Security Directory

B

BAföG Digital

bafoeg-digital.de

66

BAföG Digital is the official German government platform enabling students and trainees to apply online for BAföG educational funding. It is a joint offering by the federal government and the German states, providing a secure, accessible, and user-friendly digital service. The platform supports application submission, status tracking, and offers additional services such as a BAföG calculator and a dedicated mobile app. The website is well-branded with official logos and consistent messaging, targeting students and their families in Germany.

L

Landesbetrieb Information und Technik Nordrhein-Westfalen (IT.NRW)

it.nrw

53

Landesbetrieb Information und Technik Nordrhein-Westfalen (IT.NRW) is the official IT service provider and statistical office for the German state of Nordrhein-Westfalen. The organization offers IT infrastructure, digital administration support, and statistical data services to government agencies and the public. The website reflects a mature digital presence with a focus on transparency, accessibility, and user engagement through multiple digital channels and social media. Technically, the site is built on Drupal CMS, uses Matomo for privacy-respecting analytics, and implements modern web standards including responsive design and cookie consent mechanisms. Security posture is strong with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, IT.NRW demonstrates a high level of professionalism and trustworthiness appropriate for a government entity.

The website fondzabranyskod.cz currently serves a CAPTCHA challenge page designed to verify human visitors and prevent automated spam submissions. Due to this security mechanism, no substantive business content, contact information, or policies are accessible for analysis. The domain was registered in 2014 with REG-WEBGLOBE and uses the nameserver ns1.ignum.com, indicating a stable registration history but minimal public WHOIS data. The lack of visible business information and security headers limits the ability to assess the website's operational maturity or security posture comprehensively.

T

TV HASICI – audio vizuální tvorba

tvhasici.cz

41

TV HASICI is a Czech audiovisual media production website specializing in video creation, virtual reality content, and educational series. The site showcases various projects and partnerships with Czech Television and related platforms, positioning itself as a niche media content provider. The technical infrastructure is based on WordPress with Elementor, leveraging modern web technologies and YouTube integration for video content delivery. The website demonstrates good design quality and mobile optimization but lacks comprehensive privacy and cookie policies, as well as contact information, which impacts compliance and trust. Security posture is moderate with HTTPS enabled but missing security headers and formal policies. Overall, the site is safe for general audiences and presents a professional media presence with room for improvement in privacy and security practices.

Xemel, operated by Trayto a.s., is a specialized SaaS platform focused on feed management for e-commerce businesses. It offers a comprehensive suite of tools including online XML/CSV feed editing, custom feed creation, AI-generated product descriptions, and integration with marketplaces and suppliers. The company targets e-shops, agencies, and firms seeking to optimize their product data feeds and online advertising. With a medium-sized presence and partnerships with notable e-commerce platforms, Xemel holds a strong market position in the Czech Republic and surrounding regions. Technically, the website is well-built with modern HTML5 and CSS3 standards, optimized for mobile devices, and provides a fast user experience. The presence of a security.txt file and HTTPS enforcement indicates a baseline security posture, though there is room for improvement in security headers and cookie consent mechanisms. The absence of WHOIS data is a concern but does not detract significantly from the overall trustworthiness given the rich content and client references. Security-wise, Xemel demonstrates good practices such as hashed feed URLs and backup strategies, but lacks explicit incident response contacts and some security headers. Privacy compliance is supported by a comprehensive GDPR policy and clear contact information. Overall, the platform appears reliable and professional, with a high level of business credibility and user trust. The main risks relate to the missing WHOIS data and minor security header gaps, which should be addressed to enhance trust and compliance. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response details, and pursuing formal security certifications to strengthen market confidence.

E

EVici webdesign s.r.o.

upgates.cz

44

Upgates is a Czech-based SaaS e-commerce platform provider offering customizable online shops tailored to business needs without requiring additional module purchases. With over 15 years of market presence and more than 4200 customers, it holds a leading position in the Czech and Slovak e-commerce market. The platform supports multistore, multilingual capabilities, integrated payment gateways, and advanced marketing tools, catering to businesses aiming for local and international expansion. Technically, the website employs modern web technologies including Bootstrap Icons, jQuery, Google Tag Manager, and Facebook Pixel, alongside a proprietary CMS built on the Nette Framework. The site is well-optimized for mobile devices, fast loading, and includes comprehensive SEO and accessibility features. Security measures include HTTPS enforcement, reCAPTCHA v3 integration, and a detailed cookie consent mechanism. While the website demonstrates strong security practices and privacy compliance, the absence of WHOIS registration data reduces transparency regarding domain ownership and age. No critical vulnerabilities or security issues were detected in the visible content. The site integrates multiple advertising and analytics services with user consent mechanisms, reflecting a mature digital marketing strategy. Overall, Upgates presents a professional, trustworthy, and technically sound e-commerce platform with room for improvement in domain registration transparency and advanced security headers. Strategic recommendations include enhancing HTTP security headers, publishing a security policy, and establishing a vulnerability disclosure program.

