Security Directory

A

Ariadne Network

ariadne-network.eu

44

Ariadne Network is a European non-profit organization serving as a peer-to-peer network for over 600 funders and philanthropists focused on social change and human rights. The organization provides a variety of services including a community hub, grant-making skills development, resource sharing, and networking opportunities both online and offline. The website reflects a mature and professional presence with clear messaging targeted at philanthropic funders in Europe. Technically, the site is built on WordPress with modern plugins and libraries, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. The WHOIS data is privacy protected, which is common for non-profits, and no suspicious patterns were detected. Overall, the site demonstrates a trustworthy and credible digital presence.

M

Musée du Louvre

louvre.fr

73

The Louvre Museum's official website serves as a comprehensive digital portal for visitors, researchers, and art enthusiasts worldwide. It offers detailed information on exhibitions, events, collections, ticketing, and educational programs. The site is well-branded, professionally designed, and optimized for mobile devices, reflecting the institution's global prominence and commitment to accessibility. Technically, the site uses modern web technologies including React and Next.js, ensuring a responsive and performant user experience. Security measures such as HTTPS and robust security headers are in place, although explicit security policies and incident response information are not publicly disclosed. Privacy compliance is strong, with clear cookie consent mechanisms and a comprehensive privacy policy aligned with GDPR requirements. Overall, the website demonstrates high business credibility and trustworthiness, consistent with a major government cultural institution.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacation bookings targeting German-speaking customers in Switzerland, Germany, and Austria. The site offers detailed information about cruise experiences, ships, destinations, and booking options, supported by a modern Adobe Experience Manager CMS infrastructure. The technical setup includes advanced tracking and consent management tools such as Adobe DTM and Usercentrics, reflecting a mature digital presence. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Privacy compliance is partially addressed via cookie consent but lacks visible privacy and terms of service pages. Overall, the website is trustworthy, well-branded, and serves a large enterprise in the transportation and hospitality sectors.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations targeting German-speaking markets, particularly Austria. The site offers detailed navigation for booking cruises, exploring ships, destinations, and travel preparation. Technically, the site is built on Adobe Experience Manager CMS with modern tracking and consent management tools, ensuring a good digital maturity level. Security posture is strong with HTTPS and security headers, though explicit privacy and terms of service documents are missing from the provided content. Overall, the website is trustworthy and well-positioned in the transportation and hospitality sectors.

S

Stadt Witten

witten.de

53

Stadt Witten operates as the official municipal government website for the city of Witten, Germany. It provides a broad range of public services, including administrative information, online citizen services, event calendars, and career opportunities. The site targets residents, local businesses, and visitors, positioning itself as a central hub for local governance and community engagement. The business model is that of a government entity focused on service delivery and public communication. Technically, the website employs a modern but straightforward technology stack with a focus on accessibility and user experience, including compliance with GDPR through cookie consent mechanisms and accessible design features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and well-maintained, reflecting the standards expected of a municipal government portal.

S

Stadt Recklinghausen

recklinghausen.de

71

The website www.recklinghausen.de serves as the official online presence of the city of Recklinghausen, Germany. It provides comprehensive information and services related to city administration, politics, living, education, economy, culture, tourism, and public events. The site targets local residents, visitors, and businesses, positioning itself as a key municipal government resource. The business model is public service oriented, focusing on transparency and citizen engagement. Technically, the website employs a mix of JavaScript libraries including jQuery, EQCSS, Lightbox2, and Slick Slider, alongside Cookiebot for GDPR-compliant cookie management. Hosting is managed via INWX, a reputable German hosting provider. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO optimization is basic but present. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism with blocking capabilities. However, additional security headers could be implemented to enhance protection. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent banner. The site uses multiple third-party advertising and tracking services, all managed under user consent. Overall, the website is professional, trustworthy, and well-aligned with its governmental purpose. Recommendations include enhancing security headers, improving accessibility, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

S

Stadt Duisburg

duisburg.de

59

The website duisburg.de serves as the official digital portal for the city of Duisburg, Germany, providing residents and visitors with comprehensive information about city services, events, tourism, and administrative functions. It positions itself as a key government resource with a broad range of public service offerings and community engagement initiatives. The site demonstrates consistent branding and a professional presentation aligned with municipal government standards. Technically, the site is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern web technologies including SVG icons, accessibility plugins, and JavaScript frameworks. The site is mobile optimized and includes accessibility features enhancing usability for diverse users. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and privacy policies are not clearly present in the provided content. Analytics are conducted via Matomo, indicating moderate user tracking with some privacy compliance gaps. Overall, the site is trustworthy and well-maintained, though improvements in privacy transparency and security headers would enhance compliance and user trust.

