č

Česká unie cestovního ruchu, z.s

ceskauniecr.cz

55

Česká unie cestovního ruchu, z.s is the largest independent professional association in the Czech Republic dedicated to coordinating and representing the interests of tourism entrepreneurs. The organization plays a key role in supporting and developing the tourism sector to enhance competitiveness and sustainable growth. Their website reflects a professional and modern digital presence built on the SvelteKit framework with Firebase backend services, indicating a good level of technical maturity. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, supporting effective stakeholder engagement. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies, which are important for compliance and trust. Overall, the website is trustworthy and serves its target audience effectively, though improvements in privacy compliance and security best practices are recommended.

C

CRS a.s.

cookies-spravne.cz

61

Cookies správně is a Czech-based company CRS a.s. offering a specialized cookie consent management solution tailored to comply with Czech legislation effective from January 2022. The service provides cookie auditing, consent management, legal compliance, and easy implementation options for websites, targeting businesses using online marketing and analytics. The website demonstrates a modern technical infrastructure using Tailwind CSS, Google Analytics 4, Google Tag Manager, and Altcha CAPTCHA for form security. The security posture is strong with HTTPS and consent-based script loading, though explicit security headers and incident response policies are not publicly documented. Overall, the site is professional, well-structured, and compliant with GDPR and local laws, making it a trustworthy service for Czech web operators.

I

Initiative D21

initiatived21.de

54

Initiative D21 is a well-established German non-profit network focused on advancing the digital society and accompanying the digital transformation for over 25 years. The organization provides research, events, and working groups targeting government, industry, and the public to foster digital competencies and digital governance. Their website reflects a professional and consistent brand with comprehensive content relevant to their mission. Technically, the website uses modern web technologies including JavaScript ES modules, SVG icons, and Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized, fast-loading, and accessible, though no explicit CMS or framework is identified. Hosting is likely via a professional provider associated with domaincontrol.com. Security posture is solid with HTTPS enforced and privacy-aware analytics, but lacks some advanced security headers and a visible security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a comprehensive privacy policy, but no cookie consent mechanism was found. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission. Recommendations include adding cookie consent, security headers, and publishing a security policy to enhance compliance and security posture.

V

login · vemcount.app

vemcount.app

55

The website vemcount.app/login serves as a user authentication portal for the Vemcount platform, which appears to be a technology service requiring user login credentials. The site includes a standard login form with username and password fields, a 'Stay signed in' option, and an alternative Microsoft OAuth login. The content is minimal and focused solely on login functionality without public-facing business descriptions or policies. Technically, the site uses modern frontend technologies such as Vue.js and ES modules, indicating a contemporary development approach. However, SEO and accessibility features are basic, and no privacy or cookie policies are present on the login page. Security-wise, the site uses HTTPS (implied by URL), includes CSRF tokens, and secure form inputs, but lacks visible HTTP security headers and vulnerability disclosure information. The domain registration is privacy protected, which is common for tech services but reduces transparency. Overall, the site is functional and safe but lacks comprehensive compliance and trust indicators.

Pipeback is a technology startup founded in 2023 that provides an AI-native customer growth platform tailored for SaaS companies. The platform integrates multiple customer touchpoints including support, CRM, knowledge base, product updates, sales, and marketing into a unified solution designed to help SaaS startups scale efficiently. The website presents a professional and modern design, emphasizing ease of use and AI-powered automation to enhance customer engagement and growth. Technically, the site is built using Nuxt.js and Tailwind CSS, hosted on Cloudflare, and optimized for performance and mobile responsiveness. Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy and cookie policies are not found, indicating potential compliance gaps. Overall, the site is trustworthy and well-positioned in the SaaS market but would benefit from enhanced privacy compliance and security disclosures.

H

Hlavní město Praha (implied by branding and domain)

portalprazana.cz

66

Portál Pražana is the official digital public service portal for the City of Prague, providing residents with online access to a wide range of municipal services including document issuance, social care, transport registrations, and payment of local fees. The platform is designed to facilitate convenient and efficient interactions with city administration, reducing the need for physical visits to offices. The website is well-branded with official Prague city logos and uses a Czech language interface targeting local citizens. Technically, the site employs modern web technologies including Polymer framework and ES modules, hosted behind Cloudflare for DNS and CDN services, ensuring good security and performance. The site is mobile optimized and includes privacy-conscious analytics via Plausible. Security headers and HTTPS are properly configured, reflecting a mature security posture. While privacy and cookie policies are clearly presented with consent mechanisms, the site lacks explicit terms of service, security policy, and vulnerability disclosure pages. No direct contact information such as emails or phone numbers are visible, which is typical for government portals relying on authenticated user portals for communication. Overall, the website demonstrates a strong digital maturity and security posture appropriate for a government service portal, with recommendations to enhance transparency around incident response and vulnerability disclosures to further build trust.

