Security Directory

S

SIUZ – Spolek pro inovativní a udržitelné zemědělství

siuz.cz

55

SIUZ is a Czech non-profit association dedicated to promoting innovative and sustainable agriculture practices. The website serves as an information hub for members and interested parties, offering news, working groups, events, and educational content focused on precision farming and eco-friendly agricultural technologies. The organization targets farmers and agricultural professionals within the Czech Republic, positioning itself as a niche player in sustainable agriculture advocacy and knowledge sharing. Technically, the website is built on WordPress and leverages common plugins such as The Events Calendar and Google Tag Manager. The site is accessible, mobile-optimized, and uses HTTPS with good SSL configuration. However, it lacks some advanced security headers and explicit privacy or cookie policies, which are important for compliance and user trust. From a security perspective, the site shows a moderate posture with HTTPS enabled and no visible vulnerabilities or exposed sensitive data. The absence of a security.txt file and incident response contacts limits its readiness for vulnerability reporting and incident management. The missing WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and social media presence support its authenticity. Overall, SIUZ presents a professional and focused online presence for its niche audience but should improve privacy compliance and security transparency to enhance trust and regulatory adherence.

K

Kompostářská asociace

kompostarska-asociace.cz

47

Kompostářská asociace is a Czech Republic based non-profit organization dedicated to advocating for the composting industry. Founded in 2020, it serves as a collective voice for stakeholders in the composting sector, providing industry representation and information dissemination. The website is built on WordPress using the Divi theme, indicating a moderate level of digital maturity with standard CMS capabilities. The site includes cookie consent mechanisms via Cookiebot and uses Google Tag Manager configured to limit ad personalization and analytics storage, reflecting a basic privacy-conscious approach. However, the absence of a published privacy policy, terms of service, and explicit contact information limits transparency and compliance. Security posture is moderate with no detected security headers or incident response information, suggesting room for improvement in security best practices. Overall, the website is professional and relevant to its target audience but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

F

Farmářská škola

farmarskaskola.cz

45

Farmářská škola is a specialized higher vocational school in the Czech Republic focused on ecological and biodynamic agriculture education. Established in 2020, it offers practical and theoretical training on ecological farms domestically and internationally. The institution targets students and individuals interested in sustainable farming practices and rural development. The website reflects a well-structured educational platform with clear navigation, modern design, and compliance with GDPR and cookie regulations. Technically, the website is built on WordPress using a modern theme and plugins, including jQuery, Swiper Slider, and nanogallery2 for enhanced user experience. It integrates marketing and analytics tools such as Google Analytics, Facebook Pixel, and TikTok Pixel, managed via Google Tag Manager. The site is mobile-optimized and performs moderately well, with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers like Content-Security-Policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's claims, showing consistent registration details and appropriate domain age. Overall, Farmářská škola presents a credible, professional, and secure online presence suitable for its educational mission, with recommendations to enhance security headers and maintain regular updates to plugins and CMS.

E

European Compost Network

compostnetwork.info

53

The European Compost Network (ECN) operates as a membership organization representing bio-waste organizations, plant operators, researchers, policy makers, and consultants across 27 European countries. It serves as a key network advocating for sustainable bio-waste management and composting practices, offering certification services (ECN-QAS), policy advocacy, and dissemination of research and market development information. The website is well-structured, content-rich, and targets professionals and stakeholders in the bio-waste and environmental sustainability sectors. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, Bootstrap, and various plugins for downloads, events, newsletters, and GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in security headers and incident response documentation are recommended. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. No WHOIS data is publicly available, indicating privacy protection which is justified for this type of organization. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a trustworthy and professional digital presence for ECN, with strong business credibility and compliance with privacy regulations. Strategic improvements in security transparency and contact information availability would further enhance trust and resilience.

The Pax-BKC-Spendenportal is a German-language online donation platform operated by Pax-Bank für Kirche und Caritas eG, focused on connecting donors with charitable projects and organizations. The platform offers institutions the ability to collect donations online and showcases various projects aligned with sustainability goals. The website is professionally designed with clear navigation and good content relevance, targeting donors and non-profit organizations primarily in Germany. Technically, the site is built on the Contao CMS with modern JavaScript libraries enhancing user experience. Hosting is provided by venne-hosting.de, and the site uses HTTPS with a cookie consent mechanism ensuring GDPR compliance. However, no explicit security policy or incident response information is published, which could be improved to enhance trust and transparency. Overall, the platform demonstrates a solid security posture with no detected vulnerabilities or blocking mechanisms, making it a trustworthy resource for charitable giving.