S

Stadt Dinslaken

dinslaken.de

69

The Stadt Dinslaken website serves as the official digital presence of the city of Dinslaken, Germany, providing a broad range of municipal services, cultural information, and community engagement resources. It targets residents, visitors, and businesses, offering online service portals, event information, and contact points for city administration. The site is well-branded and professionally maintained, reflecting the city's identity and public service mission. Technically, the website is built on the Drupal CMS platform, utilizing modern JavaScript libraries and cookie consent management tools to ensure GDPR compliance. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Analytics are implemented via eTracker, with user tracking balanced by privacy considerations. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms but lacks explicit HTTP security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official city infrastructure, confirming legitimacy. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and resilience.

S

Stadt Bottrop

bottrop.de

54

Stadt Bottrop operates as the official municipal government website for the city of Bottrop, Germany. It provides comprehensive citizen services including online appointment booking, event calendars, political information, and social services. The website targets residents and citizens, offering a broad range of public sector services and information. The site is well-branded, consistent, and professionally maintained, reflecting its role as a trusted government portal. Technically, the website uses a Sitepark CMS platform with modern JavaScript libraries such as Slick Slider and TinyMCE. It integrates Matomo analytics for privacy-conscious user tracking with explicit consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, ensuring good user experience across devices. From a security perspective, the site enforces HTTPS, uses cookie consent banners, and anonymizes analytics data. However, it lacks explicit security policies, incident response contacts, and security headers, which are recommended for enhanced security posture. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is a secure, compliant, and professional municipal portal with strong privacy practices and good user experience. Strategic improvements in security policy transparency and incident response readiness would further strengthen its trustworthiness and resilience.

E

Edeka Verband kaufmaennischer Genossenschaften e.V

verbund.edeka

66

The EDEKA-Verbund website represents a major German retail cooperative, providing a digital platform for business information, career opportunities, and corporate responsibility initiatives. The site is professionally designed with clear navigation and multimedia content, targeting entrepreneurs, employees, and students interested in the EDEKA cooperative network. The domain registration aligns well with the business entity, reinforcing the site's legitimacy. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with video streaming capabilities and integrated search functionality powered by third-party services like TagCommander and Sitesearch360. Hosting is managed via Akamai's CDN infrastructure, ensuring reliable content delivery. Mobile optimization and SEO practices are well implemented, though accessibility features are basic. From a security perspective, HTTPS is enforced, and domain status flags indicate transfer protection and auto-renewal. However, DNSSEC is not enabled, and no explicit security headers or incident response policies are published. Privacy compliance is strong, with comprehensive privacy and cookie policies and a consent mechanism in place. No vulnerability disclosure or security.txt files were found. Overall, the website demonstrates a solid security posture and compliance with GDPR, though improvements could be made in publishing security policies and enhancing DNS security. The site is trustworthy, professional, and safe for general audiences.

The website mutuelles-axa.fr represents the mutual insurance activities of the AXA group, a major global insurance and financial services company. The site provides corporate information, news, governance details, and CSR initiatives targeted at French-speaking customers interested in mutual insurance products. The business model is focused on mutual insurance services under the AXA brand, positioning itself as a trusted enterprise in the finance sector. Technically, the site is built on Adobe Experience Manager, indicating a mature and enterprise-grade CMS platform. The presence of TagCommander and Piano Analytics scripts shows a modern approach to analytics and tag management, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information could be improved. Overall, the site is professional, trustworthy, and well-aligned with AXA's corporate identity.

A

AXA Prévention

axaprevention.fr

66

AXA Prévention is a well-established prevention platform under the AXA Group umbrella, focusing on climate risk adaptation, health, safety, and cybersecurity awareness for the French public and professionals. The website offers a broad range of free services, guides, and campaigns to educate and protect its audience. Technically, the site is built on modern web technologies including React and Next.js, with good performance, mobile optimization, and accessibility. Security posture is strong with HTTPS, security headers, and no detected vulnerabilities. Privacy compliance is robust with clear policies and consent mechanisms. Overall, the site reflects a mature, trustworthy, and professional digital presence aligned with AXA's corporate standards.

