Security Directory

Pension Rosalka is a small hospitality business offering accommodation services in apartments and a mini-camp located in Stará Oleška, Czech Republic. The website targets tourists interested in nature, hiking, and cycling in the Bohemian Switzerland region. The business is established since 2013 and positions itself as a local accommodation provider with a focus on family and recreational visitors. Technically, the website is basic, built with simple HTML and CSS, lacking modern CMS or frameworks, and shows limited mobile optimization and accessibility features. Security posture is weak with no visible HTTPS enforcement, absence of security headers, and publicly accessible admin pages without protection. Privacy and cookie policies are missing, indicating non-compliance with GDPR requirements. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

The website turfest.cz serves as the official online presence for TURFEST.CZ, a tourist festival held annually in Česká Kamenice, Czech Republic. The site provides detailed information about the event scheduled for May 25, 2024, including hiking trips, cultural programs, and local economic promotion. The festival is organized by the Klub českých turistů and the town of Česká Kamenice, targeting tourists, families, and hiking enthusiasts in the region. The website positions itself as a regional event promoter with a focus on local tourism and cultural heritage. From a technical perspective, the website is built using standard HTML and CSS with responsive design for desktop and mobile devices. There is no evidence of advanced frameworks, CMS, or analytics tools in the provided HTML content. The site appears moderately optimized for mobile and SEO, with proper meta tags and structured navigation. However, there is no visible use of security headers or HTTPS confirmation in the data provided, which could impact security posture. Security-wise, the website lacks explicit privacy, cookie, or terms of service policies, which are important for GDPR compliance given the European location. No contact information such as emails or phone numbers are clearly provided for user support or incident response. No security.txt or vulnerability disclosure information is present. The absence of HTTPS confirmation and security headers suggests room for improvement in securing user data and communications. Overall, the website is functional and informative for its purpose but would benefit from enhanced security measures, privacy compliance documentation, and clearer contact channels to improve trust and regulatory adherence.

Turistický bazar is a small, Czech-language online marketplace specializing in second-hand hiking and outdoor equipment, supported by the Turistický magazín brand. The site offers a variety of used gear, maps, and publications for tourists and outdoor enthusiasts, aiming to foster community and sustainable reuse of equipment. Technically, the site is built with basic HTML and CSS, featuring responsive design for mobile users but lacking advanced frameworks or CMS. Security posture is moderate with no visible HTTPS confirmation or security headers in the provided data, and no privacy or cookie policies are present, indicating compliance gaps. The domain is newly registered but consistent with the business purpose and linked to a known partner site. Overall, the site is functional and relevant for its niche but would benefit from improved security and privacy compliance.

I

infopanely.cz

infopanely.cz

53

The website infopanely.cz represents a small Czech business specializing in the creation and production of educational nature trails, tourist information panels, outdoor classrooms, and interactive elements for children. Established since 2012, the company offers end-to-end services including project preparation, production, printing, and installation, targeting municipalities, schools, and organizations interested in enhancing outdoor educational experiences. The site is professionally designed with good content quality and clear navigation, optimized for mobile devices and hosted on a reliable CDN infrastructure.

ecomonitor.cz is a Czech environmental news and monitoring portal operated by the civic association BEZK since 1999. It aggregates and publishes news, articles, and press releases related to ecology, environmental protection, and sustainability, targeting Czech-speaking audiences interested in these topics. The website offers search functionality for its content and links to various reputable Czech media sources. Technically, the site uses basic HTML, CSS, and JavaScript with a custom CMS called Toolkit. The design and user experience are functional but basic, with limited mobile optimization and accessibility features. Security posture is weak due to lack of visible HTTPS enforcement, security headers, and privacy policies. The site uses third-party ad networks and tracking pixels without explicit consent mechanisms, indicating GDPR compliance gaps. Overall, the website is legitimate and consistent with its stated mission but requires improvements in security and privacy compliance to enhance trust and user protection.

H

home.pl S.A.

deccoria.pl

66

Deccoria.pl is a well-established Polish media website specializing in home and garden advice, offering articles, videos, and inspirational content. The site targets Polish-speaking homeowners and gardening enthusiasts, leveraging a partnership with Leroy Merlin to enhance its market position. The domain is registered with home.pl S.A., a reputable Polish hosting and domain provider, and has been active since 2007, indicating a mature presence in its niche. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager, and multiple analytics and advertising platforms, ensuring a robust digital infrastructure. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though DNSSEC is not enabled, which is a recommended improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. Overall, Deccoria.pl presents as a professional, trustworthy, and content-rich platform with good user experience and advertising transparency.

H

home.pl S.A.

smaker.pl

63

Smaker.pl is a well-established Polish culinary website offering a wide range of recipes, cooking articles, and diet-related content. It targets cooking enthusiasts and people interested in culinary arts, providing user-generated recipes and editorial content. The site is professionally designed with consistent branding and good navigation, supporting a large user base and content volume. Technically, the site uses modern JavaScript libraries, integrates with major analytics and advertising platforms such as Google Analytics 4, Gemius, and Facebook Pixel, and is hosted by home.pl S.A., a reputable Polish hosting provider. Security posture is solid with HTTPS enforced and privacy compliance mechanisms in place, including GDPR-compliant cookie consent and privacy policies. However, some security headers could be improved, and no explicit security or incident response policies are published. Overall, the site is safe for general audiences, with no adult or questionable content detected. The domain registration data aligns well with the business, supporting legitimacy and trustworthiness.

