Security Directory

A

Arbeitskreis für die Inventarisierung und Pflege des kirchlichen Kunstgutes in den deutschen (Erz-)Bistümern

deutsche-bistuemer-kunstinventar.de

39

The website deutsche-bistuemer-kunstinventar.de represents a specialized non-profit working group dedicated to the inventory and care of ecclesiastical art in German (arch)dioceses. It serves as a professional platform for cultural heritage professionals, offering guidelines, publications, and networking opportunities. The site is built on Joomla CMS with a Sparky framework and uses standard web technologies like jQuery and Bootstrap. It is hosted on servers associated with kasserver.com and enforces HTTPS for secure communication. The website demonstrates good content quality, clear navigation, and mobile optimization, though it lacks explicit contact information and detailed security policies. Privacy compliance is addressed via a cookie consent banner and a privacy policy page. No advertising or tracking beyond essential scripts is detected, indicating a privacy-conscious approach. WHOIS data aligns well with the website's mission and origin, supporting legitimacy and trustworthiness.

S

Sharp Health Plan

sharpmedicareadvantage.com

61

Sharp Health Plan operates as a prominent Medicare Advantage health insurance provider serving primarily San Diego County residents, former Sharp employees, and city retirees. The company positions itself as a high-quality, affordable healthcare plan provider with direct access to Sharp HealthCare, emphasizing its local nonprofit status and strong community ties. The website reflects a mature digital presence with comprehensive plan information, enrollment resources, and wellness programs tailored to Medicare-eligible individuals. Technically, the website is built on the Sitefinity CMS platform and utilizes modern web technologies including jQuery, Bootstrap, Google Tag Manager, and Snowplow Analytics. The site is mobile-optimized, accessible, and SEO-friendly, providing a smooth user experience. However, some improvements could be made in security headers and cookie consent mechanisms to enhance compliance and security posture. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. While no critical vulnerabilities were detected, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and readiness. The missing WHOIS registration data raises questions about domain registration legitimacy, although the professional branding and content quality mitigate immediate concerns. Overall, Sharp Health Plan's website demonstrates a strong business and technical foundation with good security hygiene but would benefit from enhanced privacy compliance features and clearer domain registration transparency to bolster trust and regulatory adherence.

N

National Oceanography Centre

noc.ac.uk

76

The National Oceanography Centre (NOC) is a UK-based independent charitable company focused on advancing oceanographic research, technology development, and education. Established in 1996, it holds a leading position in marine science, managing significant national assets such as research ships and autonomous marine vehicles. The website reflects a mature, well-funded research institution with a clear mission to empower and inspire ocean stewardship. Technically, the site is built on Drupal 10 with modern web technologies, offering good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers and policies could be enhanced. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

S

Svět Stromků

svetstromku.cz

50

Svět Stromků is a Czech Republic-based e-commerce retailer specializing in high-quality artificial Christmas trees and 3D trees, offering over 80 varieties with fast delivery and a large satisfied customer base. The website is built on a modern WordPress and WooCommerce platform, enhanced with SEO tools like Yoast and performance optimizations such as WP Rocket. It integrates comprehensive cookie consent management via Cookiebot and employs multiple marketing and analytics tools including Google Analytics, Facebook Pixel, and Hotjar. Security posture is solid with HTTPS enforced and cookie consent compliance, though additional security headers could improve defenses. No critical vulnerabilities or exposed sensitive data were detected. The domain registration is consistent with the business profile, registered since 2015 with a reputable registrar. Overall, the website presents a professional, trustworthy, and GDPR-compliant online retail presence.

M

Maledivy-Levně.cz

maledivy-levne.cz

42

Maledivy-Levně.cz is a specialized travel agency focused exclusively on providing accommodation and travel services in the Maldives since 2014. The company offers personalized vacation planning including stays on local islands and luxury resorts, combined island and resort packages, yacht cruises, and additional services such as transfers, diving, and wedding ceremonies. Their market position is that of a niche expert with a strong emphasis on customer satisfaction and competitive pricing. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses common plugins for SEO, galleries, and contact forms. The site is well-structured, mobile-optimized, and integrates Google Analytics for tracking. Security posture is good with HTTPS enforced, but lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of WHOIS data limits domain trust verification, but the website content and business information appear professional and trustworthy. Overall, the site presents a solid digital presence with room for improvement in privacy and security transparency.

O

ORION Realit s.r.o.

orionreal.com

10

ORION Realit s.r.o. is a well-established real estate company based in Prague, Czech Republic, with over 30 years of experience. The company specializes in comprehensive real estate services including property sales, rentals, property management, and relocation services. Their market position is strengthened by memberships in international chambers of commerce and a focus on personalized client service. The website reflects a professional and trustworthy business with clear service offerings and contact information. Technically, the website is built on a custom ASP.NET Web Forms platform using Telerik UI components, jQuery, and Bootstrap for responsive design. The site is moderately performant and optimized for mobile devices, with good SEO practices and accessibility at a basic level. The use of Google Fonts and Owl Carousel enhances the user experience. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and DNSSEC is not enabled, which could be improved. No incident response or vulnerability disclosure policies are present, indicating room for enhancement in security transparency. Overall, the website is safe, professional, and reliable for its target audience. The domain registration data supports the legitimacy of the business, with consistent WHOIS information and appropriate domain age. Strategic improvements in security headers and incident response policies would further strengthen the site's security posture.