M

Ministerstvo školství, mládeže a tělovýchovy České republiky

msmt.cz

69

The website represents the official online presence of the Ministry of Education, Youth and Sports of the Czech Republic (MŠMT ČR). It serves as a comprehensive portal providing information and services related to education policy, youth programs, sports administration, research and development, and international cooperation. The site targets a broad audience including educators, students, researchers, journalists, and the general public. It holds a strong market position as a national government entity responsible for education and youth affairs. Technically, the website is built on the Marwel CMS platform and utilizes a range of JavaScript libraries such as jQuery, Prototype.js, and Scriptaculous for interactive features. The site is moderately performant with good mobile optimization and accessibility features. SEO practices are well implemented with appropriate meta tags and structured navigation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. The WHOIS data is unavailable, likely due to registry policies, which slightly impacts trust but is mitigated by the official government domain and consistent branding. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving as a reliable resource for its stakeholders. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

Ú

Úspěšný web s.r.o.

uspesnyweb.cz

64

Úspěšný web s.r.o. is a Czech Republic based small technology company specializing in custom web solutions including web presentations, e-commerce shops, and CRM systems. Founded in 2015, the company has established a solid local market presence with a portfolio of diverse clients across various industries. Their website demonstrates a professional and modern digital presence with clear navigation, responsive design, and comprehensive service offerings. The technical infrastructure leverages modern JavaScript frameworks, SVG graphics, and integrates Google Tag Manager and analytics tools with privacy-conscious consent mechanisms. Security posture is good with HTTPS enforced, CAPTCHA on forms, and GDPR compliance evident, though explicit security policies and headers could be enhanced. Overall, the website is trustworthy, well-branded, and aligns with the company’s business claims and WHOIS data, indicating a legitimate and credible business operation.

T

the integritty s.r.o.

integritty.cz

65

Integritty s.r.o. is a Czech Republic based technology and digital services company specializing in custom e-commerce development, online marketing, analytics, and digital product design. Positioned as a key partner for startups and established businesses, they offer a comprehensive suite of services including PPC campaigns, SEO, social ads, UX/UI design, and analytics solutions. Their portfolio includes multiple subsidiaries and projects, indicating a diversified business model and active innovation. Technically, the website is built on modern frameworks and platforms such as Webflow CMS, React.js, PHP Symfony/Laravel, and integrates advanced analytics tools like Google Analytics, Microsoft Clarity, and Hotjar. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though the absence of explicit privacy and cookie policies is a compliance gap. WHOIS data is missing, which raises some concerns about domain legitimacy, but the professional presentation and business transparency mitigate this risk. Overall, Integritty demonstrates a solid digital presence with room for improvement in privacy compliance and domain registration transparency.

M

Ministerstvo pro místní rozvoj ČR

mmr.cz

62

The website represents the official online presence of the Ministry for Regional Development of the Czech Republic (Ministerstvo pro místní rozvoj ČR). It serves as a central government portal providing information on regional policy, housing, urban planning, construction law, investment policy, tourism, public auctions, real estate activities, and funeral services. The ministry was established in 1996 and plays a significant role in managing public funds and regulatory oversight in these sectors. The site targets Czech citizens, government officials, municipalities, and businesses involved in housing and regional development. Technically, the website is built on ASP.NET WebForms and likely uses Kentico CMS, with modern web technologies such as JavaScript, CSS, and Google Fonts. The site is mobile-optimized and provides a structured navigation experience. However, some security best practices like security headers are missing, and privacy and cookie policies are not explicitly found in the provided content. User tracking is implemented via Facebook Pixels, with Google Analytics scripts present but commented out. From a security perspective, the site uses HTTPS and includes CSRF tokens in forms, indicating basic security hygiene. The absence of WHOIS data is typical for government domains under CZ NIC registry policies and does not detract significantly from trustworthiness. No vulnerabilities or malicious content were detected. Overall, the site is professional, trustworthy, and serves its governmental function effectively. Recommendations include implementing explicit privacy and cookie policies with consent mechanisms, adding security headers to enhance protection, and regularly auditing third-party scripts and libraries for vulnerabilities.

K

Kudy z nudy

kudyznudy.cz

63

Kudy z nudy is a well-established Czech tourism portal operated under the auspices of CzechTourism, the official Czech tourism board. The website provides comprehensive information and inspiration for trips, cultural events, and activities throughout the Czech Republic, targeting families, tourists, and cultural enthusiasts. It serves as a key digital platform for promoting Czech tourism with a strong market position supported by government backing. Technically, the site is built on ASP.NET WebForms with modern JavaScript libraries such as jQuery, Google Tag Manager, and reCAPTCHA integrated for security and analytics. The site is mobile-optimized, accessible, and SEO-friendly, offering a professional user experience with clear navigation and rich content. Security posture is solid with HTTPS enforced and anti-bot measures in place, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting good privacy practices. Overall, the site is trustworthy, professional, and safe for general audiences.

