Security Directory

S

Saaletalbad Hammelburg

saaletalbad.de

53

Saaletalbad Hammelburg operates as a local leisure and wellness facility in Germany, offering indoor and outdoor swimming pools, sauna services, a bistro, and various courses and offers. The website targets local residents and visitors seeking recreational swimming and wellness experiences. The business model is centered on paid access to these facilities and related services. The website is built on Joomla CMS with a professional design and clear navigation, supporting a good user experience and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-maintained, suitable for its audience and business purpose.

E

Energieversorgung Lohr-Karlstadt und Umgebung GmbH & Co. KG

die-energie.de

48

Energieversorgung Lohr-Karlstadt und Umgebung GmbH & Co. KG is a regional municipal energy provider based in Karlstadt, Germany, serving over 90,000 customers with electricity, natural gas, water, and heating services. The company emphasizes sustainability and innovation, actively promoting renewable energy solutions such as photovoltaic systems and electric mobility infrastructure. Their market position is that of a trusted regional supplier with a strong community focus and comprehensive service offerings for both private and business customers. Technically, the website is built on TYPO3 CMS with modern frameworks and integrates multiple analytics and marketing tools while maintaining GDPR compliance through Usercentrics consent management. Security posture is solid with HTTPS, reCAPTCHA, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is professional, well-structured, and trustworthy, reflecting a mature digital presence aligned with the company's business goals.

The website at vgem-zellingen.info currently presents no accessible content, metadata, or business information, indicating it may be blocked, under construction, or abandoned. The lack of WHOIS data due to unsupported TLD and privacy protection further complicates trust and legitimacy assessments. The absence of HTTPS and security headers exposes the site to potential risks if content were to be added. Overall, the digital maturity is very low with no visible compliance or security measures in place.

G

Grundschule Thüngen

grundschule-thuengen.de

39

Grundschule Thüngen is a local primary school in Germany focused on providing foundational education with a bilingual emphasis. The website serves as an information portal for parents and the community, highlighting the school's values, services, and contact details. Technically, the site is built on WordPress using the Avada theme and several popular plugins, indicating a moderate level of digital maturity. The presence of a PWA plugin suggests some modern web capabilities. Security posture is adequate with HTTPS enforced and GDPR compliance evident, though minor issues such as visible debug notices and lack of security headers reduce the overall security score. No WAF or blocking mechanisms interfere with content access. Overall, the site is professional, trustworthy, and well-suited for its educational purpose.

The website ffw-thuengen.de currently serves as a placeholder page with a simple message in German indicating that a new website is under construction. There is no substantive business information, services, or contact details provided. The domain is hosted with netcup as indicated by the nameservers, suggesting a German hosting provider. The digital maturity of the site is minimal, lacking any modern web technologies, SEO, or accessibility features. Security posture is weak or unknown due to absence of HTTPS confirmation and security headers. No privacy or cookie policies are present, indicating non-compliance with GDPR requirements. Overall, the site presents a low trust profile and minimal business credibility.

The website somas.lv currently hosts an extremely minimal web page with only a simple heading 'It's Jason' and a page title referencing 'Jason Davis - Buffalo, New York'. There is no substantive business information, contact details, or service descriptions available. The domain is active and uses Cloudflare nameservers, but no SSL or security headers are detected from the provided data. The lack of privacy, cookie, or terms of service policies, combined with no contact or legal information, indicates the site is either a placeholder or under development. This severely limits the ability to assess the business or security posture meaningfully. From a technical perspective, the site lacks modern SEO, accessibility, and performance optimizations. No analytics, tracking, or advertising technologies are detected. Security posture is weak due to missing HTTPS and security headers, and no incident response or vulnerability disclosure mechanisms are present. Overall, the site presents a low trust profile with minimal content and no compliance indicators. The domain registration appears consistent but provides no additional legitimacy signals. Strategic recommendations include implementing HTTPS, publishing privacy and cookie policies, adding contact and business information, and improving content quality to enhance trust and security. Given the current state, the risk is moderate due to lack of information and security controls, but no explicit vulnerabilities or malicious indicators are found.

O

OFFICE & FRIENDS

office-and-friends.de

10

OFFICE & FRIENDS is a regional coworking space provider based in Germany, offering a variety of services including workspaces, meeting rooms, event spaces, and podcast studios. The company targets freelancers, startups, and entrepreneurs primarily in the Südwestfalen region. They maintain a partnership with CoWorkLand to support coworking initiatives in rural areas. The website is built on WordPress using Elementor and includes modern cookie consent mechanisms compliant with GDPR. Social media presence is active on Instagram and Facebook. The company appears well-established since 2017 with a clear regional focus. Technically, the website uses a standard WordPress CMS with Borlabs Cookie for privacy compliance and WP Statistics for analytics. Hosting is provided by agenturserver, indicated by the nameservers. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy policies and cookie consent are comprehensive and transparent. Overall, the security posture is solid with no critical vulnerabilities detected. The site lacks explicit security or incident response policies but maintains good privacy compliance. The domain WHOIS data is consistent with the website content and business claims, indicating legitimacy. No WAF or blocking mechanisms interfere with content access. Strategically, OFFICE & FRIENDS should consider publishing explicit security policies and incident response contacts to enhance trust. Improving security headers and ongoing plugin updates will further strengthen security. The company’s regional niche and partnership ecosystem position it well for growth in the coworking market.