Ú

Úřad vlády České republiky

tvorimevropu.cz

11

TvorimeEvropu.cz is an official Czech government informational website managed by the Office of the Government of the Czech Republic. It provides comprehensive news, updates, podcasts, and educational content related to the European Union, targeting Czech citizens interested in EU affairs, students, and professionals. The site is well-positioned as a trusted source of EU-related information within the Czech Republic, supported by official branding and government ownership. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular libraries such as jQuery and Font Awesome. It employs SEO best practices via Yoast SEO and includes cookie consent mechanisms compliant with GDPR. The site is mobile-optimized and accessible, with good performance and structured navigation. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent policies. While some security headers are not explicitly detected, the site shows no signs of vulnerabilities or exposed sensitive data. No WAF or blocking mechanisms interfere with content access, indicating a stable security posture. Overall, the website presents a low-risk profile with strong business credibility and compliance. It serves as a professional government portal with high-quality content and user experience. Strategic recommendations include enhancing security headers and maintaining regular updates to ensure ongoing security and compliance.

S

Sharp Health Plan

sharphealthplan.com

64

Sharp Health Plan is a well-established not-for-profit health insurance provider serving San Diego, California since 1992. The company offers a range of health insurance products including individual and family plans, Medicare advantage plans, and group plans. It operates as part of the Sharp HealthCare integrated delivery system, providing members access to a network of medical groups, hospitals, and providers. The website reflects a strong market position with multiple awards and high member ratings, targeting a broad audience including individuals, families, employers, brokers, and providers. Technically, the website is built on the Sitefinity CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Slick Carousel. It integrates analytics tools including Google Tag Manager, Snowplow, and Qualtrics for user tracking and feedback. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. From a security perspective, the site enforces HTTPS and uses secure login and payment mechanisms. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and there is no visible security policy or incident response contact information. Privacy compliance is partially addressed with a comprehensive privacy policy, but lacks a clear cookie consent mechanism. The absence of WHOIS data for the domain is a concern but does not detract significantly from the overall trustworthiness given the strong branding and business presence. Overall, Sharp Health Plan's website demonstrates a mature digital presence with good security posture and business credibility. Strategic improvements in privacy compliance and security header implementation would enhance trust and regulatory adherence.

C

Caritasverband für die Erzdiözese Bamberg e.V.

caritas-fobi.de

54

The website www.caritas-fobi.de represents the Caritasverband für die Erzdiözese Bamberg e.V., a non-profit organization focused on providing professional continuing education and training in social work, care, pedagogy, and administration. The site offers a comprehensive catalog of courses, including in-person, online, and inhouse training, targeting professionals in social and care sectors primarily within the Bamberg diocese region. The organization maintains a solid regional presence with clear contact information and active social media channels. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap, jQuery, and Font Awesome. It is hosted on servers associated with internet1.de, with a moderate performance profile and good mobile optimization. The site implements GDPR-compliant cookie consent via klaro and provides privacy and terms of service pages, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure form submissions but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. The domain registration is consistent with the organization's identity and business claims, supporting a high legitimacy score. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements could include enhancing security headers, publishing incident response and vulnerability disclosure policies, and continuous monitoring of third-party libraries to maintain security posture.

D

Durchstarter - Freiwilliges Schuljahr

durchstarter-fssj.de

41

Durchstarter - Freiwilliges Schuljahr is a German non-profit initiative focused on enabling students from the 8th grade onwards to engage in voluntary social and active school year programs. The website serves as an informational and engagement platform, facilitating connections between students and local social, cultural, and ecological organizations. The organization positions itself as a niche regional player promoting youth voluntary engagement with a clear target audience of school students. Technically, the website is built on a modern stack including Pimcore CMS, Vue.js, Bootstrap, and privacy-focused Matomo analytics, demonstrating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting its non-profit mission effectively.

O

Otto-Friedrich-Universität Bamberg

uni-bamberg.de

65

Otto-Friedrich-Universität Bamberg is a well-established public university in Germany, focusing on humanities, social sciences, and informatics. The website serves students, researchers, and academic staff with comprehensive information about study programs, research initiatives, international cooperation, and university services. The university positions itself as a modern, international, and innovative institution with a strong cultural heritage. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries and is hosted on reputable academic infrastructure. It features responsive design and good accessibility. Security posture is strong with HTTPS, security headers, and privacy-respecting analytics (Matomo). However, explicit security policies and incident response contacts are not published, which could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable source for academic information.

