Security Directory

S

Solute GmbH

billiger.de

10

billiger.de is a well-established German price comparison platform operated by Solute GmbH, offering consumers a comprehensive service to find the best prices and deals across various product categories. The website is professionally designed with a focus on usability, mobile optimization, and accessibility, leveraging modern JavaScript technologies and Cloudflare infrastructure for performance and security. While the site employs standard security best practices such as HTTPS and secure login forms, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. No contact information for security incidents or data protection officers is provided, indicating room for improvement in transparency and compliance. Overall, the website is trustworthy and safe for general audiences, with a strong market position in the German e-commerce sector.

T

TIVENTS

tivents.app

45

TIVENTS operates a German-language platform focused on connecting users with a wide network of local partners including cultural institutions, sports clubs, restaurants, and event organizers. The website serves as a partner selection portal with extensive listings and links to partner microsites, supporting event promotion and ticketing services. The platform targets local businesses and customers interested in cultural and leisure activities within Germany. Technically, the site employs modern frontend technologies such as Bootstrap, Livewire, and FontAwesome, ensuring a responsive and user-friendly experience. However, some areas such as security headers and cookie consent mechanisms could be improved to enhance compliance and security posture. The security evaluation shows good SSL implementation but lacks explicit security policies or incident response contacts. Overall, the site is legitimate, professionally designed, and maintains a moderate trust level with room for security and privacy enhancements.

The Schweizer Buchhandels- und Verlags-Verband SBVV is the largest book industry association in Switzerland, representing the cultural and economic interests of the German-speaking Swiss book sector. The organization provides a broad range of services including industry representation, education, events, ISBN agency services, and publications. Their market position is strong within the Swiss book industry, serving publishers, booksellers, authors, and media professionals. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to its target audience. Technically, the website employs a modern tech stack including Bootstrap 4, jQuery 3.7.1, and custom JavaScript, hosted on a proprietary CMS platform. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with no critical technical issues detected. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security headers and published security policies or incident response contacts. No cookie consent mechanism was detected, which may affect GDPR compliance. No vulnerabilities or exposed sensitive data were found in the analysis. Overall, the website is trustworthy and professional with a solid business credibility score. Recommendations include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to improve compliance and security posture.

J

JK.works mediatec

jk-works.de

55

JK.works mediatec is a small, established German IT service provider specializing in system administration, cloud and backup solutions, server maintenance, and web design/development. With over 20 years of experience and a Microsoft Silver Partner certification, the company targets businesses primarily in the Bremen, Wildeshausen, and Oldenburg regions. Their website reflects a professional and consistent brand image, offering clear service descriptions and accessible contact information. Technically, the site is built on OctoberCMS with a modern tech stack including Bootstrap and jQuery, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious or adult content.

N

Noveltics Group LLC

novelticsconferences.com

61

Noveltics Group LLC is a small but focused event organizer specializing in international scientific and medical conferences across multiple continents including the USA, Europe, and Asia. Their portfolio includes diverse conferences in healthcare, technology, and science sectors, targeting professionals and academics. The website is professionally designed with clear navigation and detailed event listings, supporting their business model of conference hosting and ticket sales. Technically, the site uses modern frontend technologies like Bootstrap and jQuery and is hosted behind Cloudflare, ensuring good performance and security basics such as HTTPS. However, the absence of DNSSEC and security headers indicates room for improvement in security hardening. Privacy and cookie policies are missing, which is a compliance gap, especially for GDPR. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

R

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau

rptu.de

61

Rheinland-Pfälzische Technische Universität Kaiserslautern-Landau (RPTU) is a leading technical university in Germany's Rheinland-Pfalz region, offering over 160 study programs across engineering, natural sciences, social sciences, and teacher education. The university emphasizes research excellence, innovation transfer, and international collaboration. The website reflects a mature digital presence with a modern TYPO3 CMS infrastructure, responsive design, and comprehensive content tailored to diverse audiences including prospective students, researchers, and partners. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though some HTTP security headers could be improved. Overall, the domain and website present a trustworthy and professional academic institution.

W

WeCanHelp gGmbH

bildungsspender.de

42

Bildungsspender.de is a well-established German charity shopping platform operated by WeCanHelp gGmbH. It enables users to support thousands of charitable institutions by shopping at a large network of partner shops without additional cost. The platform also offers a fee-free Mastercard and direct donation options, positioning itself as a leading charity e-commerce facilitator in Germany. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content in German. Technically, it uses a modern stack including Bootstrap 4, jQuery, and FontAwesome, hosted on kasserver.com. Security posture is adequate with HTTPS enabled and obfuscated contact emails, but lacks explicit security headers and a cookie consent mechanism. WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, the site demonstrates good business credibility and technical maturity with room for security and privacy improvements.

P

Paulbergman GmbH

alumnii.de

49

Alumnii, operated by Paulbergman GmbH, is a specialized SaaS platform focused on providing comprehensive alumni network management solutions primarily for educational institutions, companies, foundations, and associations in Germany. The platform offers integrated services including member management, newsletters, payment processing, event management, job boards, and mentoring functionalities. The company positions itself as a niche provider with a strong emphasis on GDPR compliance and German-based hosting. Technically, the website is built using modern web technologies such as Jekyll for static site generation, Bootstrap for responsive design, and integrates analytics via Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS with strong encryption and Google reCAPTCHA to protect forms, although additional security headers and explicit cookie consent mechanisms are absent. From a security perspective, the site demonstrates good practices with encrypted communications and data protection aligned with GDPR. However, the absence of published incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. The WHOIS data aligns well with the website's claims, showing consistent domain registration and hosting in Germany without privacy protection, enhancing trustworthiness. Overall, Alumnii presents a professional, trustworthy, and well-structured online presence suitable for its target audience. Strategic enhancements in security policies and privacy mechanisms would further strengthen its compliance and user trust.