I

iRegisterAL

iregister.al

10

iRegisterAL is a professional and accredited domain registrar and hosting service provider based in Albania, specializing in .AL domain registrations, shared hosting, VPS, dedicated servers, and SSL certificates. The company operates a local data center and targets businesses and individuals seeking reliable hosting and domain services in the Albanian market. Their website is well-structured, content-rich, and provides clear navigation and calls to action, reflecting a mature digital presence. Technically, the website is built on WordPress with modern plugins and technologies such as Google Analytics, Microsoft Clarity, and LinkedIn Insight Tag for analytics and marketing. Security measures include HTTPS enforcement, anti-spam plugins, and reCAPTCHA on forms, although some security headers and cookie consent mechanisms are missing. The site is mobile-optimized and SEO-friendly, contributing to good user experience and discoverability. From a security perspective, the site demonstrates good practices but could enhance its posture by implementing additional HTTP security headers and publishing formal security policies. No critical vulnerabilities or suspicious activities were detected. WHOIS data confirms the legitimacy of the business, with consistent registration details matching the website's claims. Overall, iRegisterAL presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would further strengthen their market position and customer trust.

K

Keminet

keminet.net

48

Keminet is a technology service provider specializing in domain registration, dedicated servers, VPS hosting, web and business hosting, SSL certificates, and IT consultancy. Established in 2006, the company has a solid market presence servicing over 5,000 websites. The website is built on a modern WordPress platform using Elementor and Astra theme, indicating a good level of digital maturity. The technical infrastructure includes PWA capabilities and WhatsApp chat integration, enhancing user engagement and accessibility. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

E

Erzbistum Berlin

erzbistum-berlin.de

54

Erzbistum Berlin operates as the official Catholic Archdiocese for the Berlin, Brandenburg, and Vorpommern regions in Germany. The website serves as a comprehensive information and communication platform offering news, event calendars, religious education, pastoral services, and community support. It targets the Catholic community and related stakeholders, positioning itself as a key regional religious authority with a broad range of services including media, education, and social outreach. The business model is non-profit, focusing on community engagement and spiritual guidance. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and JavaScript libraries for enhanced user experience. The site is mobile-optimized, accessible, and SEO-friendly, with a well-structured navigation system. The presence of a detailed cookie consent mechanism and integration with analytics tools like etracker reflects a mature digital infrastructure with attention to privacy compliance. From a security perspective, the site enforces HTTPS and employs a granular cookie consent system, minimizing unnecessary data exposure. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and preparedness. No critical vulnerabilities or suspicious activities were detected. Overall, Erzbistum Berlin's website demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR. It effectively supports its mission as a religious and community institution while maintaining a secure and user-friendly online presence.

Z

Zukunft Niederrhein

zukunft-niederrhein.de

10

Zukunft Niederrhein is a regional initiative representing sand and gravel companies in the Niederrhein area of Germany. The organization focuses on promoting the importance of sand and gravel extraction for infrastructure and regional development. Their website provides information on industry topics, environmental impact, and community engagement, targeting local residents and stakeholders. The business model centers on advocacy, information dissemination, and fostering dialogue about the regional raw materials industry. Technically, the website is built on WordPress with modern plugins like Yoast SEO and uses Google Analytics for visitor tracking, complemented by a cookie consent mechanism to ensure GDPR compliance. The site is hosted on German providers with secure HTTPS configuration and moderate performance. Security posture is adequate with HTTPS and privacy-conscious analytics settings, but lacks explicit security policies or incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could improve by adding more explicit security and compliance documentation.

W

World Dredgers GmbH & Co. KG

world-dredgers.de

49

World Dredgers GmbH & Co. KG is a specialized engineering company focused on the design, construction, and servicing of suction dredgers and related equipment for efficient gravel and sand extraction. The company emphasizes innovation, notably with its autonomous GPS-based movement control system for dredgers, enhancing operational efficiency and automation. Their market position is that of a niche specialist serving B2B clients in the energy and transportation sectors related to raw material extraction. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a credible small-sized enterprise with a clear business focus and parent company affiliation.

O

OTTO MAURER Assekuranzmakler GmbH

maurer-assekuranz.de

51

OTTO MAURER Assekuranzmakler GmbH is a specialized insurance brokerage firm focusing on inland navigation, construction, recycling, and related industries primarily in Germany and the BeNeLux region. With over 30 years of experience and affiliation to the HÜLSKENS-Firmenverband group, the company offers tailored insurance solutions including Flusskasko, P&I, machinery breakdown, and freight loss insurance. The website reflects a professional and consistent brand presence with clear service descriptions and multiple contact points. Technically, the website is built on the Contao Open Source CMS platform, utilizing common JavaScript libraries such as jQuery and Swipe.js for UI components. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Hosting appears to be managed via Agenturserver, with no direct evidence of advanced security headers or analytics tools. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. However, no explicit security policy or incident response contacts are published, and security headers are not evident. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business claims, showing consistent registration and no privacy protection, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant with privacy regulations, though improvements in security policy transparency and technical security headers are recommended to enhance the security posture and trust further.