I

INTERIA.PL

pomponik.pl

59

Pomponik.pl is a Polish entertainment and celebrity gossip website operated by INTERIA.PL, a recognized media company. The site offers news, gossip, photos, and videos about Polish and international celebrities, targeting a general audience interested in show business. The website is professionally designed with good content quality and mobile optimization. Technically, it uses modern web technologies including JavaScript, CSS, and tracking scripts from Gemius and Google Tag Manager. Security posture is adequate with HTTPS enforced, but lacks some security headers and formal privacy and cookie policies. No WHOIS data is publicly available due to registry restrictions, but the association with INTERIA.PL supports legitimacy. Overall, the site is a well-established media platform with moderate security and privacy compliance.

I

Interia

interia.pl

59

Interia is a leading Polish internet portal offering a wide range of news, sports, entertainment, and thematic content, along with free email services. The website targets Polish-speaking users interested in current events, sports, and lifestyle content. It holds a strong market position as a major media outlet in Poland. Technically, the site employs modern web technologies including JavaScript, CSS, and integrates multiple analytics and advertising platforms such as Google Analytics 4 and Gemius. The site is well-optimized for mobile devices and provides a professional user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and implements privacy and cookie policies compliant with GDPR, though explicit security contact information and vulnerability disclosure policies are not found. Overall, the domain appears legitimate and trustworthy despite the absence of WHOIS data, likely due to privacy protection. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility compliance.

Insight base s.r.o. is a small Czech technology company specializing in the development of web and mobile applications along with UX/UI design services. Founded in 2021, the company presents itself professionally with clear contact and registration information, targeting businesses seeking custom software solutions. The website is well-structured with a modern design and good mobile optimization, though it lacks privacy and cookie policies which are important for compliance. Technically, the site uses modern JavaScript and SVG graphics with deferred script loading, indicating a moderate level of digital maturity. Security posture is average, with no visible security headers or vulnerability disclosures, and no evidence of analytics or tracking services, which limits privacy concerns but also reduces marketing insights. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

B

BMK servis s.r.o.

bmkservis.cz

56

BMK servis s.r.o. is a small Czech company specializing in the sale and repair of household appliances since 1994. Their website presents a clear business focus on servicing and selling appliances such as washers, dryers, refrigerators, and vacuum cleaners, targeting residential customers primarily in Prague. The company operates an e-shop for spare parts and provides online order tracking, indicating a moderate digital presence. Technically, the website uses legacy JavaScript libraries like jQuery 1.7.2 and custom scripts for UI elements such as carousels and sliders. Mobile optimization is basic but functional, and SEO elements like meta tags and structured navigation are present. Security posture is moderate; while HTTPS is presumably enabled (not verifiable from provided data), no advanced security headers or explicit security policies are published. The cookie consent mechanism is implemented with user choice options, supporting GDPR compliance. However, the absence of WHOIS data and outdated libraries present risks. Overall, the site is functional and professional but would benefit from modernization and enhanced security practices.

Kajomigenerator.de is a technology-focused website providing a client login portal for a service named Kajomi Generator. The site appears to serve clients who require generation or management of specific data or content, though no detailed business description or public-facing content is provided. The website's market position and business scale appear small and focused on a niche client base. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and an older version of CKEditor (4.5.10). The site shows basic mobile optimization and accessibility but lacks modern SEO and comprehensive technical enhancements. The presence of an API hostname using HTTPS suggests secure backend communication, but no explicit security headers or advanced frameworks are detected. From a security perspective, the site has some basic protections such as password input masking and HTTPS usage implied by API calls. However, the use of an outdated CKEditor version and absence of security headers or CSRF protections indicate potential vulnerabilities. No privacy, cookie, or terms of service policies are present, limiting compliance with GDPR and other regulations. No contact or incident response information is publicly available. Overall, the site is functional but basic, with moderate trustworthiness based on WHOIS data consistency. Strategic improvements in security hardening, privacy compliance, and business transparency are recommended to enhance credibility and reduce risk.

A

Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal

dataprotection.ro

55

The website dataprotection.ro represents the official Romanian National Authority for the Supervision of Personal Data Processing (ANSPDCP). It serves as the national regulator ensuring compliance with data protection laws, including GDPR, and provides resources, guidance, and complaint handling for data subjects and operators in Romania. The site targets a broad audience including the general public, data controllers, and public institutions. Technically, the website uses legacy technologies such as the YUI JavaScript library and custom CMS, with moderate performance and basic mobile optimization. Security posture is moderate with no DNSSEC and lack of security headers, but the domain is secured with HTTPS (assumed) and no critical vulnerabilities detected. Privacy compliance is good with clear privacy and cookie policies, though lacking explicit cookie consent mechanisms. Business credibility is high given the official government status and consistent WHOIS data. Overall, the site is functional and trustworthy but could benefit from modernization and enhanced security practices.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

