Security Directory

O

Offene Tür Erlangen

offene-tuer-erlangen.de

58

Offene Tür Erlangen is a small non-profit counseling and advisory center affiliated with the Erzdiözese Bamberg, serving the local community in Erlangen, Germany. The organization offers open counseling, adult education, exhibitions, and support for individuals facing difficult life situations or mental health challenges. The website reflects a professional and consistent brand image, providing clear contact information and a comprehensive cookie consent mechanism, demonstrating good privacy compliance. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with the Diocese of Bamberg. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF or blocking mechanisms.

M

mediaService Fuchshuber

panotour.info

46

mediaService Fuchshuber operates the website mediaservice360.com, providing specialized services in creating 360° virtual tours, panorama photography, video production including drone and 360° videos, graphic design, and web design primarily targeting hotels, businesses, tourism, and real estate sectors in Germany. The company positions itself as a niche provider with a strong focus on immersive virtual experiences and integrated marketing solutions. Their offerings include Google StreetView integration, enhancing visibility and customer engagement. Technically, the website is built using Nicepage CMS with jQuery and integrates Google Tag Manager and Google Analytics for tracking. The site employs Elfsight widgets for chatbot, accessibility, and appointment booking functionalities, indicating a moderate level of digital maturity. The website is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. HTTPS is enabled, but security headers are lacking, suggesting room for improvement in security hardening. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive privacy policy, cookie consent mechanisms, and GDPR compliance indicators. However, no explicit security policy, incident response contacts, or vulnerability disclosure policies are published. The WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the professional content and consistent branding mitigate immediate risks. Overall, mediaservice360.com is a professional and trustworthy business website with solid content and compliance posture but could enhance its security posture by adding security headers and publishing security-related policies. Monitoring domain registration status is recommended to ensure ongoing legitimacy.

O

Obermain Therme Bad Staffelstein

obermaintherme.de

51

Obermain Therme Bad Staffelstein operates a well-established thermal spa and wellness center in Bavaria, Germany, offering a variety of services including thermal baths, sauna facilities, therapy treatments, and wellness cosmetics. The website reflects a strong regional market position with a focus on customer experience and engagement through newsletters and social media channels. Technically, the site is built on WordPress with modern integrations such as Sendinblue for marketing automation and Cookiefirst for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent, though improvements could be made by implementing additional security headers and publishing incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the business's credibility and customer trust.

The website for Pfarrei Altenbanz und Pfarrei Banz serves as the official online presence of the Catholic parish in Altenbanz and Banz, Germany. It provides parishioners and visitors with information about religious services, sacraments, community events, and contact details. The site is clearly targeted at local community members and those interested in church activities. The business model is non-profit, focusing on spiritual and community services. The website content is well-structured, professionally presented, and consistent with the parish's mission. Technically, the site employs a modern frontend stack including jQuery, Bootstrap, Font Awesome, and specialized plugins like Revolution Slider and JWPlayer. It uses a CMS likely based on FlexiWeb, hosted on servers associated with internet1.de. The site is mobile responsive and includes accessibility features, though these could be enhanced. Analytics are handled via Matomo with privacy-conscious anonymous tracking fallback, and Google reCAPTCHA is used to protect forms. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and incident response contact information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration is consistent with the website's purpose, though registrant details are minimal. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic improvements include adding security headers, publishing incident response contacts, and enhancing accessibility. These steps would further strengthen trust and security posture.

B

Bayreuther Land

bayreutherland.de

48

Bayreuther Land is a regional branding initiative jointly run by the Landkreis and Stadt Bayreuth in Germany. The website promotes local producers and products to strengthen regional economic value and preserve local specialties. It targets consumers interested in authentic regional goods and provides resources such as producer listings, recipes, event information, and thematic nature trails. The site is built on WordPress using the Avada theme and several plugins including Slider Revolution and Contact Form 7. The technical infrastructure is modern and supports good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in cookie consent and security headers. Overall, the website is trustworthy and professionally maintained, serving a niche regional market effectively.

P

Praxis am Main

praxis-am-main.de

43

Praxis am Main is a small, local medical practice specializing in general and sports medicine located in Bayreuth, Germany. The website clearly communicates the practice's services, contact information, and partnerships with local sports organizations, positioning it as a trusted healthcare provider in the community. The business model focuses on personalized patient care with an emphasis on health, well-being, and performance. The site content is well structured and professionally presented in German, targeting local patients seeking medical services in general and sports medicine. Technically, the website is built on WordPress with Yoast SEO plugin and uses jQuery for interactivity. It is hosted by agenturserver with proper HTTPS configuration, indicating a modern and secure infrastructure. Mobile optimization and SEO practices are good, although accessibility features are basic. No advanced analytics or tracking scripts are detected, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS but lacks important security headers and does not provide explicit incident response or security policy information. There is no cookie consent mechanism, which may pose GDPR compliance risks. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is partially consistent with the business claims, though registrant details are minimal. Overall, the website is professional, trustworthy, and suitable for its healthcare audience. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

