Security Directory

G

Gminna Biblioteka Publiczna w Baborowie

biblioteka-baborow.eu

45

Gminna Biblioteka Publiczna w Baborowie is a public municipal library serving the local community of Baborów, Poland. The website provides information about library services, events, contact details, and access to an online catalog. The site targets local residents and library users, offering public access to books and cultural events. The business model is government-funded public service with a focus on education and community engagement. Technically, the website is built on Joomla! CMS using common web technologies such as jQuery, Bootstrap 3, and Swiper.js. Accessibility features are implemented via EqualWeb, enhancing usability for users with disabilities. The site is mobile-optimized and has a moderate performance profile. Security posture is adequate with HTTPS enforced and secure form handling, but lacks some security headers and explicit incident response policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and serves its public service mission effectively.

The domain eboi.pl is registered since 2006 with a Polish registrar LH.pl Sp. z o.o., indicating a potentially established entity. However, the website content is completely inaccessible, returning a standard HTTP 404 Not Found error page with no metadata, structured data, or business information. This lack of content prevents any meaningful analysis of the company's business model, services, or market position. Technically, the site lacks HTTPS and security headers, which are critical for secure web presence. No privacy or cookie policies are present, indicating non-compliance with GDPR and other privacy regulations. Overall, the website is non-functional and does not provide any user or business value in its current state.

S

Stadt Teublitz

teublitz.de

59

The website www.teublitz.de serves as the official municipal portal for the city of Teublitz in Germany. It provides residents, visitors, and local businesses with access to city information, government services, event calendars, and community news. The site is well-structured, professionally designed, and consistently branded with the city logo and government-related content. The target audience includes local citizens and tourists seeking information about the city and its offerings. Technically, the site is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery, Stimulus, and Tiny Slider for interactive features. It employs Matomo analytics with user consent mechanisms, indicating a privacy-conscious approach. Hosting is managed via domaincontrol.com nameservers, suggesting a professional hosting environment. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the website enforces HTTPS and includes cookie consent banners, reflecting compliance with GDPR. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a dedicated security policy or incident response contact is noted as an area for improvement. Overall, the site demonstrates a solid security posture and digital maturity appropriate for a municipal government portal. It is trustworthy, safe, and compliant with privacy regulations, serving its community effectively.

A

Aftermarket.pl Limited

edukoopolskie.pl

52

The website edukoopolskie.pl is currently a parked domain managed by Aftermarket.pl Limited, a major domain registrar and marketplace in Poland. The site content is minimal and serves primarily as a landing page to facilitate domain sale inquiries via a contact form linked to the aftermarket.pl platform. The business behind the domain is focused on domain registration, hosting, and domain marketplace services, targeting domain buyers, sellers, and wholesale clients in Poland. The domain parking page lacks original content, privacy policies, or direct contact details, indicating it is not actively used for business operations but held for resale or future use. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. It is mobile responsive with moderate performance and basic SEO. Security posture is moderate with HTTPS redirect and DNSSEC enabled, but no security headers or detailed security policies are present. Tracking is minimal via a single tracking pixel from aftermarket.pl. No privacy or cookie policies are implemented, and no direct company contact emails or phone numbers are provided. The WHOIS data shows the domain is registered with Aftermarket.pl Limited, but the creation date is anomalously set in the future (March 2025), which is likely a data error or placeholder. This inconsistency reduces trustworthiness but does not indicate malicious intent. Overall, the domain is legitimate but inactive, serving as a placeholder for potential resale. Recommendations include adding privacy and cookie policies to improve compliance, implementing security headers, providing direct contact information for security and business inquiries, and correcting WHOIS data if possible. These steps would enhance trust, security posture, and compliance readiness.

M

město Jeseník

nasjesenik.cz

60

The website nasjesenik.cz serves as the official digital presence for the city of Jeseník in the Czech Republic. It provides residents and visitors with information about city projects, news updates, strategic plans, and public services. The site is well-branded with consistent city logos and offers a user-friendly experience with clear navigation and search functionality. The target audience primarily includes local residents and stakeholders interested in municipal developments. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, Google Analytics, Google Tag Manager, and Mapbox for interactive maps. Hosting and DNS are managed via Cloudflare, ensuring good performance and security. The site is mobile-optimized and includes cookie consent mechanisms, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and integrates consent management for analytics. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not evident, and there is no published security policy or incident response contact. No vulnerabilities or sensitive data exposures were detected in the analyzed content. Privacy compliance is partial, with cookie consent present but no visible privacy or terms of service pages. Overall, the website is trustworthy and professional, suitable for a municipal government entity. Strategic recommendations include publishing comprehensive privacy and terms of service documents, enhancing security headers, and providing clear contact information for security incidents to improve compliance and user trust.

