Security Directory

G

Gaerne

gaerne.com

69

Gaerne is an established e-commerce business specializing in motorcycle boots and footwear, serving motorcycle enthusiasts and professionals. The website is built on the BigCommerce platform, leveraging modern e-commerce technologies and third-party analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel. Privacy and cookie policies are implemented with a consent mechanism, reflecting good compliance with GDPR standards. The domain is long-standing, created in 1997, and secured with HTTPS and domain transfer protection, indicating a trustworthy online presence. However, the absence of explicit security policies and incident response contacts suggests room for improvement in transparency and security governance.

F

FARN – Fachstelle Radikalisierungsprävention und Engagement im Naturschutz

nf-farn.de

54

FARN is a specialized non-profit organization founded in 2017 by NaturFreunde Deutschlands and Naturfreundejugend Deutschlands. It focuses on researching and preventing radicalization and extremist influences within the nature and environmental protection sectors. The website provides educational content, consulting, and qualification services targeted at environmental actors and youth. Technically, the site is built on Drupal 7 with a moderate performance profile and good mobile optimization. Privacy-conscious analytics via Matomo is implemented with DoNotTrack and cookie disabling, though no explicit cookie consent mechanism is present. Security posture is solid with HTTPS and privacy-respecting analytics but lacks some security headers and published policies. Overall, the site is professional, trustworthy, and well-branded with clear partner affiliations.

S

Stadtverwaltung Maxhütte-Haidhof

maxhuette-haidhof.de

63

The website www.maxhuette-haidhof.de serves as the official digital presence of the city administration of Maxhütte-Haidhof, Germany. It provides comprehensive municipal information, including city council details, local events, urban planning, and citizen services. The site targets residents and visitors, offering online portals for administrative tasks such as registrations and permits. The business model is that of a local government entity focused on public service delivery. Technically, the site is built on the IKISS CMS platform, utilizing legacy but functional JavaScript libraries like jQuery and Slick Carousel. Hosting is provided by Hetzner, a reputable German hosting provider. Accessibility is enhanced through Eye-Able assistive technology scripts, and cookie consent mechanisms comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No advanced analytics or advertising scripts are present, reflecting a privacy-conscious approach. Overall, the site is professional, trustworthy, and well-aligned with its government function.

Brill Audio Visual Kft. is a well-established Hungarian audiovisual service provider specializing in event technology solutions including sound, lighting, projection, LED walls, interpretation, voting systems, IT solutions, and stage design. Founded in 1995, the company has expanded its presence across Central Europe through the Brill AV Media European Group. The website reflects a professional business with a clear focus on corporate and international event clients. Technically, the site is built on Drupal 7 with standard web technologies and moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and updated CMS versions, which could pose risks. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and business credible but would benefit from enhanced security and privacy practices.

T

Tím Zones.sk

pscpsc.cz

45

The website pscpsc.cz is a Czech Republic focused postal code search service operated by Tím Zones.sk. It provides users with the ability to search postal codes by city, street, or postal code, and offers a list of popular postal codes. The site is positioned as a niche informational service targeting the general public in the Czech Republic. Technically, the site uses a custom or unknown CMS with common web technologies such as jQuery, Google Tag Manager, Google Adsense, and Facebook SDK. Hosting is provided by Websupport, a regional hosting provider. The site is mobile optimized and has good SEO and accessibility basics. Security posture is moderate with HTTPS enabled and a consent management platform for GDPR compliance, but lacks explicit security headers and detailed privacy or terms of service pages. No direct company contact emails or phone numbers are present on the site, but contact is available via the parent company Zones.sk. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Team Zones.sk

capcap.it

57

capCAP.it is a specialized Italian website offering postal code (CAP) lookup services for cities and streets across Italy. The site targets Italian residents and users needing postal code information, providing a user-friendly search interface with autocomplete features and popular city CAP listings. The business model appears to be advertising-supported, leveraging Google Adsense and Google Tag Manager for monetization and analytics. The site is relatively new, established in 2022, and operated by Team Zones.sk, a company linked via contact and copyright references.

T

Team Zones.sk

plzplz.at

59

plzPLZ.at is a specialized online service providing postal code search functionality for cities and streets in Austria. The website is operated by Team Zones.sk and targets general users seeking postal code information. It offers autocomplete search features and lists popular postal codes, enhancing user convenience. The site is well-positioned in its niche market, focusing on Austrian postal code data with a clear and consistent branding approach. Technically, the website employs a modern tech stack including jQuery, jQuery UI, Google Fonts, Google Tag Manager, and Google Adsense for advertising and analytics. Hosting is provided by websupport.sk, a known hosting provider. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and a comprehensive consent management platform to comply with GDPR cookie and tracking regulations. However, explicit security headers are not detected, and no formal security or incident response policies are published. The site does not expose sensitive data and uses secure forms for user input. Advertising partners and tracking vendors are numerous but transparently disclosed via the consent mechanism. Overall, the website presents a moderate risk profile with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, explicit privacy and security policies, and enhanced contact information would strengthen trust and compliance. The domain registration is consistent and legitimate, supporting the website's credibility.

