Security Directory

G

Gewerkschaft Nahrung-Genuss-Gaststätten (NGG)

ngg.net

59

The website www.ngg.net represents the Gewerkschaft Nahrung-Genuss-Gaststätten (NGG), a large German trade union focused on workers in the food industry, food crafts, and hospitality sectors. The site provides comprehensive information about the union's activities, member services, labor rights advocacy, and sector-specific hotlines. It targets employees and workers in these industries, offering resources such as legal protection, education, and collective bargaining updates. The website is professionally designed, well-structured, and fully accessible, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS with Bootstrap and modern frontend tools like Vite and Leaflet for mapping features. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS enforced and secure forms, though some advanced security headers could be added. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR requirements. Contact information is primarily via web forms, with no direct emails or phone numbers exposed. The WHOIS data for the domain is unavailable, showing no registration match, which is unusual but may be due to privacy protection or recent registration. Despite this, the website's professional quality and content indicate legitimacy. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site scores well on content quality, technical implementation, security, and privacy compliance, with minor deductions due to WHOIS transparency and lack of explicit security policies. Strategic recommendations include enhancing security headers, publishing an incident response policy, and improving transparency around analytics and tracking. These steps would further strengthen trust and security posture.

The website www.dgb-bestellservice.de operates as an e-commerce platform primarily serving the German Trade Union Confederation (DGB) community by offering print materials, promotional items, and informational products. The business is operated by DCM Druck Center Meckenheim GmbH, a small-sized company focused on retailing niche products related to trade union activities. The platform is powered by the Lightspeed e-commerce system and hosted on hosting.de, reflecting a moderate level of technical maturity with standard web technologies such as jQuery and Bootstrap. The site is well-structured, mobile-optimized, and provides clear navigation and product categorization. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism, indicating compliance with GDPR requirements. However, it lacks explicit security headers and dedicated security or incident response policies, which could be improved to enhance its security posture. No vulnerabilities or malicious content were detected, and the site maintains good privacy compliance with accessible privacy and terms of service pages. Overall, the website presents a professional and trustworthy front for its target audience, with clear contact information and consistent branding. The domain registration data aligns reasonably with the business purpose, though more detailed WHOIS information would strengthen trust. The site’s security and privacy practices are adequate but could benefit from enhancements to security headers and incident response transparency.

3

321 CREATIVE CREW s.r.o.

321seo.cz

61

321 CREATIVE CREW s.r.o. operates the website 321seo.cz as a digital marketing agency specializing in SEO optimization, PPC marketing, copywriting, social media management, video marketing, and product comparison services. The company targets businesses seeking to increase web traffic, sales, and inquiries through online marketing strategies. The website presents a professional and consistent brand image with multiple client references and certifications, indicating a credible market position within the Czech Republic. Technically, the site employs modern front-end frameworks such as Bootstrap and jQuery, integrates Google Analytics, Microsoft Clarity, and Google Tag Manager for analytics and tracking, and offers a responsive design optimized for mobile devices. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though the absence of security headers and a published security policy suggests room for improvement. The lack of WHOIS data limits domain trust analysis, but the website content and certifications support legitimacy. Overall, the site demonstrates a good balance of content quality, technical implementation, and business credibility, with moderate privacy compliance and security maturity.

S

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej

smspzps.pl

47

Szkoła Mistrzostwa Sportowego Polskiego Związku Piłki Siatkowej is a specialized educational institution focused on volleyball sports training and general education for youth in Poland. The school operates under the auspices of the Polish Volleyball Federation and offers a comprehensive program combining academic studies with athletic development. The website reflects a medium-sized organization with a clear target audience of students, parents, and sports professionals. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and slick carousel, providing a responsive and accessible user experience with WCAG features. Security posture is moderate with HTTPS implied but lacking visible security headers and explicit security policies. Privacy compliance is basic with a privacy policy document available but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in transparency and security best practices.

O

Opolska Regionalna Organizacja Turystyczna

orot.pl

55

Opolska Regionalna Organizacja Turystyczna (OROT) is a well-established regional tourism organization based in Opole, Poland, founded in 2004. The organization focuses on promoting tourism within the Opole Voivodeship through event organization, publishing, certification of tourist products, and fostering partnerships with local and national tourism entities. The website serves as a central hub for information, news, and resources related to regional tourism. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Analytics, and is built on the SkyCMS platform. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS with DNSSEC enabled and includes CSRF tokens and cookie consent mechanisms, though it lacks some advanced security headers and a vulnerability disclosure policy. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the organization. The website is safe for general audiences and does not contain any adult or questionable content.

E

Europa-Universität Viadrina Frankfurt (Oder)

europa-uni.de

60

Europa-Universität Viadrina Frankfurt (Oder) is a public university located in Germany offering Bachelor's and Master's degree programs primarily in law, economics, and cultural studies. The institution emphasizes internationality, with partnerships across 280 universities and a diverse student body from over 100 countries. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive academic content targeting prospective and current students, researchers, and academic staff. The university's business model centers on education and research services with a strong regional and international focus. Technically, the website is built on Infopark CMS Fiona and uses modern web technologies including Bootstrap, jQuery, and FontAwesome. It employs Matomo Analytics configured to disable cookies, indicating a privacy-conscious approach. The site is mobile-optimized and accessible, with good SEO practices. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS with a good SSL configuration and follows best practices such as disabling cookies in analytics. However, it lacks explicit security headers and a cookie consent mechanism. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the university's identity, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, though improvements in cookie consent and security headers are recommended. The risk profile is low, with no critical issues identified.