The DVGW-Forschungsstelle am Engler-Bunte-Institut (DVGW-EBI) is a reputable research institution affiliated with the Karlsruhe Institute of Technology, focusing on innovations in gas and water to support the energy transition. The organization provides research, testing, and certification services primarily in the energy sector, emphasizing safety, environmental protection, and technical standards. The website reflects a mature digital presence with professional design, clear navigation, and bilingual support. Technically, it leverages TYPO3 CMS and integrates privacy-conscious analytics (Matomo) alongside a robust cookie consent mechanism. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

DVGW e.V. is a well-established German association specializing in the gas and water sectors, focusing on technical standards, safety, hygiene, and environmental protection. The website serves as a portal for vocational education and training, offering events, inhouse training, and certification services to professionals in the energy industry. The organization enjoys a strong market position with approximately 14,000 members and a history dating back to 1859. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is hosted on INWX infrastructure. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and provides comprehensive educational content for its target audience.

V

VIDIA-DESIGN s.r.o.

vidia-design.cz

40

VIDIA-DESIGN s.r.o. is a Czech Republic based small business specializing in online marketing, creative design, and internet advertising services. The company emphasizes effective marketing solutions including logo creation, web development, and SEO optimization, targeting businesses seeking to enhance their online presence. The website reflects a professional and consistent brand image with clear navigation and relevant content showcasing their expertise and client projects. Technically, the site uses Bootstrap 3.3.7, Google Fonts, Google Tag Manager, and a cookie consent mechanism, indicating a moderate level of digital maturity. Mobile optimization and SEO practices are good, though some technical modernization could be beneficial. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no security headers were detected, and no incident response or security policies are published. The absence of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, impacting overall trust. Privacy compliance is good with a clear cookie consent banner and a privacy policy page. Overall, the site is functional and professional but would benefit from enhanced security practices and clearer business contact information.

P

Prisme.ai

gogowego.com

61

Prisme.ai is a technology platform offering scalable AI and automation solutions primarily targeting developers and enterprises. The platform provides tools for workspace creation, app development, and API integrations, positioning itself as an innovative player in the AI platform market. The website is professionally designed using modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some technical aspects such as security headers and explicit HTTPS enforcement are not clearly visible in the provided data, suggesting room for improvement in security posture. Privacy compliance is well addressed with a comprehensive privacy policy and GDPR adherence, though cookie consent mechanisms are lacking. Overall, the website presents a trustworthy and professional image but would benefit from enhanced security and contact transparency.

P

Prisme.ai

prisme.ai

61

Prisme.ai is a technology company offering a scalable AI platform designed to empower developers and enterprises with customizable AI and automation workspaces. The platform emphasizes flexibility and user control, positioning itself as an innovative player in the AI SaaS market. The website reflects a modern, professional digital presence built on contemporary web technologies such as Next.js and React, indicating a mature technical infrastructure. However, some aspects like hosting provider details and CMS usage remain undisclosed. Security posture is moderate; while HTTPS is implied, explicit security headers and policies are absent, and no contact information for incident response is provided. Privacy compliance is partially addressed with a comprehensive privacy policy, but cookie consent and terms of service are missing. Overall, the website is trustworthy and professional but could improve transparency and security practices to enhance user trust and compliance.

K

KB Pojišťovna

komercpoj.cz

60

KB Pojišťovna is a Czech Republic-based insurance company offering a broad range of life and non-life insurance products including property, travel, liability, and investment-linked insurance. The company targets individuals and families seeking comprehensive insurance coverage. The website is professionally designed, well-structured, and provides clear navigation and relevant content to support customer engagement and service delivery. Technically, the site uses modern JavaScript frameworks such as React, integrates analytics tools like Matomo and Facebook Pixel, and includes accessibility features via UserWay widget. The site is mobile optimized and SEO friendly, contributing to a positive user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although HTTP security headers are not visibly configured, and no explicit security policy or incident response information is published. WHOIS data is unavailable, which slightly reduces trust but the overall professional presentation and business information support legitimacy. The site is free from adult or questionable content and is fully accessible without WAF or blocking mechanisms. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve transparency and trust.