Střední Čechy filmová kancelář operates as a regional film office providing location and production support services for filmmakers in Central Bohemia, Czech Republic. The website serves as an informational and contact portal, offering news, location listings, filmographies, and contact details for film production inquiries. The organization targets film producers and related professionals seeking filming locations and support in the region. The business model is service-oriented, facilitating film production logistics and location scouting. Technically, the website is built on the Public4u CMS platform and utilizes common JavaScript libraries such as jQuery and jQuery UI. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be enhanced. The site lacks advanced analytics or tracking scripts, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS and includes anti-spam measures on its contact form. However, no security headers were detected, and there is no visible privacy or cookie policy, which are compliance gaps. The absence of WHOIS data reduces transparency and trustworthiness. Overall, the security posture is moderate but could benefit from improvements in headers, policies, and vulnerability disclosures. The overall risk is moderate with no critical security issues detected. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and reduce risk. The website is professionally presented with clear contact information and active social media presence, supporting business credibility.

S

Střední Čechy Convention Bureau

strednicechycb.cz

54

Střední Čechy Convention Bureau is a regional organization dedicated to promoting the Central Bohemia region as an attractive destination for MICE (Meetings, Incentives, Conferences, and Exhibitions) events. The website provides comprehensive information about venues, activities, and specialist support for event planners, targeting corporate clients and event professionals. The site is well-branded and professionally designed, reflecting a consistent regional identity with official partner logos and a clear contact point. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, WPML for multilingual support, and Contact Form 7 for user interaction. It uses Google Tag Manager and Google Analytics for tracking, alongside a cookie consent mechanism compliant with GDPR. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent with granular user controls. However, explicit security headers are not clearly detected, and the WHOIS data for the domain is missing, which raises concerns about domain registration transparency. No critical vulnerabilities or exposed sensitive data were found in the content. Overall, the website presents a trustworthy and professional front for the regional convention bureau but would benefit from improved domain registration transparency and enhanced security header implementation to strengthen trust and security posture.

S

Středočeská centrála cestovního ruchu, p. o.

strednicechy.cz

65

The website www.strednicechy.cz serves as the official regional tourism portal for Central Bohemia, Czech Republic. It provides comprehensive information about nature, cultural heritage, events, and travel experiences in the region. The site targets tourists and visitors interested in exploring Central Bohemia's attractions and offers services including event calendars, travel tips, and a Convention Bureau for business events. The site is well-branded and consistent with official regional tourism entities, enhancing its credibility. Technically, the website is built on WordPress with modern plugins and libraries such as WPML for multilingual support, Google Analytics, Hotjar, and Microsoft Clarity for analytics and user behavior tracking. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some lazy loading images show errors that should be addressed. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, but additional security headers could be implemented to strengthen defenses. Privacy compliance is well-handled with a cookie consent mechanism and a clear cookie policy page, indicating GDPR awareness. Contact information is clearly provided, including email, phone, and physical address, supporting business credibility. However, WHOIS data is missing, which reduces trust from a domain registration perspective and warrants further verification. Overall, the website is a professional, secure, and user-friendly platform for regional tourism promotion, with minor technical and security improvements recommended to enhance trust and performance.

C

Cabin

withcabin.com

68

Cabin is a privacy-first web analytics platform that positions itself as a sustainable and ethical alternative to Google Analytics. The company emphasizes compliance with GDPR and CCPA, operates on 100% renewable energy, and offers a lightweight analytics script that avoids cookies and consent banners. The platform targets website owners and organizations seeking privacy-compliant analytics solutions. Technically, the website is built using modern frontend technologies such as Vue.js and Chart.js, hosted on AWS infrastructure, and optimized for performance and mobile devices. Security-wise, the site uses HTTPS and follows privacy best practices by not using cookies or third-party ad networks, but lacks published security policies and incident response information. Overall, the website is professional, trustworthy, and well-designed, though it would benefit from publishing privacy, cookie, and security policies as well as contact information to improve compliance and user trust.

Imki is a French technology company specializing in augmented creative AI solutions tailored for the luxury and fashion industries. The company offers bespoke AI tools that integrate brand DNA and product attributes to accelerate and enhance the creative process, reducing time to market and minimizing waste. Imki has established partnerships with notable brands such as The Kooples, Jonak, and Turkish industrial leaders in denim manufacturing, positioning itself as an innovator in its niche market. The website reflects a professional and modern digital presence built on WordPress, with strong SEO and accessibility features, and multimedia content showcasing use cases and collaborations. Security posture is solid with HTTPS and cookie consent mechanisms, though some advanced security headers and policies are absent. Overall, Imki demonstrates a mature digital infrastructure and credible business model with good compliance to privacy regulations.