B

Bundesarbeitsgemeinschaft der Seniorenorganisationen

digitalpakt-alter.de

52

The DigitalPakt Alter website represents a well-established non-profit initiative under the Bundesarbeitsgemeinschaft der Seniorenorganisationen (BAGSO) umbrella, aimed at empowering older adults in Germany to enhance their digital skills and social participation. The site offers a variety of services including funding programs, workshops, materials, and events, targeting seniors and volunteers. It enjoys strong institutional backing from BAGSO and the German Federal Ministry for Family Affairs, which enhances its credibility and market position. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as jQuery and slick sliders, with a focus on accessibility and mobile responsiveness. Hosting is provided via rzone.de, and the site implements a comprehensive cookie consent mechanism with Matomo analytics for privacy-conscious user tracking. The site demonstrates good SEO and accessibility practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, employs standard security headers, and uses secure forms with validation. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and readiness. No vulnerabilities or suspicious content were detected, and privacy compliance is strong with GDPR-aligned policies and consent mechanisms. Overall, the website is trustworthy, professionally maintained, and aligned with its mission to support digital inclusion for seniors. Strategic recommendations include publishing explicit security and incident response policies, considering a vulnerability disclosure program, and maintaining regular audits of third-party scripts to sustain security posture.

D

Deutschland sicher im Netz e.V.

digitaler-engel.org

56

The Digitaler Engel website is a well-structured, professionally designed platform operated by Deutschland sicher im Netz e.V., a recognized non-profit organization focused on supporting older adults in Germany with digital literacy. The site offers educational content, event information, and downloadable materials, supported by government funding. Technically, the site uses Drupal 10 CMS, integrates Matomo for privacy-respecting analytics, and employs Klaro for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though some security headers and incident response contacts could be improved. The absence of WHOIS data reduces transparency but does not detract significantly from the site's legitimacy given its official affiliations. Overall, the site is safe, privacy-compliant, and trustworthy, targeting a general audience with educational goals.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

perspektiven-schaffen.de

65

The website perspektiven-schaffen.de is an official German government platform managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It focuses on promoting equality in the labor market, providing comprehensive information, tools, and resources for employees, employers, and other stakeholders. The site features various programs such as the GAPS action program, online courses, calculators, and curated content like podcasts and publications. The platform is well-positioned as a trusted government resource with a clear mission to support labor market equality and integration.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

lokale-buendnisse-fuer-familie.de

63

The website lokale-buendnisse-fuer-familie.de represents a German federal government initiative under the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It serves as a platform to promote and support local family alliances across Germany, aiming to improve family-friendly working and living conditions through networking, project development, and information dissemination. The initiative is well-established since 2004 and targets political actors, civil society, businesses, and families. Technically, the website employs standard web technologies including JavaScript and CSS, with Matomo analytics integrated in a privacy-conscious manner requiring user consent. The site is well-structured, accessible, and optimized for mobile devices, reflecting a mature digital presence. However, no explicit CMS or hosting provider details are evident, and security headers are not explicitly detected. From a security perspective, the site uses HTTPS (implied by the URL), enforces cookie consent, and avoids exposing sensitive data. There is no public security policy or incident response information, and no vulnerability disclosure mechanism is found. The WHOIS data is minimal but consistent with a government entity, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR, with good privacy practices. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve transparency and security posture.

F

Frauen Vielfalt Politik

frauen-macht-politik.de

57

Frauen Vielfalt Politik is a specialized non-profit initiative focused on empowering women in local German politics through information, consulting, networking, and best practices. The website serves as a central hub for resources, events, and community engagement, supported by reputable partners including the Deutscher LandFrauenverband and the German Federal Ministry for Family, Seniors, Women and Youth. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates accessibility tools and privacy-compliant analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the site presents a professional, trustworthy, and well-structured platform with a clear mission and target audience.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

starkimberuf.de

67

The website represents the official German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, focusing on programs to support families with migration backgrounds, particularly mothers seeking employment. It provides comprehensive information on integration initiatives, labor market participation, and related studies, positioning itself as a key government resource in this domain. The site is well-structured, professionally designed, and targets families, policymakers, and labor market stakeholders. Technically, the site employs modern web technologies including JavaScript and CSS frameworks, with Matomo analytics integrated for user behavior tracking under strict privacy controls. The site is mobile-optimized and accessible, with good SEO practices. Hosting and CMS details are not explicitly disclosed but the site performs moderately well. Security posture is strong with HTTPS enforced and privacy-compliant cookie consent mechanisms. However, explicit security headers and incident response contacts are not evident, suggesting room for improvement in transparency and security policy communication. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR, serving as a reliable government information portal with low risk exposure.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

elternchancen.de

53

ElternChanceN is a German government-funded program under the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend, focused on strengthening families through qualified parental guidance and educational support. The website serves as an information and resource hub for pedagogical professionals and families, offering program details, events, networking maps, and online offerings. It leverages modern web technologies including TYPO3 CMS and standard JavaScript libraries to deliver a responsive and accessible user experience. The site integrates Matomo analytics with anonymized tracking and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy standards.