N

NABU Sachsen

lebendige-luppe.de

59

Lebendige Luppe is a German non-profit environmental project focused on the revitalization of the Elster-Luppe floodplain area from Leipzig to Schkeuditz. The project involves ecological restoration, environmental education, and scientific research, led by the City of Leipzig, the City of Schkeuditz, and NABU Sachsen. Although the project officially ended in 2023, the website remains active to provide ongoing information and resources. The site is well-structured, content-rich, and targets environmentally conscious citizens, educators, and researchers. Technically, the website uses a REDAXO CMS with common frontend libraries such as Bootstrap and jQuery, providing good mobile responsiveness and user experience. Security posture is moderate with some gaps such as missing security headers and no visible incident response contacts. Privacy compliance is good with cookie consent and obfuscated emails. Overall, the website is trustworthy and professionally maintained, serving as an informational hub for the project and its stakeholders.

P

Petroleum Energy

petroleumenergy.co

61

Petroleum Energy is a Turkey-based company specializing in services related to the production, distribution, and refining of petroleum products. The company offers a broad range of services including technical and financial feasibility studies, market and regulatory research aimed at local and foreign entrepreneurs in the energy sector. Their website positions them as a service provider with a focus on supporting energy production and sales businesses. Technically, the website uses a modern tech stack including Bootstrap and jQuery libraries, with moderate performance and good mobile optimization. However, there is a lack of advanced SEO and accessibility features. Security posture is weak due to missing HTTPS confirmation, absence of security headers, and no visible privacy or cookie policies. Contact information is clearly provided, including phone, email, and physical address, along with active social media profiles. Overall, the website is professional and business-focused but requires significant improvements in security and privacy compliance to enhance trust and regulatory adherence.

O

Olsberg Gruppe

koenigshuette-ofen.com

52

Kaminöfen Königshütte is a German heating stove brand operating under the Olsberg Group, specializing in wood-burning and pellet stoves with a focus on quality and elegant design. The website presents a professional and user-friendly interface with product finders, dealer search, and downloadable resources, targeting consumers and retailers interested in heating solutions. Technically, the site is built on WordPress with modern libraries and enforces HTTPS with a robust cookie consent mechanism, reflecting a mature digital presence. However, the absence of WHOIS data for the domain raises concerns about domain legitimacy and ownership transparency. Security practices are generally good, but the lack of explicit security headers and incident response information suggests room for improvement. Overall, the site is trustworthy and well-maintained but would benefit from enhanced transparency and security hardening.

F

Fondo Est

fondoest.it

51

Fondo Est is a well-established Italian non-profit mutual fund providing supplementary health insurance and related services primarily to employees in various sectors including retail, tourism, and agriculture. The organization has a strong market position supported by social partners and trade unions, offering a comprehensive range of health benefits and online service portals. The website reflects a mature digital presence with modern technologies such as Bootstrap and jQuery, good mobile optimization, and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response disclosures are recommended. Overall, the domain age and WHOIS data corroborate the legitimacy and stability of the organization.

V

Ville de Nice

nice.fr

64

The website www.nice.fr is the official digital portal for the city of Nice, France, providing comprehensive municipal information, administrative procedures, event agendas, and public alerts. It serves a broad audience including residents, visitors, professionals, and various demographic groups such as seniors, children, and parents. The site is well-branded with consistent official city imagery and messaging, positioning it as a trusted government resource. Technically, the site is built on WordPress with Bootstrap framework, uses Matomo for analytics with cookies disabled, and demonstrates good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and minimal tracking, though explicit security headers and privacy policies are not clearly found in the provided content. WHOIS data is unavailable due to AFNIC restrictions, which is common for .fr domains, but this does not detract significantly from the site's legitimacy given its official nature. Overall, the site is professional, trustworthy, and serves its public service mission effectively.

B

Berlinale Talents

berlinale-talents.de

63

Berlinale Talents is a well-established annual summit and networking platform affiliated with the Berlin International Film Festival, targeting creatives in film and drama series. The website effectively communicates its mission, upcoming events, and partner collaborations, positioning itself as a key player in the international film talent development space. The technical infrastructure leverages modern JavaScript libraries and Cloudflare DNS, ensuring reliable delivery and moderate performance. Security posture is solid with HTTPS and Cloudflare usage, though improvements in security headers and explicit privacy mechanisms are recommended. Overall, the site presents a professional and trustworthy digital presence with room for enhanced privacy compliance and security transparency.

M

manitu GmbH

manitu.de

59

manitu GmbH is a well-established German hosting provider offering professional webhosting, dedicated root servers, and domain registration services. With 28 years of experience and an own data center in Germany, the company emphasizes high-quality service, German data protection compliance, and climate-neutral operations. Their target audience includes private users, companies, and organizations seeking reliable hosting solutions. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive business information. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, hosted on their own infrastructure, ensuring fast performance and good SEO. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration data aligns well with the business claims, supporting high legitimacy and trustworthiness.