K

KB Pojišťovna

kbpojistovna.cz

59

KB Pojišťovna is a Czech Republic-based insurance company offering a broad range of life and non-life insurance products including property, travel, liability, and investment-linked insurance. The website presents a professional and consistent brand image targeting individuals and families seeking insurance solutions. The company maintains a strong digital presence with clear contact information and social media channels, enhancing customer engagement and trust. Technically, the website is built on modern frameworks including Kentico CMS and React, with integrated analytics and accessibility tools, ensuring a good user experience and compliance with privacy regulations. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response details are absent, representing an area for improvement. The absence of WHOIS data limits domain legitimacy verification, but the overall business credibility and digital maturity suggest a trustworthy entity. Strategic recommendations include publishing security policies, enhancing security headers, and providing vulnerability disclosure information to further strengthen trust and compliance.

C

CESK, s.r.o.

cesk.cz

46

CESK, s.r.o. is a Czech company specializing in the sale and servicing of professional gastronomic equipment, including ice cream machines, coffee machines, dispensing technology, and kitchen appliances. With over 30 years of market presence, CESK serves a broad audience ranging from confectioneries, cafes, and restaurants to home users. The company operates an e-shop, offers professional servicing, and organizes training courses, positioning itself as a trusted partner in the hospitality retail sector. The website reflects a mature digital presence with comprehensive product offerings and partner collaborations with reputable brands such as Plzeňský Prazdroj and Heineken. Technically, the website employs modern web technologies including Google Tag Manager, SmartEmailing, and Foxentry for marketing and user interaction. The site is mobile-optimized with good SEO practices and uses HTTPS with secure form handling. However, some security headers are missing, and there is no explicit security policy or incident response information published. From a security and compliance perspective, the site demonstrates good GDPR compliance with a detailed privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for commercial entities. No critical vulnerabilities or suspicious activities were detected. Overall, CESK's website is professional, secure, and compliant, supporting its business operations effectively. Strategic improvements in security headers and incident response transparency could further enhance trust and resilience.

F

Fünferfilm

fuenferfilm.de

37

Fünferfilm is a small independent film production company based in Hamburg, Germany, founded in 2016. The company focuses on producing artistic and narrative films by dedicated filmmakers, with a strong presence in film festivals and collaborations with various partners in the film industry. Their website showcases a portfolio of films, upcoming projects, and festival participations, targeting film enthusiasts and industry professionals. Technically, the website uses a straightforward tech stack including HTML5, CSS3, jQuery, and Swiper.js for interactive elements. It is hosted on a German hosting provider (kasserver.com) and uses HTTPS, ensuring secure communication. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. From a security perspective, the website enforces HTTPS but lacks important security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No incident response or security policy information is provided, which could be improved to enhance trust and readiness. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance and security best practices are recommended to strengthen the security posture and regulatory adherence.

W

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG

weigl.at

49

Weigl-Aufzüge Gesellschaft m.b.H. & Co. KG is a well-established Austrian family-owned company specializing in the manufacturing, planning, installation, and servicing of elevators, stairlifts, homelifts, and related mobility solutions. With a history dating back to 1899, it holds a leading market position in Austria as the largest elevator producer and market leader for stairlifts and wheelchair lifts. The company targets both end consumers and businesses seeking high-quality mobility and lift solutions, offering a broad product portfolio and regional presence in Austria, Germany, Slovenia, and Switzerland. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including asynchronous JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and SEO-friendly, providing a professional user experience with clear navigation and comprehensive content. However, some technical improvements could be made, such as implementing security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration and avoids exposing sensitive data. There is no visible security policy or incident response information on the site, and no WHOIS data is available for the domain, which slightly reduces trustworthiness. The company demonstrates trust through certifications, state awards, and detailed contact information. No vulnerabilities or malicious content were detected. Overall, the website presents a professional and trustworthy digital presence for a mature manufacturing business. Strategic recommendations include improving privacy compliance with cookie consent, adding security headers, and publishing explicit security and incident response policies to strengthen the security posture and user trust.

EDEKA is a leading German supermarket chain with a strong online presence offering weekly offers, recipes, nutrition information, and sustainability initiatives. The website reflects a mature digital infrastructure using modern technologies such as React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the business's market position.

AIDA Cruises operates a professional and comprehensive website focused on cruise vacations and travel services primarily targeting the German-speaking market. The company offers a wide range of cruise options, detailed travel preparation information, and ship details, positioning itself as a leading cruise operator in Germany. The website is built on Adobe Experience Manager, leveraging modern web technologies and content delivery networks for performance and scalability. User privacy is managed via a Usercentrics consent platform, indicating compliance with GDPR requirements. Security posture is strong with HTTPS and reputable hosting, though explicit security policies and incident response contacts are not publicly visible. Overall, the site demonstrates high professionalism and trustworthiness suitable for a large enterprise in the transportation and hospitality sectors.