K

Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V.

zukunftswerkstatt-kommunen.de

50

Zukunftswerkstatt Kommunen (ZWK) is a German government-funded non-profit project managed by Kompetenzzentrum Technik-Diversity-Chancengleichheit e. V. It supports 40 municipalities in managing demographic change through consulting, digital tools, and networking. The website is professionally designed using TYPO3 CMS and modern web technologies, providing comprehensive content, accessibility features, and clear navigation. Security posture is strong with HTTPS, security headers, and reCAPTCHA integration, though dedicated security and incident response policies are not published. Overall, the site is trustworthy, compliant with GDPR, and serves a specialized governmental audience effectively.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ)

jugend-staerken.de

63

The website www.jugend-staerken.de is a German government initiative operated by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ). It focuses on supporting youth with special needs in their transition to independence through various programs and partnerships. The site serves as an informational and coordination platform for these programs, targeting young people, municipalities, and youth welfare organizations. Technically, the site uses a modern tech stack including jQuery UI and Matomo analytics, hosted on domaincontrol.com nameservers, and employs a CMS likely tailored for government use. The website is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit incident response contacts are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, reflecting its government affiliation.

B

Bundesstiftung Mutter und Kind

bundesstiftung-mutter-und-kind.de

64

The Bundesstiftung Mutter und Kind is a German government-affiliated foundation dedicated to supporting pregnant women in distress through financial aid and counseling services. It operates under the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ) and has a longstanding history of over 40 years. The website provides comprehensive information on available aids, application procedures, and educational materials targeting pregnant women, families, and counseling centers. The foundation maintains a strong market position as a trusted social support entity within Germany.

B

Bundesamt für Familie und zivilgesellschaftliche Aufgaben

fonds-missbrauch.de

54

The Fonds Sexueller Missbrauch website is an official German government platform managed by the Bundesamt für Familie und zivilgesellschaftliche Aufgaben. It provides critical support services for individuals affected by sexual abuse in familial and institutional contexts, offering financial assistance for therapies and other related costs. The site targets victims, counseling centers, and the general public, positioning itself as a trusted government resource with clear contact channels and comprehensive informational content. Technically, the website is built on TYPO3 CMS and employs Matomo analytics configured for privacy compliance, including IP anonymization and opt-in consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, though it lacks some advanced security headers. Hosting appears to be managed by a German provider, ensuring data residency and compliance. From a security perspective, the site enforces HTTPS and respects user privacy with a transparent cookie consent banner. However, it does not publicly disclose a security policy, incident response contacts, or vulnerability disclosure mechanisms, which could be improved to enhance trust and readiness. No vulnerabilities or suspicious indicators were detected, and the WHOIS data aligns with the official government entity, supporting legitimacy. Overall, the website is professional, trustworthy, and well-aligned with its mission. Strategic improvements in security headers and incident response transparency would further strengthen its posture and user confidence.

J

Jugendmigrationsdienste (JMD)

jmd-portal.de

56

Jugendmigrationsdienste (JMD) is a large, government-funded non-profit organization in Germany focused on supporting young people aged 12 to 27 with migration backgrounds through counseling, education, and integration services. The website reflects a well-established nationwide network with approximately 500 service points, supported by recognized partners and government initiatives. The content is professionally presented, multilingual, and accessible, targeting youth and stakeholders in migration integration. Technically, the site is built on TYPO3 CMS with modern web technologies including Bootstrap and Mapbox for interactive maps, and uses Matomo for privacy-conscious analytics. Security posture is strong with HTTPS enforced and a cookie consent mechanism, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, with room for improvement in transparency of security and incident response information.

D

Deutsch-Französischer Bürgerfonds

buergerfonds.eu

55

The Deutsch-Französischer Bürgerfonds website serves as an informational and funding platform dedicated to promoting Franco-German friendship and European cooperation through cultural and social projects. The organization operates as a non-profit entity, targeting German and French citizens and organizations interested in bilateral relations and European integration. The website content is professionally presented in German, with a French partner site linked, reflecting its bi-national focus. The business model centers on advising, networking, and financing relevant projects, positioning the organization as a niche player in the governmental and non-profit sector. Technically, the website is built on the Drupal CMS platform, utilizing modern front-end technologies such as Bootstrap, jQuery, and Google Tag Manager. Cookie consent is managed via Cookiebot, demonstrating compliance with EU privacy regulations. The site is mobile-optimized and exhibits good SEO practices, although some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and a published security policy or vulnerability disclosure. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is privacy protected by EURid, which is typical for EU domains and justified for this type of organization. Overall, the domain and website appear legitimate and trustworthy. The overall risk assessment is low, with recommendations to improve security headers, publish privacy and terms documents, and provide clear contact information for security incidents. These steps would enhance compliance and trustworthiness further.