O

Objednáme s.r.o.

objedname.eu

58

Objednáme s.r.o. operates a Czech-language online platform providing a comprehensive restaurant management system integrating e-commerce, mobile applications, POS, telephone systems, and logistics modules. The company targets restaurant owners and hospitality businesses in the Czech Republic, positioning itself as a specialized provider of tailored technological solutions to streamline restaurant operations. The website reflects a small but professional business with consistent branding and a clear value proposition. Technically, the site employs modern JavaScript libraries and integrates multiple analytics and marketing tools, hosted by a reputable Czech provider. Security posture is solid with enforced HTTPS, reCaptcha protection, and cookie consent mechanisms, though formal security policies and headers could be improved. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements, supporting a moderate to high trust level.

The website rr-strednimorava.cz is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, specifically error 1005 indicating that the autonomous system number (ASN) of the visitor's IP is banned. This results in a complete lack of accessible content, including business information, contact details, or policies. The domain was registered in 2022 and uses Cloudflare for DNS and security services. Due to the WAF block, no meaningful content or metadata is available for analysis, severely limiting the ability to assess the business or technical maturity of the site. Security posture cannot be evaluated beyond the presence of Cloudflare protection, and privacy compliance indicators are absent.

P

Podnikajte.sk, s.r.o.

podnikajte.sk

10

Podnikajte.sk, s.r.o. operates a leading Slovak online portal dedicated to providing comprehensive information and resources for entrepreneurs and self-employed individuals. The website offers a wide range of content including inspirational stories, legal and tax advice, financial management, and marketing strategies, positioning itself as a trusted source in the Slovak business media sector. Founded in 2005, the company has established a consistent brand presence and maintains a professional, user-friendly website optimized for mobile and desktop users. Technically, the website employs modern web technologies such as Google Tag Manager, Firebase Messaging, and Google Analytics, alongside a Bootstrap-based responsive design. It integrates consent management compliant with GDPR regulations, ensuring user privacy and data protection. The site uses HTTPS with good SSL configuration and includes multiple third-party scripts for analytics and advertising, managed transparently through user consent mechanisms. From a security perspective, the site demonstrates good practices including HTTPS enforcement, CSRF token usage in forms, and GDPR-compliant cookie consent. However, there is room for improvement in implementing additional security headers and publishing a dedicated security policy or incident response information. No vulnerabilities or suspicious activities were detected in the content or scripts. Overall, Podnikajte.sk presents a low-risk profile with strong business credibility, good content quality, and adherence to privacy regulations. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer direct contact information to further improve trust and compliance.

S

Slovenská Bioplynová Asociácia

sba.sk

11

Slovenská Bioplynová Asociácia (SBA) is a Slovak non-profit interest association and industrial cluster focused on the biogas and biomethane energy sector. Established in 2012 and a member of the European Biogas Association since 2018, SBA serves as a platform for operators, technology providers, and government stakeholders to collaborate and promote sustainable energy solutions. The website offers comprehensive information about biogas, events, services, and membership opportunities, targeting industry professionals and stakeholders in Slovakia and the broader Central European region. Technically, the website is built on WordPress 6.8.3, utilizing modern JavaScript libraries such as Swiper.js and jQuery, with integrations for Google Analytics, Google Tag Manager, and reCAPTCHA for form security. The site demonstrates good mobile optimization, SEO practices, and accessibility basics. Hosting appears to be managed by Pressidium, a reputable WordPress hosting provider. From a security perspective, the site enforces HTTPS, employs cookie consent mechanisms compliant with GDPR, and obfuscates email addresses to reduce spam. While explicit security headers are not fully confirmed, the site uses best practices like reCAPTCHA and cookie consent. No critical vulnerabilities or exposed sensitive data were detected. However, recommendations include implementing additional security headers and publishing a vulnerability disclosure policy. Overall, SBA's website is professional, trustworthy, and well-aligned with its business mission. It provides valuable resources and engagement channels for its community. The domain registration data aligns with the organization's claims, reinforcing legitimacy. The site poses minimal risk and demonstrates a mature digital presence suitable for its sector.