R

Ruhrmann Logistik GmbH & Co. KG

ruhrmann-logistik.de

51

Ruhrmann Logistik GmbH & Co. KG is a well-established logistics company specializing in bulk goods handling and port logistics with multiple locations in North Rhine-Westphalia, Germany. The company operates its own port facilities and is part of the larger Hülskens Firmenverband corporate group, which has a long history in the construction and logistics sectors. The website clearly targets business clients in transportation and waste management, offering comprehensive logistics services including ship disposition and specialized material handling. Technically, the website is built on the Contao CMS platform and uses common JavaScript libraries such as jQuery and Swipe.js for UI components. The site is moderately performant, mobile-optimized, and includes basic accessibility features. SEO is well addressed with proper meta tags and structured data. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism, but lacks explicit security headers and published security policies. The security posture is solid but could be improved by adding formal security and incident response policies and enhancing HTTP security headers. No vulnerabilities or suspicious elements were detected in the content or scripts. WHOIS data aligns well with the business claims, indicating a trustworthy domain with consistent registration information. Overall, the website presents a professional and credible business presence with good content quality and technical implementation. Strategic improvements in security transparency and incident response readiness would further strengthen trust and compliance.

H

Heinr. Elskes GmbH & Co. KG

elskes.de

51

Heinr. Elskes GmbH & Co. KG is a medium-sized, leading concrete manufacturing and supply company based in Nordrhein-Westfalen, Germany. The company operates under the Hülskens Holding group and offers a broad range of products including transport concrete, precast concrete elements, construction steel, and material testing services. Their market position is strong regionally, supported by sustainability certifications such as CSC Platinum and Gold, and a modern online ordering platform enhancing customer experience. The website reflects a professional and trustworthy business with clear contact channels and a focus on quality and sustainability. Technically, the site is built on the Contao CMS platform using modern JavaScript libraries, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. No blocking or WAF challenges were detected, allowing full content access and analysis. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable digital presence for the company.

H

Hülskens GmbH & Co. KG

huelskens-kies-sand.de

50

Hülskens GmbH & Co. KG is a well-established German company specializing in the extraction and supply of mineral raw materials such as sand and gravel, primarily serving the construction and infrastructure sectors. With over 100 years of experience and multiple regional subsidiaries, the company emphasizes sustainable land use and ecological projects alongside its core business. The website reflects a professional and regionally focused business model with clear communication of services and corporate values. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies including Bootstrap and jQuery. It is hosted on agenturserver infrastructure, with good mobile optimization and SEO practices. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. The absence of analytics scripts suggests a privacy-conscious approach. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant, with room for improvement in security policy transparency and header implementation. The risk level is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain and improve security and compliance posture.

RECYCLING magazine is a specialized media outlet providing trends, analyses, opinions, and factual news for the recycling industry. It offers both print and digital magazine subscriptions, organizes events, and publishes advertorials and newsletters targeting professionals and stakeholders in the recycling sector. The website is professionally designed using WordPress with Elementor and Yoast SEO, ensuring good content quality and user experience. The technical infrastructure includes modern web technologies and tracking tools such as Google Analytics and eTracker, with a cookie consent mechanism in place to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no exposed sensitive data, though the absence of security headers and WHOIS transparency slightly reduce trust. Overall, the site is a credible and professional resource for its niche audience.

T

Tourism Development Association Pardubicko – Czech Gingerbread Heart

topardubicko.cz

36

The website represents the Tourism Development Association Pardubicko – Czech Gingerbread Heart, a regional tourism promotion entity focused on the Pardubicko area in the Czech Republic. It offers tourist information, downloadable promotional materials, and collaborates with CzechTourism to provide travel inspiration. The site targets tourists interested in cultural heritage, local cuisine, and family-friendly activities. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and includes a cookie consent mechanism and Google Analytics for tracking. The site is mobile responsive and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is unavailable, which reduces domain trust but the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

M

Miroslav Mrázek

joomla-webdesign.cz

42

Joomla Webdesign is a Czech Republic-based small business specializing in Joomla CMS web design, development, SEO, and maintenance services. With over 10 years of experience, the company targets small to medium enterprises seeking tailored Joomla-based web solutions. The website demonstrates a professional digital presence with a modern tech stack including Joomla, Bootstrap, and Google Analytics integration. Security posture is solid with HTTPS and CSRF protections, though it lacks some security headers and formal privacy policies. The absence of WHOIS data reduces domain trust but is partially offset by clear business contact information and a portfolio of projects. Overall, the site is functional, user-friendly, and business-focused.