F

Fundacja Centrum im. prof. Bronisława Geremka

geremek.pl

48

Fundacja Centrum im. prof. Bronisława Geremka is a Polish non-profit foundation established in 2008 to preserve and promote the legacy and public values represented by Professor Bronisław Geremek. The foundation engages in educational programs, public debates, monitoring disinformation, and publishing relevant materials. The website reflects a professional and consistent brand image targeting a general audience interested in culture, education, and European values. Technically, the site is built on WordPress with modern frameworks and includes SEO and accessibility features, though some improvements in security headers and DNSSEC could enhance its posture. The security posture is solid with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with the foundation's mission.

T

Trivali

trivali.be

46

Trivali is a Belgian digital agency specializing in custom web design, webshop development, and marketing services primarily using Drupal and WordPress platforms. The company positions itself as an expert in tailored web solutions, targeting businesses seeking professional digital presence and marketing support. The website reflects a small-sized agency with a clear focus on quality and client collaboration. Technically, the site is built on WordPress with Elementor, integrating modern marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and LinkedIn Insight Tag, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and standard security headers present, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with GDPR-compliant cookie consent and a comprehensive privacy policy. Overall, the domain WHOIS data is restricted due to .be registry policies but shows no suspicious indicators. The website is professional, trustworthy, and well-optimized for SEO and user experience.

V

Vitesco Technologies GmbH

vitesco-technologies.com

64

Vitesco Technologies GmbH is a leading automotive technology company specializing in electrification and powertrain solutions. Recently merged into the Schaeffler Group as of October 1, 2024, the company focuses on sustainable mobility technologies including electric drives, battery management, and hybrid systems. The website reflects this corporate transition and provides comprehensive information for suppliers, investors, and customers. The business model centers on manufacturing and supplying innovative drivetrain components and systems for various vehicle types, positioning itself as a key player in the evolving automotive market. The company leverages its parent Schaeffler Group's global presence and resources to strengthen its market position. Technically, the website is built on modern frameworks including Angular and Kentico CMS, with a responsive design and good SEO practices. It uses TailwindCSS for styling and integrates video content and interactive menus. Analytics are handled via Piwik (Matomo), indicating a moderate level of user tracking balanced with privacy compliance. The site is well-structured and professionally designed, offering a good user experience across devices. From a security perspective, the site enforces HTTPS and shows good SSL configuration. While explicit security headers like Content-Security-Policy are not evident, no critical vulnerabilities or exposed sensitive data were found. Privacy and cookie policies are present and indicate GDPR compliance, though no explicit incident response or security policy pages were detected. The absence of WHOIS data reduces some trust but is mitigated by the corporate nature and transparency of the site. Overall, the website presents a professional and trustworthy digital presence for Vitesco Technologies within the automotive electrification sector. Strategic recommendations include enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen security posture and compliance.

O

Opolsku

opolsku.cz

41

The website www.opolsku.cz serves as an informational and service platform focused on Polish-Czech business cooperation. It provides details about Poland, membership firms, and offers services such as translation, business missions, marketing, and consulting. The target audience appears to be businesses and professionals interested in economic cooperation between Poland and the Czech Republic. The website is built on WordPress using popular plugins and themes, indicating a moderate level of technical maturity. The site is accessible, mobile-optimized, and well-structured, but lacks critical privacy and cookie policies as well as visible contact information, which impacts its compliance and trustworthiness. Security posture is adequate with HTTPS enabled, but security headers and incident response information are missing. The absence of WHOIS data reduces domain trustworthiness and should be investigated further.

F

Ferrit s.r.o.

ferrit.cz

59

Ferrit s.r.o. is a Czech-based company specializing in manufacturing and servicing global mining transport solutions, including suspended monorail systems, rail transport, trackless machinery, mining processing equipment, and safety devices for mining rescue operations. The company targets mining and industrial transport sectors worldwide, boasting a client base across multiple countries as evidenced by their interactive client map. Their business model focuses on providing comprehensive transport and safety solutions for underground mining operations, supported by over 25 years of industry experience and EU funding projects. The website reflects a professional and consistent brand image with multilingual support and active social media engagement. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Analytics, and Google Tag Manager, ensuring responsive design and moderate performance. The site integrates cookie consent mechanisms and secure login/registration forms, indicating attention to privacy and user security. However, some security headers are not explicitly detected, and no public security or incident response policies are found, suggesting room for improvement in transparency and security maturity. Security posture is generally good with HTTPS enforced and secure form handling, but the absence of WHOIS data and domain registration details introduces uncertainty about domain legitimacy. The website shows GDPR compliance through privacy and cookie policies, though terms of service and vulnerability disclosure mechanisms are not evident. Overall, the site is safe, professional, and trustworthy, but would benefit from enhanced security documentation and domain registration transparency. Strategic recommendations include implementing comprehensive security headers, publishing incident response and vulnerability disclosure policies, and verifying domain registration details to strengthen trust and compliance.