T

The Interline

theinterline.com

62

The Interline is a specialized online magazine delivering news, editorial content, and analysis focused on fashion technology and beauty technology. It targets professionals in these sectors, providing insights on market intelligence, product development, manufacturing, retail, and innovation. The website demonstrates a strong niche market position with consistent branding and high-quality content updated regularly since its founding in 2020. Technically, the site is built on WordPress with modern plugins for SEO and analytics, offering a good user experience with mobile optimization and structured data for enhanced search visibility. Security posture is adequate with HTTPS and no obvious vulnerabilities, though some security headers and incident response policies are absent. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. The absence of WHOIS data for the domain is a notable concern, though the professional presentation and active social media presence support legitimacy. Overall, the site is a credible resource for its target audience but would benefit from enhanced transparency and security practices.

F

FashionNetwork.com

fashionnetwork.com

74

FashionNetwork Finland is a localized edition of the international FashionNetwork.com media platform, providing comprehensive fashion industry news, videos, podcasts, and event coverage. The platform targets fashion professionals, luxury and beauty sectors, and retail stakeholders, positioning itself as a key information source in the fashion business media space. The website demonstrates a mature digital presence with rich content and consistent branding. Technically, the site uses modern web technologies including Google Tag Manager and Analytics, with good SEO and accessibility practices. Security posture is solid with HTTPS and some security headers, though additional headers and explicit security policies could enhance trust. The absence of WHOIS data for the domain is a notable concern, limiting full verification of domain legitimacy. Overall, the site is professional and trustworthy in content and design but would benefit from improved transparency in domain registration and security policies.

K

Kipaş Textiles

kipastextiles.com

62

Kipaş Textiles is a large-scale textile manufacturing company based in Turkey, operating as a subsidiary of Kipaş Holding. The company boasts the largest fully integrated textile production facility in Europe, offering a wide range of products including yarns, fashion textiles, deco, technical textiles, and fiber production. The website reflects a professional corporate presence with clear segmentation of business areas and a focus on B2B clients in the textile industry. Technically, the website is built on WordPress using the Enfold theme, with standard modern web technologies and Google Tag Manager for analytics. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with presence of cookie and KVKK policies but no active consent mechanism. Contact information is limited to a contact form with no direct emails or phone numbers visible. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

FaceUp Technology operates a leading whistleblowing software platform primarily serving organizations and schools in the Czech Republic and internationally. Their solution enables anonymous feedback, ethical hotlines, case management, surveys, and AI-assisted communication to foster open and safe organizational cultures. The company positions itself as a market leader with over 3,500 clients in more than 70 countries, emphasizing compliance with GDPR, ISO 27001, and other security standards. Technically, the website is built on modern frameworks like Next.js and React, with integrations for analytics and marketing tools such as Google Tag Manager and HubSpot. Security posture is strong, featuring end-to-end encryption, local data storage, and penetration testing, although some security headers are not explicitly detected. The absence of WHOIS data suggests privacy protection or recent domain registration, which slightly impacts trust but is understandable given the sensitive nature of the business. Overall, FaceUp presents a professional, secure, and compliant digital presence with a strong focus on user trust and regulatory adherence.

Vibes Vision is a small Czech-based creative agency specializing in personal brand building, creative audio-video content production, and custom web development services. The company targets individuals and businesses seeking to establish authentic and visually compelling brands. Their market position is niche, focusing on bespoke solutions and consulting services. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, GSAP, and other popular libraries, indicating a mature digital infrastructure. The site is mobile optimized and implements GDPR and cookie consent mechanisms, reflecting good privacy compliance. Security posture is strong with HTTPS enforced and a Content Security Policy header present, though additional security headers and incident response information could enhance their security maturity. Overall, the website is professional and trustworthy, but the lack of WHOIS data raises questions about domain registration legitimacy. Strategic recommendations include improving security headers, adding explicit contact information, and implementing a vulnerability disclosure policy.

C

COMPUTER HELP, spol. s r.o.

computerhelp.cz

55

COMPUTER HELP, spol. s r.o. is a Czech Republic based IT company founded in 1993, providing comprehensive IT services including software development, IT training, software and hardware sales, and technical support. The company holds multiple certifications and partnerships with major vendors such as Microsoft, ESET, Adobe, and HPE, positioning itself as a trusted mid-sized player in the Czech IT market. Their website is professionally designed, mobile optimized, and offers clear navigation and rich content relevant to their business. Technically, the site runs on WordPress with modern frameworks and integrates Google Tag Manager, reCAPTCHA, and GDPR-compliant cookie management. Security posture is good with HTTPS and anti-bot measures, though it lacks some security headers and explicit incident response information. WHOIS data is unavailable, which slightly impacts trust but the visible business information and certifications support legitimacy. Overall, the website and business demonstrate a mature digital presence with room for security and transparency improvements.