PanoramaDanych.pl, operated by WeNet Sp. z o.o., is a well-established Polish company specializing in providing comprehensive databases of firms and entrepreneurs across Poland. With over 25 years of experience, the company offers a variety of data-driven marketing services including telemarketing, market analysis, mailing, geomarketing, and database enrichment. Their extensive and frequently updated database of over 3 million companies positions them as a trusted data provider in the Polish market. The website reflects a professional business model targeting marketers and businesses seeking effective lead generation and market insights. Technically, the website is built on WordPress and leverages modern frontend technologies such as Bootstrap 4, jQuery, and Popper.js. It integrates multiple analytics and marketing tools including Google Analytics, Google Tag Manager, Hotjar, and Facebook Pixel, indicating a mature digital marketing infrastructure. The site is mobile optimized with good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit security or incident response policies. The WHOIS data is consistent with the business claims, showing a legitimate domain registration with no privacy protection masking. The site complies with GDPR requirements, providing privacy and cookie policies, though it lacks a cookie consent mechanism. Overall, PanoramaDanych.pl presents a credible and professional online presence with strong business credibility and moderate security posture. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance trust and compliance.

W

WeNet

wenetclub.pl

64

Wenet Club is a Polish business-focused platform offering a variety of financial and business management services targeted primarily at small and medium enterprises. The company provides solutions such as management systems, quick loans, payment terminals, loyalty programs, and leasing options, positioning itself as a comprehensive business benefits provider. The website demonstrates a professional and consistent brand presence with multiple certifications and partner badges, indicating a reputable market position. Technically, the website employs modern web technologies including Bootstrap, Font Awesome, HubSpot integrations, and Hotjar for analytics and user behavior tracking. The site is mobile-optimized and features a cookie consent mechanism aligned with GDPR requirements. Performance is moderate with good SEO and accessibility basics in place. From a security perspective, the site uses HTTPS with secure form handling including CSRF tokens. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. The absence of WHOIS data limits domain trust assessment, but the overall site content and certifications support legitimacy. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers and transparency around incident response would enhance trust and security posture further.

L

L'Assurance retraite

lassuranceretraite.fr

70

L'Assurance retraite is the official French government portal dedicated to providing comprehensive information and online services related to retirement and social security. It serves both active workers and retirees in France, offering detailed guidance on career, retirement age, payments, and social benefits. The website is well-branded with official logos and maintains a strong presence through social media channels such as YouTube, Twitter, and LinkedIn. The portal emphasizes accessibility and user-friendly navigation, ensuring a positive user experience across devices. Technically, the site employs a modern technology stack including jQuery, Bootstrap, and the Jahia CMS platform. It integrates analytics and performance monitoring tools like ATInternet and AppDynamics, and uses TarteAuCitron for cookie consent management, reflecting a mature digital infrastructure. The website is mobile-optimized and adheres to good SEO and accessibility standards. From a security perspective, the site uses HTTPS and cookie consent mechanisms, but lacks explicit HTTP security headers visible in the HTML content. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is typical for .fr domains managed by AFNIC and does not detract from the site's legitimacy. Privacy policies and terms of service are comprehensive and GDPR compliant. Overall, L'Assurance retraite demonstrates a high level of professionalism, security, and compliance suitable for a government service portal. It provides trustworthy and valuable services to its audience with minimal risk exposure.

P

Pfeifer & Langen

liz-online.de

57

LIZ-Online is a specialized agricultural information platform operated under the parent company Pfeifer & Langen, focusing on sugar beet cultivation. The website provides a range of services including advisory tools, news updates, decision support programs, and access to a dedicated business portal (Rübenportal). The target audience primarily consists of farmers, agricultural advisors, and stakeholders involved in sugar beet production. The platform maintains a consistent brand presence and offers multilingual support in German, Dutch, and French. Technically, the website is built on TYPO3 CMS and leverages modern front-end technologies such as jQuery, Bootstrap, and FriendlyCaptcha for security and user interaction.

C

Conservation Planning Specialist Group

cpsg.org

66

The Conservation Planning Specialist Group (CPSG) is a well-established non-profit organization dedicated to species conservation planning and capacity building. With over 40 years of experience, CPSG leverages scientific approaches and collaborative workshops to support global biodiversity goals. Their website reflects a professional and consistent brand, targeting conservationists, researchers, donors, and the general public interested in wildlife preservation. The organization offers key services including conservation planning workshops, training, scientific tools, and annual meetings. Technically, the website is built on Drupal 10 and incorporates modern JavaScript libraries and Google Tag Manager for analytics. The site is mobile-optimized, accessible, and performs moderately well. Security posture is strong with HTTPS enabled and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable due to malformed output, but the website's professionalism and trust indicators suggest legitimacy. Privacy protection for domain registration is justified given the non-profit nature. Overall, the site demonstrates a mature digital presence with good compliance and security practices. Recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

Z

Zoo Duisburg

zoo-duisburg.de

58

Zoo Duisburg operates as a well-established zoological park in Germany, providing animal exhibits, educational programs, and visitor services. The website reflects a medium-sized non-profit organization with a clear focus on conservation, education, and community engagement. The business model relies on ticket sales, donations, and sponsorships, supported by recognized certifications from major zoological associations. The site targets families, tourists, and animal enthusiasts, offering multilingual support and accessible navigation. Technically, the website is built on TYPO3 CMS with Bootstrap 5, integrating modern web technologies and consent management tools such as Usercentrics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with asynchronous loading of scripts and structured navigation enhancing user experience. From a security perspective, the site enforces HTTPS and uses consent mechanisms for cookies, but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website domain, indicating legitimacy and consistent domain management. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with room for improvement in security headers and incident response transparency.