C

CESCI-Carpathia

cesci-carpathia.eu

58

CESCI-Carpathia is a small non-profit association focused on facilitating cross-border cooperation and regional development between Slovakia and Hungary. The organization actively participates in EU-funded projects such as #ACCESS and INTERREG, organizing seminars, conferences, and workshops to address legal and administrative barriers in border regions. Their target audience includes government bodies, municipalities, and regional stakeholders interested in socio-economic development and cross-border collaboration. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and Google Analytics. The site is hosted by WebSupport s.r.o., a reputable provider, and uses HTTPS with good SSL configuration. However, the site lacks visible privacy and cookie policies, and no consent mechanism is present, which poses compliance risks. Security headers are missing, and no vulnerability disclosure or incident response information is provided. Overall, the website is professional and content-rich but would benefit from enhanced privacy compliance and security hardening.

CESCI Balkans is a regional non-profit organization dedicated to fostering cross-border cooperation initiatives in the Balkans and Central Europe. The organization provides consultancy, project management, and networking services to regional governments, NGOs, and community stakeholders. Their website reflects a professional and consistent brand presence with clear contact information and active partnerships with European regional bodies. Technically, the website employs standard web technologies such as Bootstrap and jQuery, delivering a responsive and user-friendly experience. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the website lacks visible security headers and privacy-related policies, which are critical for compliance with GDPR and other regulations. The absence of WHOIS data due to privacy protection is typical for such organizations but limits transparency. No signs of security vulnerabilities or malicious content were detected, and the site is fully accessible without WAF or blocking mechanisms. Overall, the website presents a trustworthy and credible front for CESCI Balkans, though enhancements in privacy compliance and security best practices are recommended to strengthen their digital maturity and user trust.

D

Département des Pyrénées-Atlantiques

le64.fr

53

The website le64.fr is the official digital portal for the Pyrénées-Atlantiques Department in France, providing comprehensive information and services related to social solidarity, education, territory development, infrastructure, culture, sports, environment, and local government activities. It targets residents, families, youth, seniors, local businesses, associations, visitors, and government entities within the region. The site is built on Drupal 9 with modern frontend technologies, offering good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and published security policies. The WHOIS data confirms domain legitimacy and consistency with the official government entity. Overall, the site is professional, trustworthy, and content-rich, serving as a key resource for the local population.

G

GOLDFINGER porcelán, v.o.s.

manufacture-porcelain.com

51

GOLDFINGER porcelán, v.o.s. is a small Czech manufacturing company specializing in original, high-quality, mostly small-batch porcelain and ceramics production. Founded in 1998, the company emphasizes handmade craftsmanship using Czech porcelain and serves an international clientele with products such as tea and coffee sets, mugs, vases, and accessories. The website is professionally designed with good navigation and mobile optimization, leveraging modern technologies like Bootstrap and jQuery. Privacy compliance is addressed with a GDPR policy and cookie consent banner. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Overall, the website presents a credible business front but would benefit from enhanced security practices and domain registration transparency.

Università degli Studi di Udine is a well-established Italian public university offering a wide range of academic programs including undergraduate, graduate, doctoral, and post-graduate education. The institution also engages in research, international mobility, and collaboration with businesses and the community. The website reflects a mature digital presence with a modern technical stack based on Plone CMS and Bootstrap, providing good accessibility, mobile optimization, and SEO. Security posture is solid with HTTPS and security headers implemented, though explicit privacy and cookie policies are missing, which impacts compliance scores. Contact information and social media presence are comprehensive and professional, reinforcing trust and credibility.

E

European University Viadrina Frankfurt (Oder)

borders-in-motion.de

54

The Viadrina Center B/ORDERS IN MOTION is an academic research institution affiliated with the European University Viadrina Frankfurt (Oder), specializing in interdisciplinary studies of borders and migration. It offers research projects, teaching courses, and public engagement activities, targeting academics, students, and the interested public. The website reflects a well-established research center with a clear focus and strong institutional backing. Technically, the website is built on a modern stack including Bootstrap, jQuery, and FontAwesome, managed via Infopark CMS Fiona. It is hosted on university infrastructure with good mobile optimization, accessibility, and SEO practices. The site is performant and professionally designed, providing a positive user experience. From a security perspective, the site uses HTTPS and shows no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers, a cookie consent mechanism, and published security or incident response policies, which are areas for improvement. The domain registration is consistent with the university's identity, supporting legitimacy. Overall, the website is trustworthy, professional, and safe, with minor compliance gaps related to privacy and security policies. Strategic enhancements in these areas would strengthen its security posture and regulatory compliance.

U

Université Savoie Mont Blanc

univ-smb.fr

56

Université Savoie Mont Blanc is a public higher education institution located in France with multiple campuses in Annecy, Chambéry, and Le Bourget du Lac. The university offers a broad range of academic programs, research activities, and community engagement initiatives. It targets students, researchers, academic staff, and partners, positioning itself as a regional leader with international collaborations. The website reflects a professional and well-structured digital presence with comprehensive content and clear navigation.