D

Dobrovolný svazek obcí Holicka

dsoh.cz

51

Dobrovolný svazek obcí Holicka is a voluntary association of municipalities in the Pardubice region of the Czech Republic, centered around the town of Holice. The website serves as an informational portal for residents and stakeholders, providing official notices, event calendars, tourism information, and downloadable documents. The organization operates as a local government non-profit entity, focusing on regional cooperation and community services. Technically, the website employs a custom CMS developed by Galileo Corporation s.r.o., utilizing JavaScript libraries such as jQuery and MooTools. The site has moderate performance and basic mobile optimization. It implements a cookie consent mechanism but lacks visible privacy and terms of service pages. No advanced analytics or tracking tools are detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers such as CSP or HSTS in the provided data. No WHOIS registration data is available, which reduces domain trustworthiness. Contact information is clearly presented, but no dedicated security policy or incident response contacts are found. Overall, the security posture is moderate but could be improved with enhanced headers and transparency. The overall risk is moderate with recommendations to verify domain registration status, implement security headers, and publish privacy and security policies to enhance trust and compliance.

N

Nadácia Zastavme korupciu

zastavmekorupciu.sk

58

Nadácia Zastavme korupciu is a Slovak non-profit organization dedicated to combating corruption through investigative journalism, legal support for whistleblowers, and youth community engagement. Established around 2013-2014, it has built a recognized presence in Slovakia with a small but focused team. The website reflects a professional and consistent brand image, targeting a general audience interested in transparency and governance. Technically, the site is built on WordPress with modern plugins and CDN support, ensuring good performance and mobile optimization. Security posture is solid with HTTPS, DNSSEC, and cookie consent mechanisms, though some advanced security headers and policies could be improved. Overall, the site is trustworthy and compliant with privacy regulations, though explicit privacy and security policies are not found. Contact information is limited on the site, which could be enhanced for better user engagement and trust.

K

KASPIAN

kaspian.sk

51

KASPIAN is a Slovak civic association with a website built on WordPress, featuring minimal content and limited business information. The organization appears to be small and non-profit, with a domain registered since 2005, consistent with its claimed history. The website includes social media links but lacks detailed descriptions of services or business operations. Technically, the site uses common WordPress plugins and themes, hosted on Slovakian infrastructure, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service. Overall, the site is functional but could benefit from enhanced content, security, and compliance documentation.

P

Pardubický kraj

krajprorodinu.cz

46

The website krajprorodinu.cz serves as an official regional government portal dedicated to family support in the Pardubice region of the Czech Republic. It provides comprehensive information and resources for families with children, seniors, caregivers, and professionals involved in social services. The site is well-positioned as a trusted regional support platform with a clear focus on social welfare and community engagement. The business model is non-commercial, supported by the regional government, and targets local residents and stakeholders. Technically, the website is built on WordPress with a modern plugin ecosystem including Yoast SEO, WPBakery Page Builder, and Events Manager. It uses HTTPS with good SSL configuration and implements GDPR-compliant cookie consent mechanisms. The site demonstrates good SEO practices, moderate performance, and basic accessibility features. Social media integration includes Facebook and Instagram links. From a security perspective, the site enforces HTTPS and uses cookie consent to manage user privacy. No critical vulnerabilities or exposed sensitive data were detected. However, security headers could be improved, and a security.txt file is absent. The domain registration is consistent with the website’s regional government affiliation, with no suspicious patterns detected. Overall, the website presents a low-risk profile with a solid foundation for content delivery and user engagement. Strategic recommendations include enhancing security headers, improving accessibility, and formalizing vulnerability disclosure processes to further strengthen trust and compliance.

O

OMNIA MEDIA

omniamedia.cz

50

OMNIA MEDIA is a Czech Republic based digital marketing and media production agency offering a comprehensive range of services including video production, digital and offline marketing, and graphic design. The company emphasizes data-driven strategies combined with creativity to deliver impactful brand communication and measurable results. Their website showcases client projects and provides clear contact information, positioning them as a professional and trusted agency in the media sector. Technically, the website is built on WordPress with Elementor and uses modern libraries like Swiper.js and Bootstrap, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, though it lacks explicit privacy and terms of service pages. The domain registration is consistent and transparent, supporting the legitimacy of the business.

N

NADĚJE

nadeje.cz

49

NADĚJE is a well-established Czech non-profit organization focused on providing social services to vulnerable populations including seniors, homeless people, handicapped individuals, families, children, and youth. Founded in 1990, the organization operates multiple branches across the Czech Republic and offers a variety of services including education, spiritual care, and debt counseling. The website serves as an information hub and donation platform, integrating a donation widget and linking to an e-commerce shop and educational sites. Technically, the site is built on WordPress with Elementor, uses modern web technologies, and includes GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enabled and no obvious vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

D

Designwerk

designwerk.com

49

Designwerk is a medium-sized company specializing in electromobility solutions, including electric vehicle manufacturing, energy storage, and charging infrastructure. The company targets businesses and organizations interested in sustainable energy and transportation solutions, positioning itself as a niche player in the energy and transportation sectors. The website is professionally designed using WordPress and the Avada theme, indicating a moderate level of digital maturity with good mobile optimization and SEO practices. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible advanced security headers or policies, and privacy compliance is lacking due to missing privacy and cookie policies. Overall, the website presents a professional business front but requires improvements in security and compliance to enhance trustworthiness.