S

Salesianer Don Boscos und Don Bosco Schwestern in Deutschland und Österreich

donbosco-magazin.eu

49

Don Bosco Magazin is a German-language online magazine affiliated with the Salesianer Don Boscos and Don Bosco Sisters in Germany and Austria. It provides family-oriented, religious, and educational content targeting parents, children, and youth connected to the Don Bosco mission. The website features articles, podcasts, newsletters, and free issues, positioning itself as a niche non-profit media outlet within the religious and family education sector. Technically, the site is built on a modern stack including Bootstrap and eZ Platform CMS, with good mobile optimization and moderate performance. Security measures include HTTPS and Google reCAPTCHA integration, alongside a GDPR-compliant cookie consent mechanism. However, the absence of WHOIS data and security headers slightly reduces trustworthiness. Overall, the site is professional, content-rich, and trustworthy for its target audience.

D

Diakonie Baden Freiwilligendienste

freuwillig.de

45

Diakonie Baden Freiwilligendienste operates a professional and well-structured website focused on promoting and facilitating voluntary social services such as FSJ and BFD in the Baden region of Germany. The organization targets young people seeking meaningful engagement and career orientation through volunteer programs. The website content is comprehensive, well-branded, and provides clear pathways for application and information. Technically, the site is built on TYPO3 CMS and integrates modern web technologies including Google Tag Manager, Matomo analytics, and accessibility tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and privacy-respecting analytics, though formal security policies and incident response contacts are not published. Overall, the site demonstrates strong GDPR compliance and trustworthy business credibility, making it a reliable resource for its audience.

ESC S.A. operates the DobryBIP.pl website, offering a specialized Biuletyn Informacji Publicznej (BIP) system tailored for Polish public institutions. The company positions itself as a reliable provider of government-focused software solutions, emphasizing usability, mobile responsiveness, and compliance with accessibility standards. The website features client testimonials and reference letters, reinforcing its credibility in the public sector market. The target audience primarily includes municipal and governmental offices in Poland seeking efficient public information management tools. Technically, the website employs a mix of legacy and modern web technologies including jQuery 1.11.3, Bootstrap, Google Maps API, and Google reCAPTCHA for security on forms. While the design is professional and mobile-optimized, the use of outdated JavaScript libraries presents potential security risks. The site includes a cookie consent mechanism and basic SEO metadata but lacks structured data and comprehensive privacy or terms of service documentation. From a security perspective, the site uses HTTPS and implements Google reCAPTCHA to protect its contact forms. However, no security headers were detected in the provided data, and the outdated jQuery version could expose the site to vulnerabilities. There is no public security policy or incident response information, which limits transparency and preparedness visibility. The WHOIS data aligns well with the website's claims, showing a legitimate registration under ESC S.A. in Poland. Overall, the website is functional, professional, and trustworthy for its niche audience but would benefit from updating its technical stack, enhancing security headers, and publishing comprehensive privacy and security policies to improve compliance and user trust.

Môjinzerát.sk is an online regional advertising platform operated by RegionPress, s.r.o., targeting local businesses and advertisers in Slovakia. The website facilitates easy creation and placement of advertisements across various Slovak regions with multiple campaign packages. It holds a niche position in the Slovak media sector focusing on regional print and online advertising. The platform offers a user-friendly interface with clear navigation and multiple contact options, including forms and phone support. Legal compliance is supported by accessible terms of service and GDPR-related privacy policies.

The website pfarrei-rattelsdorf.de serves as the official online presence of the Catholic parish of Rattelsdorf in Germany. It provides parishioners and visitors with comprehensive information about the parish team, church services, community life, events, and news. The site targets local community members interested in religious and social activities within the parish. The business model is non-profit and community-focused, operating under the Archdiocese of Bamberg. The website content is well-organized, professionally presented, and consistent with the branding of a religious institution.

The Allianz gegen Rechtsextremismus in der Metropolregion Nürnberg is a small non-profit organization dedicated to combating right-wing extremism and promoting democratic values within the Nuremberg metropolitan area. Their website serves as an informational and engagement platform, offering details about their alliance, members, events, and educational initiatives. The organization maintains an active presence on social media platforms such as Facebook and Instagram to reach a broader audience. Technically, the website is built on TYPO3 CMS, leveraging Bootstrap for responsive design and FontAwesome for iconography. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and consistent branding. Hosting appears to be managed by agenturserver, as indicated by the nameservers. From a security perspective, the site uses HTTPS and does not expose sensitive data in the HTML content. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. No vulnerability disclosure or incident response information is publicly available, suggesting areas for improvement in transparency and security readiness. Overall, the website is trustworthy, professionally presented, and aligned with its mission. The domain registration data supports the legitimacy of the organization. Strategic recommendations include implementing security headers, adding cookie consent, publishing security policies, and enhancing privacy compliance to strengthen the site's security posture and user trust.

The website represents the Catholic Adult Education organization in the Archdiocese of Bamberg, Germany, providing educational events, publications, and community projects targeted at adults interested in Catholic education. The organization holds a strong regional position with a clear focus on non-profit educational services. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS, cookie consent, and bot protection via Google reCAPTCHA, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professionally designed, and compliant with GDPR requirements, with no signs of blocking or malicious content.