bzga-essstoerungen.de

63

The website www.bzga-essstoerungen.de is operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG), a governmental public health institute in Germany focused on providing comprehensive information and support related to eating disorders. The site offers detailed educational content, counseling options, therapy guidance, and a database for finding local support centers. It targets a broad audience including affected individuals, families, and healthcare professionals. The business model centers on public health awareness and support services without commercial intent, positioning it as a trusted governmental resource in the healthcare sector. Technically, the website is built on TYPO3 CMS with a modern and accessible design, incorporating Bootstrap for responsive layouts and AblePlayer for media accessibility. It uses Matomo analytics configured for privacy compliance, including IP anonymization and consent-based data collection. The site demonstrates good mobile optimization, SEO practices, and accessibility features, reflecting a mature digital infrastructure suitable for public sector needs. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism aligned with GDPR requirements. However, it lacks publicly available security policies, incident response contacts, and security headers that could enhance its security posture. No vulnerabilities or suspicious activities were detected, and the WHOIS data aligns reasonably with the organizational identity, supporting legitimacy. Overall, the website scores well on content quality, privacy compliance, and business credibility, with moderate technical and security scores. Strategic improvements in security transparency and policy publication would further strengthen trust and resilience. The site is safe for general audiences, with no adult or inappropriate content detected.

V

VIA Schankhalle Pfefferberg gGmbH

pfefferberg-theater.de

52

Pfefferberg Theater is a small, non-profit cultural institution based in Berlin, Germany, offering a diverse range of theatrical performances including contemporary circus, dance, family shows, and live literature readings. The organization emphasizes artistic quality and inclusivity, partnering with local gastronomy and cultural entities to enhance visitor experience. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its target audience of arts and culture enthusiasts. Technically, the website employs modern web technologies including JavaScript libraries, CSS frameworks, and accessibility tools such as ReadSpeaker. It integrates third-party services like Vimeo for video content and Google Analytics for visitor tracking, while maintaining GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some security headers are not explicitly detected. From a security perspective, the site uses HTTPS and enforces cookie consent with granular user control, but lacks visible security policies or incident response information. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data is partially consistent with the website's German location and business nature, with no suspicious patterns detected. Overall, the site presents a low-risk profile with good privacy compliance and a solid security posture. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

A

Aleš Linhart

aleslinhart.cz

42

Aleš Linhart operates a small-scale web development service primarily targeting clients who want to create new websites or update existing ones. The website presents a professional image with client references and a clear service offering focused on web design and development. The technical infrastructure is basic but functional, using standard web technologies such as HTML, CSS, JavaScript, and jQuery, with Google Fonts integration. Mobile responsiveness and SEO basics are addressed, though accessibility could be improved. Security posture is moderate; HTTPS is assumed but no advanced security headers or policies are present. The absence of privacy and cookie policies, as well as contact details, limits compliance and trust. WHOIS data is unavailable, which raises concerns about domain legitimacy and transparency. Overall, the website is functional and professional but would benefit from enhanced security, compliance, and transparency measures.

F

Fajn Rock Music - Petr Kůsa

fajnrockmusic.cz

32

Fajn Rock Music is a Czech media project established in 2007, focusing on rock music from the 1960s to current hits. It operates a radio station, a TV rock hit parade, and a radio show featuring Czech and international rock music. The platform targets rock music enthusiasts in the Czech Republic, offering event promotion and music content. The website demonstrates a consistent brand presence with active content and social media integration. Technically, it uses a custom CMS with modern web technologies including jQuery, Flowplayer, and Google Analytics, delivering moderate performance and good mobile optimization. Security posture is moderate with HTTPS usage but lacks visible security headers and formal privacy or cookie policies. No vulnerability disclosure or incident response contacts are provided. Overall, the site is safe, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices.

G

Green Ways sp. z o. o.

gw-int.pl

69

Green Ways sp. z o. o. is a medium-sized European company specializing in green food products, positioning itself as a leader in the green food trend across Europe. Founded in 2001, the company emphasizes high product quality, scientific backing, and a human-centered approach. Their website reflects a professional and modern digital presence, with multilingual support and clear navigation. The business model focuses on direct sales and partnerships, targeting health-conscious consumers interested in ecological and vegan products. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and optimized image formats like WebP. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with room for optimization. Security-wise, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, there is a lack of explicit security policy and incident response information, and no advanced security headers were detected. The absence of WHOIS data for the domain reduces trustworthiness slightly, though the website content and business information appear legitimate and consistent. Overall, the website presents a low-risk profile with strong compliance and professional business representation. Strategic improvements in security transparency and WHOIS data availability would enhance trust and security posture.

D

Design Keller Internetagentur Berlin

design-keller.de

45

Design Keller Internetagentur Berlin is a small, specialized internet agency based in Berlin, Germany, offering professional web design, web programming, and content management services primarily using TYPO3 CMS. The company targets local businesses and organizations seeking customized web solutions, including SEO and consulting. The website reflects a solid market position with a portfolio of diverse client projects and a consistent brand presence. Technically, the site uses legacy and modern web technologies, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the site is professional and trustworthy but could improve privacy compliance and technical modernization. The domain registration data aligns well with the business claims, supporting legitimacy.