I

Interreg

interreg-rhin-sup.eu

51

The website www.interreg-rhin-sup.eu represents the official online presence of the Interreg Upper Rhine program, a European Union initiative supporting cross-border cooperation projects between France, Germany, and Switzerland. The site provides comprehensive information about funding opportunities, project libraries, events, and resources for beneficiaries. It targets public authorities, project partners, and stakeholders involved in regional development and cooperation. The website is professionally designed, multilingual (French primary with German alternate), and well-structured to facilitate navigation and user engagement. Technically, the site is built on WordPress CMS with modern frameworks such as Bootstrap and uses privacy-conscious analytics via Matomo. Cookie consent is managed through tarteaucitron.js, reflecting compliance with EU privacy regulations. The site is mobile-optimized and SEO-friendly, leveraging Yoast SEO plugin. However, some security best practices like explicit security headers are not visibly implemented, and no public security or incident response policies are found. From a security perspective, the site enforces HTTPS and does not expose sensitive data. The domain WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains. The website shows no signs of malicious activity or vulnerabilities. Social media presence and partner logos enhance trustworthiness. Overall, the site demonstrates a mature digital infrastructure suitable for a government-funded program. The risk assessment is low, with recommendations to improve security headers, publish security policies, and enhance accessibility compliance. The domain legitimacy is supported by consistent content and EU affiliation despite the lack of WHOIS transparency. The website is safe for general audiences and does not contain adult or questionable content.

G

GOLDFINGER porcelán, v.o.s.

goldfinger-porcelan.cz

67

GOLDFINGER porcelán, v.o.s. operates a website focused on custom porcelain and ceramic manufacturing, targeting customers interested in original and quality small-series porcelain products. The company maintains a professional web presence with a clear business model including custom production and retail via an e-shop. The website is built using modern technologies such as Bootstrap and integrates Google Analytics and Tag Manager for user tracking and analytics. Mobile optimization and navigation are well implemented, providing a good user experience. Security posture is adequate with HTTPS enabled and a cookie consent mechanism in place, though the absence of privacy policy and terms of service pages indicates room for improvement in compliance and transparency. WHOIS data is unavailable, which raises concerns about domain registration legitimacy and should be investigated further. Overall, the website is functional and professional but would benefit from enhanced privacy disclosures and contact transparency.

Weboo s.r.o. is a Czech Republic based digital agency established in 2016, offering digital services with a client support ticketing system visible on their website. The company targets clients seeking digital agency solutions and maintains a consistent brand presence with social media links and a related partner domain weboo.eu. The website is built on a modern tech stack including Bootstrap, jQuery, and Perfex CRM platform, indicating a moderate level of digital maturity. Performance and mobile optimization are basic but functional. Security posture is moderate with HTTPS enabled but lacking DNSSEC and security headers. No privacy or cookie policies are published, which is a compliance gap. Overall, the website is professional but minimal in content and security transparency.

S

Stiftung Digitale Chancen

digitale-chancen.de

69

Stiftung Digitale Chancen is a German non-profit foundation dedicated to researching the societal impacts of digitalization and promoting equal internet access for all. Established in 2002 and based in Berlin, the foundation operates various national and international projects focused on digital inclusion, media literacy, and social empowerment, targeting diverse groups including seniors and LGBTQ+ youth. The organization collaborates with partners such as O₂ Telefónica to enhance digital mobility and resilience. Technically, the website is built on TYPO3 CMS with Bootstrap and jQuery, offering a responsive, accessible, and well-structured user experience. Privacy is respected through clear cookie consent mechanisms and the use of Matomo analytics with IP anonymization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website reflects a professional, trustworthy, and mission-driven organization with strong digital maturity and compliance practices.

jugendschutz.net is a German non-profit organization dedicated to youth protection on the internet. The website provides comprehensive educational content, awareness campaigns, and mechanisms for reporting violations related to youth safety online. It targets parents, educators, and professionals involved in child and youth protection. The organization holds a leading position in Germany for internet youth protection and operates with a professional and consistent brand presence. Technically, the website is built on TYPO3 CMS and leverages modern front-end technologies such as Bootstrap, jQuery, and Slick Carousel. It is optimized for mobile devices and provides a good user experience with clear navigation and rich content. The site uses HTTPS and Matomo analytics, indicating a focus on privacy and security. From a security perspective, the site enforces HTTPS and uses secure forms but lacks some advanced security headers and a published security.txt file. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a comprehensive privacy policy and GDPR adherence. However, no explicit incident response or security contact information is published. Overall, the website is trustworthy, professionally maintained, and safe for general audiences. The missing WHOIS data is a concern but does not outweigh the legitimacy signals from the website content and imprint. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure information, and improving incident response transparency.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

serviceportal-zuhause-im-alter.de

64

The website www.serviceportal-zuhause-im-alter.de is an official German government service portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It provides comprehensive information, programs, and resources related to age-appropriate housing, social services, neighborhood help, and funding projects for older adults. The portal targets seniors, caregivers, municipalities, and community organizations, positioning itself as a trusted and authoritative source in the social services sector. The content is well-structured, professionally designed, and accessible, supporting a broad audience with clear navigation and accessibility tools such as ReadSpeaker.