M

Masuria Living

masurialiving.com

10

Masuria Living is a Polish company specializing in the manufacturing and retail of premium outdoor grills, fire pits, and related accessories. Founded in 2020, the company emphasizes quality craftsmanship with products made in the EU, supported by design awards and certifications. Their website is multilingual and professionally designed, targeting consumers interested in outdoor cooking and garden products. Technically, the site is built on WordPress with Oxygen builder, integrating modern analytics and live chat tools, and shows good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and DNSSEC are missing. No critical vulnerabilities or privacy compliance issues were detected. Overall, the domain registration and website content are consistent and trustworthy, positioning Masuria Living as a credible medium-sized manufacturer and retailer in their niche.

G

Garpa Garten & Park Einrichtungen GmbH

garpa.de

11

Garpa Garten & Park Einrichtungen GmbH is a German-based premium retailer specializing in exclusive garden and luxury outdoor furniture. The company offers a wide range of weatherproof and high-quality terrace furniture, targeting consumers and professionals seeking premium outdoor living solutions. Their business model combines e-commerce with physical showrooms located in attractive European locations, emphasizing personalized consultation, delivery, and assembly services. The website reflects a strong market position in the niche of luxury garden furniture with trust signals such as long warranties and certified materials. Technically, the website employs modern web technologies including Google Tag Manager, Matomo analytics, and lazy loading for images, ensuring good performance and mobile optimization. The site is well-structured with comprehensive metadata and SEO optimization. Privacy compliance is robust, featuring a detailed cookie consent mechanism and a comprehensive privacy policy in German. However, no explicit security policy or incident response information is published. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. The cookie consent mechanism is granular and GDPR compliant. The absence of security headers and a vulnerability disclosure policy are areas for improvement. WHOIS data is consistent and trustworthy, with no privacy protection masking registrant details, supporting the legitimacy of the domain. Overall, Garpa.de presents a professional, secure, and privacy-conscious online presence suitable for its premium retail market. Strategic improvements in security policy transparency and header implementation could further enhance trust and security posture.

The website www.shop-lunaplant.de is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct access to its content. This prevents extraction of meaningful business, contact, or policy information. The domain is hosted on Jimdo as indicated by its nameservers, suggesting a small business or personal site. The lack of visible content and metadata limits the ability to assess the company's market position, services, or compliance posture. Technically, the site relies on Cloudflare for security and CDN services but does not expose security headers or SSL details in the accessible content. Overall, the security posture cannot be fully evaluated due to the blocking mechanism, and the site lacks visible privacy or cookie policies, impacting compliance assessment.

The website www.shop-lunaplant.de is currently inaccessible beyond a Cloudflare Turnstile security challenge page, preventing access to any substantive content. The domain is hosted on Jimdo platform as indicated by the name servers, but no business or contact information is visible. Due to the WAF challenge, no privacy, cookie, or terms of service policies are detectable, and no forms or data collection mechanisms are present. The technical infrastructure relies on Cloudflare for security and performance, but no further technical or security details are available. The security posture cannot be fully assessed due to the content block, but the lack of visible security headers or SSL details is noted. Overall, the website's digital maturity and business credibility cannot be established from the available data.

M

Moralis

moralis.io

11

Moralis is an established enterprise-grade Web3 API platform that bridges Web2 and Web3 development by providing fast, reliable blockchain data access and tooling. With a domain age of over 20 years and a strong market presence, Moralis serves a broad audience including developers, enterprises, and blockchain projects. Their offerings include data APIs, real-time streams, data export solutions, and custom indexing, supported by SOC 2 Type II certification and partnerships with major blockchain entities. The website demonstrates excellent content quality, professional design, and strong SEO optimization, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and compliance certifications, though improvements such as DNSSEC and enhanced security headers are recommended. Privacy compliance is limited due to missing explicit privacy and cookie policies. Overall, Moralis presents a trustworthy and professional platform with a strong business model and technical foundation.

Kongregation der Hedwigschwestern e. V. is a small non-profit religious organization based in Berlin, Germany, providing community and spiritual services. The website is built on WordPress using the Twenty Fourteen theme and incorporates modern cookie consent mechanisms to comply with GDPR. The technical infrastructure is standard for small organizations, with moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and standard security headers present, although no explicit security policy or incident response information is published. The website maintains good privacy compliance with a comprehensive privacy policy and cookie consent banner. Overall, the site is trustworthy and professional, targeting a general audience interested in religious and community services.