P

Passion 4 Gästezimmer GmbH

pension.de

67

Pension.de, operated by Passion 4 Gästezimmer GmbH and part of the FUNKE Mediengruppe, is a well-established online platform specializing in affordable vacation accommodations across Germany, Austria, and Switzerland. Founded in 1999, it offers a comprehensive inventory of over 14,000 pension and hotel listings, targeting families and general vacationers seeking budget-friendly lodging options. The website features a professional design, intuitive navigation, and modern UI components, reflecting a mature digital presence. Technically, the site leverages modern JavaScript modules, Shoelace UI components, and AWS hosting, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, Pension.de demonstrates a high level of business credibility and technical sophistication, positioning it as a reliable player in the hospitality booking sector.

D

Deutsche Welle

dw.com

60

Deutsche Welle (DW) is Germany's international public broadcaster providing comprehensive news, analysis, and multimedia content globally. The website serves a diverse international audience with a focus on current affairs, politics, culture, and society. DW operates under a public service model funded by the German government, positioning itself as a trusted source of information with a strong brand presence and multilingual offerings. Technically, the website employs modern web technologies including React-based frameworks, Video.js for media playback, and Google Publisher Tags for advertising. The site demonstrates good performance, mobile optimization, and accessibility features. Privacy compliance is robust, with clear GDPR-aligned policies and consent management mechanisms in place. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, security headers could be enhanced and incident response contact information is not prominently available. The WHOIS data for the domain is unavailable, which is unusual but likely due to registry or privacy policies rather than malicious intent. Overall, DW's website is professional, secure, and compliant, serving as a reliable platform for international news and media content.

Fontspring, operated by Creative Market Labs, Inc., is a specialized e-commerce platform focused on providing worry-free, perpetual font licensing to designers and enterprises. The website offers a rich catalog of fonts, custom licensing options, and emphasizes customer support and licensing clarity. The platform integrates multiple analytics and marketing tools, including Google Analytics, Amplitude, Datadog, and affiliate programs, reflecting a mature digital infrastructure. Security measures such as HTTPS, CSRF protection, and bot detection are in place, though explicit security headers and public security policies are absent. The absence of WHOIS data introduces some uncertainty regarding domain registration transparency, but the overall professional presentation and business model indicate legitimacy. Strategic recommendations include enhancing security transparency, publishing incident response details, and improving WHOIS data availability to bolster trust.

F

Finch & Partners

finchandpartners.com

65

Finch & Partners is a luxury consultancy specializing in brand investment and strategic advisory, with a strong focus on global culture and business connections. The company positions itself as a high-end service provider in hospitality, media, and luxury sectors, targeting discerning clients seeking transformative brand creation and collaboration. The website reflects a mature digital presence with professional design, clear navigation, and rich content including case studies and partner information. Technically, the site leverages modern web technologies, including Matomo analytics for privacy-conscious tracking, and is hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is solid with HTTPS enforced and domain status protections, though improvements such as enabling DNSSEC and publishing explicit security policies would enhance trust. Privacy compliance is well addressed with comprehensive privacy and cookie policies and an active consent mechanism. Overall, the website demonstrates a high level of professionalism and trustworthiness, suitable for its luxury market positioning.

F

Future Observatory

futureobservatory.org

51

Future Observatory is a national research programme affiliated with the Design Museum, focusing on the green transition. The website serves as a platform to showcase research projects, exhibitions, and news related to sustainability and design. The site is professionally designed with clear navigation and mobile optimization, leveraging modern web technologies including Alpine.js and Statamic CMS. Privacy and cookie consent mechanisms are implemented, reflecting good compliance with GDPR standards. Security posture is solid with HTTPS enforced, though improvements such as enabling DNSSEC and adding security headers are recommended. No critical vulnerabilities or suspicious content were detected, indicating a trustworthy and credible online presence.