O

Objavte

objavte.com

69

Objavte.com is a Slovak-focused platform dedicated to discovering local experiences, hidden places, and cultural insights within Slovakia. The website targets general audiences interested in travel and authentic local experiences. The business appears to be a small startup founded in 2023, leveraging modern web technologies and multilingual support to reach a broader audience. Technically, the site is built on the Bubble.io platform, integrating third-party services such as Cookiebot for cookie consent management, Weglot for translations, and Google Tag Manager for analytics. The site demonstrates good design quality and user experience with responsive and accessible features, although some SEO and accessibility improvements are possible. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. Privacy compliance is strong with a comprehensive cookie policy and GDPR-aligned consent mechanisms. However, the site lacks visible contact information, terms of service, and security policies, which impacts business credibility. Overall, the site is professional and trustworthy but could improve transparency and security documentation.

#

#praveslovenske

praveslovenske.sk

48

The website www.praveslovenske.sk serves as a cultural and promotional platform dedicated to showcasing authentic Slovak products, folklore, history, and tourism. It targets Slovak residents and tourists interested in exploring and supporting local Slovak producers and cultural heritage. The platform operates primarily as a content publisher with integrated marketing and advertising services, leveraging multiple subdomains to segment content into thematic blogs such as food, travel, traditions, crafts, and leisure. Technically, the site is built on WordPress using the jNews theme and WPBakery Page Builder, supplemented by plugins like Ajax Search Pro and AdRotate for search and advertising management. The site is mobile-optimized with good SEO practices and uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, there is room for improvement in accessibility and security headers implementation. From a security perspective, the site enforces HTTPS and uses a GDPR cookie compliance plugin, indicating awareness of privacy regulations. However, it lacks explicit privacy policy and terms of service pages, as well as direct contact information and incident response contacts, which are critical for compliance and trust. No vulnerabilities or WAF protections were detected, and no sensitive data exposure was found. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but requires enhancements in privacy compliance and security best practices to strengthen trust and regulatory adherence.

K

KULT MINOR - Fond na podporu kultúry národnostných menšín

kultminor.sk

39

KULT MINOR is a Slovak public fund dedicated to supporting the culture of national minorities through grants, scholarships, and cultural programs. The organization operates a website primarily in Slovak, providing information about its programs, calls for proposals, and cultural activities. The website is well-structured, uses Joomla CMS, and integrates common web technologies including jQuery, Bootstrap, and Facebook SDK for social media presence. The domain is registered since 2017 with DNSSEC enabled, indicating a legitimate and stable online presence. However, the site lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Cookie consent is implemented properly, reflecting awareness of privacy regulations. Security posture is generally good with HTTPS and DNSSEC, but could be improved by adding security headers and vulnerability disclosure information.

T

Terra Nostra Pizzeria-Ristorante

terranostra.pl

50

Terra Nostra Pizzeria-Ristorante is a small hospitality business based in Poland, specializing in authentic Italian cuisine including gluten-free options. Established in 2018, the restaurant emphasizes quality ingredients and traditional recipes, with a strong local presence and an online ordering platform. The website is built on Joomla CMS and incorporates modern web technologies such as jQuery and slick sliders, providing a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers and incident response information are missing. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable likely due to privacy protection, which is common for this business type.

Polska Federacja Producentów Żywności Związek Pracodawców (PFPŻ ZP) is a well-established Polish federation representing food producers and employers. The organization focuses on providing legal information, educational programs, and industry news related to food safety, legislation, and nutrition. The website serves as a resource hub for industry professionals and the general public interested in food-related regulatory matters. The federation has a strong market position in Poland with over 20 years of history and recognized certifications such as 'Teraz Polska'. Technically, the website uses a custom or legacy CMS with JavaScript libraries including jQuery, Prototype.js, and Google Analytics for tracking. The site is hosted by home.pl S.A., a known Polish hosting provider. While the site is functional and content-rich, it shows some outdated technologies and lacks advanced security headers and DNSSEC, which could be improved. Mobile optimization and accessibility are basic but present. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible security policies or incident response information. No critical vulnerabilities or malicious content were detected. WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, appropriate for the organization's transparency. Overall, the site is trustworthy but could benefit from modern security enhancements and improved technical infrastructure.

W

Wyższa Szkoła Informatyki i Zarządzania

wsiz.pl

48

Wyższa Szkoła Informatyki i Zarządzania (WSIiZ) is a Polish higher education institution specializing in computer science and management, operating since 2001. The website serves as an informational portal for prospective and current students, offering details about academic programs and institutional information. Technically, the site is built on WordPress with common plugins such as Yoast SEO and MegaMenu Pro, and uses Google Tag Manager for analytics. The site is moderately optimized for performance and mobile devices but lacks advanced accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Business credibility is strong given the domain age and consistent WHOIS data. Overall, the site is functional and professional but would benefit from enhanced security and privacy practices.

S

Scala Z Media GmbH

ratzfatz-durch-die-mauer.de

53

Ratzfatz durch die Mauer is an educational platform operated by Scala Z Media GmbH, focused on providing interactive learning experiences about German history, specifically the Berlin Wall and its fall. The website offers a game app and digital teaching materials aimed at children, educators, and parents. The business operates in the education and media sectors within Germany, targeting a niche market with specialized content. Technically, the website is built on WordPress with Elementor and uses modern plugins for SEO, forms, and analytics. Hosting is provided by Alfahosting, as inferred from the nameservers. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no explicit security policy or vulnerability disclosure is found. Privacy compliance is good, with clear privacy and cookie policies in German and consent banners. Contact information is comprehensive, including phone, email, physical address, and contact forms. No adult or questionable content is present, making the site safe for general audiences. Overall, the website is professional, trustworthy, and well-positioned within its educational niche.