M

Město Červený Kostelec

cervenykostelec.cz

41

Město Červený Kostelec operates an official municipal website serving residents and visitors with comprehensive information about the town's administration, public services, news, and community events. The website is well-structured, primarily in Czech, and targets local citizens and stakeholders. It provides key services such as contact details, public documents, and updates on municipal activities, positioning itself as a trusted local government resource. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, running on the Munipolis CMS platform. It is mobile-optimized and offers a moderate performance profile. The site uses HTTPS and implements cookie consent mechanisms, reflecting a reasonable level of digital maturity. From a security perspective, HTTPS is enforced, and no immediate vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is supported by a dedicated GDPR page and cookie consent, but terms of service and incident response contacts are missing. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. The lack of WHOIS data limits domain trust assessment, but the site itself shows no signs of malicious activity. Strategic recommendations include enhancing security headers, adding terms of service, and publishing a security.txt file to improve transparency and trust.

A

Asociace Hospicu

asociacehospicu.cz

47

Asociace Hospicu is a Czech non-profit association dedicated to supporting, advocating, and improving the quality of hospice and palliative care organizations. Founded in 2005, it serves as a national body promoting dignified end-of-life care and societal awareness. The website is built on WordPress using the Divi theme, featuring a professional design and clear navigation, with active social media channels on Facebook, LinkedIn, and Instagram. Technically, the site uses modern web technologies but lacks advanced security headers and privacy compliance mechanisms. HTTPS is properly configured, ensuring secure connections. However, the absence of privacy and cookie policies, terms of service, and explicit contact information limits its compliance and user trust aspects. Overall, the site reflects a mature organization with a solid digital presence but would benefit from enhanced security and privacy practices.

Č

Česká federace potravinových bank, z.s.

sbirkapotravin.cz

47

Sbírka potravin is a well-established non-profit initiative in the Czech Republic focused on organizing an annual food collection event to support vulnerable populations such as single mothers and elderly individuals. The campaign is supported by major retail chains, social organizations, and government ministries, indicating strong market positioning and trust. The website provides comprehensive information about the event, volunteer opportunities, and partner organizations, targeting the general public and volunteers. Technically, the website employs modern tracking and marketing technologies with appropriate user consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS and consent management but lacks some advanced security headers and explicit security policies. The absence of WHOIS data limits domain trust analysis but the website content and partnerships strongly support legitimacy. Overall, the site is professional, trustworthy, and serves an important social cause.

M

MAS Holicko o.p.s.

holicko.cz

47

MAS Holicko o.p.s. is a small non-profit organization focused on regional development and community cooperation in the Holicko region of the Czech Republic. Established in 2006, it supports local projects and social services through collaboration with municipalities, entrepreneurs, and citizens. The website reflects this mission with clear content and links to partner organizations. Technically, the site is built on Joomla CMS using modern frameworks like Helix Ultimate and Bootstrap 5, with Google Analytics integrated for visitor tracking. The site is mobile-optimized and presents a professional design with good navigation. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks security headers and published privacy or terms documents. WHOIS data is unavailable, limiting domain trust verification. Overall, the site is safe, trustworthy, and serves its community purpose effectively.

T

tobisRad

tobisrad.de

64

tobisRad is a regional bicycle rental, repair, sales, and delivery service provider operating primarily in the Ostholstein and Lübeck regions of Germany. The company offers a comprehensive range of services including bicycle and e-bike rentals, professional repair services, sales of high-quality bicycles, and a convenient delivery service to customers' locations. The website reflects a strong market position as a year-round service provider with multiple physical locations and a focus on customer convenience and quality service. Technically, the website is built on the Webflow platform, utilizing modern web technologies such as jQuery, Google Tag Manager, Facebook Pixel, and Klaviyo for marketing and analytics. The site is mobile-optimized, accessible, and well-structured, providing a positive user experience. Hosting appears to be via Webflow's infrastructure with Cloudflare services for security and performance. From a security perspective, the website enforces HTTPS and uses a cookie consent mechanism compliant with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and there is no publicly available security policy or incident response contact. No vulnerabilities or suspicious content were detected, indicating a generally good security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The business demonstrates credibility through detailed contact information, consistent branding, and transparent marketing practices. Strategic improvements in security headers and incident response disclosures could further enhance trust and security.