P

§25/11: Der neue Paragraph gegen häusliche Gewalt

paragraph2511.de

9

The website paragraph2511.de is a German-language advocacy platform focused on promoting a new legal paragraph (§25/11) aimed at combating domestic violence within shared housing communities. The site targets German-speaking residents and stakeholders interested in housing safety and social respect. It leverages WordPress CMS with Elementor and Yoast SEO plugins, indicating a moderate level of digital maturity and SEO awareness. The presence of partner logos from established housing companies like Vonovia and Charlottenburger Baugenossenschaft suggests credible partnerships and community engagement. Technically, the site is hosted on Schlundtech servers, a reputable German hosting provider, and employs HTTPS with Google reCAPTCHA v3 for form security. However, the absence of explicit privacy and cookie policies and missing security headers indicate areas for compliance and security improvement. Overall, the site presents a professional and focused advocacy platform with moderate technical and security posture.

D

das agnes is under construction

das-agnes.de

35

The website das-agnes.de is currently under construction and displays a placeholder page indicating ongoing work. There is no business description, contact information, or legal policies available, which limits the ability to assess the company's market position or services. The site uses WordPress with an under construction plugin and includes standard web fonts and CSS frameworks such as Bootstrap and Font Awesome. No advanced technical or security features are evident. Security posture is minimal with no detected security headers or incident response information. The lack of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Overall, the site presents a low trust profile and limited business credibility due to the absence of meaningful content and contact details.

U

Up Česká republika s.r.o.

upcz.cz

57

Up Česká republika s.r.o. operates a professional website focused on providing modern employee benefits solutions in the Czech Republic. The company positions itself as a key player in the employee benefits market, targeting businesses seeking to improve workplace relations and employee engagement. The website content is well-structured, professionally designed, and optimized for SEO, reflecting a mature digital presence. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager, Cookiebot for consent management, and Mluvii for customer interaction, indicating a solid infrastructure. Security posture is strong with HTTPS enforced and appropriate security headers, though no explicit security or incident response policies are published. Privacy compliance is supported by a detailed cookie consent mechanism, but a formal privacy policy page was not detected in the provided content. Overall, the site is safe, trustworthy, and business-oriented with no adult or questionable content. The lack of WHOIS data limits transparency but does not raise immediate concerns. Strategic recommendations include publishing privacy and security policies, enhancing accessibility, and adding direct contact information for improved trust and compliance.

D

Dare to be Grey

daretobegrey.com

58

Dare to be Grey is a small media platform focused on providing a space for refreshing perspectives, challenging opinions, and personal stories aimed at countering polarisation in society. The website targets a general audience interested in nuanced social commentary and community storytelling. The platform operates on Squarespace, leveraging its CMS and hosting services, and integrates common analytics and marketing tools such as Google Analytics and Facebook Pixel. The site is well-designed with good mobile optimization and clear navigation, though it lacks comprehensive privacy and security policies. Security posture is moderate with HTTPS enabled but missing several important security headers. The absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Overall, the website is functional and professional but would benefit from enhanced security practices and clearer compliance documentation.

T

Textgain

textgain.com

67

Textgain is a technology company specializing in AI-powered text analysis services, offering solutions such as sentiment analysis, emotion detection, and language classification. Their website is built using modern web technologies including React (Frontity) and WordPress CMS, with integration of cookie consent management and Google Tag Manager for analytics. The site is accessible, mobile-optimized, and professionally designed, targeting businesses and developers seeking advanced text analytics capabilities. However, the absence of WHOIS registration data raises questions about domain registration transparency. Security posture is generally good with HTTPS and cookie consent implemented, but lacks visible security headers and formal security policies. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website presents a professional and trustworthy front but would benefit from enhanced transparency and security documentation.

H

Hotel Saffron

hotelsaffron.sk

56

Hotel Saffron is a well-established business and congress hotel located in Bratislava, Slovakia, offering a range of hospitality services including accommodation, conference facilities, restaurant dining, and event hosting. The hotel targets business travelers, conference attendees, and tourists seeking quality lodging and event spaces. The website reflects a medium-sized hospitality business with consistent branding and clear service offerings. Technically, the site uses a custom CMS by HORECA GROUP and incorporates common JavaScript libraries such as jQuery, WOW.js, and Owl Carousel. The site is mobile optimized and provides a good user experience, though some technical improvements are needed, particularly regarding the Google Maps API integration and updating legacy libraries. Security posture is generally good with HTTPS and DNSSEC enabled, but lacks some security headers and explicit security policies. Privacy compliance is well addressed with GDPR documentation and cookie consent mechanisms. Overall, the website is professional and trustworthy, supporting the business's credibility in the hospitality market.