Účtovná jednotka, s.r.o. is a Slovak-based accounting and tax advisory firm established in 2009, offering a comprehensive portfolio of services including simple and double-entry accounting, payroll and HR services, tax consulting, and economic advisory. The company positions itself as a leader in the Slovak accounting services market, targeting local businesses and entrepreneurs seeking reliable and professional financial services. Their website reflects a professional and consistent brand image with clear navigation and relevant content tailored to their audience. Technically, the site is built on the SilverStripe CMS platform, enhanced with Google Analytics and Tag Manager for tracking, and hosted on Slovak hosting providers. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO.

The website mladyfarmar.sk is currently inaccessible, returning a 403 Forbidden error page with minimal HTML content. This prevents any meaningful analysis of the site's content, metadata, or security posture. The domain is registered since 2014 with a Slovak registrar and uses Slovak hosting services with DNSSEC enabled, indicating a legitimate registration and moderate trustworthiness. However, the lack of accessible content and absence of privacy, cookie, or contact information severely limits the ability to assess business operations, compliance, or security maturity. The site appears to be either under maintenance, misconfigured, or intentionally restricted. Without access to actual website content, no conclusions can be drawn about the business model, services, or technical infrastructure beyond the domain registration data.

F

FONTIONNEL

fontionnel.sk

10

Fontionnel&Co s.r.o. is a Slovak-based consulting company specializing in business formation, accounting, and related services targeted primarily at small and medium-sized enterprises in Slovakia and neighboring countries. The company offers a range of services including the establishment of limited liability companies, sale of ready-made companies, accounting and tax services, virtual office solutions, and tax registrations. Their market position is that of a regional service provider with a professional online presence and a clear focus on SME clients. The website is well-structured, multilingual, and provides transparent contact information and client references, enhancing trust and credibility. Technically, the website is built on WordPress with a modern technology stack including jQuery, Google Tag Manager, Google Analytics, Facebook Pixel, and Smartlook for analytics and marketing. The site uses reCAPTCHA v3 for form protection and has a responsive design optimized for mobile devices. SEO practices are good with proper meta tags and structured data. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved to enhance security posture. From a security perspective, the site enforces HTTPS and uses modern anti-bot measures on forms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic but present, with privacy and cookie policies available and GDPR compliance indicated. Contact information is comprehensive, but no explicit security or incident response policies are published. Overall, the website presents a low risk with a solid business credibility profile, good technical implementation, and moderate security posture. Strategic improvements in security headers and enhanced privacy disclosures would further strengthen the site’s trustworthiness and compliance.

Z

Zones.sk

zones.sk

10

Zones.sk is a well-established Slovak educational portal primarily serving students with a wide range of study materials including referáty (papers), study notes, exam preparation content, and student job listings. It holds a strong market position as the largest student portal in Slovakia with over one million monthly visitors. The website offers multiple related subdomains targeting specific educational needs such as maturita exams and testovanie assessments. Technically, the site uses modern web technologies including Google Fonts, Google Tag Manager, Facebook SDK, and Google Adsense for advertising and analytics. The site is served over HTTPS with appropriate security headers, and it implements a consent management platform for GDPR cookie compliance. However, it lacks explicit privacy policy and terms of service pages, which are important for full compliance and user trust. No direct contact emails or phone numbers are publicly listed, which may limit user support transparency. The content is safe for general audiences, focusing on educational materials without any adult or explicit content. Overall, Zones.sk demonstrates a mature digital presence with good security posture but could improve privacy transparency and user contact availability.