F

Ferienhof Wübbold

ferienhof-wuebbold.de

44

Ferienhof Wübbold is a small hospitality business based in Germany offering farm holiday experiences and vacation rentals near the Alfsee area. The website presents a professional and family-friendly image, targeting families and holidaymakers seeking nature and farm-related vacations. The business operates primarily through holiday apartments and houses, emphasizing a niche market in regional farm tourism. Technically, the website is built on Joomla CMS with Bootstrap framework, incorporating modern web technologies such as jQuery and Font Awesome. Accessibility features and cookie consent mechanisms are implemented, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic best practices observed, though there is room for improvement in publishing privacy policies, terms of service, and security disclosures. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence. No critical security issues or suspicious content were detected.

N

Naturwald Akademie gGmbH

naturwald-akademie.org

63

Naturwald Akademie gGmbH is a German non-profit organization dedicated to ecological forest research, education, and consulting. Founded in 2016, it provides scientific projects, educational programs, and practical advice to forest owners and public entities to promote sustainable and resilient forest ecosystems. The website reflects a professional and well-structured digital presence with comprehensive content tailored to its target audience of forest stakeholders and environmental professionals. Technically, the site is built on WordPress with modern plugins and analytics tools, ensuring good performance and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response transparency are recommended. Overall, the domain registration and WHOIS data align well with the organization's history and legitimacy, supporting a high trust level.

O

OCI informatique

oci-rendeznousmeilleurs.fr

47

OCI informatique operates a professional recruitment website targeting IT professionals in France, offering jobs in cloud, consulting, cybersecurity, development, and infrastructure. The company positions itself as a medium-sized IT services group with a focus on growing its teams through active recruitment. The website is well-structured, uses modern web technologies including WordPress and Elementor, and implements SEO best practices with Yoast SEO. It includes GDPR-compliant cookie consent mechanisms and integrates security features such as Google reCAPTCHA to protect forms. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. The domain registration data is consistent with the business claims, indicating legitimacy and proper domain management.

D

Dennis Eagle Ltd

dennis-eagle.co.uk

73

Dennis Eagle Ltd is a prominent UK-based manufacturer specializing in refuse collection vehicles (RCVs) with a heritage spanning over 100 years. The company operates under the Royal Terberg Group umbrella and offers a comprehensive portfolio including chassis, bodies, bin lifts, and electric vehicle solutions. Their market position is strong within the transportation sector, serving both public and private waste management entities globally. The website reflects a mature digital presence with professional design, clear navigation, and mobile optimization. Technically, the site leverages modern frameworks such as Bootstrap and Vue.js, integrates multiple analytics platforms including Matomo and Google Analytics, and employs a consent management platform for GDPR compliance. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some security headers and explicit incident response information are absent. Overall, the domain appears legitimate despite incomplete WHOIS data due to .uk domain naming rules. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility compliance to further strengthen trust and compliance.

D

D&T Internet GmbH

dt-internet.de

56

D&T Internet GmbH is a small, established full-service internet service provider based in Cologne, Germany, with over 20 years of experience. The company specializes in TYPO3 CMS web development, cloud telephony solutions (Swyx HostedPBX), and offers additional cloud products such as online storage and web hosting. Their target audience includes businesses and organizations seeking professional internet and communication services. The website reflects a professional and consistent brand image with clear navigation and relevant content. Technically, the site is built on TYPO3 CMS, enhanced with modern JavaScript libraries and frameworks like jQuery and Foundation, and includes accessibility and mobile optimization features. Matomo analytics is used with an opt-in cookie consent mechanism, demonstrating good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is trustworthy and well-maintained, supporting the company's market position as a reliable technology service provider.

G

Gist

getgist.com

59

Gist is a technology company offering an integrated SaaS platform focused on email marketing automation, live chat, help desk, and customer engagement tools. The company targets businesses seeking to streamline customer communication and growth through a unified platform. The website is professionally designed with good SEO and structured data, reflecting a mature digital presence. The technical infrastructure leverages WordPress CMS with multiple modern analytics and marketing tools, including Google Analytics, Facebook Pixel, PostHog, and ProfitWell, indicating a data-driven approach to user engagement and growth. Security posture is adequate with HTTPS enforced and domain registration consistent with business age; however, DNSSEC is not enabled and security headers are not evident, representing areas for improvement. Privacy compliance is weak due to the absence of visible privacy and cookie policies, which could pose compliance risks. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

K

Karpatská nadácia

uprezeny.sk

55

UPre ženy is a Slovak non-profit program run by Karpatská nadácia focused on empowering Roma women from marginalized communities by enhancing their employability, skills, and self-confidence. The program is supported by notable financial and program partners including Norway Grants, Starbucks Foundation, and others, positioning it as a credible regional social inclusion initiative. The website is professionally designed using WordPress and Elementor, with good SEO and mobile optimization. Privacy and cookie policies are present and GDPR compliant, reflecting a mature approach to data protection. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site reflects a trustworthy and well-managed social program with clear contact information and partner endorsements.