B

Bayerisches Rotes Kreuz – Kreisverband Bayreuth

brk-bayreuth.de

47

The Bayerisches Rotes Kreuz – Kreisverband Bayreuth website represents a well-established regional non-profit organization focused on social, health, and emergency services within the Bayreuth area in Germany. The organization provides a broad range of services including emergency rescue, elderly care, social support, childcare, first aid training, and volunteer community groups. The website content is comprehensive, professionally designed, and clearly targeted at residents and stakeholders seeking assistance or engagement with the Red Cross in Bayreuth. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket for optimization. It employs standard web technologies including jQuery and FontAwesome, and demonstrates good mobile responsiveness and SEO practices. The site loads quickly and provides a positive user experience with clear navigation and structured content. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and does not provide public information on security policies, incident response, or vulnerability disclosure. No cookie consent mechanism was detected, which may present a GDPR compliance gap. Analytics are implemented via WP Statistics with minimal user tracking. Overall, the website is trustworthy and professional, with strong business credibility and content quality. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing privacy compliance disclosures to further strengthen the security posture and regulatory adherence.

K

Klinikum Bayreuth

klinikum-bayreuth.de

49

Klinikum Bayreuth operates as a regional healthcare provider in Germany, offering comprehensive hospital and ambulatory services across multiple locations. The website is built on TYPO3 CMS with modern frontend technologies, providing a professional and user-friendly experience targeted at patients and healthcare consumers. While the technical infrastructure is solid, the site lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust in the healthcare sector. Security posture is moderate with no detected blocking or WAF, but improvements in security headers and incident response documentation are recommended. Overall, the site is functional and credible but would benefit from enhanced privacy and security transparency.

I

Ivo-Hennemann Grundschule Bad Staffelstein

ivo-hennemann-grundschule.de

56

Ivo-Hennemann Grundschule Bad Staffelstein is a medium-sized educational institution in Germany, operating as a school association comprising four school buildings. The school emphasizes inclusive education and community involvement, positioning itself as the first primary school with an inclusion profile in its district. The website is built on a modern WordPress infrastructure with common plugins and themes, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The site is free from suspicious content and maintains GDPR compliance with a comprehensive privacy policy. Overall, the website reflects a trustworthy and professional educational institution with clear contact information and relevant content for its audience.

C

Codevibrant

codevibrant.com

39

Codevibrant is a small technology company specializing in WordPress themes and plugins, offering customizable and user-friendly web solutions primarily targeting WordPress users and businesses seeking web development services. The company has been operational since 2017 and maintains a professional online presence with a focus on SEO and user experience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Easy Digital Downloads, and various performance and UI libraries. The site is optimized for mobile and SEO, with fast loading times and clear navigation. Security posture is good with HTTPS enabled and standard domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website demonstrates a solid business credibility and technical maturity suitable for its market niche.

I

Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern

irl-bayern.de

41

The Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern (IRL) is a recently founded educational institution (2025) focused on religious pedagogy and teacher training within Bavaria, Germany. It serves religious education teachers across multiple school types by providing professional development courses, resources, and events. The website reflects a professional and regionally focused organization with clear affiliations to the Archdiocese of Munich and Freising. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Bootstrap and MDBootstrap, ensuring good mobile responsiveness and user experience. Hosting is provided by Alfahosting, a reputable German hosting provider. The site uses standard web technologies including jQuery and FontAwesome, and employs a contact form with client-side validation. From a security perspective, the site uses HTTPS and secure form submission but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the website is well-structured and professional but would benefit from enhanced privacy compliance and security header implementation to improve trust and regulatory adherence.

B

Bürgernetz Dillingen e.V.

dillingen.de

39

Bürgernetz Dillingen e.V. is a German non-profit association focused on communication and information technologies, established in 1995. The website serves primarily its members, offering services such as cloud storage (ownCloud), webmail, and association management tools. The site is built on Joomla! CMS and uses JavaScript libraries including jQuery and MooTools. The content is well-structured, mobile responsive, and presented in German, targeting local members. However, contact information is limited to an email address, with no phone or physical address details visible. Privacy policy is present but cookie consent mechanisms are missing. Security posture is moderate with CSRF tokens implemented but lacking security headers and explicit HTTPS enforcement details. No advertising or tracking technologies are detected, indicating a privacy-conscious approach. WHOIS data is minimal but does not raise suspicion.

P

pdir GmbH

contao-themes.net

56

Contao-Themes.net is a specialized digital agency project by pdir GmbH, offering a curated collection of free and premium Contao CMS themes. The company leverages over 15 years of experience in Contao development to provide high-quality themes, installation, support, and consulting services. The website is well-positioned in the niche market of Contao CMS themes, targeting web agencies, freelancers, and businesses seeking professional Contao templates. Technically, the site uses a modern stack including Contao CMS, Bootstrap, jQuery, and integrates Google Adsense and Matomo analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements like enabling DNSSEC and adding CSP headers are recommended. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site demonstrates professionalism, trustworthiness, and a clear business model focused on theme sales and related services.