I

Ingka Centres Holding B.V.

avion.cz

64

Avion Shopping Park is a large retail shopping center located in Ostrava, Czech Republic, operated under the parent company Ingka Centres Holding B.V. The website presents a professional and well-structured digital presence showcasing a variety of retail shops, restaurants, services, and events aimed at the general public and local community. The business model focuses on providing retail space and customer services, supported by a strong brand association with IKEA. Technically, the website leverages modern web technologies including React and Gatsby, ensuring good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and incident response transparency. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms aligned with GDPR. Overall, the website reflects a trustworthy and professional retail business with moderate to good technical maturity and security awareness.

The website stavbamsk.cz serves as the official platform for the Stavba MSK competition, which promotes and showcases quality construction projects in the Moravian-Silesian Region of the Czech Republic. The site targets both professionals in the construction and architecture sectors and the general public interested in regional development. It provides information about the competition, event results, galleries, and news updates. The business model appears to be a regional promotional and award platform supported by various partners and sponsors. The domain age and WHOIS data confirm a long-standing presence since 2006, reinforcing credibility. Technically, the website is built on WordPress CMS and employs modern web technologies including Bootstrap, jQuery, GSAP, Swiper, and Google reCAPTCHA v3 for form security. The site is mobile-optimized and integrates Google Analytics and Tag Manager for user tracking and marketing insights. Performance is moderate with good design and navigation clarity, though accessibility features are basic. From a security perspective, HTTPS is properly implemented, and forms are protected with reCAPTCHA. However, the absence of security headers and lack of explicit privacy and cookie policies indicate room for improvement in compliance and security posture. No vulnerabilities or exposed sensitive data were detected. The site does not provide incident response or vulnerability disclosure information. Overall, stavbamsk.cz is a credible and professionally maintained regional website with a clear business purpose. To enhance trust and compliance, it should implement privacy and cookie policies, security headers, and consider publishing a security policy or vulnerability disclosure statement.

Vila48.cz is a professionally designed website representing a residential rental business located in Ostrava, Czech Republic. The company offers six modern, fully equipped apartments combining hotel comfort with private rental flexibility, targeting firms, managers, tourists, students, and individuals seeking transitional housing. The business has a credible market position supported by an award-winning renovation and a clear focus on premium residential services. Technically, the website is built on WordPress with Elementor, leveraging modern JavaScript libraries and Google services for analytics and marketing. The site is mobile-optimized and SEO-friendly with structured data implementation. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks security headers and formal privacy or cookie policies, indicating compliance gaps. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

W

wirtschaftswissen Financial Publishing Group

wirtschaftswissen.de

62

wirtschaftswissen.de is a German-language business knowledge and compliance information platform operated by wirtschaftswissen Financial Publishing Group. The website provides legally sound answers to business questions, current court rulings, expert guides, newsletters, webinars, and a shop for business-related products. It targets business professionals, HR managers, employers, and entrepreneurs seeking practical and legal business advice. The platform is positioned as a reputable source of business knowledge in the German market with a medium-sized operation. Technically, the website is hosted on Amazon AWS infrastructure, uses WordPress CMS, and employs modern web technologies including JavaScript, CSS, and FriendlyCaptcha for bot protection on forms. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and uses CAPTCHA to protect form submissions. However, it lacks visible security headers and does not publish privacy, cookie, or incident response policies in the analyzed content. No contact information for data protection officers or incident response teams is found. There are no detected vulnerabilities or exposed sensitive data, but privacy compliance is weak due to missing policies. Overall, wirtschaftswissen.de presents a professional and trustworthy business information platform with good content quality and technical implementation. The main risks relate to privacy compliance and security policy transparency. Strategic improvements in these areas would enhance trust and regulatory adherence.

R

RadioOffice GmbH

radio-pr.de

38

The website www.radio-pr.de is a professional German-language blog operated by RadioOffice GmbH, specializing in Radio-PR and audio content marketing. It serves communications professionals and companies interested in leveraging radio and audio channels for PR purposes. The site provides educational content, expert insights, and practical advice on radio PR formats such as infomercials, O-Ton services, and podcasts. The business operates in the media sector with a niche focus and small company size. Technically, the site is built on WordPress using the Twenty Eleven theme and Yoast SEO plugin, hosted via DomainControl.com. The site is moderately optimized for performance and mobile devices, with good SEO practices but basic accessibility features. Security posture is adequate with HTTPS enabled but lacks security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is limited to a search form and social media links, with no direct emails or phone numbers disclosed. The domain WHOIS data is minimal but consistent with the website's business profile, indicating legitimacy. Overall, the website is trustworthy, content-rich, and professionally maintained but would benefit from enhanced privacy compliance and security hardening.