E

European Observatory of Online Hate

eooh.eu

64

The European Observatory of Online Hate (EOOH) is a specialized non-profit organization focused on using artificial intelligence to identify, analyze, and combat online hate speech across Europe. The website serves as a platform to publish reports, articles, podcasts, and events related to online hate speech trends and narratives. The organization targets researchers, policymakers, NGOs, and the general public interested in digital hate speech monitoring. Technically, the website is built on the Squarespace platform, leveraging modern web fonts and embedded data visualizations via Flourish Studio. The site is mobile-optimized with good SEO practices but could improve accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, security headers like HSTS and CSP are missing, which are recommended for enhanced protection. No privacy policy or terms of service pages were found, which is a compliance gap. The domain registration is consistent and legitimate, registered via a reputable registrar in the Netherlands, aligning with the website's European focus. Overall, the website is professional, trustworthy, and safe for general audiences.

S

Strong Cities Network

strongcitiesnetwork.org

69

Strong Cities Network is a well-established global non-profit network founded in 2015, dedicated to helping cities address hate, extremism, and social polarization. The organization operates a collaborative platform for over 270 cities worldwide, providing resources, regional hubs, and events to support local action. Their market position is strong within the government and non-profit sectors, focusing on social cohesion and extremism prevention. Technically, the website is built on WordPress with modern plugins for SEO, multilingual support, and cookie consent management, hosted on a reputable provider with Cloudflare DNS. The site demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, domain locking, and cookie consent, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is robust with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website is professional, trustworthy, and serves its target audience effectively.

B

Bell & Hurry

bellhurry.com

70

Bell & Hurry is a specialized design consultancy focused on creating digital products and services primarily for the finance, insurance, telecommunications, and energy sectors. The company positions itself as an expert partner to improve business and customer experience in these industries. Their website reflects a professional and modern digital presence, leveraging Webflow for content management and integrating advanced analytics and marketing tools such as Google Analytics, Hotjar, and Cookiebot for privacy compliance and user insights. The site is well-structured, mobile-optimized, and provides a comprehensive cookie consent mechanism, demonstrating a commitment to GDPR compliance. However, the absence of publicly available WHOIS registration data and lack of explicit contact information or security policies slightly reduce the overall trustworthiness from a security and compliance perspective. The website's security posture is strong with HTTPS enforced and no visible vulnerabilities, but could benefit from additional explicit security headers and published incident response contacts. Overall, Bell & Hurry presents a credible and professional digital front with room for improvement in transparency and security documentation.

The European Association for the Education of Adults (EAEA) is a well-established non-profit organization founded in 1999, serving as the voice of non-formal adult education across Europe. It provides advocacy, capacity building, training programs, and policy influence to support adult learners and education providers. The organization maintains a strong market position within the European education sector, supported by EU funding and a transparent governance structure. The website reflects a professional and consistent brand image, targeting adult learners, educators, and policymakers.

H

Hülskens Liebersee GmbH & Co. KG

huelskens-liebersee.de

51

Hülskens Liebersee GmbH & Co. KG operates as a regional supplier of high-quality sand and gravel products primarily serving the construction and concrete industries in Germany, specifically in the regions of Sachsen and Brandenburg. The company emphasizes product quality, reliable delivery, and partnership with customers. The website is professionally designed using the Contao CMS platform and hosted on agenturserver infrastructure. It features comprehensive product information, downloadable resources, and career opportunities, reflecting a mature digital presence. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks explicit security policies or vulnerability disclosures. No significant vulnerabilities or tracking technologies were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy and well-aligned with the business's operational scope and regional market.

H

Hülskens Barleben GmbH & Co. KG

huelskens-barleben.de

51

Hülskens Barleben GmbH & Co. KG is a medium-sized German company specializing in the extraction and supply of construction materials, primarily sand and gravel, for public and private building projects. The company operates multiple sites and offers a comprehensive product range including standard and specialized aggregates. Their business model focuses on providing a full supply chain solution from extraction to delivery via truck and ship, positioning them as a reliable regional partner within the construction materials industry. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to construction professionals and clients. Technically, the website is built on the Contao Open Source CMS platform, utilizing common JavaScript libraries such as jQuery and Colorbox for UI enhancements. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are adequately implemented through meta tags and structured navigation. The absence of heavy analytics or tracking scripts suggests a privacy-conscious approach. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a dedicated security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is consistent with the business identity, supporting domain legitimacy. Overall, the website presents a trustworthy and professional digital presence for Hülskens Barleben GmbH & Co. KG, with solid business credibility and privacy compliance. Strategic enhancements in security headers and incident response transparency would further strengthen their security posture.

K

Katholische Studierendengemeinde Greifswald

ksg-greifswald.de

55

Katholische Studierendengemeinde Greifswald (KSG Greifswald) is a small non-profit religious community serving students in Greifswald, Germany. The organization offers weekly religious services, communal meals, and events focused on spiritual, social, and academic topics. The website is built on WordPress using the Enfold theme and integrates event management via The Events Calendar plugin. The technical infrastructure is modern and adequate for the organization's needs, hosted on RZone servers. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or security policies are published. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-targeted to its audience.