C

Conterganstiftung

contergan-infoportal.de

53

The Contergan Infoportal website serves as the official online presence of the Conterganstiftung, a German government foundation dedicated to supporting individuals affected by thalidomide-related disabilities. The foundation provides statutory benefits including pensions, specific needs payments, advisory services, and research funding to improve the quality of life and societal participation of affected persons. The website is professionally designed using TYPO3 CMS and Bootstrap, offering a responsive and accessible user experience primarily in German. It features comprehensive content about the foundation's mission, services, news, and contact information, targeting affected individuals, their families, and professionals. Technically, the site is hosted on Schlund Technologies infrastructure with secure HTTPS and cookie consent mechanisms in place, reflecting good digital maturity. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the site demonstrates a strong security posture with no detected vulnerabilities or suspicious elements, and complies well with GDPR requirements. The domain registration and hosting details align with the foundation's official status, supporting high legitimacy and trustworthiness.

B

Bundesamt für Familie und zivilgesellschaftliche Aufgaben

bundesfreiwilligendienst.de

62

The Bundesfreiwilligendienst.de website is an official German government platform managed by the Bundesamt für Familie und zivilgesellschaftliche Aufgaben. It provides comprehensive information and services related to the Bundesfreiwilligendienst (Federal Volunteer Service), targeting volunteers, deployment sites, and educational centers. The site offers resources such as placement searches, educational seminars, event information, and downloadable materials, positioning itself as a key informational hub for voluntary civic engagement in Germany. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies including jQuery, Bootstrap, CKEditor, and Leaflet.js for interactive maps. It employs Matomo for privacy-conscious analytics with IP anonymization and cookie consent mechanisms, reflecting a mature digital infrastructure with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS, uses cookie consent banners compliant with GDPR, and anonymizes user data in analytics. However, it lacks explicit published security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a high level of trustworthiness and professionalism appropriate for a government service. It complies well with privacy regulations and provides clear contact channels, though it could improve transparency around security policies and incident handling.

S

Skiareál Červenohorské sedlo

cervenohorskesedlo.eu

48

Skiareál Červenohorské sedlo is a Czech ski resort business offering winter sports facilities, hotel accommodation, parking, ski school, and related services. The website targets tourists and skiing enthusiasts primarily in the Czech Republic region. The business model integrates hospitality and recreational services with online skipass sales and gift vouchers, positioning itself as a regional ski resort with a comprehensive service offering. Technically, the website is built on October CMS using modern web technologies including Bootstrap, jQuery, and various third-party analytics and marketing scripts. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and no visible sensitive data exposure; however, it lacks advanced security headers and explicit security or incident response policies. Privacy compliance is basic with presence of privacy and cookie policies but no explicit consent mechanism. Overall, the website is professional and trustworthy with moderate tracking practices and clear business contact information.

M

Moravian-Silesian Tourism, s.r.o.

industrialnepogranicze.pl

51

Industrial Frontier is a regional tourism project operated by Moravian-Silesian Tourism, s.r.o., focusing on promoting industrial heritage and attractions in the Moravian-Silesian borderlands. The website serves as an informational platform showcasing mapped attractions and cultural heritage trails related to coal and steel industries. The target audience includes tourists interested in industrial history and regional cultural experiences. The business model centers on regional tourism promotion through digital content and partnerships with local organizations. Technically, the website is built on WordPress with a modern tech stack including Bootstrap for responsive design, jQuery, and various plugins for SEO, GDPR compliance, and user interaction. The site uses Google Tag Manager and Adform for analytics and advertising tracking. Performance is moderate with good mobile optimization and basic accessibility features. SEO is well addressed with proper meta tags and structured data. From a security perspective, the site enforces HTTPS with excellent SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the HTML content. The domain registration data is consistent with the website's regional focus and business claims, enhancing trustworthiness. Overall, the website presents a professional and trustworthy digital presence for a niche regional tourism project. Strategic improvements could include adding explicit security policies, incident response contacts, and enhancing security headers to strengthen the security posture further.

The website tessinineurope.eu represents a municipal project called Český Těšín/Cieszyn INEurope, focused on strengthening cross-border cooperation between the Polish and Czech parts of the Těšín Silesia Euroregion. It is funded by the European Union and managed by the City Office of Cieszyn. The site provides information about the project, news updates, partner organizations, and contact options. The target audience includes local residents, regional institutions, NGOs, and tourists interested in the region's cultural and social integration. The business model is a public sector initiative supported by EU funds, emphasizing regional development and cooperation. Technically, the website uses a custom CMS with modern frontend technologies such as Bootstrap, jQuery, Owl Carousel, and Google services including Analytics and reCAPTCHA. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security measures include HTTPS enforcement and spam protection on forms, though some HTTP security headers are missing. From a security perspective, the site demonstrates a good baseline posture with no critical vulnerabilities detected. However, it lacks explicit security policies, incident response contacts, and advanced security headers. Privacy compliance is basic, with GDPR consent on the contact form and a privacy policy page, but no cookie consent mechanism is present. No terms of service or vulnerability disclosure policies are found. Overall, the website is trustworthy, professionally maintained, and serves its public sector purpose well. Strategic improvements in security headers, privacy transparency, and incident response readiness would enhance its security posture and compliance. The domain registration is consistent with the business history, and no suspicious patterns are identified.