I

IJ Willtrinken e.U.

willtrinken.at

52

IJ Willtrinken e.U. operates an e-commerce platform focused on nighttime beverage delivery in Vienna, Austria. The website offers a wide range of alcoholic and non-alcoholic drinks including beer, wine, spirits, and party packages, targeting adult consumers seeking fast delivery services. The business positions itself as a local night delivery service with a focus on convenience and quick service. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

S

Scrubdesignz

scrubdesignz.com

51

Scrubdesignz is a specialized e-commerce business focused on providing high-quality graphics kits, plastics kits, and seat covers for motocross and dirt bikes. Established in 2014 and based in Slovakia, the company targets motocross enthusiasts and professional riders globally. The website is built on the Magento platform, leveraging modern JavaScript libraries and tools such as RequireJS, KnockoutJS, and Slider Revolution to deliver a responsive and visually appealing user experience. Social media integration and Google Analytics are used for marketing and user behavior tracking. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.

T

Tím Zones.sk

pscpsc.cz

45

The website pscpsc.cz is a Czech Republic focused postal code search service operated by Tím Zones.sk. It provides users with the ability to search postal codes by city, street, or postal code, and offers a list of popular postal codes. The site is positioned as a niche informational service targeting the general public in the Czech Republic. Technically, the site uses a custom or unknown CMS with common web technologies such as jQuery, Google Tag Manager, Google Adsense, and Facebook SDK. Hosting is provided by Websupport, a regional hosting provider. The site is mobile optimized and has good SEO and accessibility basics. Security posture is moderate with HTTPS enabled and a consent management platform for GDPR compliance, but lacks explicit security headers and detailed privacy or terms of service pages. No direct company contact emails or phone numbers are present on the site, but contact is available via the parent company Zones.sk. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Team Zones.sk

capcap.it

57

capCAP.it is a specialized Italian website offering postal code (CAP) lookup services for cities and streets across Italy. The site targets Italian residents and users needing postal code information, providing a user-friendly search interface with autocomplete features and popular city CAP listings. The business model appears to be advertising-supported, leveraging Google Adsense and Google Tag Manager for monetization and analytics. The site is relatively new, established in 2022, and operated by Team Zones.sk, a company linked via contact and copyright references.

T

Team Zones.sk

plzplz.at

59

plzPLZ.at is a specialized online service providing postal code search functionality for cities and streets in Austria. The website is operated by Team Zones.sk and targets general users seeking postal code information. It offers autocomplete search features and lists popular postal codes, enhancing user convenience. The site is well-positioned in its niche market, focusing on Austrian postal code data with a clear and consistent branding approach. Technically, the website employs a modern tech stack including jQuery, jQuery UI, Google Fonts, Google Tag Manager, and Google Adsense for advertising and analytics. Hosting is provided by websupport.sk, a known hosting provider. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and a comprehensive consent management platform to comply with GDPR cookie and tracking regulations. However, explicit security headers are not detected, and no formal security or incident response policies are published. The site does not expose sensitive data and uses secure forms for user input. Advertising partners and tracking vendors are numerous but transparently disclosed via the consent mechanism. Overall, the website presents a moderate risk profile with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, explicit privacy and security policies, and enhanced contact information would strengthen trust and compliance. The domain registration is consistent and legitimate, supporting the website's credibility.

B

Bundesarbeitsgemeinschaft der Seniorenorganisationen

digitalpakt-alter.de

52

The DigitalPakt Alter website represents a well-established non-profit initiative under the Bundesarbeitsgemeinschaft der Seniorenorganisationen (BAGSO) umbrella, aimed at empowering older adults in Germany to enhance their digital skills and social participation. The site offers a variety of services including funding programs, workshops, materials, and events, targeting seniors and volunteers. It enjoys strong institutional backing from BAGSO and the German Federal Ministry for Family Affairs, which enhances its credibility and market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery and slick sliders, with a focus on accessibility and mobile responsiveness. Hosting is provided via rzone.de, and the site implements a comprehensive cookie consent mechanism with Matomo analytics for privacy-conscious user tracking. The site demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses secure forms with validation. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and readiness. No vulnerabilities or suspicious content were detected, and privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with its mission to support digital inclusion for seniors. Strategic recommendations include publishing explicit security and incident response policies, considering a vulnerability disclosure program, and maintaining regular audits of third-party scripts to sustain security posture.

K

Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V.

zukunftswerkstatt-kommunen.de

50

Zukunftswerkstatt Kommunen (ZWK) is a German government-funded non-profit project managed by Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V. It supports 40 municipalities in managing demographic change through consulting, digital tools, and networking. The website is professionally designed using TYPO3 CMS and modern web technologies, providing comprehensive content, accessibility features, and clear navigation. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though dedicated security and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and serves a specialized governmental audience effectively.