K

Katholische Kirchengemeinde Heilig Kreuz

heilig-kreuz-ffo.de

47

The website represents the Katholische Kirchengemeinde Heilig Kreuz, a Catholic church community located in Frankfurt (Oder), Germany. It serves as an information and communication platform for parishioners and the local community, offering details on religious services, community events, youth programs, and kindergarten services. The site is positioned as a trusted local religious institution with a clear focus on community engagement and spiritual care. Technically, the website is built on TYPO3 CMS, utilizing jQuery and other JavaScript libraries for enhanced user experience. It features a responsive design with good accessibility and SEO practices. Privacy is respected through a comprehensive cookie consent mechanism that blocks third-party content like YouTube videos until user consent is given, aligning with GDPR requirements. From a security perspective, the site enforces HTTPS and employs cookie consent controls to manage user data privacy. However, it lacks explicit security headers and formal security or incident response policies. No vulnerabilities or suspicious activities were detected in the content or domain registration data, which aligns well with the church's legitimate and transparent operations. Overall, the website demonstrates a solid balance of content quality, technical implementation, privacy compliance, and business credibility, making it a reliable and professional digital presence for the church community.

K

Katholische Studierendengemeinde Edith Stein

ksg-berlin.de

44

KSG Edith Stein Berlin is a Catholic student community organization based in Berlin, Germany, focused on providing spiritual guidance, social events, and advisory services to students. The website serves as a hub for community engagement, event announcements, and contact information, targeting students and university communities in Berlin. The organization operates as a non-profit entity with a clear mission to support student life through faith-based and social activities. Technically, the website is built on WordPress using the Enfold theme, incorporating modern web technologies such as jQuery and Google Fonts. It is hosted on NSHost2 name servers and employs HTTPS for secure communication. The site demonstrates good digital maturity with mobile optimization, clear navigation, and integration of social media channels. Security posture is solid with HTTPS and secure form handling, though it lacks advanced security headers and explicit security policies. Privacy compliance is evident with a privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website is professional, trustworthy, and well-maintained, serving its community effectively.

F

Fort- und Weiterbildung Freising

theologischefortbildung.de

51

Fort- und Weiterbildung Freising is a specialized educational institution providing continuing education and training services primarily for church employees in Germany. The organization offers a broad range of events, workshops, and further education programs focused on theological and pastoral topics, positioning itself as a regional leader in this niche. The website reflects a professional and consistent brand image, targeting a well-defined audience with clear service offerings. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and several JavaScript libraries to enhance user experience and interactivity. The site is mobile-optimized and features good navigation and SEO practices. However, there is no evidence of a common CMS, suggesting a custom or bespoke platform. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. However, explicit security headers and incident response policies are not publicly visible, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy standards. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic improvements in security policy transparency and technical security controls would further strengthen the site's security and compliance standing.

The domain iregister.net is registered since 2002 with Dynadot Inc and is currently active with no privacy protection. However, the website content is completely empty with no metadata, no visible text, no forms, no contact information, and no security or privacy policies. This indicates the website is either inactive, under construction, or blocked. The lack of HTTPS and security headers further reduces the security posture. There are no indications of business operations or services offered on the site. Overall, the digital maturity is very low, and the site does not provide any trust or compliance signals.

S

solidpixels.

lokalove.cz

57

Lokálové.cz is a Czech platform dedicated to promoting local food producers and sustainable agriculture. It offers consumers access to stories, maps, and recipes related to local products, while providing producers with membership and collaboration opportunities. The website is professionally designed, mobile-optimized, and uses modern web technologies including solidpixels CMS, Google Tag Manager, and Facebook Pixel for analytics and marketing. Security posture is generally good with HTTPS and secure forms, but lacks advanced security headers and incident response information. Privacy and cookie policies are missing, which is a compliance gap. WHOIS data is unavailable, limiting domain legitimacy verification. Overall, the site serves a niche market with a focus on quality and sustainability in local food production.

S

Stiftung Freie Gemeinschaftsbank

stiftungfgb.ch

53

Stiftung Freie Gemeinschaftsbank is a Swiss non-profit foundation dedicated to supporting innovative projects in society, environment, and culture. With over 20 years of experience, it operates both as a Förderstiftung providing financial support and as a Dachstiftung managing numerous sub-foundations and project funds. The foundation is financed primarily through donations and offers transparent contact and donation information on its website. Technically, the website employs modern JavaScript technologies, privacy-respecting analytics (Matomo), and consent management tools, ensuring compliance with GDPR and cookie regulations. Security posture is solid with HTTPS and reCAPTCHA usage, though it lacks explicit security policies and headers. Overall, the site is professional, trustworthy, and well-optimized for mobile users.

D

Demeter CS

zivezemedelstvi.cz

44

Živé zemědělství is a Czech language specialized online magazine focused on sustainable, ecological, biodynamic, permaculture, and regenerative agriculture. It serves as an information hub providing articles, event calendars, and symposium information targeting farmers, ecological practitioners, and the broader agricultural community interested in sustainable practices. The website is professionally designed with consistent branding and clear navigation, supported by a small but focused team or organization linked to Demeter CS. Technically, the site is built on WordPress with modern plugins including GDPR compliance tools and reCAPTCHA for security. The hosting appears to be Czech-based, aligning with the target audience. Security posture is good with HTTPS and spam protection, though some HTTP security headers could be improved. Privacy compliance is strong with clear policies and cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves a niche market effectively.