The website zelaznyszlakrowerowy.pl represents a regional government-backed project called "Żelazny szlak rowerowy" focused on promoting a cycling trail with interactive quiz elements. The project is co-financed by the European Regional Development Fund and targets adult cyclists and tourists interested in exploring the trail. The site provides user registration, login, and quiz participation features, along with a map visualization of the cycling route. The business model is public sector-driven, aiming to enhance regional tourism and community engagement. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery, Bootstrap for styling, and integrates Google Analytics and Tag Manager for tracking. The site is mobile-optimized and accessible with basic SEO and usability features. There is no explicit CMS detected, suggesting a custom-built platform. Performance is moderate with room for improvement in security headers and DNS security. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and secures password inputs. However, DNSSEC is not enabled and no explicit HTTP security headers were detected, which are areas for improvement. The privacy policy and GDPR compliance are well documented, including a named Data Protection Officer with contact details. No incident response or vulnerability disclosure policies are found. The site is free from suspicious or malicious content and does not employ WAF or blocking mechanisms. Overall, the website is trustworthy and professionally maintained with strong compliance to privacy regulations. Recommendations include enabling DNSSEC, adding security headers, and continuous monitoring of third-party scripts to enhance security posture and user trust.

E

eBool

ebool.com

61

eBool is an online platform focused on helping businesses and professionals find software, apps, and digital solutions across a wide range of categories. It offers product search, reviews, and alternative product suggestions, positioning itself as a niche software discovery and comparison site. The website is designed with modern web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, the technical infrastructure lacks advanced security headers and comprehensive privacy compliance mechanisms, which are areas for improvement. The absence of WHOIS registration data raises some concerns about domain legitimacy, although the website content and design appear professional and trustworthy. Overall, eBool serves its target audience effectively but should enhance its security posture and transparency to build greater trust.

R

Retex

retex-kariera.cz

54

Retex is a manufacturing company specializing in the production and development of nonwoven textiles, operating a career-focused website targeting job seekers in the Czech Republic. The company positions itself as a major regional employer offering diverse job opportunities and employee benefits, emphasizing talent development and a positive work environment. The website is professionally designed using WordPress CMS with modern technologies such as Bootstrap, jQuery, and Gravity Forms, providing a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and GDPR compliance evident through privacy policies and consent mechanisms in forms, though cookie consent is missing. Contact information is comprehensive, including emails, phone numbers, physical address, and social media presence on Facebook and LinkedIn. Overall, the site is trustworthy, well-maintained, and aligned with the company's business objectives.

P

Partners Investiční společnost

partnersis.cz

63

Partners Investiční společnost is a modern and innovative investment company based in the Czech Republic, offering a range of investment funds and financial services targeted at investors seeking professional asset management solutions. The website presents detailed fund information, including downloadable PDFs, and emphasizes accessibility with investment opportunities starting from low amounts without entry fees. The company positions itself as a trusted player in the Czech financial market with a focus on client-oriented services. Technically, the website employs a custom CMS with a technology stack including jQuery, Bootstrap, TinyMCE, and Google Maps API, ensuring a responsive and user-friendly experience across devices. The site is secured with HTTPS and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. However, some outdated libraries and missing security headers suggest room for technical improvements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent but lacks visible advanced security headers and incident response contacts. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and professional presentation support its legitimacy. No vulnerabilities or malicious content were detected. Overall, the website is well-designed and functional, with strong privacy compliance and a clear business focus. Strategic improvements in security headers, library updates, and domain registration transparency would enhance trust and security posture further.

E

EVONIX TECHNOLOGIES PVT. LTD

evonix.co

63

Evonix Technologies Pvt. Ltd is a Pune-based digital marketing and technology services company focused on holistic brand evolution. The company offers a broad range of services including technology services (website design, web and mobile applications), experiential marketing (AR/VR, video production), digital marketing (SEO, social media, media planning), and branding consulting. Their market position is that of a regional leader with a strong emphasis on innovative, technology-driven marketing solutions. The website is well-structured, mobile-optimized, and uses modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. From a technical perspective, the site demonstrates good SEO practices, structured data usage, and responsive design. However, there is room for improvement in security headers and privacy compliance, particularly regarding cookie consent mechanisms. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response information. Overall, the website and business appear legitimate and professional, with clear contact information and social media presence. The domain WHOIS data is privacy protected, which is common and justified for this business type. There are no indications of suspicious or malicious activity. Strategic recommendations include enhancing privacy compliance, adding security headers, and publishing security policies to improve trust and compliance.