INGOLS, s.r.o. is a Czech Republic based small wholesale company specializing in metallurgical and large-area materials, founded in 2003. The company positions itself as a regional service center offering customized products in cooperation with manufacturers of roofing and trapezoidal profiles. The website content reflects this business focus but is basic in design and lacks modern digital features. The technical infrastructure is minimal, relying on basic HTML and CSS without modern CMS or JavaScript frameworks, hosted on websupport.cz. Security posture is weak with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating compliance gaps. Contact information is not explicitly provided, limiting user engagement and trust signals. Overall, the website is functional but requires significant improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

G

Green Ways s.r.o.

gw-int.net

71

Green Ways s.r.o. is a European leader in the green food market, specializing in high-quality, certified organic and vegan products. Founded in 2001, the company emphasizes product quality, scientific backing, and a customer-friendly approach. Their website is professionally designed, multilingual, and provides clear contact and business information, supporting their market position. Technically, the site uses modern JavaScript frameworks and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent, but lacks advanced security headers and incident response disclosures. The absence of WHOIS registration data raises concerns about domain legitimacy, which impacts overall trustworthiness. Strategic recommendations include improving security headers, publishing security policies, and resolving WHOIS inconsistencies to enhance credibility.

Firma Handlowo-Usługowa "Wikom" is a small Polish company specializing in creating websites and BIP subject pages for organizational units, primarily in the public sector. Established in 2001, the company emphasizes legal compliance, accessibility, and user-friendly CMS solutions with AI features to prevent errors. Their market position is that of a niche provider with over two decades of experience, offering tailored web services and technical support. Technically, the website uses modern web technologies including Bootstrap and FontAwesome, with Google Tag Manager for analytics. The site is mobile optimized and accessible, though SEO optimization is basic. Security posture is good with HTTPS and cookie consent implemented, but lacks advanced security headers and published security policies. Overall, the website is professional, trustworthy, and compliant with GDPR and accessibility standards, making it suitable for its target audience of public organizations in Poland.

P

Powiat Tomaszowski

powiat-tomaszowski.pl

57

Powiat Tomaszowski operates an official government website serving the local community of Tomaszowski County in Poland. The site provides comprehensive information about local government activities, public services, news, and events. It targets residents, local organizations, and stakeholders seeking official information and access to administrative resources. The website is well-positioned as a trusted source for regional governance and public communication. Technically, the website employs modern web technologies including JavaScript, CSS, and service workers, with integration of Google Analytics and OpenWeatherMap for enhanced user experience. The site is hosted by a reputable Polish registrar and hosting provider, with DNSSEC enabled and HTTPS enforced, reflecting a mature digital infrastructure. Accessibility and SEO optimizations are evident, supporting broad usability. From a security perspective, the website demonstrates good practices such as HTTPS, DNSSEC, and cookie consent mechanisms. While some security headers could be improved or added, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. However, no explicit incident response or vulnerability disclosure pages were found. Overall, the website presents a low-risk profile with a solid security posture and trustworthy business credibility. It effectively serves its governmental function with professional content and user-friendly design. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

G

Gewerkschaft Erziehung und Wissenschaft (GEW)

gew.de

53

The Gewerkschaft Erziehung und Wissenschaft (GEW) is a prominent educational trade union in Germany representing approximately 280,000 professionals in education and science sectors. The website serves as a comprehensive platform offering information on union activities, collective bargaining, member services, publications, and events. It targets educators, researchers, students, and unemployed pedagogues, positioning itself as a key player in the German education labor market. The business model is non-profit, focusing on advocacy and support for its members.

V

Voltage Multimedia Studio

jesinfo.cz

46

Jesinfo.cz is a regional event information portal focused on the Jeseník district in the Czech Republic, providing comprehensive listings of cultural, sports, gastronomic, and other local events. The website is operated by Voltage Multimedia Studio, a small media company founded in 2014. The portal offers event calendars, categories, galleries, and administrative access for event management, targeting residents and visitors interested in local happenings. The site is professionally designed with consistent branding and clear navigation, supporting Czech and Polish languages. Technically, it uses the Noteo Engine CMS, jQuery, FontAwesome, and Google Tag Manager for analytics, hosted under the REG-GRANSY registrar. Security posture is good with HTTPS enforced and basic security headers, though additional headers could improve protection. Privacy compliance is basic, with cookie consent implemented but no explicit privacy or terms of service pages found. Contact information is clearly provided, including phone, email, and physical address, along with social media links to Facebook and YouTube. Overall, the site is trustworthy, safe, and well-positioned as a regional media portal.

M

Město Český Těšín

tesin.cz

46

The website https://tesin.cz/ serves as the official online portal for the city of Český Těšín, Czech Republic. It provides residents and visitors with comprehensive municipal information, including news updates, administrative services, event calendars, and contact details. The site is well-structured, regularly updated, and targets local citizens and stakeholders. The business model is that of a government municipal service platform, focusing on public service delivery and community engagement. Technically, the site is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics for minimal user tracking and Google Translate for multilingual support. The site is hosted via Active24, with HTTPS enforced, and demonstrates good mobile optimization and accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website employs HTTPS and cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly observed and could be improved. There is no dedicated security policy or incident response information published, which is common for municipal sites but represents an area for enhancement. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations. The domain is longstanding (since 1998) and consistent with the official nature of the business. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure mechanism to further strengthen security posture.