KEB - Katholische Erwachsenenbildung BA - FO - ERH e.V. is a regional non-profit Catholic adult education association serving the Bamberg, Forchheim, and Erlangen-Höchstadt areas in Germany. The organization provides a variety of educational courses, family education programs, and community events aimed at adult learners and parish members. Their market position is that of a trusted regional educational provider affiliated with the Catholic Church, supported by certifications such as CERTQUA QESplus. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Font Awesome, and Matomo analytics, hosted on servers associated with internet1.de. The site is mobile-optimized, uses HTTPS, and implements a detailed cookie consent mechanism, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS, uses Google reCAPTCHA for bot protection, and provides cookie consent options with anonymous tracking fallback. However, it lacks explicit security headers and a public incident response or vulnerability disclosure policy, which are areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing security policies, and improving accessibility features to further strengthen the security posture and user trust.

E

Entenrennen Nürtingen

entenrennen-nuertingen.de

44

Entenrennen Nürtingen is a small-scale, community-focused non-profit organization that organizes an annual charity duck race event in Nürtingen, Germany. The event supports various local social and youth projects, leveraging partnerships with Lions Clubs and Round Table organizations. The website serves as an informational platform for the event, sponsors, and ticket sales locations. Technically, the site is built on WordPress with common plugins such as Yoast SEO and WPBakery Page Builder, hosted by a German provider (webgo.de). The site is well-structured, mobile-optimized, and uses HTTPS with valid SSL certificates, reflecting a moderate level of digital maturity. Security posture is generally good, though improvements can be made by adding security headers and incident response contacts. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and professional, supporting a reputable local charity event.

L

Landeskomitee der Katholiken in Bayern

gemeinde-creativ.de

43

The website www.gemeinde-creativ.de serves as a platform for engaged Catholics primarily in Bavaria, Germany, operated by the Landeskomitee der Katholiken in Bayern. It offers a digital magazine, resources, and community engagement tools focused on religious education, liturgy, and pastoral work. The platform targets a niche audience of Catholic community members and church workers, positioning itself as a trusted non-profit resource provider. Technically, the site uses a modern front-end stack including Bootstrap, jQuery, and popular JavaScript libraries for UI components and image galleries. Hosting is managed via DomainControl nameservers, likely GoDaddy, with Matomo analytics implemented in a privacy-conscious manner (cookies disabled). The site is mobile-optimized and presents a professional design with clear navigation, though some SEO and accessibility features could be enhanced. From a security perspective, the site uses HTTPS (implied by canonical URLs), but lacks visible security headers and cookie consent mechanisms. No forms are present on the main page, reducing attack surface, but no vulnerability disclosure or incident response policies are published. WHOIS data is minimal but consistent with the organization's profile, showing no suspicious patterns. Overall, the website is a well-maintained, niche non-profit platform with good content quality and business credibility. Security posture is moderate with room for improvement in headers and compliance transparency. Privacy compliance is good given the presence of a privacy policy and minimal tracking. Strategic improvements in security policies and cookie consent would enhance trust and compliance.

R

REGIONPRESS, s.r.o.

regionpress.sk

55

REGIONPRESS, s.r.o. is a Slovak media company specializing in regional newspaper distribution, advertising, printing, and digital marketing services. The company targets businesses seeking regional market penetration across Slovakia, offering a comprehensive suite of services including print advertising, leaflet distribution, online campaigns, IT equipment sales, and printer rentals. The website reflects a solid market position as a leading regional media provider with a broad client base and ISO certification, enhancing its credibility. Technically, the website employs modern web technologies such as Bootstrap 4, jQuery, Mapbox, and Google reCAPTCHA v3, indicating a mature digital infrastructure. The site is mobile-optimized with good SEO practices and moderate performance. The use of OctoberCMS is inferred, suggesting a flexible content management system. From a security perspective, the site enforces HTTPS, integrates anti-bot measures on forms, and maintains GDPR compliance with a detailed privacy policy. However, it lacks explicit security headers like Content-Security-Policy and does not provide a cookie consent mechanism, which are areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website presents a trustworthy and professional digital presence with strong business credibility and compliance posture. Strategic enhancements in security headers and cookie consent would further strengthen its security and privacy stance.

A

Agora Club Tangent Deutschland

agoraclubtangent.de

9

Agora Club Tangent Deutschland is a German non-profit friendship organization for women aged 41 and above, providing a platform for networking, social engagement, and charitable projects. The organization operates through local clubs across Germany and an online E-Club, fostering friendship, tolerance, and active social contribution. The website reflects a well-structured and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the site is built on TYPO3 CMS with Bootstrap and FontAwesome, offering good mobile optimization and accessibility. However, the site lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. No direct contact emails or phone numbers are published, with contact presumably via a form. The WHOIS data is minimal but consistent with the hosting location in Germany, supporting legitimacy. Overall, the website is professional and trustworthy but could enhance its security posture and privacy compliance.