O

ORLEN Unipetrol

unipetrol.cz

58

ORLEN Unipetrol is a leading Czech energy company specializing in refining, petrochemical production, and retail fuel distribution. As part of the larger ORLEN Group, it holds a significant market position in Central Europe. The website reflects a mature corporate digital presence built on Microsoft SharePoint, integrating modern web technologies such as jQuery, Bootstrap, and Cookiebot for consent management. The company demonstrates strong compliance with privacy regulations, including GDPR, and maintains transparency through published security policies and whistleblowing programs. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and mobile optimization. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

Ś

ŚLĄSKA ORGANIZACJA TURYSTYCZNA

zabytkitechniki.pl

45

Szlak Zabytków Techniki is a regional cultural tourism portal managed by the Śląska Organizacja Turystyczna, promoting the Industrial Monuments Route in the Silesian region of Poland. The website offers a variety of services including educational materials, event listings, travel planning tools, and detailed information about cultural heritage sites. It targets tourists, educators, and cultural enthusiasts, positioning itself as a key regional player in cultural tourism and education. The business model is non-profit and focused on regional promotion and education.

D

DigiDay Czech s.r.o.

digitalninosice.cz

45

DigiDay Czech s.r.o. operates the website digitalninosice.cz, specializing in the sale and rental of digital LED advertising displays and electronic notice boards. The company targets B2B customers in the Czech Republic, offering innovative digital signage solutions with a strong market presence in the Moravia region. Their services include hardware sales, rental, technical support, and content management software. The website is professionally designed with clear navigation and good content relevance, supporting their business model effectively. Technically, the site uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and Google reCAPTCHA v3, hosted by Active24. Security posture is adequate with HTTPS and spam protection but lacks advanced security headers and incident response disclosures. Privacy compliance is addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website reflects a credible and trustworthy business with room for security and compliance enhancements.

Optigrün international AG is a well-established European leader in green roofing and roof garden solutions, boasting 50 years of expertise. The company offers a comprehensive range of innovative products and services aimed at enhancing urban ecological balance and sustainability. Their target audience includes architects, project planners, and specialized firms seeking professional green roof systems and consulting services. Technically, the website is built on TYPO3 CMS with Bootstrap framework, incorporating modern analytics and bot protection tools such as Matomo and Google reCAPTCHA. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, HTTPS is enforced and cookie consent mechanisms are in place, though explicit security policies and vulnerability disclosures are absent, suggesting room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, but the lack of WHOIS data and domain registration transparency slightly reduces trust from a domain legitimacy perspective.

R

Retex

retex.cz

55

Retex is a Czech-based manufacturing company specializing in technical textiles with a strong focus on sustainability and circular economy principles. The company serves multiple industrial sectors including automotive, construction, healthcare, and furniture. Their products are made with high added value from recycled materials and are used globally. The website reflects a professional and modern digital presence built on WordPress, incorporating modern technologies such as Bootstrap, FontAwesome, and various tracking and marketing tools. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks explicit privacy and terms of service pages. Security posture is good with HTTPS enforced and no visible vulnerabilities, but could be improved by adding security headers and incident response contacts. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high based on website content and presentation.

On The Green Move is an environmental advocacy movement focused on promoting Living Green through nature and social responsibility. The website presents a professional and consistent brand image with clear messaging about their mission and partner collaborations. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is no evidence of a CMS or advanced backend infrastructure. Security posture is moderate with no visible vulnerabilities but lacks HTTPS confirmation and security headers. Privacy and cookie policies are absent, which impacts compliance and user trust. The WHOIS data is missing, raising concerns about domain legitimacy and longevity. Overall, the site is functional and informative but requires improvements in security, privacy compliance, and domain registration transparency.

A

APRA - Asociace Public Relations

cenapr.cz

56

The website cenapr.cz represents the Czech Public Relations Award (Lemur), organized by APRA - Asociace Public Relations, a non-profit association focused on recognizing excellence in PR projects within the Czech Republic. The site provides information about the competition categories, judging process, results, and partners. It targets PR professionals, agencies, and organizations interested in public relations achievements. The business model revolves around organizing an annual event supported by sponsors and media partners, with a well-established market presence since 2006. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, hosted on Czech-based infrastructure. The site is mobile-optimized and uses tracking technologies such as Google Analytics and Facebook Pixel for marketing insights. However, it lacks some advanced accessibility features and comprehensive SEO structured data. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security or incident response policies. There is no privacy or cookie policy, which poses GDPR compliance risks. No forms were detected in the analyzed content, reducing immediate data input risks. The domain WHOIS data is consistent with the business claims, showing a long-established presence and legitimate registration. Overall, the website is professional and trustworthy but should improve privacy compliance and security best practices to enhance user trust and regulatory adherence.

K

Klub reklamných agentúr Slovenska

ferovytender.sk

58

Férový tender is a Slovak initiative led by the Klub reklamných agentúr Slovenska aimed at promoting fair and transparent tendering processes within the creative marketing and advertising industry. The website serves as a comprehensive guide offering ten key rules for fair tenders, supported by testimonials from industry representatives and associations. It represents a significant portion of the Slovak marketing agency market, with 85 agencies and a combined turnover of 464 million euros in 2023. The initiative is well-established with strong partnerships across multiple marketing and media associations in Slovakia. Technically, the website employs modern web technologies including Bootstrap for responsive design, Google Tag Manager and Google Analytics for tracking, and a cookie consent mechanism compliant with GDPR. Hosting is provided by WebSupport with DNSSEC enabled, indicating a secure DNS configuration. The site is well-optimized for mobile devices and SEO, with clear navigation and professional design. From a security perspective, the site uses HTTPS with good SSL configuration and DNSSEC, but lacks some advanced security headers such as Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism. Contact information is detailed and transparent, enhancing trustworthiness. Overall, the website presents a low-risk profile with a high level of professionalism and compliance. Strategic recommendations include enhancing security headers, adding explicit security policies or incident response contacts, and continuing regular security audits to maintain and improve the security posture.