C

Christina Mäckelburg

christina-maeckelburg.de

58

Christina Mäckelburg's website is a professional portfolio showcasing her work as an illustrator and animator specializing in children's books. The site targets a general audience interested in artistic and creative services, positioning itself as a niche personal brand in the illustration industry. The business model is primarily portfolio-based, aimed at attracting clients or collaborators. Technically, the website employs modern web standards including ES modules, CSS, and video content, hosted behind Cloudflare DNS services. The site is mobile optimized with good SEO practices but lacks some accessibility features and security headers. Performance is moderate with a clean and visually appealing design. From a security perspective, the site uses HTTPS with a good SSL configuration and does not expose sensitive data or contain forms that collect user input. However, it lacks security headers and formal privacy or cookie policies, which are important for compliance and trust. Minimal user tracking is done via Plausible Analytics, which respects privacy better than many alternatives. Overall, the website presents a low-risk profile with good professionalism but could improve privacy compliance and security posture. Strategic recommendations include adding privacy and cookie policies, implementing security headers, and enhancing contact options to improve user trust and regulatory compliance.

T

Trojka

trojkavodka.com

41

Trojka is a Swiss spirits brand specializing in flavored vodkas designed for consumers who prefer simple, ready-to-mix alcoholic beverages. The website presents a professional and consistent brand image with a clear focus on product variety and ease of use. Technically, the site uses modern web technologies including JavaScript ES modules, CSS3, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent management. The site appears mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and implements a detailed cookie consent mechanism, but lacks explicit security headers and published security policies. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest a legitimate business. Overall, the site demonstrates a moderate to good security posture and privacy compliance but would benefit from enhanced transparency and contact information.

W

Weltformat Festival

weltformat-festival.ch

48

Weltformat Festival is a Swiss cultural event specializing in typography and graphic arts, offering exhibitions, workshops, and curated programming. The website serves as an informational and promotional platform for the festival, targeting a general audience interested in design and culture. The business operates as a small-scale event organizer within the media sector, with a niche market position focused on cultural and artistic communities. Technically, the website employs modern web technologies including Vue.js and JavaScript ES modules, with a clean and professional design. The site is accessible over HTTPS and includes SEO-friendly metadata and structured data. However, mobile optimization and accessibility features are basic, and no analytics or tracking technologies are detected, indicating a privacy-conscious or minimalistic approach. From a security perspective, the site benefits from HTTPS but lacks important security headers and formal privacy or cookie policies, which are critical for GDPR compliance and user trust. No contact or incident response information is provided, limiting transparency and responsiveness in case of security issues. No vulnerabilities or suspicious elements were detected in the provided content. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and improved contact transparency to strengthen trust and regulatory adherence.

U

UPLOAD Biennale

upload-biennale.ch

49

UPLOAD Biennale is a Swiss cultural event focused on graphic design, held in Plan-les-Ouates and Geneva. The website serves as an informational platform for the event scheduled in 2025, targeting design professionals and enthusiasts. The site is built using modern web technologies including Nuxt.js and Kirby CMS, providing a responsive and visually appealing user experience. However, the site lacks critical compliance elements such as privacy and cookie policies, and security headers are not detected, indicating room for improvement in security posture. The domain uses privacy protection which is justified for this type of cultural event. Overall, the website is professional and trustworthy but should enhance its privacy and security practices to align with best standards.

I

It's Nice That

itsnicethat.com

66

It's Nice That is a creative media platform focused on inspiring creativity through publishing content relevant to creative professionals and enthusiasts. The website demonstrates a solid market position as an established media outlet in the creative industry, offering curated content and creative inspiration. Technically, the site leverages modern web technologies such as React, Cookiebot for consent management, Google Tag Manager for analytics, and Stripe for payment processing, indicating a mature digital infrastructure. The security posture is generally strong with HTTPS enforced and use of reputable third-party services, though explicit security headers and detailed privacy policies are not evident in the provided data. Overall, the site appears legitimate and professional, with a moderate risk profile primarily due to missing explicit privacy and contact information. Strategic recommendations include enhancing transparency with clear privacy and terms of service pages, improving security headers, and publishing incident response contacts to strengthen trust and compliance.

CAMP (Centrum Architektury a Městského Plánování) is a Czech cultural and educational institution focused on urban planning and architecture, primarily serving the city of Prague. It offers exhibitions, events, multimedia content, and educational programs targeting a broad audience including children, students, and professionals. The website is well-branded, multilingual, and provides rich content relevant to its mission. Technically, the site uses modern web technologies such as ES modules, Cookiebot for consent management, and Vimeo for video hosting, ensuring a good user experience across devices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security and privacy policies are missing. Overall, CAMP presents a trustworthy and professional digital presence aligned with its institutional goals.