M

MyMachine Slovakia

mymachine.sk

48

MyMachine Slovakia is a non-profit educational program focused on fostering creative thinking and collaboration among children and youth in Slovakia. The program facilitates the transformation of children's ideas into real inventions through a collaborative process involving students from primary, secondary, and higher education institutions. The website reflects a well-established initiative with strong partnerships, notably with the Karpatská nadácia foundation, and presents a clear mission to nurture innovation and technical education. Technically, the website is built on WordPress using Elementor, with modern web technologies and good SEO practices. It employs HTTPS and cookie consent mechanisms to comply with GDPR, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates a solid security posture with room for enhancement in security headers and incident response transparency.

F

Frau Heike Bobusch-Seefeld

the-new-art.de

57

The website www.the-new-art.de represents the online presence of artist Heike Bobusch, specializing in original acrylic paintings and abstract canvas art. The site offers virtual 360° tours of the gallery and promotes commissioned artwork services. The business operates as a small-scale art seller based in Berlin, Germany, targeting art enthusiasts and potential buyers interested in unique, hand-painted pieces. The website is well-structured with clear navigation and professional content, including customer testimonials and detailed contact information. Technically, the site uses a custom CMS (tourcms3), krpano for immersive virtual tours, and Howler.js for audio support. It is hosted on 1&1 IONOS infrastructure with HTTPS enabled, ensuring secure connections. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. Privacy policy is comprehensive and GDPR compliant, but no explicit terms of service or incident response policies are found. Overall, the website is trustworthy, professionally maintained, and suitable for its niche market.

F

Förderverein Finower Wasserturm und sein Umfeld e.V.

wasserturm-finow.de

58

The Förderverein Finower Wasserturm und sein Umfeld e.V. operates a cultural museum dedicated to preserving the industrial heritage of the Messingwerksiedlung and the Finower Wasserturm in Germany. The website offers detailed historical content, virtual 360° tours, and visitor information, targeting cultural enthusiasts and regional tourists. The organization is a small non-profit founded in 2003, relying on donations and volunteer support. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and specialized 360° tour software (krpano) integrated with the VR-Easy CMS. Hosting is provided via rzone.de nameservers. Security posture is adequate with HTTPS and client-side validation but lacks advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility.

V

VR-EASY Marketing

faszination-tegernsee-schliersee.de

56

VR-EASY Marketing operates the website faszination-tegernsee-schliersee.de, offering immersive 360° virtual tours and panoramas focused on the Tegernsee and Schliersee regions in Germany. The business targets tourists, local hotels, and destination marketing organizations by providing high-quality virtual tour creation and marketing consulting services. The website is well-structured, content-rich, and professionally presented in German, with clear contact information and legal disclosures. Technically, the site uses modern web technologies including krpano for panorama viewing, Google Maps API, and Google Analytics with IP anonymization, hosted on servers indicated by the mga-intermedia.com nameservers.

O

OCI informatique

rendeznousmeilleurs.fr

47

OCI informatique operates a professional recruitment website targeting IT professionals in France, offering jobs in cloud, consulting, infrastructure, cybersecurity, and related fields. The company positions itself as a medium-sized IT services group focused on expanding its talent pool. The website is built on WordPress with Elementor and includes modern SEO and privacy compliance features such as cookie consent and GDPR-aligned privacy policies. Technically, the site uses HTTPS, Google reCAPTCHA, and standard web technologies, providing a moderate to good performance and user experience. Security posture is solid but could be improved with additional security headers and explicit incident response policies. The WHOIS data shows an anomalous domain creation date in the future, which requires verification but does not currently impact the website's operational legitimacy. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving its business purpose effectively.

O

OCI

oci.eu

63

OCI is a French company specializing in digital transformation and IT services for businesses including SMEs, mid-sized companies, associations, and local authorities. Their website presents a comprehensive portfolio of services such as infrastructure, cybersecurity, cloud services, IT equipment, telephony, physical security, managed IT services, and business software solutions. The company positions itself as a trusted partner for digitalization in France. Technically, the website is built on WordPress using Elementor and optimized with WP Rocket, featuring modern web technologies and good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy. The absence of WHOIS data limits domain trust assessment, though the website content and design indicate a professional and legitimate business. Overall, the site demonstrates a mature digital presence with room for improvement in privacy and security transparency.

L

Landratsamt Miltenberg

landratsamt-miltenberg.de

61

Landkreis Miltenberg operates a professional and comprehensive local government website providing residents and stakeholders with current news, career opportunities, departmental information, and citizen services. The site is well-structured, accessible, and includes privacy and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and a reputable CMS (Contao), hosted on a known provider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and serves its public sector role effectively.