KEB - Katholische Erwachsenenbildung BA - FO - ERH e.V. is a regional non-profit organization focused on adult education within the Catholic community in the Bamberg, Forchheim, and Erlangen-Höchstadt areas of Germany. The website serves as a portal for educational offerings, events, family programs, and community engagement, targeting adults interested in faith-based learning and social activities. The organization holds a recognized certification (CERTQUA QESplus), enhancing its credibility and trustworthiness. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Font Awesome, and multimedia tools like JW Player. It is hosted on servers associated with rzone.de and uses Matomo for analytics with privacy-conscious configurations. The site is mobile-optimized and provides a clear navigation structure, although accessibility features could be improved. From a security perspective, the site enforces HTTPS, uses cookie consent mechanisms, and integrates Google reCAPTCHA to mitigate automated abuse. However, it lacks explicit security headers and a published security policy or incident response contact, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence for a small-sized educational non-profit. Strategic enhancements in security policies and accessibility would further strengthen its posture.

The website mfm-bamberg.de represents the Erzbischöfliches Ordinariat Bamberg's NFP and MFM programs, offering natural family planning education, workshops, and counseling services primarily targeting women, families, and youth within the Bamberg diocese. The site is well-structured, professionally designed, and provides comprehensive information about their offerings, contact details, and privacy practices. Technically, the site uses a modern stack including jQuery, Bootstrap, Matomo analytics, and Google reCAPTCHA, hosted on internet1.de infrastructure. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is strong with clear GDPR-aligned policies and user consent options. Overall, the site is trustworthy, safe, and serves a non-profit educational mission effectively.

U

Univerzita Palackého v Olomouci

univerzitnimesto.cz

41

Univerzitní město is a website representing Univerzita Palackého v Olomouci, a well-established university in the Czech Republic. The site serves as an informational portal for prospective students, offering details about study programs, university activities, open days, and other student-related services. The university positions itself as a key educational institution in the region with a broad offering of over 900 study program combinations. The website is professionally designed with consistent branding and clear navigation, targeting students and their families. Technically, the website employs modern web technologies including Bootstrap, Vue.js, jQuery, and Font Awesome, hosted via a Czech registrar Wedos. It integrates Matomo analytics for user tracking and includes cookie consent mechanisms, indicating attention to privacy compliance. The site is mobile-optimized and performs moderately well, with good SEO practices. From a security perspective, the site uses HTTPS and has cookie consent but lacks explicit security headers and visible security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. Overall, the website presents a strong digital presence for the university with good content quality and business credibility. Recommendations include enhancing security headers, publishing security policies, and providing clearer contact information for security and incident response purposes.

N

Noc vědců

nocvedcu.cz

45

Noc vědců is a well-established Czech non-profit event dedicated to popularizing science among the general public, including children and adults. The website effectively communicates the event's mission, history, and program details, supported by partnerships with universities, science centers, and media outlets. The technical infrastructure uses modern web technologies such as Vue.js, Bootstrap, and Leaflet, hosted on DigitalOcean, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and explicit incident response information. The absence of WHOIS data reduces domain trustworthiness, though the website's content and partnerships strongly indicate legitimacy. Overall, the site is professional, informative, and trustworthy, with room for security and transparency improvements.

Expats.cz is a leading English-language media platform based in the Czech Republic, operated by Howlings s.r.o. The website provides comprehensive news, job listings, real estate information, directories, and newsletters targeted primarily at expatriates and English speakers living in or interested in the Czech Republic. It holds a strong market position as a trusted resource for the expat community, with a professional and consistent brand presence. The company has been operating since 2001, offering a mature and well-maintained digital platform. Technically, the website employs modern web technologies including jQuery, Bootstrap, and integrates multiple third-party marketing and analytics tools such as Google Tag Manager and Facebook Pixel. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks a publicly available security policy or incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The absence of WHOIS data for the domain is a notable gap, slightly impacting trustworthiness, but the visible company registration details and professional content mitigate this concern. Overall, Expats.cz presents a reliable and professional online presence with moderate risk and room for improvement in transparency and security documentation.

A

AudiobookSTORE.com

audiobookstore.com

64

AudiobookSTORE.com is a well-established e-commerce platform specializing in digital audiobook downloads and podcast episodes, serving a general audience primarily in the United States. Founded in 2006 with a domain registered since 2003, the company offers a large catalog of over 200,000 audiobooks and 100 million podcast episodes, accessible via web and mobile apps. The business model focuses on direct digital sales, subscription services like FlexPass™, and gift certificates, positioning itself as a niche player in the digital media retail market. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various analytics and optimization tools such as Google Tag Manager, FullStory, and Visual Website Optimizer. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized with good SEO and accessibility practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protections. However, DNSSEC is not enabled and several important security headers are missing, which could expose the site to certain risks. Privacy compliance is basic with a privacy policy present but lacking explicit cookie consent. No incident response or vulnerability disclosure information is found. Overall, AudiobookSTORE.com demonstrates a solid business and technical foundation with a high trustworthiness rating. Strategic improvements in security headers, DNS security, and privacy compliance would enhance its security posture and regulatory adherence.