M

MaxiBestOf

maxibestof.one

58

MaxiBestOf is a niche online platform providing curated inspiration for website designs and fonts, targeting web designers and creative professionals globally. Founded in 2016 and registered in France, it operates as a small business project by Bertrand Bruandet. The platform offers a daily feed of design inspiration, categorized website galleries, font styles, and a weekly newsletter subscription service. It monetizes through advertising and sponsorships, featuring partner promotions and affiliate links. Technically, the site is built on modern JavaScript frameworks including Nuxt.js and Vue.js, leveraging Cloudflare DNS and CDN for performance and reliability. The website is well-optimized for mobile and SEO, with a clean, professional design and clear navigation. Security-wise, the site enforces HTTPS and domain transfer protections but lacks DNSSEC and advanced security headers. Privacy compliance is limited, with no visible privacy or cookie policies or consent mechanisms. Overall, the site is functional, professional, and trustworthy but would benefit from enhanced privacy and security practices.

C

Check4DResult

check4dresult.com

66

Check4DResult is a specialized online platform providing real-time Malaysian 4D lottery results, including major operators such as Magnum 4D, Sports Toto, Da Ma Cai, and GDTOTO. The website targets lottery players and enthusiasts in Malaysia, offering detailed prize breakdowns, jackpot updates, and live result feeds. It holds a recognized position as a fast and reliable source for lottery information in the region. Technically, the site employs modern web technologies including SvelteKit, Google Analytics, and Google Adsense for advertising and tracking. The site is well-optimized for mobile and desktop with excellent design and user experience. Security-wise, the site enforces HTTPS and shows good practices but lacks some explicit security headers and a cookie consent mechanism. The absence of WHOIS data for the domain is a notable concern, potentially indicating recent registration or privacy protection, which slightly impacts trustworthiness. Overall, the site is professional and trustworthy for its niche but could improve transparency and compliance aspects.

W

wsrv.nl contributors

lightspeed.ac

66

The website wsrv.nl operates as an open source image caching and resizing service, leveraging a worldwide CDN infrastructure provided by Cloudflare. It targets developers and businesses requiring fast and efficient image manipulation services. The project is well-established with a history dating back to 2007, though the current domain was registered recently in 2024. The service is widely used, processing millions of images per hour and generating significant outbound traffic, indicating a strong market presence in the technology sector focused on image processing. Technically, the site employs modern technologies such as nginx, libvips, and VitePress for documentation, with Cloudflare providing CDN and hosting services. The website is performant, mobile-optimized, and accessible, with a clean and professional design. The use of Algolia search enhances user experience. However, the site lacks some security best practices such as DNSSEC and security headers, and does not provide cookie or terms of service policies. From a security perspective, the site benefits from HTTPS enforced by Cloudflare and domain registration protections like clientDeleteProhibited status. Nonetheless, the absence of DNSSEC and security headers, as well as missing incident response and security policy information, represent areas for improvement. No vulnerabilities or malicious content were detected, and the site is free from adult or questionable content. Overall, wsrv.nl is a credible and technically sound open source project with moderate security posture and privacy compliance. Strategic improvements in security headers, DNSSEC, and privacy policies would enhance trust and compliance. The lack of direct contact information and formal security policies limits business credibility slightly but does not detract significantly from the service's utility and reputation.

Sora Without Watermark is a small technology-focused business offering AI-powered video generation services without watermarks. The service targets content creators and businesses seeking professional-quality videos with flexible pay-as-you-go pricing. The website is well-designed, mobile-optimized, and provides clear information about pricing, features, and usage. Technically, the site uses modern frontend technologies such as Alpine.js and Tailwind CSS, hosted on DigitalOcean, and integrates Google Analytics for user tracking. Security posture is moderate with HTTPS enforced and CSRF tokens on forms, but lacks DNSSEC and security headers, and does not provide a cookie consent mechanism, which impacts privacy compliance. The WHOIS data raises concerns due to a future domain creation date and lack of registrant details, which could affect trustworthiness. Overall, the site is professional and functional but would benefit from improved security and privacy practices.

L

Landeshauptstadt Wiesbaden

wiesbaden.de

60

Landeshauptstadt Wiesbaden operates an official city government website serving as a comprehensive portal for citizens, tourists, and businesses. The site provides key public services such as appointment booking for the Bürgerbüro, personal ID services, event calendars, and tourism information, positioning itself as a central hub for regional information and services. The website is well-branded, professionally designed, and targets a broad audience including residents and visitors. Technically, it leverages modern JavaScript modules, SVG graphics, and a Sitepark CMS platform, with moderate performance and good mobile optimization. Security posture is strong with HTTPS enforced and Matomo analytics configured to disable cookies, though some security headers could be improved and explicit security policies are absent. Privacy compliance is good with a comprehensive privacy policy, but lacks a cookie consent mechanism. Overall, the domain registration and DNS infrastructure align with official government entities, supporting high legitimacy and trust. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response contacts to further strengthen trust and compliance.