B

Bischöfliche Aktion Adveniat e.V.

adveniat.de

54

Adveniat is a German non-profit organization dedicated to supporting people in Latin America and the Caribbean through aid projects, fundraising, and awareness campaigns. The website serves as an information hub for their projects, donation options, events, and news updates. It targets a general audience interested in solidarity and development aid in Latin America. The organization maintains a consistent brand presence and leverages social media channels to extend its reach. Technically, the website is built on WordPress using the Avada theme and several plugins including WooCommerce for e-commerce functionality, Yoast SEO for search optimization, and Borlabs Cookie for cookie consent management. The site is served over HTTPS and includes modern web technologies such as jQuery and Google Fonts. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and detailed security or privacy policies. No vulnerabilities or exposed sensitive data were detected. Tracking technologies include Google Tag Manager, Facebook Pixel, and Google Ads, indicating moderate user tracking. Overall, the website is professional, trustworthy, and safe for general audiences. However, improvements could be made in privacy compliance documentation, security header implementation, and incident response readiness to enhance the security posture and regulatory compliance.

A

Auswärtiges Amt

auswaertiges-amt.de

60

The Auswärtiges Amt website serves as the official digital presence of the German Federal Foreign Office, providing authoritative information on German foreign policy, consular services, travel safety advisories, and career opportunities within the foreign service. It targets a broad audience including travelers, diplomats, and the general public interested in Germany's international relations. The site maintains a strong market position as a trusted government source with consistent branding and comprehensive content.

N

Nadace ČEZ

pomahejpohybem.cz

54

Pomáhej Pohybem is a charitable initiative supported by Nadace ČEZ and Skupina ČEZ, focused on encouraging physical activity through a mobile application that converts user activity into points for charitable projects. The platform targets a broad audience interested in fitness and social good, leveraging a modern React-based web infrastructure and mobile app presence on iOS and Android. The website demonstrates good digital maturity with a comprehensive cookie consent mechanism and integration of analytics tools. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response information are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature non-profit operation backed by a major energy group.

J

JYSK

jysk.cz

58

JYSK.cz is the Czech Republic branch of the well-established JYSK retail group, specializing in furniture and home goods. The website offers a comprehensive online shopping experience complemented by physical stores, targeting general consumers in the Czech market. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site is built on Drupal 10, leveraging modern analytics and marketing tools such as Google Tag Manager, Dynamic Yield, and Salesforce Chat, hosted on a robust CDN infrastructure via Akamai. Security posture is strong with HTTPS enforced, security headers present, and GDPR-compliant cookie consent mechanisms. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

G

Grunt od nowa

gruntodnowa.pl

56

Grunt od nowa is a Polish website built on WordPress, primarily targeting a Polish-speaking audience. The site appears to be a small-scale business or project launched around 2022, with basic content and SEO optimization via Yoast SEO. The presence of Cookiebot indicates an awareness of cookie consent and privacy compliance, although no explicit privacy policy or terms of service pages were found in the analyzed content. The website uses Google Analytics and Google Tag Manager for traffic analysis and marketing purposes. Technically, the site employs standard web technologies including jQuery and asynchronous script loading for performance. Security posture is moderate with HTTPS enabled and cookie consent implemented, but lacks visible security headers and detailed security policies.

P

Polska Akademia Nauk

pan.pl

47

Polska Akademia Nauk is a prestigious Polish national scientific institution established in 1952, dedicated to advancing scientific research and education across multiple disciplines. The website serves as an information portal for the academy's activities, news, events, and institutional information, targeting researchers, academics, and the general public interested in science. The site is built on a modern WordPress platform with standard plugins and integrates Google Analytics for visitor tracking. The technical infrastructure is solid with good mobile optimization and accessibility features, hosted likely by home.pl S.A., a reputable Polish registrar and hosting provider. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is weak due to the absence of explicit privacy and cookie policies on the homepage. Overall, the domain registration data aligns well with the website content, confirming legitimacy and trustworthiness. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing incident response information to strengthen trust and security posture.

S

SCIO

scio.cz

40

SCIO is a well-established Czech education services provider specializing in entrance exams, preparatory courses, and educational testing products for students and schools. With over 30 years of experience, SCIO holds a strong market position in the Czech education sector, offering a broad portfolio of services including national comparative exams for universities and secondary schools, as well as professional tools for educators. The website reflects a professional and user-friendly digital presence with clear navigation and comprehensive content tailored to its target audience of students, parents, and educational institutions. Technically, the site employs modern web technologies, including JavaScript, Google Tag Manager, and CookieHub for privacy compliance, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and professional presentation support legitimacy. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

Č

Český paralympijský výbor

paralympic.cz

48

The Czech Paralympic Committee operates a professional and comprehensive website serving the Czech parasport community. The site provides news, event information, athlete profiles, and resources related to paralympic sports. It targets athletes, sports fans, media, and partners within the Czech Republic. The organization is well-established, with a domain age dating back to 2000, reflecting a mature presence in the non-profit sports sector. Technically, the website is built on WordPress 6.8.3, utilizing a variety of plugins for social media integration, event management, and user engagement such as Mailchimp for newsletters. The site is hosted by a Czech registrar and uses modern web technologies including Google Fonts and JavaScript libraries. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. However, security headers are minimal, and no explicit security or incident response policies are published. No vulnerabilities or exposed sensitive data were detected. The site uses tracking and analytics tools such as Google Analytics, Microsoft Clarity, and Facebook Pixel, with moderate user tracking levels but good privacy compliance. Overall, the website is trustworthy, professionally maintained, and aligned with its business purpose. Strategic recommendations include enhancing security headers, publishing explicit security policies, and improving accessibility. These steps would further strengthen the site's security posture and user trust.