L

LED MULTIMEDIA s.r.o.

ledmultimedia.cz

47

LED MULTIMEDIA s.r.o. operates the largest independent network of large-format LED screens in the Czech Republic, specializing in digital outdoor advertising. The company focuses on leveraging modern LED technology to provide high-visibility advertising solutions adaptable to various weather conditions and client needs. Their business model centers on owning and managing LED advertising spaces, offering clients flexible campaign options and comprehensive service support. The website reflects a professional and consistent brand image, targeting business clients and advertisers within the Czech market. Technically, the site employs modern web technologies including JavaScript libraries, Google Fonts, and tracking via Google Analytics, hosted on VAS Hosting infrastructure. While the site is mobile-optimized and well-structured, it lacks a dedicated privacy policy and explicit security headers, which are areas for improvement. Security posture is moderate with HTTPS usage and cookie consent implemented, but no published security or incident response policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

Obec Vrdy

obecvrdy.cz

53

Obec Vrdy operates an official municipal website serving the residents and visitors of the Vrdy municipality in the Czech Republic. The site provides comprehensive local government information including news, public notices, contact details, community events, and downloadable forms. It targets local citizens and stakeholders seeking municipal services and information. The website is well-structured with consistent branding and clear navigation, reflecting a professional government portal. Technically, the site employs a custom CMS likely based on Lego2, with modern JavaScript libraries such as jQuery, Bootstrap, Swiper, and Highslide for UI enhancements. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, some security best practices like security headers are missing, and no explicit vulnerability disclosure or security policy pages are present. From a security perspective, the site shows a moderate security posture with HTTPS and cookie consent implemented, but lacks advanced security headers and incident response contacts. The absence of WHOIS data for the domain reduces trustworthiness slightly, though the website content and official contact information support legitimacy. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is a functional and professional municipal portal with room for improvement in security practices and transparency. Strategic recommendations include adding security headers, publishing vulnerability disclosure information, and verifying domain registration details to enhance trust and compliance.

O

Obec Nová Ves pod Pleší

novavespodplesi.cz

46

Obec Nová Ves pod Pleší operates an official municipal website serving the local community in the Czech Republic. The site provides residents and visitors with essential information such as official announcements, contact details, local clubs, and municipal services. The website is well-structured, with clear navigation and up-to-date content, reflecting a professional municipal communication channel. Technically, the site employs a variety of modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Leaflet for mapping, indicating a moderate level of digital maturity and mobile optimization. Security-wise, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible advanced security headers and explicit incident response or security policies. The absence of WHOIS data limits domain trust assessment, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website is a reliable and safe resource for its intended audience, with room for improvement in security posture and transparency.

R

Réseau Canopé

mathador.fr

59

Mathador is an educational platform operated by Réseau Canopé, focused on promoting mental calculation skills through engaging games and contests. The website offers both digital and physical game formats, targeting students and educators primarily in France. The platform is well integrated with educational initiatives and provides resources to motivate learners in mathematics. Technically, the site uses a modern tech stack including Bootstrap, jQuery, and Matomo analytics, with a cookie consent mechanism compliant with GDPR. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some security headers and explicit security policies are not evident, suggesting room for improvement in security hardening. Security posture is moderate with no visible vulnerabilities or exposed sensitive data. The absence of WHOIS data limits domain trust verification, but the strong affiliation with a reputable educational network and consistent branding supports legitimacy. Privacy compliance is well addressed through cookie management and privacy policy presence. Overall, Mathador presents a trustworthy and professional educational service with a solid digital presence. Strategic enhancements in security headers, incident response transparency, and WHOIS data availability could further strengthen trust and compliance.

M

Město Borovany

borovany-cb.cz

49

Město Borovany operates an official municipal website serving the residents and visitors of Borovany, Czech Republic. The site provides comprehensive local government information including news, official notices, contact details, event calendars, and public services. The target audience is primarily local citizens and stakeholders interested in municipal affairs. The business model is a government service portal with no commercial intent. The website maintains a consistent brand identity and good content quality, supporting its role as a trusted local government resource. Technically, the website uses a modern technology stack including jQuery, Bootstrap, Swiper.js, and Leaflet.js for mapping. It is built on the Ocelot CMS platform and demonstrates good mobile optimization and accessibility compliance, including an accessibility certification. Performance is moderate, with no major technical issues detected. However, some security best practices such as security headers are missing. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks a published privacy policy and incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the official nature of the content and contact information supports legitimacy. Overall, the website is a well-maintained municipal portal with good usability and security posture, though improvements in privacy compliance and domain transparency are recommended to enhance trust and regulatory adherence.