D

Deutsch-Französischer Bürgerfonds

buergerfonds.eu

55

The Deutsch-Französischer Bürgerfonds website serves as an informational and funding platform dedicated to promoting Franco-German friendship and European cooperation through cultural and social projects. The organization operates as a non-profit entity, targeting German and French citizens and organizations interested in bilateral relations and European integration. The website content is professionally presented in German, with a French partner site linked, reflecting its bi-national focus. The business model centers on advising, networking, and financing relevant projects, positioning the organization as a niche player in the governmental and non-profit sector. Technically, the website is built on the Drupal CMS platform, utilizing modern front-end technologies such as Bootstrap, jQuery, and Google Tag Manager. Cookie consent is managed via Cookiebot, demonstrating compliance with EU privacy regulations. The site is mobile-optimized and exhibits good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by EURid, which is typical for EU domains and justified for this type of organization. Overall, the domain and website appear legitimate and trustworthy. The overall risk assessment is low, with recommendations to improve security headers, publish privacy and terms documents, and provide clear contact information for security incidents. These steps would enhance compliance and trustworthiness further.

F

Fundacja Centrum im. prof. Bronisława Geremka

geremek.pl

48

Fundacja Centrum im. prof. Bronisława Geremka is a Polish non-profit foundation established in 2008 to preserve and promote the legacy and public values represented by Professor Bronisław Geremek. The foundation engages in educational programs, public debates, monitoring disinformation, and publishing relevant materials. The website reflects a professional and consistent brand image targeting a general audience interested in culture, education, and European values. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility features, though some improvements in security headers and DNSSEC could enhance its posture. The security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with the foundation's mission.

O

Opolsku

opolsku.cz

41

The website www.opolsku.cz serves as an informational and service platform focused on Polish-Czech business cooperation. It provides details about Poland, membership firms, and offers services such as translation, business missions, marketing, and consulting. The target audience appears to be businesses and professionals interested in economic cooperation between Poland and the Czech Republic. The website is built on WordPress using popular plugins and themes, indicating a moderate level of technical maturity. The site is accessible, mobile-optimized, and well-structured, but lacks critical privacy and cookie policies as well as visible contact information, which impacts its compliance and trustworthiness. Security posture is adequate with HTTPS enabled, but security headers and incident response information are missing. The absence of WHOIS data reduces domain trustworthiness and should be investigated further.

F

Ferrit s.r.o.

ferrit.cz

59

Ferrit s.r.o. is a Czech-based company specializing in manufacturing and servicing global mining transport solutions, including suspended monorail systems, rail transport, trackless machinery, mining processing equipment, and safety devices for mining rescue operations. The company targets mining and industrial transport sectors worldwide, boasting a client base across multiple countries as evidenced by their interactive client map. Their business model focuses on providing comprehensive transport and safety solutions for underground mining operations, supported by over 25 years of industry experience and EU funding projects. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, ensuring responsive design and moderate performance. The site integrates cookie consent mechanisms and secure login/registration forms, indicating attention to privacy and user security. However, some security headers are not explicitly detected, and no public security or incident response policies are found, suggesting room for improvement in transparency and security maturity. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data and domain registration details introduces uncertainty about domain legitimacy. The website shows GDPR compliance through privacy and cookie policies, though terms of service and vulnerability disclosure mechanisms are not evident. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security documentation and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

#

#praveslovenske

praveslovenske.sk

48

The website www.praveslovenske.sk serves as a cultural and promotional platform dedicated to showcasing authentic Slovak products, folklore, history, and tourism. It targets Slovak residents and tourists interested in exploring and supporting local Slovak producers and cultural heritage. The platform operates primarily as a content publisher with integrated marketing and advertising services, leveraging multiple subdomains to segment content into thematic blogs such as food, travel, traditions, crafts, and leisure. Technically, the site is built on WordPress using the jNews theme and WPBakery Page Builder, supplemented by plugins like Ajax Search Pro and AdRotate for search and advertising management. The site is mobile-optimized with good SEO practices and uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses a GDPR cookie compliance plugin, indicating awareness of privacy regulations. However, it lacks explicit privacy policy and terms of service pages, as well as direct contact information and incident response contacts, which are critical for compliance and trust. No vulnerabilities or WAF protections were detected, and no sensitive data exposure was found. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

K

KULT MINOR - Fond na podporu kultúry národnostných menšín

kultminor.sk

39

KULT MINOR is a Slovak public fund dedicated to supporting the culture of national minorities through grants, scholarships, and cultural programs. The organization operates a website primarily in Slovak, providing information about its programs, calls for proposals, and cultural activities. The website is well-structured, uses Joomla CMS, and integrates common web technologies including jQuery, Bootstrap, and Facebook SDK for social media presence. The domain is registered since 2017 with DNSSEC enabled, indicating a legitimate and stable online presence. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Cookie consent is implemented properly, reflecting awareness of privacy regulations. Security posture is generally good with HTTPS and DNSSEC, but could be improved by adding security headers and vulnerability disclosure information.