C

Cision

cision.de

65

Cision is a leading global provider of media, data, and PR intelligence solutions, offering a comprehensive suite of services including PR software, media monitoring, social listening, and wire distribution. The company targets PR and marketing professionals, providing tools to optimize communication strategies and media outreach. The website is professionally designed, well-structured, and optimized for mobile, reflecting a mature digital presence. Technically, the site leverages modern technologies such as Adobe Experience Manager CMS, Google Tag Manager, and multiple analytics and advertising platforms, hosted behind Cloudflare for performance and security. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not published. Privacy compliance is robust with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the site demonstrates high business credibility and trustworthiness with consistent branding and quality content.

J

JCMM, z. s. p. o.

jsmenadani.cz

48

Jsme nadaní is a Czech Republic based non-profit project operated by JCMM, z. s. p. o., focused on supporting gifted children through identification, counseling, educational activities, and development programs. The website serves parents, schools, and students with resources such as testing, lectures, support groups, and clubs. The project is well integrated with related JCMM services and partner sites, establishing a credible position in the regional educational support sector. Technically, the site uses modern web technologies including Google Tag Manager, Bootstrap, and a Nette-based backend, hosted by Wedos. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and incident response information. Privacy compliance is basic but present, with GDPR-related pages linked. Overall, the site is trustworthy and professionally maintained, though improvements in security policies and contact transparency are recommended.

R

RERA a.s.

rera.cz

49

RERA a.s. is a regional development agency focused on supporting the economic, social, and cultural growth of the South Bohemian Region since 1999. The organization operates as a partnership of regional entities and offers services including conceptual studies, grant application processing, project management, and international cooperation. The website reflects a small-sized, government/non-profit entity with a clear regional focus and a history of international projects. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience, although some backend issues are evident from visible PHP warnings. SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS but lacks visible security headers and exposes a PHP warning, which could leak information. No privacy or cookie policies are present, indicating gaps in compliance with GDPR and other privacy regulations. The absence of WHOIS data reduces domain trustworthiness, although the website content and contact details appear legitimate. Overall, the website is functional and professional but requires improvements in backend error handling, security headers, and privacy compliance to enhance trust and security posture.

The Erzbischöfliches Priesterseminar Bamberg operates as a religious educational institution focused on the formation of Catholic priests within the Archdiocese of Bamberg, Germany. The website serves as an informational portal offering news, spiritual content, and detailed guidance on priestly vocation and formation. It targets individuals discerning a religious vocation and members of the Catholic community. The institution maintains a regional presence with partnerships linking to theological faculties and church-related organizations.

The website nfp-bamberg.de represents a regional non-profit organization affiliated with the Archdiocese of Bamberg, Germany, focused on natural family planning (NFP) and related health education programs (MFM). It offers workshops, counseling, and educational materials targeting women, men, youth, and families. The site is well-structured with clear navigation and professional content tailored to its audience. Technically, it employs a modern tech stack including Bootstrap, jQuery, and Matomo analytics, hosted on servers associated with internet1.de. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Security posture is adequate with HTTPS and reCAPTCHA usage, though security headers could be improved. No blocking or WAF mechanisms interfere with content access.

The website for projekte-erzbistum-bamberg.de serves as the official online presence for the media and project work department of the Archdiocese of Bamberg. It provides comprehensive information about church-related projects, events, publications, and community initiatives primarily targeting the local German-speaking audience. The site is well-structured with clear navigation and professional design, reflecting its role as a regional religious institution with a focus on community engagement and cultural activities. Technically, the website employs a modern technology stack including Bootstrap, jQuery, Font Awesome, and specialized plugins like Revolution Slider and JW Player. It uses Matomo analytics with privacy-conscious configurations and Google reCAPTCHA for bot protection. Hosting is managed via internet1.de nameservers, consistent with the kirche-bamberg.de infrastructure, indicating a stable and legitimate hosting environment. The site is mobile-optimized and accessible, though some accessibility improvements could be made. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. While no explicit security headers were detected in the provided data, the site follows good practices such as anonymized analytics fallback and bot protection. No vulnerabilities or exposed sensitive data were found. However, adding security headers and incident response information would enhance the security posture. Overall, the website presents a low-risk profile with high trustworthiness, suitable for its non-profit religious organizational context. It effectively balances user privacy, content quality, and technical robustness, making it a reliable resource for its audience.

The Diözesanrat im Erzbistum Bamberg is a non-profit, church-affiliated organization representing Catholic laypersons and organizations within the Bamberg archdiocese. It serves as a democratic body supporting the archbishop and coordinating lay activities. The website reflects this mission with clear content, official contact information, and links to related church entities. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Matomo analytics, and Google reCAPTCHA, hosted on a provider consistent with the domain's nameservers. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers. Privacy compliance is strong, with GDPR-aligned cookie consent and a comprehensive privacy policy. Overall, the website is professional, trustworthy, and safe for general audiences.