B

Bundesministerium für Familie, Senioren, Frauen und Jugend

pausentaste.de

62

The website pausentaste.de is an official government-supported platform operated under the Bundesministerium für Familie, Senioren, Frauen und Jugend. It provides comprehensive support, information, and resources for children and adolescents who care for family members. The site is well-branded, professionally designed, and targets a sensitive audience with appropriate content and privacy considerations. Technically, it is built on TYPO3 CMS and uses Matomo analytics configured for privacy compliance, including IP anonymization and opt-in consent mechanisms. Security posture is good with HTTPS and cookie consent, though explicit security headers and incident response policies are not published. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements.

A

Antidiskriminierungsstelle des Bundes

antidiskriminierungsstelle.de

62

The Antidiskriminierungsstelle des Bundes is a German federal government agency dedicated to combating discrimination and providing support to affected individuals. The website serves as an official portal offering comprehensive information about discrimination laws, consultation services, research, and publications. It targets individuals experiencing discrimination, public authorities, and the general public seeking information or assistance. The agency operates under a public service model, funded by the government, and holds a strong market position as the central anti-discrimination authority in Germany. Technically, the website is built on the Government Site Builder CMS, featuring a modern and accessible design optimized for mobile devices. It employs Matomo analytics with a clear cookie consent mechanism, reflecting a mature digital infrastructure with moderate performance. The site demonstrates good SEO and accessibility practices, ensuring broad usability and compliance with privacy regulations. From a security perspective, the site enforces HTTPS and provides cookie consent controls, but lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or suspicious elements were detected. The WHOIS data aligns with the official government entity, confirming legitimacy and trustworthiness. Overall, the website presents a professional, secure, and privacy-conscious platform that effectively supports its mission. Strategic improvements could include publishing a dedicated security policy and incident response information to enhance transparency and trust further.

C

Conterganstiftung

contergan-infoportal.de

53

The Contergan Infoportal website serves as the official online presence of the Conterganstiftung, a German government foundation dedicated to supporting individuals affected by thalidomide-related disabilities. The foundation provides statutory benefits including pensions, specific needs payments, advisory services, and research funding to improve the quality of life and societal participation of affected persons. The website is professionally designed using TYPO3 CMS and Bootstrap, offering a responsive and accessible user experience primarily in German. It features comprehensive content about the foundation's mission, services, news, and contact information, targeting affected individuals, their families, and professionals. Technically, the site is hosted on Schlund Technologies infrastructure with secure HTTPS and cookie consent mechanisms in place, reflecting good digital maturity. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a strong security posture with no detected vulnerabilities or suspicious elements, and complies well with GDPR requirements. The domain registration and hosting details align with the foundation's official status, supporting high legitimacy and trustworthiness.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

wege-zur-pflege.de

66

The website 'Wege zur Pflege' is an official German government portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It provides comprehensive information and support resources for family caregivers, employers, and care recipients, focusing on caregiving laws, financial support, and counseling services. The site is well-positioned as an authoritative source in the caregiving sector within Germany, targeting a broad audience including caregivers and employers. Technically, the site employs modern web technologies with a privacy-respecting Matomo analytics setup, hosted likely on German infrastructure, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy controls, though explicit security headers and incident response policies are not publicly documented. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its users.

The website www.rop.cz serves as a minimal landing or redirect page for a regional internet service provider targeting cities in the Czech Republic such as Plzeň, Rokycany, Klatovy, and Příbram. The business offers customized internet connectivity solutions including ADSL, SHDSL, mobile and wireless internet, along with related services like corporate servers, email, VPN, VoIP telephony, and webcams. The website content is basic and primarily informational with no interactive elements or contact details. Technically, the site uses simple HTML and CSS with no detected modern frameworks or CMS, and lacks mobile optimization and accessibility features. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating non-compliance with GDPR standards. WHOIS data is unavailable, suggesting privacy protection or domain non-registration, which impacts trustworthiness. Overall, the site appears legitimate but minimal and outdated, requiring significant improvements in security, privacy, and user engagement to enhance credibility and compliance.

S

Simplea pojišťovna, a.s.

simplea.pl

71

Simplea pojišťovna, a.s. is an insurance company specializing in life insurance products, operating primarily in the Czech Republic and Slovakia, with expanding services in Poland. The company is part of the Czech financial group Partners and benefits from partnerships with global reinsurance firms such as Swiss Re. Their business model focuses on transparent, customer-centric insurance products supported by modern technology and clear communication. The website reflects a professional and consistent brand image targeting individual customers seeking reliable life insurance solutions in the EU market. Technically, the website employs modern frontend technologies including lazy loading and responsive design, ensuring good performance and user experience across devices. Security posture is solid with HTTPS and secure form handling, though some security headers and explicit security policies are missing. Privacy compliance is well addressed with cookie consent and GDPR-aligned policies. WHOIS data is not publicly available, likely due to privacy protection, which slightly impacts trust but is reasonable for the business type. Overall, the site is trustworthy, professional, and well-positioned in its market segment.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