E

Elitedomains

elitedomains.de

55

Elitedomains.de is a specialized domain registration and management platform focused primarily on .de domains. The company offers a comprehensive suite of services including domain registration, domain catcher services, a marketplace for buying and selling domains, and advanced domain management tools. Their market position is that of a niche provider with strong integration with DENIC, the official .de domain registry, enabling them to offer specialized services such as real-time AuthInfo2 code ordering and domain monitoring. The platform targets domain investors, businesses, and domain owners seeking efficient and smart domain management solutions.

M

Mastodon

mstdn.social

62

Mstdn.social is an independent Mastodon server providing a general-purpose federated social networking platform with a 500 character limit and support for all languages. It serves a large community with approximately 12,000 active users monthly, positioning itself as a significant node within the decentralized fediverse ecosystem. The platform is open source, with its codebase publicly available on GitHub, enhancing transparency and trust. Technically, the website employs a modern tech stack including Ruby on Rails backend and React frontend, leveraging progressive web app features for excellent mobile optimization and user experience. The site is well-structured with proper meta tags and accessibility considerations, ensuring good SEO and usability. Performance is fast, and the site uses HTTPS with integrity checks on scripts, indicating a mature digital infrastructure. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and publicly available incident response or vulnerability disclosure policies, which could be improved to enhance security posture. Privacy compliance is strong, with comprehensive privacy and terms of service pages, and minimal user tracking or advertising. Overall, mstdn.social presents a trustworthy and well-maintained platform with a strong community focus. Strategic recommendations include implementing additional security headers, publishing vulnerability disclosure information, and enhancing incident response transparency to further strengthen security and compliance.

1

1API GmbH (Registrar), Wortmeldungen (Program/Project)

wortmeldungen.org

53

Wortmeldungen.org is a German-language literary program website dedicated to promoting emerging authors and their engagement with contemporary issues through awards, publications, and events. The platform offers two main literary prizes, the Förderpreis and Literaturpreis, with detailed information about nominees, winners, juries, and related events. The site targets authors, literary professionals, and cultural audiences, operating as a small non-profit entity within the media sector. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, styled with Tailwind CSS, and uses Matomo for privacy-conscious analytics. It is hosted with a reputable registrar and uses HTTPS with domain locking for security. The site demonstrates excellent content quality, mobile optimization, and accessibility, with a consistent brand presentation and strong trust signals. However, it lacks explicit security policies and incident response contacts, and DNSSEC is not enabled, which could be improved for enhanced security.

MasterWP is a specialized training platform focused on providing professional WordPress training for teams, aiming to help businesses strategically manage and leverage WordPress for growth and operational efficiency. The website is well designed with clear messaging and calls to action, targeting teams and businesses that use WordPress as a core part of their operations. Technically, the site is built on WordPress 6.8.3, hosted likely on AWS infrastructure, and uses modern web standards including ES modules and responsive design. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is legitimate, professional, and safe, but could improve compliance and security transparency.

A

Anstalt für Kommunale Datenverarbeitung in Bayern (AKDB)

akdb.de

67

AKDB (Anstalt für Kommunale Datenverarbeitung in Bayern) is a large, well-established public sector IT service provider specializing in digital solutions for municipalities and public administration in Bavaria, Germany. Their offerings include comprehensive software suites for finance, personnel, citizen services, social services, traffic, building authorities, and cloud IT services, supported by consulting and training. The company leverages a BSI-certified data center and has a strong reputation with over 500,000 positive online service ratings. Technically, the website is built on TYPO3 CMS with modern JavaScript and SEO optimizations, hosted on Colt networks, ensuring reliable infrastructure and good performance. Security posture is strong with HTTPS, cookie consent, and no visible vulnerabilities, though explicit incident response contacts and security.txt are absent. Overall, AKDB demonstrates high professionalism, trustworthiness, and digital maturity, serving a critical role in government digital transformation.