E

euroCRIS

eurocris.org

10

euroCRIS is an established international non-profit organization focused on research information infrastructure, standards, and community services. Founded in 2001, it serves research institutions, universities, and professionals involved in research information systems. The website provides information about their key services including the Directory of Research Information Systems (DRIS), CERIF standard development, and a repository of research publications and event materials. The organization maintains a professional presence with regular membership meetings and conferences, positioning itself as a key player in the education and research information sector. Technically, the website is built on Drupal 7 CMS with a range of JavaScript libraries including jQuery, Slick Carousel, and Google Analytics for tracking. The site is mobile optimized and uses HTTPS with Google reCAPTCHA for form protection. However, the use of an outdated CMS and older jQuery version introduces potential security risks. DNSSEC is not enabled, and security headers are not detected, indicating room for improvement in security hardening. From a security perspective, the site follows basic best practices such as HTTPS and cookie consent but lacks advanced security policies, incident response information, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data confirms the domain's legitimacy and long-standing registration, supporting the organization's credibility. Overall, euroCRIS presents a trustworthy and professional online presence with good content quality and business credibility. Security posture is moderate with recommendations to upgrade CMS, enable DNSSEC, and implement security headers. Privacy compliance is basic with a privacy policy and cookie banner but no terms of service or explicit GDPR compliance statements.

I

International Association of University Libraries (IATUL)

iatul.org

46

The International Association of University Libraries (IATUL) is a well-established non-governmental organization founded in 1955, serving leaders of university and research libraries worldwide. It provides a membership-based platform offering conferences, travel grants, special interest groups, and research programs. The organization maintains a strong market position with a global network and reputable partners, emphasizing community and professional development in the education sector. Technically, the website is built on the Neos CMS platform, utilizing modern web technologies such as Bootstrap, jQuery, and FlipClock for interactive features. The site is mobile-optimized with good SEO practices and moderate performance. Analytics are implemented via Google Analytics and Tag Manager, reflecting a moderate level of user tracking. From a security perspective, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and security headers, which are recommended for enhanced security. There is no public incident response or vulnerability disclosure information, which could be improved to strengthen trust and compliance. Overall, the website is professional, trustworthy, and content-rich, with minor technical and security improvements recommended to enhance its posture and compliance. The risk level is low, with no signs of malicious or inappropriate content.

L

Licensing Executives Society International

lesi.org

47

Licensing Executives Society International (LESI) is a well-established global professional society focused on advancing the business of intellectual property licensing. Founded in 1996, LESI provides its members with educational resources, publications, events, and networking opportunities to enhance their skills and knowledge in licensing and protecting intellectual property. The organization maintains a strong international presence with multiple national and regional societies, positioning itself as a key player in the intellectual property domain. Technically, the website is built on WordPress using the Elementor page builder and several Jet plugins, indicating a modern and flexible content management infrastructure. The site employs Google Analytics and Google Tag Manager for analytics and marketing purposes, and NitroPack for performance optimization. The website is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and security headers, and does not publish a security policy or incident response contact information. The cookie consent mechanism is comprehensive and GDPR-compliant, reflecting a good privacy posture. Overall, LESI's website is professional, trustworthy, and well-maintained, with minor areas for security and compliance improvement. The absence of direct contact emails or phone numbers on the homepage suggests contact details may be located deeper within the site or require member login. Strategic recommendations include enabling DNSSEC, adding security headers, publishing security and incident response policies, and providing clearer contact information to enhance trust and compliance.

AUTM is a well-established nonprofit association focused on technology transfer professionals, providing education, advocacy, and networking opportunities globally. The website reflects a mature digital presence with comprehensive content, professional design, and clear navigation targeting technology transfer professionals and academic-industry collaborators. The technical infrastructure leverages modern web technologies including ASP.NET WebForms, Bootstrap, and multiple analytics and marketing tools, indicating a moderate to advanced digital maturity. Security posture is solid with HTTPS, domain locks, and cookie consent mechanisms, though improvements such as DNSSEC and enhanced security headers could be made. Overall, the site is trustworthy, compliant with privacy regulations, and serves its community effectively.

S

Science Link

science-link.eu

66

Science Link is a European Union part-financed flagship project that operates as a network connecting leading research facilities specializing in photon and neutron sources with their users. The project facilitates innovation and entrepreneurship in the Baltic Sea Region by providing companies and researchers free access to advanced large-scale research infrastructures for R&D purposes. The website reflects a professional and well-structured digital presence, leveraging modern web technologies such as Bootstrap and Matomo analytics, and is built on the Zope Management System CMS. The content is relevant and targeted towards companies and research entities seeking scientific collaboration and access to specialized measurement facilities. Security-wise, the site enforces HTTPS, includes privacy and cookie consent mechanisms, and uses privacy-friendly social sharing tools, although it lacks explicit security policy and incident response contact information. The absence of WHOIS registrant data is due to privacy protection policies by EURid, which is justified given the nature of the project. Overall, the website presents a trustworthy and credible digital front for the Science Link network, with moderate technical performance and good privacy compliance.