T

Terra Nostra Pizzeria-Ristorante

terranostra.pl

50

Terra Nostra Pizzeria-Ristorante is a small hospitality business based in Poland, specializing in authentic Italian cuisine including gluten-free options. Established in 2018, the restaurant emphasizes quality ingredients and traditional recipes, with a strong local presence and an online ordering platform. The website is built on Joomla CMS and incorporates modern web technologies such as jQuery and slick sliders, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and incident response information are missing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection, which is common for this business type.

Polska Federacja Producentów Żywności Związek Pracodawców (PFPŻ ZP) is a well-established Polish federation representing food producers and employers. The organization focuses on providing legal information, educational programs, and industry news related to food safety, legislation, and nutrition. The website serves as a resource hub for industry professionals and the general public interested in food-related regulatory matters. The federation has a strong market position in Poland with over 20 years of history and recognized certifications such as 'Teraz Polska'. Technically, the website uses a custom or legacy CMS with JavaScript libraries including jQuery, Prototype.js, and Google Analytics for tracking. The site is hosted by home.pl S.A., a known Polish hosting provider. While the site is functional and content-rich, it shows some outdated technologies and lacks advanced security headers and DNSSEC, which could be improved. Mobile optimization and accessibility are basic but present. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security policies or incident response information. No critical vulnerabilities or malicious content were detected. WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, appropriate for the organization's transparency. Overall, the site is trustworthy but could benefit from modern security enhancements and improved technical infrastructure.

S

Scala Z Media GmbH

ratzfatz-durch-die-mauer.de

53

Ratzfatz durch die Mauer is an educational platform operated by Scala Z Media GmbH, focused on providing interactive learning experiences about German history, specifically the Berlin Wall and its fall. The website offers a game app and digital teaching materials aimed at children, educators, and parents. The business operates in the education and media sectors within Germany, targeting a niche market with specialized content. Technically, the website is built on WordPress with Elementor and uses modern plugins for SEO, forms, and analytics. Hosting is provided by Alfahosting, as inferred from the nameservers. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or vulnerability disclosure is found. Privacy compliance is good, with clear privacy and cookie policies in German and consent banners. Contact information is comprehensive, including phone, email, physical address, and contact forms. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-positioned within its educational niche.

The website stavbamsk.cz serves as the official platform for the Stavba MSK competition, which promotes and showcases quality construction projects in the Moravian-Silesian Region of the Czech Republic. The site targets both professionals in the construction and architecture sectors and the general public interested in regional development. It provides information about the competition, event results, galleries, and news updates. The business model appears to be a regional promotional and award platform supported by various partners and sponsors. The domain age and WHOIS data confirm a long-standing presence since 2006, reinforcing credibility. Technically, the website is built on WordPress CMS and employs modern web technologies including Bootstrap, jQuery, GSAP, Swiper, and Google reCAPTCHA v3 for form security. The site is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking and marketing insights. Performance is moderate with good design and navigation clarity, though accessibility features are basic. From a security perspective, HTTPS is properly implemented, and forms are protected with reCAPTCHA. However, the absence of security headers and lack of explicit privacy and cookie policies indicate room for improvement in compliance and security posture. No vulnerabilities or exposed sensitive data were detected. The site does not provide incident response or vulnerability disclosure information. Overall, stavbamsk.cz is a credible and professionally maintained regional website with a clear business purpose. To enhance trust and compliance, it should implement privacy and cookie policies, security headers, and consider publishing a security policy or vulnerability disclosure statement.

Vila48.cz is a professionally designed website representing a residential rental business located in Ostrava, Czech Republic. The company offers six modern, fully equipped apartments combining hotel comfort with private rental flexibility, targeting firms, managers, tourists, students, and individuals seeking transitional housing. The business has a credible market position supported by an award-winning renovation and a clear focus on premium residential services. Technically, the website is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google services for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data implementation. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

R

RadioOffice GmbH

radio-pr.de

38

The website www.radio-pr.de is a professional German-language blog operated by RadioOffice GmbH, specializing in Radio-PR and audio content marketing. It serves communications professionals and companies interested in leveraging radio and audio channels for PR purposes. The site provides educational content, expert insights, and practical advice on radio PR formats such as infomercials, O-Ton services, and podcasts. The business operates in the media sector with a niche focus and small company size. Technically, the site is built on WordPress using the Twenty Eleven theme and Yoast SEO plugin, hosted via DomainControl.com. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to a search form and social media links, with no direct emails or phone numbers disclosed. The domain WHOIS data is minimal but consistent with the website's business profile, indicating legitimacy. Overall, the website is trustworthy, content-rich, and professionally maintained but would benefit from enhanced privacy compliance and security hardening.