D

Demeter

demetercs.eu

54

The website www.demetercs.eu represents a business entity named Demeter, likely operating in the Czech Republic. The site is built on the Wix platform and uses standard Wix technologies including Wix Thunderbolt, Google Analytics, and Facebook Pixel for tracking. The content is minimal and primarily technical, with no explicit business description or detailed services presented. No contact information or privacy policies are found, which limits transparency and user trust. The WHOIS data is unavailable or privacy protected, which further reduces the ability to verify the domain's legitimacy. Security posture is basic with no advanced headers or policies detected, and privacy compliance is poor due to missing policies and consent mechanisms. Overall, the site appears functional but lacks critical business and compliance information, which poses risks for trust and regulatory adherence.

S

Software AG – Stiftung

sagst.de

49

The Software AG – Stiftung is a large, well-established non-profit foundation based in Germany, focused on funding social, educational, and ecological projects primarily in Germany and Europe. The website is professionally designed using TYPO3 CMS, with a clear structure, multilingual support, and strong privacy compliance including GDPR-aligned cookie consent via Klaro and Matomo analytics. The foundation's significant capital and project portfolio position it as a key player in the German non-profit sector. Technically, the site uses mature technologies and demonstrates good mobile optimization and accessibility, though security headers and explicit security policies are not publicly visible. No blocking or WAF mechanisms interfere with content access, and no suspicious or malicious content is detected.

S

Error

sofarm.cz

47

The domain sofarm.cz is registered since late 2020 and currently resolves to a Wix-hosted error page indicating the domain is not connected to any active website. No business content, contact information, or policies are present on the page, which limits the ability to assess the company's operations or market position. The website uses AngularJS and jQuery libraries served by Wix's infrastructure, indicating a standard Wix platform deployment. Security posture is minimal with no visible security headers or advanced configurations, and no analytics or tracking scripts are detected. The domain registration data is consistent with a Czech registrar and hosting provider, but the lack of an active website reduces trust and credibility. Overall, the site is effectively inaccessible for meaningful analysis and scores low on content quality, privacy compliance, and business credibility.

N

Netzwerk Biodynamische Bildung gGmbH

netzwerk-biodynamische-bildung.de

41

Netzwerk Biodynamische Bildung gGmbH is a German non-profit organization that unites Demeter training initiatives to promote biodynamic agricultural education. The website serves as an information hub and fundraising platform, operating the Demeter Ausbildungsfonds to support new organic farmers. The organization targets aspiring biolandwirte, educational institutions, and supporters of sustainable agriculture. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Borlabs Cookie, hosted on kasserver.com. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and explicit security policies. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is professional, trustworthy, and aligned with its non-profit mission.

A

Asociace místních potravinových iniciativ, o.p.s.

asociaceampi.cz

44

Asociace místních potravinových iniciativ, o.p.s. is a Czech non-profit organization dedicated to fostering a close relationship between people and the land that sustains them. The organization focuses on educational programs for schools and communities about food, agriculture, and sustainable land use. It also supports community-supported agriculture and local food systems, positioning itself as a niche leader in ecological and community food initiatives within the Czech Republic. The website is professionally designed, content-rich, and targets educators, schools, and local communities. Technically, the site is built on WordPress with common plugins and tracking tools such as Google Analytics and Facebook Pixel, showing moderate digital maturity. Security posture is good with HTTPS enforced, but lacks some security headers and visible privacy compliance documentation. Overall, the site is safe, trustworthy, and well-maintained, though improvements in privacy policy visibility and security headers are recommended.

S

St. Elisabeth Caritassozialstation

ambulante-pflege-detmold.de

55

St. Elisabeth Caritassozialstation is a small healthcare provider specializing in ambulatory nursing and care services in Detmold, Germany. Their offerings include elderly care, treatment nursing, family care, household support, and emergency call services. The organization operates under the St. Elisabeth Stiftung, reflecting a Christian humanistic approach to care. The website is professionally designed using WordPress with modern SEO tools, providing clear and relevant content targeted at individuals and families requiring ambulatory care services. Technical infrastructure is solid with HTTPS and modern libraries, though hosting details are not explicit. Security posture is good with no visible vulnerabilities, but lacks explicit security policies and cookie consent mechanisms. Overall, the site is trustworthy and well-positioned in its regional healthcare market.