O

Old Tablers Deutschland

old-tablers-germany.de

40

Old Tablers Deutschland is a well-established non-profit community organization dedicated to former members of Round Table in Germany. The organization focuses on fostering friendships, social engagement, and supporting Round Table family activities through local and international projects. The website reflects a medium-sized organization with a clear mission and a strong network of partner organizations. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, hosted via resellerinterface.de, and is mobile optimized with good SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is partially addressed with a privacy policy but no cookie banner. Overall, the website is professional, trustworthy, and serves its target audience effectively.

R

Round Table Deutschland

round-table.de

37

Round Table Deutschland is a well-established non-profit organization focused on social engagement, friendship, and community service primarily targeting men aged 18 to 40. The organization operates through volunteer efforts, fundraising, and social projects, maintaining a strong presence in Germany with international connections. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Plyr for video playback, hosted on Microsoft Azure DNS infrastructure, ensuring reliable performance and security. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is evident through a dedicated Datenschutz page with cookie consent mechanisms, but terms of service and incident response policies are not found. Overall, the website is trustworthy, safe, and well-maintained, supporting the organization's mission effectively.

S

Stiftung Round Table Deutschland

tablerstiftung.de

44

Stiftung Round Table Deutschland is a German non-profit foundation established in 2006, dedicated to supporting social projects such as child and youth promotion, healthcare, aid for needy people, and disaster relief. It operates closely with Round Table Deutschland, leveraging a network of thousands of volunteers to implement service projects efficiently. The website presents a professional and consistent brand image with clear donation information and contact points, targeting donors, members, and partner organizations. Technically, the site uses modern frontend technologies like Bootstrap and jQuery, is mobile-optimized, and employs HTTPS with basic security practices. However, it lacks explicit security headers and incident response documentation. Privacy and cookie policies are present and GDPR compliant, but no terms of service or vulnerability disclosure policies are found. Overall, the site is trustworthy, safe, and well-suited for its non-profit mission.

The website mesiacvzdelavania.sk currently serves only a default Apache HTTP server test page powered by CentOS, indicating that the site is either under construction or undergoing maintenance. There is no active business content, contact information, or policies published on the site. The domain is registered since 2018 with a valid registrar and no privacy protection, which suggests legitimacy in registration but no active operational presence online. Technically, the site uses Apache HTTP Server on CentOS with Bootstrap and Open Sans font for styling, but lacks modern web features, SEO optimization, and accessibility enhancements. Security posture is weak due to absence of HTTPS and security headers, exposing the site to potential risks. No privacy or cookie policies are present, and no data collection mechanisms or analytics are detected, indicating minimal digital maturity. Overall, the site is low trust and low professionalism with critical gaps in security and compliance.

A

AIR SYSTEM CHIMNEY DESIGN SRL

poujoulat.ro

53

Poujoulat Romania operates as a specialized provider of premium chimney systems imported from France, targeting residential, commercial, and industrial sectors. The company emphasizes quality, safety, and energy efficiency, offering both products and professional installation and consultancy services. The website reflects a well-structured business with a clear market niche in chimney manufacturing and installation within Romania. Technically, the site is built on WordPress with common plugins and libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response disclosures. Privacy and cookie policies are present and GDPR compliant, supporting regional regulatory adherence. Overall, the business presents a credible and professional online presence with strong trust indicators but could improve security practices and transparency in WHOIS data.

ASOCIÁCIA KRAJSKÝCH RÁD MLÁDEŽE (AKRAM) is a Slovak non-profit organization representing regional youth councils. The website serves as a platform to promote youth participation projects, educational activities, and national events targeting youth members of school and regional parliaments. The organization is positioned as a key national youth association with partnerships including IUVENTA, the Ministry of Education of Slovakia, and Erasmus+ programs. The website content is well-structured, professionally designed, and consistent with the organization's mission. Technically, the site is built on WordPress 5.2.23 with common plugins and frameworks such as Bootstrap and jQuery. It enforces HTTPS via a redirect script but lacks advanced security headers. Performance and mobile optimization are moderate to good, with basic accessibility features. SEO is supported by Yoast SEO structured data and meta tags. Security posture is adequate with HTTPS enforced but could be improved by adding security headers and formal privacy and cookie policies. No incident response or vulnerability disclosure information is present. Contact information is limited to a physical address and Facebook link, with no direct email or phone contacts provided. No forms collecting personal data are detected on the main page. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

T

TVN CORPORATE MEDIA

tvn-cm.de

55

TVN CORPORATE MEDIA is a medium-sized German creative agency specializing in effective and creative video campaigns across social media, events, and other communication channels. With nearly 40 years of experience and offices in Hannover and Cologne, they provide comprehensive media production and communication strategy services. The website is built on TYPO3 CMS with modern technologies and integrates GDPR-compliant consent management and analytics tools. Security posture is solid with HTTPS and no visible vulnerabilities, though some security policies and incident response information are absent. Overall, the site is professional, trustworthy, and well-optimized for users and search engines.