B

Bischöfliche Aktion Adveniat e.V.

adveniat.de

54

Adveniat is a German non-profit organization dedicated to supporting people in Latin America and the Caribbean through aid projects, fundraising, and awareness campaigns. The website serves as an information hub for their projects, donation options, events, and news updates. It targets a general audience interested in solidarity and development aid in Latin America. The organization maintains a consistent brand presence and leverages social media channels to extend its reach. Technically, the website is built on WordPress using the Avada theme and several plugins including WooCommerce for e-commerce functionality, Yoast SEO for search optimization, and Borlabs Cookie for cookie consent management. The site is served over HTTPS and includes modern web technologies such as jQuery and Google Fonts. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security or privacy policies. No vulnerabilities or exposed sensitive data were detected. Tracking technologies include Google Tag Manager, Facebook Pixel, and Google Ads, indicating moderate user tracking. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements could be made in privacy compliance documentation, security header implementation, and incident response readiness to enhance the security posture and regulatory compliance.

G

Grunt od nowa

gruntodnowa.pl

56

Grunt od nowa is a Polish website built on WordPress, primarily targeting a Polish-speaking audience. The site appears to be a small-scale business or project launched around 2022, with basic content and SEO optimization via Yoast SEO. The presence of Cookiebot indicates an awareness of cookie consent and privacy compliance, although no explicit privacy policy or terms of service pages were found in the analyzed content. The website uses Google Analytics and Google Tag Manager for traffic analysis and marketing purposes. Technically, the site employs standard web technologies including jQuery and asynchronous script loading for performance. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and detailed security policies.

Č

Český paralympijský výbor

paralympic.cz

48

The Czech Paralympic Committee operates a professional and comprehensive website serving the Czech parasport community. The site provides news, event information, athlete profiles, and resources related to paralympic sports. It targets athletes, sports fans, media, and partners within the Czech Republic. The organization is well-established, with a domain age dating back to 2000, reflecting a mature presence in the non-profit sports sector. Technically, the website is built on WordPress 6.8.3, utilizing a variety of plugins for social media integration, event management, and user engagement such as Mailchimp for newsletters. The site is hosted by a Czech registrar and uses modern web technologies including Google Fonts and JavaScript libraries. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are minimal, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. The site uses tracking and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, with moderate user tracking levels but good privacy compliance. Overall, the website is trustworthy, professionally maintained, and aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility. These steps would further strengthen the site's security posture and user trust.

W

Woox

woox.cz

9

WOOX.cz is a Czech-based e-commerce retailer specializing in functional clothing designed for various weather conditions and outdoor activities. The company targets outdoor enthusiasts and general consumers seeking durable and versatile apparel. Their business model includes direct online sales and a membership club (WOOX Klub) offering significant discounts. The website is professionally designed with clear navigation and supports social login options for user convenience. Technically, the site leverages the Shoptet e-commerce platform and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook SDK, and Segmentify. The site is mobile-optimized and uses HTTPS to secure user data. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the website demonstrates good practices like secure login forms and cookie consent mechanisms but lacks transparency in security policies and vulnerability disclosures. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the site content and technical setup suggest a legitimate business. Overall, WOOX.cz presents a moderate risk profile with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing a privacy policy, enhancing security headers, and providing incident response contacts to increase trust and compliance.

BM Real Property s.r.o. is a small family-owned real estate development company operating primarily in the Moravskoslezský region of the Czech Republic. The company focuses on delivering comprehensive construction and real estate services, managing projects from inception to completion. Their market position is that of a local developer emphasizing quality and client satisfaction, with a portfolio including residential and hospitality projects such as Vila 48 and Penzion Závada. The website is professionally built on WordPress using Elementor and related plugins, hosted on a Czech hosting provider, and supports Czech and English languages. Technically, the site is moderately performant and mobile-optimized but lacks some security headers and privacy compliance elements. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and privacy policies are recommended. Overall, the website is trustworthy and professional, with clear contact information and business legitimacy confirmed by WHOIS data.

A

ABSTRACT s.r.o.

stylove.cz

9

STYLOVE.CZ is a Czech media website operated by ABSTRACT s.r.o., focusing on stylish living, architecture, interior design, wellness, and home improvement. The site offers rich editorial content including articles, series, contests, and partnerships with manufacturers and service providers. It targets consumers interested in enhancing their living spaces with style and modern design. The website is part of a network of related sites including BYDLENI.CZ and INTERIER.CZ, indicating a strong presence in the Czech home and lifestyle media market. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and various slider and carousel plugins. It integrates Google Analytics and Google Tag Manager for user tracking and marketing insights. The site is mobile optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate with room for improvement in security headers and privacy compliance. Security posture is moderate; HTTPS is implied but no explicit security headers were detected in the provided data. No privacy or cookie policies were found, which is a compliance gap. The WHOIS data for the domain is missing, which raises concerns about domain registration transparency and legitimacy, though the website content and business information appear professional and trustworthy. Overall, the website is a credible media outlet with good content quality and business credibility but needs to improve privacy compliance and security practices. The lack of WHOIS data is a notable risk factor that should be addressed to enhance trustworthiness.