The BKC-Spendenportal website serves as an online donation platform operated by the Bank für Kirche und Caritas eG, targeting charitable organizations primarily within the church and caritas sectors in Germany. It facilitates the connection between donors and charitable projects, providing a streamlined platform for online donations. The website is professionally designed with clear navigation and content relevant to its audience, emphasizing transparency and trust through visible contact information and testimonials. Technically, the site is built on the Contao Open Source CMS and leverages common JavaScript libraries such as jQuery, Colorbox, and Isotope for enhanced user experience. Hosting is provided by Schlundtech, a reputable German hosting provider. The site demonstrates good mobile optimization and SEO practices, although performance is moderate rather than fast. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security policies, incident response contacts, and advanced security headers, which are recommended for improved security posture. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the site maintains a good security baseline appropriate for its business model. The overall risk assessment is low, with the site presenting a trustworthy and professional front for its niche market. Strategic recommendations include formalizing security policies, adding vulnerability disclosure mechanisms, and enhancing security headers to further strengthen trust and compliance.

N

Naděje

kurzy-nadeje.cz

43

Naděje is a Czech non-profit organization specializing in accredited educational courses for social service providers, social workers, and caregivers. Established in 1996, the organization offers a range of training programs accredited by the Ministry of Labour and Social Affairs (MPSV). Their website presents a professional and well-structured platform showcasing their courses, testimonials, and newsletter subscription, targeting professionals in the social services sector. Technically, the site uses a custom CMS built on the Yii PHP framework, enhanced with jQuery and modern web fonts, delivering a moderate performance and good mobile responsiveness. Security-wise, the site uses HTTPS and secure form submissions but lacks advanced security headers and cookie consent mechanisms, indicating room for improvement in compliance and security posture. Overall, the domain registration data aligns well with the business profile, supporting the site's legitimacy.

The website tcu.sk represents a Slovak non-profit educational initiative organizing the 'Týždeň celoživotného učenia' (Lifelong Learning Week), an event aimed at promoting lifelong learning across Slovakia. It targets a broad audience including individuals of all ages and educational institutions, providing lectures, workshops, and discussions to foster educational engagement. The event has a long-standing tradition with 25 years of history, positioning it as a recognized educational awareness platform in Slovakia. Technically, the website is built on a modern stack likely involving Ruby on Rails with Turbolinks, and integrates Google Analytics and Tag Manager for tracking. Hosting is provided by a Slovak hosting provider (websupport.sk), and the site uses HTTPS with DNSSEC enabled, indicating a secure baseline. The site is mobile optimized with good navigation and content quality, although some accessibility and SEO improvements could be made. From a security perspective, the site implements HTTPS and CSRF protections but lacks several recommended HTTP security headers. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial; while a cookie consent banner is present, no privacy policy or terms of service were found, which is a notable compliance gap. Contact information is clearly provided, enhancing business credibility. Overall, the website is legitimate, secure, and professionally presented, with minor areas for improvement in privacy disclosures and security hardening. The domain registration data aligns well with the website's purpose and geographic focus, supporting trustworthiness.

M

Městský úřad Lanškroun

lanskroun.eu

47

The website www.lanskroun.eu serves as the official municipal portal for the city of Lanškroun in the Czech Republic. It provides comprehensive information about the city administration, local news, cultural events, tourism, and public services. The site targets residents, visitors, and businesses in the Lanškroun region, offering multilingual support and various e-government services. The business model is focused on public service and community engagement, positioning itself as a trusted local government resource. Technically, the website is built on the Vismo CMS platform, utilizing standard web technologies such as HTML5, CSS, and JavaScript. It integrates Google Analytics and Google Tag Manager for visitor tracking and employs Google reCAPTCHA v2 to protect forms from spam. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some improvements in security headers could be made. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection. However, no explicit security policies or incident response contacts are published, and security headers appear to be missing or not detected in the provided content. The WHOIS data is not publicly available due to EURid privacy policies, which is typical for .eu domains and does not raise immediate concerns. Overall, the security posture is moderate with room for enhancement. The overall risk assessment indicates a well-maintained official government website with no signs of malicious activity or content safety issues. Strategic recommendations include implementing HTTP security headers, publishing a security policy, and adding a vulnerability disclosure mechanism to enhance trust and security maturity.

C

Chrudim

chrudim.eu

54

The website www.chrudim.eu serves as the official municipal portal for the city of Chrudim in the Czech Republic. It provides comprehensive information and services to residents and visitors, including citizen services, online reservations, public notices, tourism information, and contact details for various municipal departments. The site is well-branded with consistent city imagery and offers multilingual support via Google Translate. Technically, it is built on WordPress with common plugins such as Gravity Forms and Tiny Slider, and integrates Google Analytics and Tag Manager for analytics and marketing purposes. The site is secured with HTTPS and implements cookie consent mechanisms, reflecting good privacy compliance. However, WHOIS data is unavailable due to EURid privacy policies, which is typical for .eu domains. Overall, the site demonstrates a mature digital presence for a municipal government entity.