K

KOSTKA footbike

kostkafootbike.com

49

KOSTKA footbike is a well-established Czech manufacturer and retailer specializing in scooters for adults, children, and specialized uses such as mushing and seniors. The company emphasizes Czech production with over 20 years of tradition, offering a wide range of products and services including a Try & Buy rental program and a custom scooter configurator. The website is professionally designed, mobile-optimized, and provides rich content including blogs and community events, supporting a strong market presence in the micro-mobility retail sector. Technically, the website leverages a modern tech stack built on Prestashop CMS, integrating popular JavaScript libraries and marketing tools such as Google Tag Manager and Facebook Pixel. Performance and SEO are well addressed, with good accessibility and user experience. Privacy and cookie policies are present and GDPR compliant, with active consent mechanisms. Security posture is solid with HTTPS enforced, security headers implemented, and no visible vulnerabilities or exposed sensitive data. However, the absence of WHOIS data and lack of explicit security policy or incident response information slightly reduce trustworthiness. Overall, the site is secure, professional, and trustworthy, though domain registration transparency should be improved. Strategically, the company should consider publishing a dedicated security policy and vulnerability disclosure page, and ensure domain registration data is publicly available to enhance credibility and trust.

V

Vernalis

vernalis.fr

47

Vernalis Interactive is a French digital agency specializing in providing digital communication services to public sector entities such as municipalities, intercommunalities, and mixed syndicates. With over 20 years of experience, the company offers website creation, extranet development, and mobile application services tailored to the needs of public institutions. The website reflects a professional and consistent brand image targeting French public organizations. Technically, the site is built on WordPress, leveraging modern libraries like jQuery and Popper.js, and integrates Matomo for analytics, indicating a moderate level of digital maturity. Security-wise, the site uses HTTPS and avoids exposing sensitive data but lacks visible security headers and explicit cookie consent mechanisms, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and social media presence support its credibility. Overall, Vernalis Interactive presents as a trustworthy and specialized digital agency serving the French public sector.

Základní umělecká škola Říčany is a Czech educational institution specializing in artistic education for children and youth, including music, dance, visual arts, and drama. The website serves as a communication platform for news, events, and projects related to the school and its community. It holds partnerships with cultural institutions such as the National Theatre and participates in EU-funded educational projects, indicating a stable position in the regional education sector. Technically, the website is built on a custom CMS developed by Vitalex Computers, utilizing a variety of JavaScript libraries including jQuery, Bootstrap, and TinyMCE. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are recommended, such as adding security headers and enhancing accessibility. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy compliance. Nonetheless, the absence of WHOIS data and security headers, as well as missing explicit contact information for security incidents, represent areas for improvement. No vulnerabilities or malicious content were detected. Overall, the website is a trustworthy and professional platform for the school’s community, but it would benefit from enhanced transparency in domain registration and improved security practices to strengthen its credibility and compliance posture.

P

Payplug

payplug.com

62

Payplug is a French payment solution provider specializing in online and in-store payment processing for merchants across France and Europe. With over 17,000 merchants relying on its services, Payplug offers a comprehensive suite of payment solutions including omnichannel payment, fraud management, and financial flow centralization. The company is part of Groupe BPCE, a major French banking group, which strengthens its market position and trustworthiness. The website reflects a mature digital presence with professional design, clear navigation, and extensive content tailored to merchants and e-commerce businesses. Technically, the website is built on WordPress and leverages modern JavaScript libraries and analytics tools such as GSAP, HubSpot, Matomo, and Microsoft Clarity. It demonstrates good performance and mobile optimization, although accessibility compliance is basic. Security practices include HTTPS enforcement and use of security-related scripts, but explicit security headers and policies could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the strong branding and parent company affiliation. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms. Contact information is primarily via web forms, with no direct phone numbers or emails found on the homepage. The website uses multiple tracking and marketing tools, indicating an extensive user tracking level balanced with good privacy compliance. Overall, Payplug's website presents a professional, secure, and trustworthy platform for payment services, with minor recommendations to enhance security transparency and accessibility. The domain's WHOIS data absence warrants monitoring but does not currently undermine the business credibility.

Foto-testy.cz is a Czech Republic based small business operated by České modelky s.r.o., specializing in professional photography services for aspiring and established models, including plus size and hostess modeling. The website offers studio photo sessions, modeling courses, and job opportunities, positioning itself as a niche player in the modeling and media sector. The company has been operating since 2013, supported by a network of related domains and partner sites, enhancing its market presence. Technically, the website employs a modern but somewhat mixed technology stack including Bootstrap and multiple versions of jQuery, with good mobile optimization and SEO practices. Hosting is provided by WEDOS, a known Czech hosting provider. However, there are areas for improvement such as consolidating JavaScript libraries and implementing security headers to enhance security posture. Security-wise, the site uses HTTPS and Google reCAPTCHA for bot protection but lacks explicit security headers and privacy/cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating a potential compliance gap. Contact information is clearly presented, supporting business credibility. Overall, the website is professional and content-rich with a moderate security posture and some compliance gaps. Strategic improvements in privacy policies, security headers, and technical cleanup would enhance trust and security, supporting sustainable business growth.

K

KOSTKA footbike

kostkakolobezky.cz

59

KOSTKA footbike is a well-established Czech manufacturer and retailer specializing in scooters for adults, children, seniors, and specialized uses such as mushing and racing. The company boasts over 25 years of tradition and operates a professional e-commerce platform with multilingual support. Their business model focuses on direct sales, custom configurations, and community engagement through blogs and events. Technically, the website is built on Prestashop CMS, leveraging modern JavaScript libraries and frameworks to deliver a responsive and user-friendly experience. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response information are absent. The lack of WHOIS data slightly reduces trust but does not outweigh the strong brand presence and content quality. Overall, the website is professional, secure, and compliant with GDPR, serving a broad audience interested in scooters and outdoor mobility.