Z

Zaraguza

zaraguza.com

58

Zaraguza is a full-service communication and marketing agency operating primarily in Slovakia and the Czech Republic. The company boasts a strong market position supported by over 150 awards for creativity and effectiveness, including prestigious Facebook Awards and YouTube Works recognitions. Their services encompass digital marketing, creative campaigns, social media management, and television advertising, targeting businesses seeking impactful marketing solutions. The website showcases a professional portfolio of campaigns from 2020, emphasizing their creative capabilities and client successes. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, Google Fonts, and integrates Google Tag Manager and Google Analytics for tracking. The site is mobile-optimized with good SEO practices and a cookie consent mechanism aligned with GDPR requirements. However, no explicit CMS or hosting provider information is discernible. Performance is moderate, and accessibility is basic but functional. From a security perspective, the site uses HTTPS (implied by external scripts loaded over HTTPS), but lacks visible HTTP security headers and explicit security or incident response policies. No forms are present on the main page, reducing attack surface but also limiting direct user engagement. The cookie consent banner and linked GDPR PDF indicate privacy awareness, though no detailed privacy or security policies are found on the site. WHOIS data is notably absent, with the domain showing no match in the WHOIS database, which is inconsistent with the active website presence. This raises questions about domain registration legitimacy or privacy protection usage. Overall, the site is professional and trustworthy in content and design but would benefit from improved transparency in domain registration and enhanced security headers. Strategic recommendations include implementing comprehensive security headers, publishing detailed privacy and security policies, providing clear contact information for security incidents, and verifying domain registration details to improve trustworthiness.

P

PROEBIZ s.r.o.

fsawards.com

54

The Fair Sourcing Awards website is a professionally maintained platform operated by PROEBIZ s.r.o., focused on recognizing excellence and innovation in procurement within corporate and public sectors primarily in the Czech and Slovak regions. The site provides detailed information about award categories, jury processes, and past winners, positioning itself as a niche leader in procurement awards. The technical infrastructure leverages common web technologies such as Bootstrap, jQuery, and tracking tools like Google Analytics and Facebook Pixel, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and formal security policies. Privacy compliance is limited due to the absence of a dedicated privacy policy page. Overall, the site is trustworthy and professional but could improve compliance and security transparency.

V

Vysoká škola logistiky o.p.s

vslg.cz

56

Vysoká škola logistiky o.p.s is a specialized higher education institution based in the Czech Republic, focusing on logistics education. Founded in 2004, it offers bachelor's, master's, and MBA programs with a strong emphasis on logistics and sustainable transport. The institution maintains a solid market position as a niche university with multiple campuses and active partnerships, including participation in logistics conferences. The website reflects a professional and consistent brand image targeting prospective and current students interested in logistics studies. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. It supports multilingual content and provides a cookie consent mechanism aligned with GDPR requirements. Security posture is good with HTTPS, reCAPTCHA, and cookie consent, though it lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations, making it a reliable digital presence for the institution.

V

Vysoká škola hotelová a ekonomická

vshe.cz

52

Vysoká škola hotelová a ekonomická (VŠHE) is a specialized higher education institution in the Czech Republic focusing on hotel management, economics, and related fields. The website reflects a medium-sized educational entity with a clear market position and a transition to University College Prague (UCP) as its parent organization. The site offers bachelor's and master's programs, including English-language options, targeting prospective and current students. The content is professionally presented with good navigation and multilingual support. Technically, the website is built on WordPress with modern libraries and SEO tools, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS, cookie consent, and reCAPTCHA integration, though some security headers are missing and no explicit incident response or security policies are published. Overall, the site is trustworthy, compliant with GDPR, and well-maintained, with active social media engagement and clear business legitimacy.

S

Statutární město Karviná

karvinainfo.cz

45

KarvináInfo is the official municipal information portal for the city of Karviná, Czech Republic, providing residents and visitors with comprehensive information about local events, culture, tourism, and city services. The website serves as a central hub for city news, event calendars, and tourist attractions, supported by official city contact details and social media channels. The business model is focused on public service and community engagement, positioning itself as a trusted source for local information. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, Swiper slider, and Choices.js, hosted on a LiteSpeed Web Server. The site is moderately optimized for performance and mobile responsiveness, with a clean and consistent design. However, some scripts are commented out, and no CMS or backend platform is explicitly identified. SEO and accessibility features are basic but functional. From a security perspective, the site lacks explicit security headers and there is no confirmation of HTTPS usage from the provided data. The cookie consent mechanism is implemented with explicit accept and reject options, indicating some level of privacy compliance, but no privacy policy or terms of service pages were found. There is no evidence of a security policy, incident response contacts, or vulnerability disclosure mechanisms, which suggests room for improvement in security maturity. Overall, the website is a professional and trustworthy municipal portal with good content quality and business credibility. The main risks relate to security best practices and privacy compliance documentation. Strategic recommendations include implementing HTTPS, adding security headers, publishing privacy and security policies, and enhancing compliance with GDPR and related regulations.