regenbogenportal.de

66

The Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ) is a German federal government ministry dedicated to policies and programs supporting families, seniors, women, youth, and equality issues including sexual and gender diversity. The website provides comprehensive information on queer politics and gender diversity, including policy plans, legal frameworks, and public awareness initiatives. It targets a broad audience including citizens, policymakers, and the LSBTIQ* community. The site is professionally designed with clear navigation and strong branding consistent with government standards. Technically, the website uses a custom or proprietary CMS with a modern tech stack including JavaScript and CSS, and employs Matomo for privacy-conscious analytics. Hosting is provided by a German technical service provider, ensuring data residency compliance. The site is mobile-optimized and accessible, with good SEO practices and privacy compliance including GDPR-aligned cookie consent mechanisms. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security headers and incident response information are not publicly detailed. No vulnerabilities or suspicious elements were detected. WHOIS data confirms the domain's legitimacy and consistency with a government entity. Overall, the website is a trustworthy, professional government resource with strong privacy and content quality, suitable for general audiences seeking information on equality and diversity policies in Germany.

B

Bundeszentrale für Kinder- und Jugendmedienschutz

bzkj.de

62

The Bundeszentrale für Kinder- und Jugendmedienschutz (BzKJ) is a German federal government agency dedicated to protecting children and youth in media and digital environments. It provides regulatory oversight, educational resources, and enforcement mechanisms related to youth media protection. The website serves as an authoritative source for information, legal frameworks, and public communication on these topics, targeting parents, educators, media providers, and policymakers. Technically, the website employs standard web technologies including jQuery UI and custom CSS/JS, with a responsive and accessible design. It demonstrates good SEO and accessibility practices, although some modern security headers are missing. The site is served over HTTPS with no detected blocking or WAF interference, ensuring secure and reliable access. From a security perspective, the site shows a solid posture with encrypted connections and no exposed sensitive data. However, it lacks explicit incident response contacts and a security.txt file, which could enhance transparency and vulnerability management. Privacy compliance is strong, with a comprehensive privacy policy and GDPR adherence, though no cookie consent mechanism was detected. Overall, the website is a trustworthy and professional government resource with high content quality and business credibility. Strategic improvements in security headers and incident response disclosures would further strengthen its security posture.

P

Partners Banka

partnersbanka.cz

72

Partners Banka is a Czech financial institution offering a comprehensive range of banking services including current and savings accounts, investments, mortgages, loans, insurance, and personalized financial advisory. The website positions the bank as customer-centric with a focus on bundled account packages and a unified mobile application to manage all financial products. The target audience includes individuals and families seeking modern, convenient banking solutions in the Czech Republic. Technically, the website employs modern JavaScript frameworks such as StimulusJS and Swup, integrates Google Analytics and marketing automation tools like Exponea, and uses a third-party web chat service (Daktela) for customer support. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some accessibility features could be improved. Security posture is strong with HTTPS enforced and multiple security headers present, but the absence of a publicly accessible privacy policy and terms of service pages is a compliance gap. The WHOIS data is unavailable, which raises concerns about domain registration legitimacy and age verification. Overall, the website is professional and trustworthy but would benefit from enhanced transparency and compliance documentation.

E

Elite | Monday Lovers

elitesolutions.sk

40

Elite | Monday Lovers is a Slovak full-service advertising agency with approximately 15 years of experience, specializing in strategy, identity, campaigns, print, web design, social media, mobile applications, and PR. The company targets businesses seeking comprehensive marketing solutions and maintains a strong regional presence with notable clients and projects. Their website is professionally designed, multilingual, and showcases a portfolio of campaigns and client references. Technically, the site is built on OctoberCMS, uses modern web technologies including Google Tag Manager and Google Maps API, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are missing and no explicit security policy or vulnerability disclosure is present. Overall, the website is trustworthy, compliant with GDPR, and free of adult or questionable content.

The website mpvnet.cz serves as a public transport monitoring platform providing departure boards and real-time vehicle locations for several integrated transport systems across Czech regions. It is operated by CHAPS, spol. s r.o., a small company specializing in transport monitoring solutions. The site targets public transport users seeking timely information on bus and train schedules and vehicle positions. Technically, the site uses basic web technologies including jQuery and FontAwesome, with no advanced frameworks or CMS detected. The design and content quality are basic but functional, with moderate mobile optimization and accessibility. Security posture is minimal, lacking HTTPS verification details, security headers, and privacy policies, which presents compliance and risk concerns. No contact information or incident response details are provided, limiting user trust and support avenues. Overall, the domain is long-established and legitimate, but the site would benefit from enhanced security, privacy compliance, and richer business information to improve trust and user experience.

B

bonprix

bonprix.at

74

bonprix.at is an established e-commerce platform specializing in fashion and home products, targeting primarily the Austrian market with a broad offering including women's, men's, and children's clothing, shoes, and furniture. The site is part of the larger bonprix brand under the Otto Group umbrella, indicating a strong market position in European retail. The website demonstrates a mature digital infrastructure with modern technologies such as React and Contentful CMS, ensuring a responsive and user-friendly experience. Security measures are robust, with HTTPS enforced and multiple security headers implemented, though there is room for improvement in publicizing incident response and vulnerability disclosure policies. Privacy compliance is well addressed with comprehensive GDPR-aligned policies and cookie consent mechanisms. Overall, bonprix.at presents a trustworthy and professional online retail presence with a good balance of business credibility and technical sophistication.