C

Chiesi USA, Inc.

chiesitotalcare.com

65

Chiesi Total Care is a specialized pharmaceutical patient support website operated by Chiesi USA, Inc., a subsidiary of Chiesi Farmaceutici S.p.A. The site provides resources and support information for healthcare professionals and patients related to several pharmaceutical products. The business is positioned as a medium-sized healthcare service provider focused on patient and professional engagement. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is strong with clear privacy and terms of use policies linked to official domains and integration of consent management tools. Overall, the website is professional, trustworthy, and safe for general audiences.

M

Métropole de Lyon

grandlyon.com

68

The Métropole de Lyon website serves as the official digital presence of the metropolitan government authority for Lyon, France. It provides comprehensive information and services to residents and professionals across 58 communes and a population of 1.4 million. The site focuses on public services such as waste management, housing, transportation, citizen engagement, and economic development, positioning itself as a key regional government resource. The website is well-branded, professionally designed, and consistent with government standards, targeting a broad audience within the metropolitan area. Technically, the site is built on TYPO3 CMS with modern front-end technologies including Bootstrap 5 and Popper.js, ensuring responsive design and good accessibility. It employs privacy-respecting analytics via Matomo and uses a robust cookie consent management system (Tarteaucitron.js), reflecting a mature digital infrastructure with strong privacy compliance. The site is performant with good SEO and accessibility features. From a security perspective, HTTPS is enforced, and privacy best practices are observed, including cookie consent and minimal tracking. However, the absence of visible security headers and a published security policy or incident response contact suggests room for improvement in security transparency and defense-in-depth. No vulnerabilities or suspicious content were detected. Overall, the website is a trustworthy, professional government portal with excellent content quality and privacy compliance. The lack of WHOIS data is a minor concern but likely due to querying limitations or privacy protection. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen trust and security posture.

Lékárna PILULKA is a well-established local pharmacy based in Brno, Czech Republic, with over 20 years of experience. The company offers a broad range of pharmaceutical services including individually prepared medicinal products, veterinary products, diagnostic tests, and medicinal cannabis. They operate both a physical pharmacy and an e-shop, targeting local customers seeking professional pharmaceutical care and products. The website is professionally designed with clear navigation and multilingual support via Google Translate. Technically, it uses a custom CMS and modern JavaScript libraries, providing a moderate performance and good mobile optimization. Security posture is moderate with HTTPS implied but lacks visible security headers and formal privacy or cookie policies. WHOIS data is missing, which raises concerns about domain transparency and trustworthiness. Overall, the business appears credible and professional but would benefit from enhanced security and compliance disclosures.

NETQUES . daten & diagnostik GmbH operates the NQAP platform, a GDPR-compliant online application management system designed primarily for public sector and educational institutions in Germany. The platform digitizes and automates application processes, reducing paperwork and accelerating decision-making. The company positions itself as a niche technology provider with a focus on secure, efficient, and user-friendly application workflows. The website is professionally designed, consistent in branding, and targets organizations requiring compliant digital application solutions. Technically, the website employs modern frontend technologies including Bootstrap, jQuery, and various UI enhancement libraries. Security is well considered with HTTPS, Content Security Policies, and secure form handling including CSRF tokens and honeypot anti-spam measures. However, some security headers could be improved, and no cookie consent mechanism was detected despite GDPR emphasis. The WHOIS data is unavailable due to registry restrictions common for .es domains, but the website content and business information indicate a legitimate and professional operation. Overall, the security posture is strong with good data protection practices and ISO-certified hosting claims. The absence of vulnerability disclosure and incident response contacts are areas for improvement. The website is safe for general audiences, with no adult or questionable content. The business credibility is high, supported by clear contact information and trust signals such as LinkedIn presence and ISO certifications. Strategically, NETQUES should enhance transparency by adding cookie consent, incident response information, and vulnerability disclosure policies. Improving accessibility and adding additional security headers would further strengthen their security posture and compliance. These steps will enhance trust and align with their GDPR-focused business model.

C

Czech Soles Production

czechsoles.com

40

CzechSoles.com operates as a niche adult entertainment website specializing in foot fetish content, offering a large catalog of videos, photo galleries, custom clips, and live webcams. The site targets an adults-only audience with explicit disclaimers and age verification statements. The business model is subscription-based with additional custom content sales, positioning itself as a specialized media provider within the adult entertainment industry. The website demonstrates consistent branding and a professional presentation with a focus on quality multimedia content. Technically, the site uses common JavaScript libraries and integrates Google reCAPTCHA Enterprise for bot protection, but lacks advanced security headers and explicit privacy consent mechanisms. Payment processing is handled by a reputable third party, CCBill, enhancing transactional trust. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency.