Zámek Fryštát is a cultural heritage site owned and operated by the statutory city of Karviná in the Czech Republic. The website serves as an informational portal for visitors, offering detailed descriptions of castle tours, exhibitions, and additional visitor services such as weddings, carriage rides, and photography. The site targets tourists and cultural enthusiasts interested in historical landmarks. Technically, the website is built on WordPress with a modern tech stack including Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though improvements can be made by adding security headers and publishing a privacy policy. The absence of WHOIS data limits domain trust verification, but the official city ownership and consistent branding support legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively.

E

European Landscape Contractors Association

elca.info

55

The European Landscape Contractors Association (ELCA) is a well-established non-profit professional organization founded in 1963, dedicated to promoting cooperation, knowledge exchange, and professional development within the European landscape contracting industry. The website serves as a hub for members and interested parties, offering information on services, workshops, excursions, awards, and exchange programs. It targets landscape contractors, green industry professionals, and related associations across Europe. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and user-friendly experience, although some SEO and accessibility features could be improved. Security posture is moderate with domain transfer protections in place but lacks DNSSEC and visible security headers. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced security and compliance measures.

P

Park čtvrtstoletí

parkctvrtstoleti.cz

48

The website 'Park čtvrtstoletí' serves as an informational platform for a park competition in the Czech Republic. It provides basic content focused on promoting the competition with minimal additional business information or contact details. The site uses common web technologies such as Bootstrap, jQuery, Google Tag Manager, and Facebook SDK to enhance user experience and track visitor interactions. A cookie consent mechanism is implemented, indicating some level of privacy compliance. However, the absence of WHOIS data and lack of contact or business registration information limit the ability to fully verify the legitimacy and trustworthiness of the site. Security posture is moderate with HTTPS implied but no explicit security headers detected. Overall, the site is functional but basic in design and content.

S

Stowarzyszenie „Region Beskidy”

euroregion-beskidy.pl

57

Stowarzyszenie Region Beskidy is a regional non-profit association focused on fostering cross-border cooperation and regional development within the Beskidy Euroregion, encompassing parts of Poland, Czech Republic, and Slovakia. The website serves as an information hub for the association's activities, including news, project archives, and details about small projects under the INTERREG programs. The target audience includes local governments, project partners, and residents interested in regional cooperation. Technically, the website is built on WordPress with Elementor and Bootstrap, providing a modern, responsive, and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and privacy compliance measures are lacking. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security policies to align with GDPR and best practices.

F

FFL API

fflapi.com

56

FFL API operates as a specialized technology platform providing API services for developers and firearm dealers in the USA. The company offers integration solutions with major ecommerce platforms such as BigCommerce, WooCommerce, Magento, and Volusion, enabling seamless access to Federal Firearms License (FFL) dealer data. The website positions itself as a centralized solution for firearm dealer directory and licensing data, targeting developers and firearm dealers seeking efficient integration capabilities. The business appears to be a small-sized entity founded around 2019, with a focus on niche market needs in the firearm and ecommerce sectors. Technically, the website is built on WordPress with Elementor and Yoast SEO plugins, leveraging modern web technologies including Google Analytics and Google Tag Manager for user tracking and performance monitoring. The site demonstrates good SEO practices, mobile optimization, and a professional design, although performance is moderate. The technical stack is standard for small to medium business websites, with no evident critical technical debt or outdated components. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is partially addressed with privacy and cookie policies present, but no active consent mechanism is implemented. The absence of WHOIS data for the domain raises concerns about domain registration transparency, impacting trustworthiness. No incident response or vulnerability disclosure information is available. Overall, the website presents a professional and functional platform with moderate security and privacy maturity. The main risk factors relate to domain registration opacity and incomplete privacy consent mechanisms. Strategic improvements in security headers, privacy compliance, and domain registration transparency would enhance trust and reduce risk.

Č

Česká asociace organizátorů veřejné dopravy

caovd.cz

45

ČAOVD.cz is the official website of the Czech Association of Public Transport Organizers, established in 2005. The site serves as an informational platform for stakeholders in the Czech public transportation sector. The website is built on WordPress using common web technologies such as Bootstrap and Google Fonts, indicating a standard technical infrastructure with moderate performance and mobile optimization. However, the site lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and incident response contacts, which are essential for compliance and trust. Security posture is minimal with no detected security headers or vulnerability disclosures. Overall, the site is functional but requires improvements in security and privacy compliance to enhance trustworthiness and regulatory adherence.

H

Hip Hop Unite

hiphopunite.com

53

Hip Hop Unite is an international organization dedicated to promoting Hip Hop dance through competitions, workshops, and certifications. It serves a global community of dancers and teams, organizing events such as European and World Championships. The website reflects a professional and community-focused entity with clear branding and active social media engagement. Technically, the site is built on WordPress using modern plugins and frameworks, offering a responsive and user-friendly experience. Security posture is good with HTTPS enabled, though some improvements in security headers and privacy compliance could be made. Overall, the site presents a trustworthy and legitimate presence in the dance community.