O

Operátor ICT, a.s.

pidlitacka.cz

60

Operátor ICT, a.s. operates the Lítačka e-shop and smart card system for public transportation in Prague and the Central-Bohemian Region. The website serves as a comprehensive platform for purchasing tickets, ordering smart cards, and accessing travel information. It is well integrated with official city and regional transport authorities, reflecting a strong market position in the regional transportation sector. The target audience includes residents, students, seniors, and tourists who use public transport services. Technically, the website is built on modern frameworks such as Next.js and React, with a backend CMS powered by Strapi, and assets served via Azure CDN. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved and a public security policy is absent. Privacy compliance is generally good with a clear privacy policy and terms of service, but lacks an explicit cookie consent mechanism. Overall, the website is professional, trustworthy, and well-maintained, supporting the business's credibility and operational needs.

H

PID Haló - poptávková doprava Pražské integrované dopravy 🚐

halopid.cz

52

The website www.halopid.cz appears to be a Wix-hosted site with minimal content and no visible business information or contact details. The lack of WHOIS data and registrant information raises concerns about the legitimacy and transparency of the domain. Technically, the site uses standard Wix scripts and polyfills but lacks advanced security headers and privacy compliance mechanisms. The security posture is weak due to missing HTTPS verification and absence of security best practices. Overall, the site is incomplete and does not provide sufficient information to assess the business or its operations confidently.

P

Pražská integrovaná doprava

pid.cz

59

Pražská integrovaná doprava (PID) operates as the integrated public transportation system for Prague and the Central Bohemia region, providing comprehensive transit information including schedules, fares, route maps, and real-time updates. The website serves as a critical information hub for commuters and travelers, offering tools such as connection search, ticketing information, and news about service changes. The organization maintains a strong market position as a key public transportation provider in the region, supported by a large and well-maintained digital presence. Technically, the website is built on WordPress with modern libraries like Leaflet for mapping and Google reCAPTCHA for security on user forms, reflecting a mature and well-maintained infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. Privacy compliance is robust, with clear GDPR and cookie policies. Overall, the site is professional, trustworthy, and well-optimized for user experience.

H

Hlavní město Praha

praha.eu

60

The website praha.eu serves as the official portal for the City of Prague, providing comprehensive information and services related to city administration, transportation, culture, environment, and public services. It targets residents, visitors, and businesses, positioning itself as a key government resource. The site leverages modern web technologies including Liferay CMS and React, ensuring a responsive and accessible user experience. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with GDPR and cookie consent mechanisms in place. Overall, the site demonstrates a mature digital infrastructure suitable for a large government entity.

K

krajská správa a údržba silnic středočeského kraje

ksus.cz

45

The website ksus.cz represents the Krajská správa a údržba silnic Středočeského kraje, a governmental entity responsible for road safety and maintenance in the Central Bohemia region of the Czech Republic. Established in 2011, it manages over 8,600 kilometers of secondary and tertiary roads, serving as a critical infrastructure authority. The site targets local residents, road users, and stakeholders requiring information about road conditions, reporting issues, and organizational transparency. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, supplemented by plugins such as Rank Math SEO and Complianz GDPR for privacy compliance. The site demonstrates moderate performance and good mobile optimization, with structured data enhancing search engine visibility. Security-wise, HTTPS is enforced, and cookie consent mechanisms are implemented, though some security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found in the analyzed content. While privacy and cookie policies are comprehensive and GDPR compliant, the site lacks explicit terms of service, security policies, and incident response contact information. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security posture. The domain registration data aligns well with the entity's public nature and founding date, supporting legitimacy. Overall, ksus.cz is a professionally maintained governmental website with good content quality and privacy compliance. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and providing clearer contact information to improve trust and security culture.

A

Advisa

advisa.cloud

52

Advisa is a French e-commerce agency specializing in delivering performance-driven digital solutions for B2B and B2C markets. The company offers a comprehensive range of services including strategy consulting, digital marketing, UX/UI design, development, and ongoing maintenance (TMA run). Positioned as an expert and partner in leading e-commerce platforms such as PrestaShop and Magento, Advisa serves a professional audience with offices in Strasbourg and Paris. The website reflects a mature digital presence with professional design and clear business focus. Technically, the site is built on WordPress with modern plugins like Gravity Forms and Yoast SEO, integrating analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS and reCAPTCHA implemented, but lacks some security headers and formal policies. Security-wise, the site shows good practices but could improve by publishing privacy and cookie policies, security.txt, and incident response contacts. No vulnerabilities or suspicious content were detected. WHOIS data is unavailable, likely due to privacy protection, but the domain is active and consistent with the business claims. Overall, Advisa presents a trustworthy and professional e-commerce agency with room for improvement in privacy and security transparency to enhance compliance and user trust.

Spolek pro budování a implementaci sdílených open source nástrojů, z.s. is a Czech non-profit organization focused on developing and implementing open source software tools, particularly for contract management and portals for contributory organizations. The website reflects a small, specialized entity with a clear mission targeting non-profit and public sector organizations. The technical infrastructure relies on older JavaScript libraries such as jQuery 1.7.2 and custom scripts for UI components like slideshows and AJAX content loading. While functional, the technology stack is outdated and could benefit from modernization to improve security and performance. Security posture is limited; no security headers or privacy policies are present, and the use of outdated libraries introduces potential vulnerabilities. The site lacks HTTPS confirmation in the provided data, which is a critical security concern. Overall, the website is accessible and provides basic contact information but lacks comprehensive privacy, cookie, and security documentation. Strategic improvements in security, privacy compliance, and technical modernization are recommended to enhance trust and resilience.