R

Raketsport

raketsport.cz

45

Raketsport.cz is a specialized retailer and distributor of racket sports equipment, operating primarily in the Czech and Slovak markets. The company positions itself as an exclusive distributor for several well-known brands such as Tecnifibre, Victor, and Pro Kennex. The website reflects a professional and consistent brand image with clear business contact information and a focus on serving players of all ages and skill levels. The business model centers on B2B and retail distribution of sports equipment, supported by a dedicated team of representatives. Technically, the website employs a modern frontend stack including Bootstrap 4 and jQuery, hosted on Czech hosting infrastructure. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, it lacks advanced SEO and accessibility features, and no CMS or backend platform is explicitly detected. From a security perspective, the site uses HTTPS and avoids exposing sensitive data or vulnerable inputs. However, it lacks published privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. No tracking or analytics scripts were detected, indicating minimal user tracking. The WHOIS data is consistent and transparent, supporting the legitimacy of the domain and business. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance and security best practices to improve its risk posture and user trust.

L

Lissen

agence-lissen.com

52

Lissen is a French communication agency specializing in global communication services focused on territorial transition projects. Founded in 2023, it operates as a small agency under the Copylot group, serving clients primarily in transportation and energy sectors. The agency offers key services including communication for large projects, citizen participation and consultation, and 3D visualization and immersion. The website is professionally designed, mobile-optimized, and provides clear contact and team information, enhancing its market credibility. Technically, the website is built on WordPress with modern libraries such as Bootstrap 5 and jQuery, hosted by OVH sas. Performance is fast, and SEO and accessibility are well implemented. The site uses GDPR-compliant cookie consent via Tarteaucitron. However, DNSSEC is not enabled and security headers are not detected, indicating room for security improvements. Security posture is good with HTTPS enforced and domain status protections in place, but lacks explicit security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website presents a low risk profile with strong business credibility and technical maturity. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to further enhance trust and compliance.

O

Obec Břasy

obecbrasy.cz

49

Obec Břasy operates an official municipal website serving the local community of Břasy in the Czech Republic. The site provides comprehensive information about local government services, community events, tourist attractions, and public notices. It targets residents, visitors, and local organizations, offering a centralized platform for municipal communication and engagement. The website integrates a mobile app and social media presence to enhance accessibility and outreach. Technically, the website employs a modern JavaScript stack including jQuery, Bootstrap, and Swiper.js, ensuring responsive design and good user experience across devices. The content is well-structured with clear navigation and accessibility features. However, the site lacks visible HTTP security headers and detailed WHOIS registration data, which impacts the overall security posture and trustworthiness. Security-wise, the site uses HTTPS and a cookie consent mechanism compliant with GDPR, but it does not provide explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data is a concern and should be investigated to confirm domain legitimacy. Overall, Obec Břasy's website is a well-maintained municipal portal with good content quality and user experience but requires improvements in security headers and domain registration transparency to enhance trust and compliance.

W

Přihlášení | WBoost

wboost.cz

47

WBoost.cz is a newly registered domain (July 2024) hosting a login page for a service branded as WBoost. The website is primarily in Czech and appears to target Czech-speaking users. The page is a straightforward login interface with email and password fields, protected by a CSRF token, indicating basic security hygiene. The business behind the site is not explicitly described on this page, and no privacy, cookie, or terms of service policies are present, which limits transparency and compliance visibility. Technically, the site uses modern web technologies including Bootstrap, Symfony framework components, and Cloudflare DNS services, suggesting a contemporary infrastructure. However, no security headers were detected, and no contact or business information is provided on this page, which impacts trust and compliance scores. The domain's recent registration date aligns with a new business or service launch, but the lack of detailed WHOIS registrant data slightly reduces trustworthiness. Overall, the site is functional and safe but lacks comprehensive privacy and security disclosures.

Tlapnet s.r.o. operates a customer portal primarily serving its telecommunications customers in the Czech Republic. The portal provides login access for customers to manage their services such as internet, television, and VOIP. The website is professionally designed with a clear structure and good mobile optimization, leveraging modern JavaScript libraries and frameworks including jQuery, Bootstrap, Alpine.js, and the Nette Framework. The domain registration and hosting are consistent with the company's Czech location and business profile, indicating legitimacy and stable operation since 2019. From a security perspective, the site uses secure form practices such as POST method and password input types, but lacks visible HTTP security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No WAF or blocking mechanisms were detected, and the site content is fully accessible and safe for general audiences. Contact information is clearly provided, enhancing business credibility. Overall, the website demonstrates a moderate to good security posture but would benefit from implementing formal privacy and cookie policies, security headers, and vulnerability disclosure mechanisms to improve compliance and trust. The technical infrastructure is modern but could be enhanced with better accessibility and SEO optimizations. The risk level is moderate with no critical vulnerabilities detected in the visible content.

S

SVOL obchodní s.r.o.

svolobchodni.cz

45

SVOL obchodní s.r.o. is a Czech company specializing in the sale and purchase of wood, forestry consulting, and coordination of joint trade for members of the SVOL association, the largest private forest owners group in the Czech Republic. The company offers direct sales, public market trading, and educational services focused on sustainable forest management. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses common web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. However, there is a lack of explicit privacy and cookie policies, and security headers are missing, which could pose compliance and security risks. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site is functional and trustworthy but would benefit from enhanced security and privacy compliance measures.

S

Stackopera

stackopera.com

59

Stackopera.com is a Czech-based online platform providing the largest overview of Czech business software solutions, targeting companies seeking software products and advisory services. Founded in 2021, it offers a searchable directory with over 800 products and discount offers, aiming to simplify software selection for businesses. The website is built on the Bubble.io platform, leveraging modern JavaScript libraries and includes integrations with analytics and tracking tools such as Hotjar and Microsoft Clarity. The site is well-structured, mobile-optimized, and provides clear contact information and cookie consent mechanisms, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, and no explicit security or incident response policies are published. Overall, the platform presents a professional and trustworthy business presence with room for improvement in security and compliance documentation.