I

intecsoft GmbH & Co. KG

intecsoft.de

58

intecsoft GmbH & Co. KG is a well-established IT consulting and software development company based in Germany, with a subsidiary in Switzerland. The company specializes in digital transformation services, offering a broad portfolio including business process optimization, business intelligence, cloud infrastructure, SAP development, and embedded systems. Their target audience includes businesses and public sector organizations primarily in German-speaking countries. The company demonstrates a strong market position supported by long-term experience, recognized certifications such as ISO/IEC 27001, and partnerships with major technology providers like Microsoft, SAP, and Oracle. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap and JavaScript ES modules. The infrastructure is hosted via domaincontrol.com nameservers, indicating professional hosting. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. Security posture is strong with HTTPS enforced and ISO 27001 certification, but could be improved by adding explicit security headers and incident response contact details. No WAF or blocking mechanisms were detected, allowing full content access. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but lacks a visible cookie consent mechanism. No vulnerability disclosure or security.txt files were found. Contact information is clearly presented, enhancing business credibility. Overall, intecsoft presents a professional, trustworthy, and secure digital presence aligned with its business objectives. Strategic improvements in cookie consent and security headers would further enhance compliance and security posture.

Pay.bt is a specialized payment gateway platform focused on enabling Bhutan's tourism industry, including hotels, travel agents, and tour operators, to accept seamless international online payments. The platform offers multi-currency acceptance, custom invoicing, and a smart dashboard tailored to the unique needs of Bhutanese travel businesses. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern JavaScript modules, Google Fonts, and Material Icons, delivering moderate performance and good SEO practices. Security is emphasized with HTTPS and claims of bank-grade encryption and 24/7 monitoring, though formal security policies and incident response contacts are not published. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site demonstrates a high level of business credibility and trustworthiness, though improvements in security transparency and privacy practices are recommended.

F

Flow® Recovery

flowrecovery.de

63

Flow® Recovery operates a professional e-commerce website specializing in massage guns and related accessories, targeting athletes and sports clubs primarily in Germany. The company positions itself as a market leader with ISO 9001 certified products and strong trust signals such as customer reviews and Trusted Shops integration. Technically, the website is built on Shopify with modern JavaScript frameworks and optimized for performance and mobile use. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is safe, compliant with GDPR, and presents a trustworthy shopping experience.

B

Bavarian Caps

bavarian-caps.de

10

Bavarian Caps operates a German-language e-commerce retail website specializing in caps and related apparel, targeting a general audience interested in Bavarian-themed and culturally inspired fashion. The company leverages the Shopify platform, utilizing modern web technologies and payment integrations such as Shopify Payments and Apple Pay, indicating a mature digital infrastructure. The website demonstrates good design quality, mobile optimization, and clear navigation, supporting a positive user experience. Security posture is strong with HTTPS enforcement and use of hCaptcha for form protection, though explicit security headers and policies are absent. Privacy compliance is limited due to missing privacy and cookie policies, and contact information is not readily available, which may affect user trust. Overall, the site is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

A

Atruvia AG

atruvia.de

63

Atruvia AG operates as a major IT service provider specializing in digital transformation and IT outsourcing for the banking sector in Germany. The company offers a broad range of services including consulting, platform ecosystems, and output solutions, targeting professionals, students, and banking customers. Their website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content focused on business and career opportunities. Technically, the site uses modern web technologies including Craft CMS, JavaScript modules, and Matomo for analytics, with a strong emphasis on privacy and user consent. Security measures such as HTTPS and CSRF protection are implemented, though some security headers could be improved. Overall, the site demonstrates a high level of professionalism and trustworthiness.

D

Denkfabrik Zukunft der Gastwelt

zukunft-gastwelt.de

47

Denkfabrik Zukunft der Gastwelt is a German-based think tank focused on addressing future challenges in the hospitality sector. The organization positions itself as a cross-industry consultancy and research entity helping the hospitality industry effectively and purposefully. Their website reflects a professional digital presence with good SEO practices and modern web technologies such as service workers and ES modules, indicating a moderate level of digital maturity. However, explicit privacy, cookie, and security policies are not found, which may impact compliance and trust. The security posture is adequate with HTTPS enabled and no obvious vulnerabilities, but lacks advanced security headers and incident response information. Overall, the website is trustworthy and professional but could improve in privacy compliance and security transparency.

I

Icons8

icons8.com.br

57

Icons8.com.br is a large-scale digital platform offering free and premium design assets including icons, illustrations, photos, music, 3D models, and AI-powered creative tools. The website targets creative professionals and developers, providing a comprehensive design kit with consistent quality. The platform is part of a global brand with multiple localized sister sites in various languages. Technically, the site uses modern frontend frameworks such as Vue.js and Nuxt.js, hosted on AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced, but lacks explicit security headers and visible privacy or cookie policies. No direct contact or incident response information is provided in the HTML content. Overall, the site is professional, trustworthy, and well-branded, but could improve compliance and security transparency.