P

Pädagogischer Austauschdienst (PAD) des Sekretariats der Kultusministerkonferenz

erasmusplus.schule

62

The website erasmusplus.schule serves as the official German national portal for the Erasmus+ program focused on the school sector. It is operated by the Pädagogischer Austauschdienst (PAD) under the Kultusministerkonferenz, providing comprehensive information, consultation, and application support for educators, schools, and kindergartens engaging in European exchange programs. The site is well-positioned as a trusted government resource with clear branding and authoritative content tailored to its target audience in the education sector. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including JavaScript and CSS. It features a responsive design optimized for mobile devices and accessibility, with good SEO practices and structured navigation enhancing user experience. Hosting is managed via timmehosting.de, with domain registration through INWX GmbH, reflecting a stable and professional infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms via Klaro, demonstrating compliance with privacy regulations such as GDPR. However, DNSSEC is not enabled, and no explicit security headers were detected, indicating areas for improvement in domain and web security hardening. No critical vulnerabilities or suspicious activities were found, and the domain registration details align well with the official entity, supporting a high legitimacy score. Overall, erasmusplus.schule is a professionally maintained, secure, and privacy-conscious government portal that effectively serves its educational mission. Strategic recommendations include enabling DNSSEC, implementing comprehensive security headers, and ongoing monitoring of third-party scripts to maintain and enhance security posture.

L

Livesport s.r.o.

livesport.cz

61

Livesport s.r.o. operates www.livesport.cz, a leading Czech Republic-based online platform providing live sports results, livescore updates, and sports news primarily focused on football. The website targets sports enthusiasts and bettors, offering real-time updates for over 1000 football competitions worldwide. The business model includes affiliate partnerships with major bookmakers, enhancing monetization through betting referrals. Technically, the site employs modern web technologies including JavaScript frameworks, SVG graphics, and integrates Google Tag Manager and OneTrust for analytics and consent management. The platform is mobile optimized and demonstrates good SEO and accessibility practices. Security posture is solid with HTTPS enforcement and standard security headers, though explicit privacy and terms pages are not found in the provided content. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements, though improvements in transparency and contact information are recommended.

The website represents the official online presence of the Bundesministerium für Bildung und Forschung (Federal Ministry of Education and Research) in Germany. It serves as a government portal providing information related to education and research initiatives. Currently, the site is under maintenance, limiting content availability. The business model is that of a government entity focused on public communication and information dissemination. The target audience includes the general public, researchers, and policymakers. The site uses HTTPS and basic web technologies but lacks advanced security headers and privacy policies, indicating room for improvement in compliance and security posture. Contact information is clearly provided, enhancing trust and credibility.

P

Pädagogischer Austauschdienst (PAD)

kmk-pad.org

62

The Pädagogischer Austauschdienst (PAD) is a German governmental agency under the Kultusministerkonferenz that promotes European and international school exchange programs. The website serves as an authoritative portal for educational institutions, teachers, and students interested in exchange programs, offering detailed program information, events, and testimonials. The site is built on TYPO3 CMS, demonstrating a mature technical infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy and security policies. Overall, the website is professional, trustworthy, and well-positioned in its niche, but could improve transparency and security documentation.

N

NextPage Media, s.r.o.

dobyvameevropu.cz

53

DobývámeEvropu.cz is a Czech online media project specializing in European football competitions, particularly focusing on Czech clubs' participation in UEFA tournaments. It offers detailed analyses, statistics, podcasts, and interviews, targeting football fans, sports analysts, and bettors. The site is part of the NextPage Media group and maintains partnerships with several notable brands and media outlets. Technically, the website employs modern JavaScript frameworks, Google Tag Manager, Microsoft Clarity, and a consent management platform to ensure GDPR compliance. The site is well-structured, mobile-optimized, and provides rich content, although explicit privacy and terms of service pages are not clearly linked. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response information. WHOIS data is unavailable, which limits domain trust assessment but the professional presentation and partner ecosystem suggest legitimacy. Overall, the site is a credible specialized media outlet with moderate technical maturity and good privacy compliance mechanisms.

S

Social Maturity Score

socialmaturityscore.com

54

Social Maturity Score is a niche marketing transformation guide focused on social media maturity, providing businesses and marketing professionals with a common understanding and survey tools related to social media. The website is relatively new, founded in 2020, and uses a modern Angular-based frontend technology stack. The content is minimal but relevant to its target audience, with basic design and mobile optimization. Security posture is moderate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. No privacy or cookie policies are published, and no contact or incident response information is available, which limits compliance and trust. Overall, the site is accessible without WAF or blocking mechanisms, but improvements in privacy, security policies, and contact transparency are recommended.

Nadace LANDEK Ostrava is a Czech non-profit foundation dedicated to preserving mining heritage and cultural traditions primarily in the Ostrava-Karviná and Moravian-Silesian regions. The foundation operates a grant program supporting projects related to mining monuments, cultural preservation, and education about mining history. The website reflects a small, regionally focused organization with a history dating back to 2007 and supported by regional government grants. Technically, the website is built with basic HTML, CSS, and JavaScript, hosted on Forpsi servers. It lacks advanced CMS or frameworks and shows basic mobile and accessibility features. There are no detected analytics or tracking technologies, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed from domain but not explicitly confirmed in content), but lacks security headers and published security or privacy policies. No contact information or incident response channels are provided, which limits transparency and user trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is functional and serves its informational purpose but requires improvements in privacy compliance, security best practices, and contact transparency to enhance trust and compliance with modern standards.