S

SARIO, Slovak Investment and Trade Development Agency

findin.sk

9

The website belongs to SARIO, the Slovak Investment and Trade Development Agency, a government entity focused on promoting investment and trade in Slovakia. The domain is relatively new, created in 2023, and uses Slovak government DNS servers with DNSSEC enabled, indicating legitimacy and alignment with official government infrastructure. The website uses modern web technologies including Bootstrap 5 and custom web fonts, providing a basic but functional user experience with mobile optimization. However, the site lacks critical privacy and cookie policies, contact information, and security headers, which are important for compliance and user trust. No WAF or blocking mechanisms were detected, and the site content is accessible and safe for general audiences.

E

European Angel Investment Summit

europeanangelsummit.com

60

The European Angel Investment Summit (EAIS) website serves as a professional platform for an event focused on early-stage investment and innovation within Europe. Organized by reputable entities such as the European Business Angel Network (EBAN), the InvestEU Portal, and the European Commission, the site targets investors, entrepreneurs, and policymakers. The website is built on Squarespace, featuring a modern design and moderate performance with mobile optimization. Security posture is solid with HTTPS and HSTS enabled, but lacks comprehensive privacy and cookie policies, as well as explicit contact information for security or data protection matters. WHOIS data is unavailable, which slightly diminishes domain trustworthiness. Overall, the site is credible and professional but would benefit from enhanced privacy compliance and transparency.

Invest Europe is a leading European industry association representing private equity, venture capital, and infrastructure investors. The organization serves as the voice of private capital across Europe, providing advocacy, data, research, and networking opportunities to its members. The website reflects a professional and authoritative presence consistent with its role in the financial sector. The technical infrastructure employs modern JavaScript libraries such as jQuery, Magnific Popup, and Flickity Carousel, with Google Tag Manager for analytics and marketing. The site is well-optimized for performance and mobile use, with good SEO and accessibility features. Security posture is strong with HTTPS enforced and multiple security headers present, though there is room for improvement in publishing explicit security policies and incident response information. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website and domain present a trustworthy and credible image appropriate for an established European industry association.

S

Slovak Venture Capital & Private Equity Association SLOVCA

slovca.sk

40

Slovak Venture Capital & Private Equity Association SLOVCA is a Slovak industry association focused on representing and supporting the private equity and venture capital sector within Slovakia. The website provides information about the association's activities, membership, events, and industry news, targeting investors, startups, and finance professionals. The association maintains partnerships with similar European organizations, enhancing its market position as a key industry player in Slovakia's finance sector. Technically, the website uses a modern tech stack including jQuery, Magnific Popup, Google Analytics, and Google Maps API, with a custom or unknown CMS. The site is mobile optimized and presents a professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and implements a cookie consent mechanism but lacks explicit security headers and detailed privacy or security policies. Overall, the website is trustworthy and professionally maintained, though it could improve in privacy compliance and security best practices.

D

DropCatch.com

medienundbildung.com

58

DropCatch.com is a domain auction and backorder service specializing in securing expiring domain names for customers. The website presents a professional and modern interface built with Angular and Material Design components, indicating a mature technical infrastructure. It leverages Google Tag Manager and Google reCAPTCHA Enterprise for analytics and bot protection, reflecting a focus on user experience and security. However, the absence of WHOIS registration data for the domain www.dropcatch.com raises concerns about domain legitimacy or privacy protection. The website lacks visible privacy, cookie, and terms of service policies, as well as contact information, which impacts trust and compliance. Security headers and SSL configuration details are not available, suggesting potential areas for improvement in security posture. Overall, the site is accessible and safe for general audiences but requires enhancements in transparency, security, and compliance to strengthen business credibility and user trust.