I

Icons8

icons8.it

52

Icons8 is a well-established digital design resource platform founded in 2017, offering a wide range of creative assets including icons, illustrations, photos, music, and AI-powered design tools. The website targets creative professionals and developers globally, providing a freemium business model with localized versions for multiple countries. Technically, the site is built on modern frameworks such as Vue.js and Nuxt.js, ensuring fast performance, mobile optimization, and good accessibility. Security posture is strong with HTTPS and DNSSEC enabled, though explicit privacy and cookie policies are not found, indicating room for compliance improvement. Overall, the domain registration and website content align well, supporting high legitimacy and trustworthiness.

I

Icons8

icons8.de

52

Icons8 is a well-established digital platform specializing in providing free and premium design assets including icons, clipart graphics, photos, music, 3D models, and AI-powered tools. The website targets creatives and developers, offering a comprehensive design kit with a strong multilingual presence, indicating a global market reach. The business model is primarily freemium, combining free downloads with premium services and apps. Technically, the site leverages modern frameworks such as Vue.js and Nuxt.js, hosted on AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are lacking. Overall, the site demonstrates high professionalism and trustworthiness but would benefit from enhanced privacy compliance and clearer contact and security information.

I

Icons8

icones8.fr

52

Icons8 is a well-established digital design resource platform founded in 2017, offering a wide range of creative assets including icons, illustrations, photos, 3D models, music, and AI-powered design tools. The website targets creatives and developers, providing free and premium design elements with a consistent and professional brand presence. Technically, the site leverages modern frontend frameworks such as Vue.js and Nuxt.js, hosted on AWS infrastructure, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced, though explicit security headers and privacy policies are not visible in the provided content. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, the site demonstrates high professionalism and market positioning as a leading design resource provider.

P

Pinterest

pinterest.it

73

Pinterest is a globally recognized visual discovery and social media platform that enables users to find and share ideas related to recipes, home decor, fashion, and more. The Italian localized site (it.pinterest.com) reflects the company's strong market presence and commitment to regional user engagement. The platform operates primarily on an advertising and e-commerce integrated business model, connecting users with brands and products through visual content. Technically, the website employs a modern tech stack including React, WebAssembly, and Amazon AWS services for media hosting. It demonstrates excellent performance, mobile optimization, and accessibility standards. Security is robust with HTTPS enforced, a comprehensive Content Security Policy, and bot protection via Google reCAPTCHA Enterprise. However, explicit security policies and incident response contacts are not publicly disclosed. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including GDPR adherence and consent mechanisms. Business credibility is high, supported by consistent branding, professional content, and trust indicators. Overall, the website presents a low risk profile with strong technical and security foundations. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

W

World Bank Group

shihang.org

59

The website www.shihang.org/ext/zh/home serves as a Chinese language portal aligned with the World Bank Group's mission to fight global poverty through sustainable development. It offers rich content including economic reports, data, research publications, and project information. The site is built on Adobe Experience Manager, indicating a mature technical infrastructure with modern web technologies. The content is professionally presented, well-structured, and mobile optimized, targeting global development stakeholders and Chinese-speaking audiences. However, the WHOIS data is incomplete and malformed, raising concerns about domain legitimacy and ownership transparency. Security posture is moderate with HTTPS implied but lacking visible security headers and privacy compliance mechanisms such as cookie consent or privacy policies. No contact information or incident response channels are visible, which limits user trust and compliance with data protection regulations. Overall, the site is content-rich and professionally designed but would benefit from enhanced transparency, security policies, and WHOIS clarity to improve trust and compliance.

Г

Группа Всемирного банка

vsemirnyjbank.org

66

The website represents the Russian language portal of the World Bank Group, a major international development organization uniting 189 countries to combat global poverty through sustainable solutions. The site provides extensive content including research publications, data resources, project information, and impact measurement, targeting governments, policymakers, researchers, and the global development community. Technically, the site is built on Adobe Experience Manager with modern JavaScript modules and responsive design, offering a professional and well-structured user experience. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are areas for improvement in compliance and security posture. The WHOIS data is unavailable due to a malformed request, but the domain and content strongly align with the World Bank Group's official branding and services, indicating legitimacy. Overall, the site is a high-quality, authoritative resource with moderate technical and security maturity.