E

Euro-BioImaging

eurobioimaging-access.eu

55

Euro-BioImaging Access Portal serves as a European research infrastructure platform providing access to advanced imaging technologies and image data analysis services for biological and biomedical sciences. The portal targets researchers and scientists across Europe, facilitating proposal submissions for imaging services. The website reflects a professional and consistent brand image aligned with its scientific mission. Technically, the site employs modern frontend technologies including jQuery, Bootstrap 5, RequireJS, and integrates Google Analytics and Tag Manager for user tracking and analytics. The site is mobile optimized with good navigation and content relevance. Security posture is moderate with HTTPS enabled and cookie consent implemented; however, security headers and explicit security policies are absent, representing areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies, indicating GDPR awareness. WHOIS data is privacy protected, which is typical for research infrastructure domains, and no suspicious patterns were detected. Overall, the site is trustworthy, professional, and safe for general audiences.

A

Adam Trnka

adamtrnka.com

59

Adam Trnka's website serves as a personal portfolio showcasing his expertise as a technology enthusiast, product manager, consultant, creative professional, and cameraman. The site highlights his experience in digitalizing business needs, video production, and technology development. The business model is service-oriented, targeting clients seeking IT consulting, product management, and multimedia services. The website is well-branded with consistent design and clear contact information, supporting a moderate level of business credibility. Technically, the site uses a modern frontend stack including Bootstrap, jQuery, and Google Fonts, ensuring good mobile responsiveness and user experience. However, no CMS or hosting provider information is discernible. Performance is moderate with no advanced analytics or tracking scripts detected, indicating a privacy-conscious approach but also limited marketing insights. From a security perspective, the site lacks visible security headers and privacy/cookie policies, which lowers its compliance posture. The absence of WHOIS data reduces transparency but is likely due to privacy protection, which is reasonable for a personal brand. No forms or sensitive data collection points reduce attack surface, but improvements in SSL configuration and security headers are recommended. Overall, the website is safe, professional, and suitable for general audiences. The main risks relate to privacy compliance and security best practices, which can be addressed to enhance trust and regulatory adherence.

B

Babice nad Svitavou

babice-nad-svitavou.cz

48

Babice nad Svitavou's official municipal website serves as a comprehensive portal for residents and visitors, providing essential information about local governance, events, public services, and community organizations. The site is well-structured with clear navigation and up-to-date content, reflecting a strong commitment to community engagement and transparency. Technically, the website employs common web technologies such as jQuery, Bootstrap, and Swiper.js, ensuring a responsive and user-friendly experience across devices. Privacy compliance is evident through the presence of GDPR statements and cookie consent mechanisms, enhancing user trust. However, the absence of WHOIS data for the domain raises questions about domain registration legitimacy, which should be externally verified to ensure full trustworthiness. Security posture is moderate, with HTTPS implied but lacking explicit security headers, suggesting room for improvement in hardening the site against common web threats. Overall, the website is a reliable and professional resource for the Babice nad Svitavou community, with recommendations to enhance security and verify domain registration details.

V

Vysoká škola ekonomická v Praze

vse.cz

66

Vysoká škola ekonomická v Praze (VŠE) is a prominent business university in the Czech Republic, recognized as the best business university in Central and Eastern Europe. It offers a wide range of academic programs including bachelor's, master's, doctoral, and MBA/MPA studies, supported by strong international cooperation and research initiatives. The institution is well-accredited with prestigious certifications such as AACSB, EQUIS, and CEMS, underscoring its academic excellence and global standing. The website reflects a mature digital presence with comprehensive content tailored to students, academics, and partners. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Popper.js, and Google Tag Manager. It is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. The site employs HTTPS with strong SSL configuration and security headers, ensuring secure communications. Cookie consent mechanisms and privacy policies demonstrate compliance with GDPR and related privacy regulations. From a security perspective, the site follows best practices such as enforcing HTTPS and using security headers. However, it lacks a publicly available security policy and incident response contact details, which are recommended for enhanced transparency and readiness. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS data limits domain trust analysis, but the website's professional presentation and accreditations support its legitimacy. Overall, VŠE's website is a well-constructed, secure, and compliant platform that effectively serves its educational mission. Strategic improvements include publishing a security policy, providing incident response contacts, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

M

Mateřská škola Jiříkovice

msjirikovice.cz

46

Mateřská škola Jiříkovice operates as a local preschool educational institution in the Czech Republic, providing early childhood education and related services such as childcare and school meals. The website serves primarily parents and guardians seeking information about the school, its operations, and events. The institution is positioned as a small, community-focused educational provider with a clear local presence and official contact details. Technically, the website is built on a CMS platform by Galileo Corporation, utilizing common web technologies like jQuery, Bootstrap, and Leaflet for maps. The site is mobile-optimized and accessible, with an accessibility certification indicating compliance with inclusive design standards. Security posture is moderate, with HTTPS in use and cookie consent implemented, but lacking explicit privacy policies and security headers. Overall, the website is professional and trustworthy, though improvements in privacy compliance and security best practices are recommended.