C

CYLINDERS HOLDING a.s

zamek-vitkovice.cz

43

Zámek Vítkovice operates as a modern event venue located in the center of Ostrava, Czech Republic, offering rental spaces for weddings, conferences, concerts, and other events. The business is owned by CYLINDERS HOLDING a.s and targets local customers seeking unique and artistic event spaces. The website reflects a professional and consistent brand image with clear contact details and multilingual support (Czech and English). Technically, the site uses Bootstrap for responsive design, integrates Google Analytics for visitor tracking, and Google Maps for location display, indicating a moderate level of digital maturity. Security-wise, the site implements a cookie consent mechanism but lacks visible security headers and explicit privacy or terms of service pages, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the website content and contact information appear legitimate and consistent with a small hospitality business. Overall, the site is functional and user-friendly but would benefit from enhanced security and compliance documentation.

K

Kontura Design

kontura.cz

44

Kontura Design is a small Czech Republic-based design service provider specializing in graphic design, consultation, typesetting and printing, packaging design, and internet services. The company has a long-established domain since 2000, indicating stable business operations. The website presents basic information with minimal content and lacks modern digital maturity features such as structured data, privacy policies, or contact details. Technically, the site uses outdated JavaScript libraries loaded over HTTP, which poses security risks and indicates a need for modernization. Security posture is weak due to lack of HTTPS enforcement and missing security headers. No privacy or cookie policies are present, which impacts compliance with GDPR and other regulations. Overall, the website is functional but basic, with room for significant improvements in security, privacy, and user experience.

D

DŮM U PARKU, s.r.o.

dumuparku.cz

45

DŮM U PARKU, s.r.o. operates a historic building in Olomouc, Czech Republic, offering modern office spaces, a ballroom, conference rooms, and cultural event hosting. The company positions itself as a unique venue blending historical ambiance with modern functionality, targeting businesses and event organizers. The website is professionally designed with clear navigation and good content relevance, supporting its market presence. Technically, the site uses standard web technologies including Google Analytics and jQuery plugins, with moderate performance and mobile optimization. However, the absence of privacy and cookie policies, lack of security headers, and missing WHOIS registration data present compliance and trust concerns. The security posture is moderate but could be improved by implementing best practices and transparency measures. Overall, the site is functional and business credible but requires enhancements in privacy compliance and security to strengthen trust and regulatory adherence.

1

1. Web IT

1webit.cz

58

1. Web IT is a Czech Republic-based IT service provider specializing in professional custom development of systems, web applications, and e-shops. Founded in 2011, the company serves a medium-sized team of over 20 experienced developers, designers, and IT experts. Their market position is supported by a strong portfolio of clients including notable brands and public institutions. The company offers a broad range of services including programming capacities, custom system development, ready-made solutions, graphic design, and ongoing application support. Their business model focuses on long-term client partnerships and continuous project modernization. Technically, the website reflects a mature digital infrastructure utilizing a diverse technology stack including PHP, MySQL, Java, Python, Ruby, React, and various database systems. The site is built likely on the Nette Framework, with Cloudflare providing hosting and security services. The website is mobile-optimized, accessible, and SEO-friendly, with modern meta tags and structured navigation. From a security perspective, the site enforces HTTPS, employs Cloudflare Turnstile CAPTCHA for form protection, and includes cookie consent mechanisms aligned with GDPR. While explicit security headers are not fully confirmed, the site demonstrates good security hygiene with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie policies are comprehensive and clearly presented. Overall, the website presents a low-risk profile with strong business credibility, professional design, and adequate security measures. Recommendations include enhancing security headers, maintaining dependency updates, and adding explicit incident response and security policy information to further strengthen trust and compliance.

G

Germany Trade & Invest (GTAI)

gtai-exportguide.de

66

The GTAI-Exportguide website serves as an official German government initiative aimed at supporting businesses, especially export beginners, in their international trade endeavors. It provides comprehensive information, partner networks, event listings, and news updates to facilitate foreign market entry. The platform is backed by the Federal Ministry for Economic Affairs and Climate Action, ensuring authoritative and trustworthy content. The website's design is professional, with clear navigation and mobile optimization, catering well to its target audience. Technically, the site employs modern web technologies including JavaScript, CSS, and HTML5, with analytics powered by etracker and consent management via Usercentrics. While no explicit CMS was detected, the site appears to be custom-built or uses a proprietary system. Performance is moderate with good mobile responsiveness and accessibility features. Security is enforced through HTTPS, but could benefit from additional security headers and explicit security policies. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. However, the absence of explicit privacy and cookie policies, as well as terms of service, indicates room for improvement in compliance and transparency. No incident response or vulnerability disclosure information is provided, which could be enhanced to build further trust. Overall, the website is a credible and professional government resource with a strong business focus and a well-established partner network. Strategic recommendations include publishing comprehensive privacy and security policies, enhancing security headers, and providing clear contact channels for security incidents to improve compliance and user trust.