W

WomNet

daifc.de

9

WomNet is a German lifestyle and community website focused on empowering women through inspirational content, personal stories, and interviews. The site targets women interested in career, relationships, health, fashion, and female empowerment. It operates as a small media portal with a niche market position emphasizing authentic and heartfelt content. Technically, the site is built using the Publii static site CMS and leverages Cloudflare for DNS and security, with a frontend stack including jQuery and FontAwesome. The website is accessible, mobile-optimized, and uses HTTPS, but lacks advanced security headers and privacy compliance documentation. Security posture is moderate with room for improvement in policy transparency and incident response readiness. Overall, the site is functional and professional but would benefit from enhanced privacy policies, contact information, and security best practices to increase trust and compliance.

S

Sparda-Bank Südwest

sparda-sw.de

62

Sparda-Bank Südwest is a regional cooperative bank in Germany serving private customers with banking and financial services. The website is professionally designed using modern web technologies such as Angular Material and includes monitoring via Dynatrace. However, the site lacks explicit privacy and cookie policies, as well as visible contact information and security policies, which are critical for a financial institution. The domain registration data aligns well with the business claims, indicating legitimacy and consistency. Security posture is limited based on the provided data, with no detected security headers or incident response contacts. Overall, the site is functional and professional but requires improvements in privacy compliance and security transparency to meet industry standards.

Volkshochschule Kaiserslautern is a regional adult education provider in Germany offering a wide range of courses including languages, health, culture, and professional development. The website is built on TYPO3 CMS with modern frontend technologies and provides a professional, well-structured user experience. The institution maintains partnerships with local organizations and promotes community learning initiatives such as a MakerSpace. Security posture is solid with HTTPS and secure login forms, though improvements are recommended in security headers and cookie consent mechanisms. The website is GDPR compliant with a clear privacy policy and terms of service. Overall, the site reflects a trustworthy and credible educational institution with good digital maturity.

S

scena.ai

scena.ai

54

scena.ai is a technology company specializing in AI-driven interactive video and avatar creation solutions. Their platform enables users to create engaging, multilingual interactive videos and AI avatars with voice cloning capabilities, targeting businesses and organizations in marketing, e-learning, and customer engagement sectors. The company positions itself as an innovative SaaS provider with scenario-based dialogue editing and no-code tools, supported by reputable clients and certifications. Technically, scena.ai employs modern JavaScript libraries and cloud hosting with Cloudflare DNS, integrating analytics and marketing tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag. The website is well-designed, mobile-optimized, and SEO-friendly, providing a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like enabling DNSSEC and publishing explicit security policies are recommended. Overall, scena.ai demonstrates a mature digital presence with strong business credibility and compliance, suitable for its market niche.

G

GMM AG Medien Marketing Kommunikation

mediathek-deutschland.com

60

Mediathek Deutschland is a German ad-free video platform launched in 2022, offering curated educational and cultural video content including documentaries, talks, and podcasts. The platform targets German-speaking audiences interested in non-commercial media content and operates with a business model likely supported by partnerships and media marketing services. The website is professionally designed with good navigation and mobile optimization, leveraging technologies such as Bootstrap, jQuery, Matomo analytics, and Usercentrics for consent management. Security posture is moderate with HTTPS enforced and cookie consent implemented, though improvements are recommended in DNS security and HTTP security headers. The domain registration is consistent with the business branding and shows no suspicious patterns, supporting legitimacy. Overall, the platform presents a trustworthy and professional media service with a focus on privacy and user experience.

W

Weltoffenes Thüringen

thueringen-weltoffen.de

62

Weltoffenes Thüringen is a non-profit initiative dedicated to promoting democracy, human dignity, pluralistic democracy, and European unity within the Free State of Thuringia, Germany. The website serves as a platform for organizations and individuals to support and engage with the initiative, offering resources such as logos, banners, and a registration form for supporters. The initiative enjoys broad regional support, with thousands of supporters and numerous partner organizations displayed prominently. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and basic accessibility. It uses HTTPS for secure communication but lacks advanced security headers and cookie consent mechanisms. The site does not employ advertising or tracking technologies, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and anti-spam measures in forms but could improve by implementing security headers and publishing security policies. Privacy compliance is basic, with a privacy policy linked externally but no cookie consent banner. Overall, the website is trustworthy, professionally presented, and aligned with its non-profit mission. It is accessible without WAF or blocking mechanisms, and the domain WHOIS data supports legitimacy. Strategic improvements in security and privacy compliance would enhance its posture further.