B

Bundesverband Katholische Kirche an Hochschulen

kircheanhochschulen.de

52

The Bundesverband Katholische Kirche an Hochschulen is a German non-profit organization dedicated to representing and supporting Catholic university communities across Germany. The website serves as a central hub for news, events, and resources related to the Catholic Church's engagement with students and academic institutions. It maintains a professional and consistent brand presence, targeting students, church members, and affiliated organizations. The organization offers key services such as event organization, advocacy, and community support, positioning itself as a national umbrella body within the non-profit sector. Technically, the website is built on WordPress using modern themes and plugins like GeneratePress and Smart Slider 3. It is hosted likely by NetCologne, indicated by the nameservers. The site demonstrates good mobile optimization, moderate performance, and basic accessibility features. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks explicit security headers and a public incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is mostly met with a comprehensive privacy policy and terms of service, but the absence of a cookie consent mechanism is a minor gap. Analytics usage is moderate with wp-slimstat, and no advertising or tracking networks were found, aligning with the non-profit nature. Overall, the website is trustworthy, professionally maintained, and serves its community effectively. Strategic recommendations include enhancing security headers, implementing cookie consent, and publishing incident response and vulnerability disclosure information to further strengthen security posture and compliance.

B

Bischöfliche Studienförderung Cusanuswerk

cusanuswerk.de

46

The Cusanuswerk is a well-established non-profit scholarship organization affiliated with the Catholic Church in Germany, providing financial and ideational support to approximately 2,400 talented Catholic apprentices, students, and doctoral candidates. It operates with funding from state, church, and private sources and holds recognized certifications for excellence, positioning it as a reputable institution in the educational non-profit sector. The website is professionally designed using TYPO3 CMS, featuring comprehensive content, clear navigation, and mobile optimization. It integrates modern frontend technologies such as Owl Carousel and FontAwesome, hosted on a stable infrastructure with domain control by a reputable registrar. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although improvements could be made by adding security headers and explicit incident response contacts. Privacy compliance is generally good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Contact information is available primarily via phone and contact forms, with social media presence on LinkedIn. Overall, the site reflects a trustworthy and professional organization with a strong focus on educational support and community engagement.

K

Katholischer Akademischer Ausländer-Dienst

kaad.de

49

The Katholischer Akademischer Ausländer-Dienst (KAAD) is a well-established non-profit organization affiliated with the Catholic Church in Germany, focused on providing scholarships and educational support to postgraduate students and young professionals from developing countries across Africa, Asia, Latin America, Eastern Europe, and the Middle East. With a history spanning over 65 years, KAAD supports leadership development through academic programs, networking, and spiritual guidance. The website reflects a professional and consistent brand image, targeting academics and emerging leaders in global development contexts. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, FontAwesome, and jQuery. It is hosted on Goneo servers, uses HTTPS with good SSL configuration, and demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the website enforces HTTPS and uses secure form submissions but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is generally good with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the KAAD website presents a trustworthy, professional, and secure platform suitable for its educational and non-profit mission. Strategic improvements in security headers, cookie consent, and vulnerability disclosure would further strengthen its security posture and compliance.

A

Amnesty International Hochschulgruppe Bamberg

amnesty-bamberg-hochschulgruppe.de

46

The website represents the Amnesty International Hochschulgruppe Bamberg, a local non-profit student group focused on human rights advocacy and education. It provides information about events, campaigns, and ways to get involved, targeting students and human rights supporters in Bamberg, Germany. The site is built on WordPress and uses common plugins and libraries to deliver content and event information. While the site is functional and provides relevant content, it lacks some advanced privacy and security features such as cookie consent mechanisms and explicit security headers. Contact information is primarily via a contact form, with no direct emails or phone numbers visible. Social media presence is established on Facebook and Instagram, enhancing outreach. Overall, the site is consistent with a small non-profit local group and maintains a moderate level of professionalism and trustworthiness.

J

JCMM, z. s. p. o.

sockari.cz

49

The website sockari.cz serves as a regional educational support platform dedicated to high school students in the South Moravian Region of the Czech Republic who are engaged in the SOČ competition, a national expert work contest. Operated by JCMM, a non-profit organization, the site provides financial grants, mentoring, and informational resources to students, supervisors, and coordinators. The platform is well integrated with partner sites and offers a range of educational projects and career development tools. Technically, the site employs modern frontend technologies including Google Fonts, jQuery, and Slick Carousel, hosted on Forpsi servers with HTTPS enabled and Google Analytics for user tracking. Security posture is adequate but could be improved with additional security headers and explicit incident response policies. Privacy compliance is supported by a GDPR cookie consent banner and linked privacy policy. Overall, the site is professional, trustworthy, and well-targeted to its audience.

Winter-Gala 2024 by David Siedek is a cultural event featuring music, dance, magic, and gourmet dining, held in Gommern, Germany. The website provides detailed information about the event, artists, location, and contact details, targeting a regional audience interested in entertainment and gala shows. The site is professionally designed using Joomla CMS and common web technologies, hosted on a reputable provider. Security posture is adequate with HTTPS enabled but lacks advanced security headers and comprehensive privacy compliance. Contact information is clearly presented, enhancing business credibility.