K

Královéhradecký kraj

khk.cz

64

Královéhradecký kraj operates as the official regional government authority for the Královéhradecký region in the Czech Republic. The website serves as a comprehensive portal providing citizens, businesses, and local municipalities with access to a wide range of public services including social services, transportation, healthcare, education, and regional development. The site is well-positioned as a trusted source of official information and services for the region's residents and stakeholders. Technically, the website is built on Drupal 10, leveraging modern web technologies such as Bootstrap for responsive design, Slick Carousel for interactive content, and integrates Google Analytics and Google Tag Manager for analytics and tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, reflecting a mature digital infrastructure suitable for a government entity. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and shows no signs of exposed sensitive data or vulnerable libraries. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not clearly visible and could be improved. The absence of WHOIS data is consistent with CZ.NIC registry policies for .cz domains and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility and compliance posture. Strategic recommendations include enhancing security header implementation, publishing a dedicated security policy or incident response contact, and considering a security.txt file to facilitate vulnerability disclosures.

P

prettysocial media GmbH

prettysocialmedia.com

48

Prettysocial media GmbH is a European branded content distribution company founded in 2013, operating across multiple countries including Germany, Netherlands, Denmark, and the UK. The company leverages a large network of over 1500 premium publishers to optimize and distribute branded content across social media channels, aiming to boost social media reach and social commerce success for its clients. Their business model focuses on combining creative storytelling with global media distribution to connect brands with consumers effectively. Technically, the website is built on WordPress using modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as HubSpot, Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The site is mobile-optimized and provides a professional user experience with clear navigation and multi-language support. Security-wise, the site enforces HTTPS, uses captcha on forms, and employs cookie consent mechanisms, but lacks some advanced security headers and explicit security policies. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

W

WinLocal

winlocal.de

58

WinLocal is a German-based B2B digital marketing service provider specializing in online visibility, online reviews, online advertising, and an integrated online control center powered by AI. The company targets businesses seeking to improve their online presence and customer acquisition through measurable and efficient digital marketing solutions. The website is built on the HubSpot CMS platform, leveraging modern marketing and analytics tools such as Google Analytics 4 and Google Tag Manager. Hosting is provided by a reputable German hosting provider, ensuring reliable infrastructure. Security posture is solid with HTTPS enabled and no exposed sensitive data, though the absence of explicit security headers and policies suggests room for improvement. Privacy compliance is basic, with no visible privacy or cookie policies in the provided content. Overall, the website presents a professional and trustworthy image with good content quality and business credibility.

J

joblocal GmbH

joblocal.de

67

joblocal GmbH operates joblocal.de, a German job marketplace platform leveraging AI-powered talent matching technology (Talent-KI) to connect employers with suitable candidates. The platform offers regional labor market insights and a user-friendly job search interface, targeting employers and job seekers primarily within Germany. The website demonstrates a modern technical infrastructure built on Next.js and React, integrating Google Maps API for enhanced location-based services and ConsentManager for GDPR-compliant cookie management. Security posture is strong with HTTPS enforcement and appropriate security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the platform presents a professional and trustworthy digital presence with good privacy compliance and user experience.

F

FUNKE Digital

mediapartisans.com

51

FUNKE Digital is a digital media powerhouse and a 100% subsidiary of the FUNKE Mediengruppe, specializing in news websites, content verticals, and digital investments. The company positions itself as the digital motor of its parent group, leveraging modern technologies and agile teams to innovate and expand its digital offerings. The website reflects a professional and consistent brand image, targeting digital media consumers, advertisers, and investors primarily in Germany. Technically, the site is built on WordPress with modern plugins for SEO and interactive content, showing moderate performance and good mobile optimization. Security posture is strong with HTTPS and consent management in place, though some security headers and policies could be improved. Privacy compliance is robust, with clear GDPR-aligned cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and aligned with its business objectives.

F

FUNKE Works GmbH

funkeworks.de

69

FUNKE Works GmbH operates specialized job portals targeting apprentices, students, and young professionals in Germany. As part of the FUNKE Mediengruppe, it leverages digital matching technologies and mobile recruiting apps to connect job seekers with employers. The company maintains a professional and modern web presence with strong branding and multiple subsidiary platforms. Technically, the website uses modern frameworks such as Tailwind CSS, Hotwired Turbo Rails, and Stimulus JS, with GDPR-compliant cookie consent and analytics via Plausible and Google Tag Manager. Security posture is solid with HTTPS and consent management, though explicit security policies and incident response information are not published. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