A

Aszód város

aszod.hu

47

Aszód.hu is the official website of Aszód city in Hungary, serving as a municipal information portal. It provides comprehensive information about the city's geography, history, economy, community life, and events. The website targets residents and visitors seeking official city information and services. The business model is that of a government/public service entity, with a focus on transparency and community engagement. Technically, the site is built on WordPress 6.8.3 using the Astra theme and Elementor page builder, supplemented by plugins for events, search, accessibility, and GDPR compliance. The infrastructure reflects a modern WordPress ecosystem with performance optimizations via WP Rocket. Mobile optimization and accessibility are well addressed, enhancing user experience. From a security perspective, the site enforces HTTPS and uses performance and accessibility plugins that indirectly support security and compliance. However, explicit security headers are missing, and no dedicated security or privacy policies are found. There is no visible incident response or vulnerability disclosure information, which could be improved to enhance trust and compliance. Overall, the website is legitimate, consistent with the domain's WHOIS data, and professionally maintained. The risk level is low, but improvements in privacy transparency and security headers would strengthen the security posture and user trust.

K

klein•wenner

kleinwenner.eu

60

klein•wenner is a small, multicultural law firm specializing in business law with an international reach, formed by the merger of KGA Avocats and Wenner. The website presents a professional image with a clear focus on business law services targeting international clients and business professionals. The firm positions itself as a multicultural entity with expertise in business law, although detailed business information such as founding year or company size is not explicitly provided. The website is built on WordPress using the Divi theme, incorporating SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The technical infrastructure is standard for a professional service website, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and some privacy mechanisms like cookie consent in place, but lacks advanced security headers and explicit privacy or security policies. No contact information or incident response details are found, which limits direct communication channels for security or business inquiries. Overall, the website is professional and safe but could improve in transparency and security best practices.

K

KrW Kreislaufwirtschafts- und Abfallverwertungs-Gesellschaft mbH

krw-gmbh.de

10

KrW Kreislaufwirtschafts- und Abfallverwertungs-Gesellschaft mbH is a medium-sized German company specializing in professional recycling and disposal services, particularly for hazardous waste from automotive workshops, trade, and industry. With over 20 years of experience and a fleet of more than 250 specialized vehicles, the company operates nationwide from its base in Duisburg. The website reflects a professional business model focused on comprehensive waste management solutions including consulting, logistics, and disposal services. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The presence of a cookie consent mechanism and privacy policy demonstrates good privacy compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and formal policies are recommended. Overall, the site is trustworthy, well-structured, and serves its target audience effectively.

R

Royal Terberg Group B.V.

royalterberggroup.com

76

Royal Terberg Group B.V. is a well-established family-owned business based in the Netherlands, specializing in the development, production, and modification of special transport vehicles and environmental loading systems. The company also offers a broad range of services including maintenance, spare parts, repair, rental, and telematics, targeting businesses requiring specialized logistics and environmental equipment solutions. Their market position is strong, supported by a global presence and multiple subsidiary domains representing their divisions. Technically, the website employs a modern technology stack including Matomo Analytics, Google Tag Manager, Azure Application Insights, jQuery, Bootstrap, and Vue.js, hosted on a CMS platform identified as Episerver (Optimizely). The site is mobile-optimized with good SEO and accessibility basics, though some improvements could be made in accessibility and security headers. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms with granular controls. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though the absence of WHOIS data and security policy details slightly reduce trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure channels to improve security posture and transparency.

T

Terberg Environmental

terbergenvironmental.com

10

Terberg Environmental is a well-established company specializing in eco-technology solutions for the waste management and recycling industry. Their product portfolio includes bin lifting systems, rear loaders, side loaders, and electric products, serving a global market with a strong emphasis on sustainability and innovation. The company operates under the Royal Terberg Group umbrella, indicating a solid corporate backing and extensive industry experience. The website reflects a professional and comprehensive digital presence, targeting industry professionals and organizations seeking reliable waste collection technologies. Technically, the site employs modern web technologies including Vue.js, Bootstrap, and multiple analytics platforms, combined with a consent management platform to ensure GDPR compliance. Security posture is generally good with HTTPS enforced and privacy policies in place, though explicit security headers and incident response information are lacking. The absence of WHOIS registration data is a notable concern for domain legitimacy, though the website content and structure suggest a legitimate and professional business. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security transparency and domain registration clarity.

O

OCI

oci.fr

10

OCI is a French digital transformation company specializing in IT infrastructure, cybersecurity, cloud services, telecom, and business digitalization solutions. The company targets SMEs, mid-sized enterprises, associations, and local authorities, positioning itself as a trusted partner in digital transformation. The website is professionally designed using WordPress and Elementor, with performance optimizations via WP Rocket and modern web technologies. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit privacy and terms policies are not found. WHOIS data is unavailable, likely due to privacy protection, but no suspicious indicators are present. Overall, OCI presents a credible and professional digital presence with clear contact channels and comprehensive service offerings.