W

Werbeagentur Schulz-Design e.K.

circus-land.de

50

CHARLES KNIE’S Circus-Land is a family-oriented entertainment park located in Einbeck-Volksen, Germany, offering attractions, animal exhibits, and live shows. It positions itself as the most popular family fun destination in Southern Lower Saxony, targeting families and tourists with ticketed access and annual passes. The website is professionally designed using Joomla CMS and hosted on webgo.de servers, featuring modern web technologies such as jQuery and Bootstrap. It includes a cookie consent mechanism and privacy policy, reflecting basic GDPR compliance. Facebook Pixel is used for user tracking, indicating moderate data collection practices. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit incident response information. Overall, the site is accessible, trustworthy, and provides clear business contact information.

D

DIAKOVERE

kommunikationswerkstatt-hannover.de

39

Kommunikationswerkstatt Hannover is a communication agency service offered by DIAKOVERE, the largest non-profit social and healthcare organization in Niedersachsen, Germany. The website presents professional agency services targeted at social and healthcare sectors, emphasizing communication expertise within a non-profit framework. The business model focuses on providing specialized communication support to organizations in the social and healthcare domain, leveraging the reputation and scale of DIAKOVERE. Technically, the website is built on Joomla CMS, utilizing modern frontend technologies such as jQuery, Bootstrap, GSAP TweenMax, and LayerSlider. Hosting is managed via kasserver.com, with secure HTTPS connections and cookie consent mechanisms implemented to comply with privacy expectations. The site demonstrates moderate performance and good mobile optimization, although accessibility features are basic. From a security perspective, the site enforces HTTPS and employs cookie consent blocking scripts to limit unauthorized data storage. However, it lacks important security headers and does not provide a security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Overall, the website is professional and trustworthy, with a solid business credibility score. The absence of privacy and terms of service policies, as well as security headers, slightly lowers the privacy compliance and security posture scores. Strategic enhancements in these areas would improve the site's overall security and compliance standing.

U

Unternehmerverbände Niedersachsen e.V.

uvn-online.de

58

Unternehmerverbände Niedersachsen e.V. (UVN) is a prominent regional business association representing over 100 employer and economic associations in Niedersachsen, Germany, encompassing more than 200,000 companies and approximately 2.6 million employees. The organization acts as a key voice for the regional economy, engaging in policy advocacy, networking, and providing information services to its members. The website reflects a professional and well-maintained digital presence, leveraging WordPress CMS with modern plugins for SEO, event management, and privacy compliance. It is optimized for mobile devices and provides clear navigation and relevant content for its target audience of businesses and economic stakeholders in Niedersachsen.

D

Dienstleistungsgesellschaft der Norddeutschen Wirtschaft mbH (DNW)

dnw-online.de

50

Dienstleistungsgesellschaft der Norddeutschen Wirtschaft mbH (DNW) is a small regional service company affiliated with Unternehmerverbände Niedersachsen e.V. and Institut der Norddeutschen Wirtschaft e.V. The company focuses on consulting and services related to telecommunications, energy, data protection, and organizing purchasing cooperations for medium-sized businesses in Northern Germany. The website is built on Joomla CMS with a modern responsive design and includes essential business information and partner affiliations. Technically, the site uses standard web technologies and is hosted by Alfahosting. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

R

RadioOffice GmbH

radio-office.de

42

RadioOffice GmbH is a specialized media agency based in Germany focusing on radio PR and audio content marketing. The company offers professional services including production and placement of infomercials, O-Ton services, interview mediation, and podcast PR. Their market position is niche, targeting businesses and organizations seeking effective radio and audio marketing solutions. The website is well-branded, consistent, and provides clear information about their services and contact details. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Slider Revolution, and Complianz GDPR for cookie consent. The site is mobile-optimized and performs moderately well. Hosting is managed via domaincontrol.com DNS, indicating GoDaddy as the registrar. SEO and structured data implementations are good, enhancing discoverability. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, explicit security headers and detailed security policies are missing. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business claims, and no suspicious patterns were found. Overall, the website presents a professional and trustworthy front with good compliance to GDPR and privacy standards. Strategic improvements in security headers and incident response disclosures would enhance their security posture and trustworthiness further.

E

everso | Live music experience

eversomusic.de

53

everso is a German-based live music experience provider offering an exclusive artist team of over 80 performers for successful events. The website targets event organizers seeking professional live music entertainment, positioning itself as a specialized service provider in the media sector. The business model revolves around artist booking and event services, with a focus on quality and exclusivity. Technically, the website is built on WordPress using the Divi theme, enhanced with multiple plugins for multilingual support, SEO, and interactive content. The site features modern multimedia elements such as video backgrounds and animations, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and no exposed sensitive data, but lacks advanced security headers and explicit privacy or incident response policies. The absence of WHOIS registration data raises legitimacy concerns, though the professional presentation and active content mitigate some risk. Overall, the site is functional and professional but would benefit from improved transparency and security practices.