phpBB.de is a German-language community and support platform dedicated to the phpBB open-source forum software. It provides users with downloads, documentation, support forums, and community engagement tools. The site is hosted by Linevast.de and uses the phpBB software with custom styling and standard web technologies such as jQuery and Font Awesome. The platform targets phpBB users and developers primarily in Germany and offers a comprehensive resource for forum setup and troubleshooting. Technically, the website employs a standard phpBB stack with modern JavaScript libraries and is moderately optimized for performance and mobile use. However, there is room for improvement in security practices, including the implementation of HTTP security headers and enhanced privacy controls. The site uses session IDs in URLs and lacks explicit cookie consent mechanisms, which could be improved for GDPR compliance. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. However, the absence of security headers and vulnerability disclosure mechanisms indicates a moderate security posture. The WHOIS data is partially consistent with the hosting and domain usage, supporting legitimacy but lacking detailed registrant information. Overall, phpBB.de is a trustworthy and well-maintained community resource with good business credibility and content quality. Strategic improvements in security headers, privacy compliance, and contact transparency would enhance its security posture and user trust.

phpBB Limited operates the phpBB website, providing free and open source forum software widely recognized as a leading solution in the online community space. The website offers downloads, extensions, styles, and extensive community support, positioning itself as a mature and trusted platform for forum administrators and developers. The business model centers on open source distribution supported by community engagement and sponsorships. Technically, the site uses modern web technologies including jQuery, Google Analytics, and the Symfony framework, hosted by OSUOSL, ensuring reliable infrastructure and moderate performance with good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and explicit privacy/cookie policies indicates room for improvement. The WHOIS data is unavailable, which slightly reduces trust but does not undermine the legitimacy given the active community and sponsorships. Overall, the site is professional, trustworthy, and well-positioned in its niche.

B

Boxtal

boxtal.com

67

Boxtal is a French-based company specializing in online shipping solutions, offering negotiated transport rates, e-commerce shipping services, and software tools to optimize logistics. The company targets e-commerce merchants and businesses requiring efficient parcel shipping and logistics management. Their platform integrates multiple carriers and provides value-added services such as insurance and multi-carrier parcel pickup. Technically, the website employs modern web technologies including JavaScript and web components, with embedded iframes for shipping quotes. The site is mobile-optimized and well-structured, providing a good user experience. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but explicit security headers and policies are not evident. The WHOIS data for the domain is unavailable, which reduces transparency but the website content and branding indicate a legitimate business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security posture and business credibility transparency.

The website at restomp-excity.online/lander is a minimal placeholder or parking page with no substantive content, business information, or user interaction elements. The domain WHOIS data is suspicious, showing a creation date in the future and multiple prohibitive status flags, which undermines trust and legitimacy. Technically, the site uses basic JavaScript and loads external scripts from Google Adsense and a parking lander service, but lacks HTTPS and security headers. There are no privacy or cookie policies, no contact information, and no evidence of compliance with data protection regulations. Overall, the site appears inactive or abandoned, with very low digital maturity and security posture.

H

High Five GmbH

schuelerrabatte.com

60

Schuelerrabatte.com is an e-commerce platform operated by High Five GmbH, specializing in providing student discounts, vouchers, and promotional offers primarily for the German market. The website offers a wide range of discount codes and giveaways targeting students and young consumers, positioning itself as a trusted source for saving money on popular brands and services. The platform integrates multiple partner services and maintains a user account system to enhance user engagement and personalization. Technically, the website employs modern web technologies including AngularJS for frontend interactivity, Tiny-slider for carousels, and ConsentManager for GDPR-compliant cookie consent management. Analytics are handled via Matomo and Google Tag Manager, ensuring data-driven insights while respecting user privacy. The site is served over HTTPS with a good SSL configuration and uses multiple CDNs for performance optimization. Mobile optimization and SEO practices are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and incorporates a comprehensive cookie consent mechanism, demonstrating compliance with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not clearly present, representing an area for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data is a concern but does not currently undermine the site's operational legitimacy. Overall, Schuelerrabatte.com presents a secure, privacy-conscious, and user-friendly platform with a strong market presence in the student discount niche. Continued attention to security header implementation and transparency in domain registration would further enhance trust and compliance.

H

High Five GmbH

studiumfinden.com

64

Studiumfinden.com is an educational platform operated by High Five GmbH, founded in 2022, targeting students and prospective university applicants primarily in German-speaking countries. The website offers comprehensive study program search, university information, student reviews, and guidance content to assist users in finding their ideal study path. The platform positions itself as a niche service within the education sector, leveraging modern web technologies and analytics tools to deliver a user-friendly experience.

H

High Five GmbH

iamstudent.ch

58

Iamstudent.ch is a well-established online platform operated by High Five GmbH, focused on providing exclusive student discounts and vouchers in Switzerland. The website targets students and young adults, offering a wide range of deals across categories such as fashion, technology, food, and lifestyle. It holds a strong market position in the DACH region with sister sites in Austria and Germany, supported by a robust user base and positive reviews. The platform integrates modern web technologies including AngularJS, Matomo analytics, and a comprehensive consent management platform to ensure GDPR compliance. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates high professionalism, good privacy practices, and a user-friendly experience, making it a trusted resource for its audience.