W

WPK Weihnachtspäckchenkonvoi gGmbH

weihnachtspaeckchenkonvoi.de

39

The Weihnachtspäckchenkonvoi is a German non-profit organization dedicated to delivering Christmas gifts to needy children in remote and rural areas of Eastern Europe. The organization operates under the motto 'Children help Children' and is supported by volunteer groups such as Round Table, Ladies’ Circle, Old Table, and Tangent Club. Their website serves as an information hub for donors, volunteers, and partners, providing details about the campaign, donation options, and collection points. The organization has a solid market position within the charitable sector in Germany, with a medium-sized operational scale and a strong community and sponsor network. Technically, the website is built on WordPress with a modern tech stack including popular plugins like Yoast SEO, WPBakery Page Builder, and Slider Revolution. It is hosted on kasserver.com and uses HTTPS with good SSL configuration. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility could be improved. Security practices are generally good, with HTTPS enforced and spam protection on forms, but additional security headers and a vulnerability disclosure policy would enhance the security posture. Overall, the website is professional, trustworthy, and compliant with GDPR, featuring comprehensive privacy and cookie policies. No critical security issues or suspicious activities were detected. The organization demonstrates transparency and engagement through social media and sponsor displays, reinforcing its credibility and community trust.

Opito Streaming, operated by Opito Labs GmbH, is a German-based professional streaming and live event production service provider founded in 2020. The company offers a comprehensive portfolio including full-service congress and conference streaming, live remote connections, pre-recording, live on-site production, hybrid events, and scalable streaming solutions with real-time recordings and video-on-demand. Their market position is that of a leading streaming expert with over 20 years of experience in the broader media and event production industry, targeting businesses and organizations requiring professional streaming services. Technically, the website employs modern front-end technologies such as Bootstrap, Material Design Bootstrap, Font Awesome, and jQuery, hosted by Hetzner Online GmbH. The site is mobile optimized with good design and user experience, though SEO and accessibility are basic. Analytics usage is minimal with Google Analytics scripts commented out, indicating a low level of user tracking. From a security perspective, the site lacks visible HTTPS confirmation in the provided data and does not implement common security headers, which lowers its security posture. No privacy or cookie policies are present, indicating gaps in GDPR compliance. Contact information is clearly provided, but no incident response or security policy details are available. Overall, the website is professional and trustworthy in business presentation but requires improvements in security best practices and privacy compliance to enhance trust and reduce risk. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, implementing security headers, and establishing vulnerability disclosure mechanisms.

D

deinetickets.de

deinetickets.de

46

deinetickets.de is a German-based online ticketing platform offering a comprehensive all-in-one solution for event organizers, including ticket and merchandise sales, shipping logistics, and admission management. The company targets event organizers across various sectors such as concerts, festivals, trade fairs, and entertainment venues, leveraging over 12 years of industry experience. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content to its audience. Technically, the site uses modern libraries like jQuery, Bootstrap, and GSAP for animations, ensuring a responsive and engaging user experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, though it lacks published security policies and advanced security headers. Overall, the website demonstrates a solid security posture with room for improvement in formal security documentation and incident response readiness. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

R

Radio Nordseewelle GmbH & Co. KG

nordseewelle2.de

46

NORDSEEWELLE 2 is a regional German radio station specializing in classic rock, pop, and disco hits from the 70s to 90s, targeting listeners primarily in the northwest of Niedersachsen. The station offers broadcast via DAB+ and online streaming through various platforms including Alexa and its own app. The website is professionally designed using TYPO3 CMS and Bootstrap, providing a responsive and user-friendly experience. It includes event promotion and a music community engagement section. From a technical perspective, the site is well-structured with modern web technologies and implements a cookie consent mechanism compliant with GDPR requirements. Security posture is adequate with HTTPS enforced, though additional security headers and explicit policies could enhance protection. No critical vulnerabilities or blocking mechanisms were detected, indicating stable accessibility and trustworthiness.

N

nova GmbH

kirche-im-swr.de

48

Kirche im SWR is a German religious media platform operated under the auspices of the SWR broadcasting network, providing Evangelical and Catholic radio and TV content, manuscripts, and program schedules. The website targets German-speaking Christian audiences interested in faith-based media content. The business operates as a non-profit media entity with a clear focus on religious broadcasting and community engagement. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Matomo analytics, with a CMS likely based on n2cms. The website is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers are not explicitly detected. Privacy compliance is good, with GDPR-aligned cookie management and a privacy policy accessible via the imprint page. Contact information is transparent, including physical addresses and phone numbers. Overall, the site is trustworthy and professionally maintained.

D

Diakonisches Werk Baden

diakonie-baden.de

42

Diakonie Baden is a leading non-profit social welfare organization in Baden-Württemberg, Germany, affiliated with the Evangelical Church. The website provides comprehensive information about their social services, including care, migration support, family services, and volunteer opportunities. The organization targets individuals in need, volunteers, and social institutions, positioning itself as a key player in the regional social welfare sector. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery, Bootstrap, and various UI libraries, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to social causes.