M

Město Hlinsko

hlinsko.cz

48

Město Hlinsko operates an official municipal website serving residents and visitors of the city of Hlinsko, Czech Republic. The site provides comprehensive information about municipal offices, citizen services, local news, social and cultural activities, and crisis management. It targets local citizens and stakeholders seeking official information and services. The website is well-structured and content-rich, reflecting a public sector information portal model with a focus on transparency and accessibility. Technically, the website uses a combination of jQuery, Bootstrap 4.4.1, Swiper, PhotoSwipe, and mmenu libraries, indicating a moderately modern front-end stack. The site appears mobile-optimized and provides a cookie consent mechanism, demonstrating awareness of privacy compliance. However, no major CMS or hosting provider details are evident, suggesting a custom or proprietary municipal CMS. From a security perspective, the site enforces HTTPS and includes cookie consent but lacks visible security headers and explicit security policies or incident response information. The absence of WHOIS data for the domain reduces trust signals, although the website content and domain usage appear legitimate. No vulnerabilities or tracking scripts were detected, indicating a low-risk profile but with room for security improvements. Overall, the website is a functional and professional municipal portal with good content quality and user experience. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and investigating the missing WHOIS data to improve domain trustworthiness.

M

Město Holice

holice.eu

56

The website www.holice.eu serves as the official municipal portal for the city of Holice in the Czech Republic. It provides residents and visitors with comprehensive information about city administration, local news, events, public notices, and tourist information. The site is well-branded with consistent city logos and offers multiple channels for citizen engagement including social media and a chatbot. The business model is focused on public service and community engagement, positioning the city as accessible and transparent to its constituents. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and integrates third-party services such as Google Analytics and a chatbot platform. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR, reflecting a moderate level of digital maturity. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent for privacy compliance. However, it lacks visible security headers and does not publish security policies or incident response information. The WHOIS data is privacy protected, which is common for .eu domains, and does not raise immediate concerns given the official nature of the site. Overall, the website is trustworthy and professional, serving its purpose as a municipal information portal. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and improving accessibility features to meet higher compliance standards.

M

Město Litomyšl

litomysl.cz

54

Město Litomyšl is the official municipal government website for the city of Litomyšl in the Czech Republic. It provides comprehensive information and services for both citizens and tourists, including municipal services, cultural events, education, and tourism information. The site targets local residents and visitors, positioning itself as a key resource for public administration and community engagement. The website demonstrates consistent branding and professional content quality, supporting its role as a trusted government portal. Technically, the website employs standard web technologies such as jQuery, Google Custom Search Engine, and Fancybox for enhanced user experience. The site is mobile-optimized and features good navigation and SEO practices. However, there is room for improvement in accessibility and security headers implementation. Performance is moderate, with external dependencies on Google services. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No critical vulnerabilities or outdated libraries were detected. The presence of a comprehensive GDPR privacy policy indicates attention to compliance, though the absence of a cookie consent mechanism is a gap. The lack of WHOIS data for the domain raises concerns about domain registration transparency, though the official nature of the content mitigates some risk. Overall, the website is a well-structured and professional municipal portal with good content and usability. Strategic improvements in security headers, cookie consent, and domain registration transparency would enhance trust and compliance.

M

Město Polička

policka.org

47

Město Polička operates an official municipal website serving residents and visitors with comprehensive city information, including news, events, official documents, and public services. The website is well-established with a domain age since 2003, reflecting a stable digital presence for the local government of Polička, Czech Republic. The site targets local citizens and visitors seeking municipal updates and services. Technically, the website uses ASP.NET Web Forms with Bootstrap and FontAwesome, providing a responsive and user-friendly interface, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing business credibility. Overall, the website is trustworthy and professionally maintained, suitable for its government function.

M

Městský úřad Svitavy

svitavy.cz

61

The website www.svitavy.cz serves as the official municipal portal for the city of Svitavy in the Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, and citizen resources. The site targets residents and visitors, offering a well-structured navigation system and multiple language options via external translation links. The business model is that of a government service portal, with a medium-sized organizational footprint and a focus on transparency and public engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies including Bootstrap for responsive design, Google Analytics for traffic monitoring, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with EU GDPR regulations. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, which are recommended to enhance security posture. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the official branding and content strongly support authenticity. Overall, the website presents a trustworthy and professional digital presence for the city government, with room for security enhancements and improved transparency in incident response and vulnerability disclosure policies. The risk level is low, and the site is safe for general audiences.

M

Město Skuteč

skutec.cz

45

The website skutec.cz serves as the official digital presence of the town of Skuteč, Czech Republic. It provides comprehensive municipal information including news, cultural events, public services, and contact details aimed at residents and visitors. The site is well-structured with clear navigation and a professional design consistent with government standards. It leverages modern web technologies such as jQuery, Bootstrap, and Swiper.js to deliver a responsive and accessible user experience. The presence of GDPR compliance and cookie consent mechanisms demonstrates attention to privacy regulations. Security posture is solid with HTTPS enforced and no evident vulnerabilities, though some HTTP security headers could be improved. The absence of WHOIS data is a notable gap, limiting domain legitimacy verification, but the official nature and content quality support trust in the site. Overall, the site is a reliable municipal resource with good technical and security practices.