H

High Five GmbH

iamstudent.at

65

iamstudent.at is an online platform operated by High Five GmbH that provides students in Austria with access to exclusive discounts, vouchers, and contests. The website is well-positioned in the regional market with sister sites in Germany and Switzerland, targeting the student demographic with relevant offers and content. The platform leverages modern web technologies including AngularJS, Matomo analytics, and a consent management system to ensure compliance with privacy regulations. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security policies and incident response information are not publicly available. Overall, the site presents a professional and trustworthy interface for its users.

H

High Five GmbH

iamstudent.com

68

iamstudent, operated by High Five GmbH, is a student-focused platform offering free registration to access exclusive student discounts, coupons, and apprenticeship information primarily targeting the DACH region. The website is professionally designed with a clear focus on student users and provides multiple OAuth login options for secure access. The platform integrates modern technologies such as React, Next.js, and Matomo analytics, hosted on Vercel, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and secure authentication methods, though explicit security headers and incident response details are not publicly documented. Privacy compliance is well addressed with comprehensive GDPR-compliant policies and cookie consent mechanisms. The absence of WHOIS data slightly impacts trust but the overall business presence and transparency indicate legitimacy.

Č

České Radiokomunikace a.s.

cra.cz

81

České Radiokomunikace a.s. is a leading Czech provider of unique television, radio, and internet infrastructure services. The company focuses on transforming technological trends into innovative media, telecommunications, and IT infrastructure solutions, targeting business and technology sectors primarily within the Czech Republic. Their key services include data centers, cloud computing, IoT, and broadcasting infrastructure. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website employs modern technologies such as Google Tag Manager, Microsoft Clarity, Cookiebot CMP, and likely Cloudflare for hosting and security. The site is mobile-optimized with good SEO and accessibility basics. Performance is moderate, with efficient font loading and asynchronous script execution. Privacy compliance is well addressed through a comprehensive cookie consent mechanism with granular user controls and integration of Google Consent Mode. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, it lacks explicit security headers and visible incident response or security contact information. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data reduces the domain trustworthiness score, but the website's professional presentation and technology usage support its legitimacy. Overall, the website is secure, privacy-conscious, and professionally maintained, though improvements in transparency regarding privacy policies, contact information, and security disclosures are recommended to enhance trust and compliance.

The website 'Gib Antikommunismus keine Chance' is a German-language political initiative advocating for a factual discussion about socialism and communism, opposing modern anti-communism. It operates as a non-profit campaign platform providing informational content, public calls to action, and a signature collection mechanism. The site targets politically engaged individuals interested in leftist political discourse. Technically, the site is built on WordPress 5.5.17 with standard plugins and libraries such as jQuery and Font Awesome, hosted on German nameservers consistent with the domain's origin. The website is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, but lacks advanced security headers and explicit privacy compliance mechanisms. No advertising or tracking technologies are present, indicating a privacy-conscious approach. WHOIS data is transparent and consistent with the website's claims, enhancing legitimacy. Overall, the site is functional and trustworthy but would benefit from improved privacy compliance and security hardening.

I

Internationalistische Liste / MLPD

inter-liste.de

47

The Internationalistische Liste / MLPD website serves as the official online presence for a German political alliance and party focused on socialist and environmentalist policies. It provides information about their candidacy in the 2025 Bundestagswahl, their political platform, key figures, and campaign materials. The site targets politically engaged voters and supporters of leftist movements in Germany. Technically, the website is built on WordPress, uses modern web technologies, and is hosted by a reputable German hosting provider. The site is mobile-optimized and presents content in a clear, professional manner. Security-wise, the site uses HTTPS but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in privacy and security transparency.

W

white label eCommerce

the-white-label.com

61

white label eCommerce is a small German-based company specializing in providing white label ticketing and e-commerce software solutions. Their platform targets businesses and organizations seeking independent and modern ticketing and e-commerce capabilities under their own brand. The website is built on WordPress using modern technologies such as Bootstrap, Font Awesome, and Visual Composer, indicating a moderate level of digital maturity. SEO and marketing tools like Yoast SEO and Google Tag Manager are implemented to enhance visibility and user engagement. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced DNS security and security headers. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy or terms of service pages found. Overall, the website is professional and trustworthy but could improve transparency and security practices.

T

Tinycc

tinycc.com

69

Tinycc is a well-established URL shortening and link management service founded in 2004, offering branded short URLs, retargeting pixels, analytics, and custom domain management to marketing professionals and businesses. The company positions itself as a reliable and feature-rich platform with a strong client base including notable brands. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, and Bing Ads tracking, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and domain transfer protection, though improvements like DNSSEC and security headers are recommended. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, Tinycc demonstrates a mature digital presence with high trustworthiness and professional content.