W

Woox

woox.cz

9

WOOX.cz is a Czech-based e-commerce retailer specializing in functional clothing designed for various weather conditions and outdoor activities. The company targets outdoor enthusiasts and general consumers seeking durable and versatile apparel. Their business model includes direct online sales and a membership club (WOOX Klub) offering significant discounts. The website is professionally designed with clear navigation and supports social login options for user convenience. Technically, the site leverages the Shoptet e-commerce platform and integrates multiple modern analytics and marketing tools such as Google Tag Manager, Microsoft Clarity, Facebook SDK, and Segmentify. The site is mobile-optimized and uses HTTPS to secure user data. However, some security headers are not explicitly detected, and no dedicated security or incident response policies are published. From a security perspective, the website demonstrates good practices like secure login forms and cookie consent mechanisms but lacks transparency in security policies and vulnerability disclosures. The absence of WHOIS data limits the ability to fully verify domain legitimacy, although the site content and technical setup suggest a legitimate business. Overall, WOOX.cz presents a moderate risk profile with room for improvement in privacy compliance and security transparency. Strategic recommendations include publishing a privacy policy, enhancing security headers, and providing incident response contacts to increase trust and compliance.

B

BRNO OPEN 2023

brnoopen.eu

37

The website brnoopen.eu serves as the official platform for the BRNO OPEN 2023 dance sport event, specifically hosting the WDSF World Championships in Latin and Showdance Standard categories. The site targets dance sport enthusiasts, competitors, and attendees primarily in the Czech Republic. The business model revolves around event organization and promotion within the niche of competitive dance sport. Technically, the site is built on WordPress using the Divi theme, leveraging modern web fonts and structured data for SEO. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain registration is consistent with the business location and nature, registered through a reputable Czech registrar, ZONER a.s. Overall, the site is professional and relevant but would benefit from enhanced security and compliance measures.

BM Real Property s.r.o. is a small family-owned real estate development company operating primarily in the Moravskoslezský region of the Czech Republic. The company focuses on delivering comprehensive construction and real estate services, managing projects from inception to completion. Their market position is that of a local developer emphasizing quality and client satisfaction, with a portfolio including residential and hospitality projects such as Vila 48 and Penzion Závada. The website is professionally built on WordPress using Elementor and related plugins, hosted on a Czech hosting provider, and supports Czech and English languages. Technically, the site is moderately performant and mobile-optimized but lacks some security headers and privacy compliance elements. Security posture is good with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and privacy policies are recommended. Overall, the website is trustworthy and professional, with clear contact information and business legitimacy confirmed by WHOIS data.

pixeldiversity GmbH operates a technology-focused website offering cloud hosting, Plesk administration, R & RStudio environments, newsletter distribution, and mail discussion services. The website serves primarily as a portal linking to various internal and related service domains. The business appears to target technology professionals and organizations requiring specialized hosting and software environments. However, the website content is minimal and lacks comprehensive business or contact information, which limits its professional presentation. From a technical perspective, the site uses basic HTML and CSS without detectable modern frameworks or CMS platforms. There is no evidence of HTTPS enforcement or security headers, which indicates a low maturity level in security implementation. The absence of privacy, cookie, and terms of service policies further highlights compliance gaps. The site is accessible without WAF or security challenges but lacks SEO optimization and mobile responsiveness. Security posture is weak due to missing HTTPS, lack of security headers, and no visible incident response or vulnerability disclosure mechanisms. The WHOIS data is missing or inaccessible, which raises concerns about domain legitimacy and transparency. No contact emails, phone numbers, or social media links are provided, reducing trust and business credibility. Overall, the website presents a low-risk content profile but suffers from significant security, compliance, and transparency deficiencies. Strategic improvements in security infrastructure, privacy compliance, and business information disclosure are recommended to enhance trustworthiness and operational resilience.

The website smartbydleni.cz is currently a domain parking and sales landing page with no active business content or services. The domain was registered recently in 2022 and uses parking name servers, indicating it is not currently used for operational business purposes. The site contains minimal content, primarily advertising and a link to contact the domain owner. Technically, the site uses basic JavaScript and is hosted behind a CDN (Cloudfront). There is no evidence of a CMS or advanced frameworks. Security posture is weak due to lack of HTTPS information, absence of security headers, and no privacy or cookie policies. No contact or business information is provided, which limits trust and credibility. Overall, the site is low risk but also low value from a business or security perspective.