م

مجموعة البنك الدولي

albankaldawli.org

67

The website represents the Arabic language portal of the World Bank Group, a globally recognized international financial institution focused on providing financial and technical assistance to developing countries. The site offers extensive content including news, research publications, data resources, and project information tailored for Arabic-speaking audiences. The business model is that of a non-profit international organization delivering loans, credits, and advisory services to over 100 developing and transitional countries. The site is professionally designed, mobile-optimized, and uses modern web technologies including JavaScript ES modules and Adobe Experience Manager CMS. From a technical perspective, the site demonstrates good SEO, accessibility, and performance characteristics, though some improvements could be made in security headers and cookie consent mechanisms. The security posture is strong with HTTPS enforced and secure form handling, but lacks published incident response or vulnerability disclosure policies. WHOIS data is unavailable or privacy protected, which is typical for such organizations, and does not detract from the site's legitimacy given the strong alignment with World Bank branding and content. Overall, the website is a trustworthy, professional, and comprehensive resource for development-related information in Arabic. Strategic recommendations include enhancing security headers, implementing cookie consent, publishing security policies, and providing clearer contact information for security incidents to further improve trust and compliance.

L

Le Groupe de la Banque mondiale

banquemondiale.org

69

The website for Le Groupe de la Banque mondiale serves as the French language portal for the World Bank Group, a leading international development finance institution with 189 member countries. The site provides comprehensive information on the organization's mission to end poverty and promote sustainable development globally. It offers access to economic research, data resources, project information, and upcoming events, targeting policymakers, development professionals, and the general public interested in global development issues. The website is well-branded, professionally designed, and content-rich, reflecting the organization's authoritative position in the development sector. Technically, the site is built on Adobe Experience Manager, utilizing modern web standards such as responsive images, CSS Grid, and JavaScript ES modules. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured content. Performance is moderate, with no critical technical issues detected. However, some security headers are not explicitly visible in the provided data, and no explicit cookie consent mechanism was found. From a security perspective, the site enforces HTTPS and uses secure forms with user consent for newsletter subscriptions. There is no exposed sensitive data or known vulnerabilities in the analyzed content. The WHOIS data is unavailable due to privacy or query failure, but the domain and content strongly align with the official World Bank Group branding, indicating high legitimacy. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence, though cookie consent could be improved. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, implementing explicit cookie consent, publishing security policies and incident response contacts, and providing vulnerability disclosure information to further strengthen trust and compliance.

B

Banco Mundial

bancomundial.org

67

Banco Mundial's Spanish language website serves as an official portal providing comprehensive information about the World Bank Group's mission to promote sustainable development, economic resilience, and growth. The site targets governments, development professionals, and the general public interested in economic and social development in over 100 developing and transitioning countries. It offers access to data, research publications, events, and project information, reflecting a mature and authoritative digital presence. Technically, the site uses modern web standards including ES modules for JavaScript and responsive design, ensuring good user experience across devices. However, some technical aspects such as security headers and explicit privacy and cookie policies are missing or not detected in the provided content, which could be improved to enhance security posture and compliance. The WHOIS data is unavailable due to a malformed query, limiting domain registration trust analysis, but the website's content and domain strongly indicate legitimacy as an official World Bank Group resource. Overall, the site demonstrates a high level of professionalism and trustworthiness with room for improvement in privacy compliance and security best practices.

I

INTERSPORT Deutschland eG

intersport.de

66

INTERSPORT Deutschland eG operates a comprehensive online retail platform specializing in sportswear and sports equipment, targeting general consumers in Germany. The website demonstrates a mature digital infrastructure with modern technologies such as Algolia search, Usercentrics consent management, and Google Tag Manager for analytics and marketing. The platform is well-optimized for performance, mobile responsiveness, and accessibility, providing a high-quality user experience. Security posture is strong with HTTPS enforcement and consent-based tracking, although explicit security policies and incident response information are not publicly detailed. Overall, the domain registration and website content align well, indicating a trustworthy and legitimate business. Strategic recommendations include publishing explicit security policies and vulnerability disclosure mechanisms to further enhance trust and compliance.

S

Schwarz IT KG

jobs.schwarz

63

Schwarz Corporate Solutions operates as a career and corporate solutions portal under the Schwarz Group, a major retail conglomerate based in Germany. The website offers a range of career opportunities targeting students, graduates, experienced professionals, and career changers. The company emphasizes a collaborative work environment across various corporate functions such as controlling, mobility, real estate, purchasing, HR, finance, taxes, and gastronomy. The site is professionally designed with consistent branding and provides a modern user experience with mobile optimization and clear navigation. Technically, the site uses modern JavaScript modules, a custom framework, and integrates with SAP SuccessFactors for career management. Security posture is good with HTTPS enforced and cookie consent implemented via OneTrust, though some security headers and policies could be improved. No direct contact information or privacy policy pages were found in the provided content, indicating areas for compliance enhancement. WHOIS data confirms the domain's legitimacy and consistency with the corporate identity. Overall, the site is a trustworthy and professional portal for career opportunities within the Schwarz Group.