A

Appio Digital s.r.o.

dokweb.net

61

Institut dokumentárního filmu operates the DOKweb platform, a well-established non-profit organization founded in 2009, focused on supporting and promoting documentary film talents primarily in Central and Eastern Europe. The website offers a range of services including news articles, events, professional tools, and a podcast, targeting filmmakers and industry professionals. The organization maintains a strong regional presence with partnerships and donor support from cultural and governmental institutions. Technically, the website employs modern web technologies such as Google Tag Manager, Facebook Pixel, and Cloudflare DNS, with a responsive design and good SEO practices. Security measures include HTTPS, reCAPTCHA v3 integration, and a comprehensive cookie consent mechanism, although some security headers could be improved. The domain is long-standing and consistent with the organization's history, indicating legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though it lacks explicit security policies and direct contact emails.

The website www.baglik.cz represents ALADIO s.r.o., a Czech-based e-commerce retailer specializing in school bags, backpacks, wallets, and related accessories primarily targeting children, students, and parents in the Czech and Slovak markets. The site offers a broad catalog of products including backpacks for various age groups, school supplies, and travel bags, positioning itself as a specialized retailer in this niche. The business model is focused on direct online sales with a clear emphasis on product variety and brand partnerships. Technically, the website is built on the Upgates e-commerce platform and employs modern web technologies including Google Tag Manager, Google Analytics 4, Facebook Pixel, and other marketing and tracking tools. The site is mobile-optimized with good navigation and SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, reflecting awareness of privacy regulations. However, it lacks visible security headers and explicit privacy and terms of service pages, which are important for compliance and user trust. No vulnerabilities or exposed sensitive data were detected in the content. The absence of WHOIS registrant data is a minor concern but does not significantly detract from the site's legitimacy given the professional presentation and technical setup. Overall, www.baglik.cz is a legitimate, well-structured e-commerce site with a solid market position in the retail sector for school-related products. Strategic improvements in privacy disclosures, security headers, and registrant transparency would enhance trust and compliance.

T

Teekanne

teekanne.cz

56

Teekanne.cz is the Czech Republic website for Teekanne, a well-established tea brand with a history dating back to 1882. The website primarily serves as a brand and product showcase, targeting general consumers interested in tea products. The site employs modern front-end technologies such as Swiper.js for interactive elements and presents a professional and consistent brand image. However, the technical infrastructure lacks visible advanced security headers and privacy compliance indicators, and no WHOIS data is publicly available, which limits trust assessment. The absence of explicit privacy and cookie policies suggests room for improvement in compliance and transparency. Overall, the website is functional and visually appealing but would benefit from enhanced security and privacy practices to strengthen user trust and regulatory compliance.

Nakladatelství UMÚN s.r.o. is a Czech Republic based publishing company specializing in artwork created by artists with severe physical disabilities who paint using their mouth and feet. Established since 1993, it operates as part of a global association supporting such artists, offering products including calendars, greeting cards, and reproductions. The website reflects a niche cultural and retail business model focused on social inclusion and artistic promotion. Technically, the website uses basic web technologies including JavaScript and CSS, with no modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and SEO features. Security posture is moderate; no HTTPS or security headers were explicitly identified in the provided data, and no incident response or security policies are publicly disclosed. Privacy and cookie policies are present with consent mechanisms, indicating compliance with GDPR principles. The absence of WHOIS data reduces domain trustworthiness, though the business appears legitimate based on content and history. Overall, the website is functional but would benefit from enhanced security, technical modernization, and clearer contact information.

E

elektra Berry

eberry.cz

61

The website www.eberry.cz represents a Czech Republic based online retail platform specializing in electronics and household goods. The site offers a user-friendly e-commerce experience with a professional design and moderate technical sophistication, including modern JavaScript frameworks and analytics integrations. Despite the lack of publicly available WHOIS data due to privacy protection, the website appears legitimate and well-maintained. However, the absence of explicit privacy and cookie policies and contact information limits full compliance and trust transparency. Security posture is generally good with HTTPS and monitoring tools in place, but could be improved by adding security headers and formal policies. Overall, the site serves its retail audience effectively but should enhance privacy compliance and contact transparency to strengthen trust and regulatory adherence.

ESSOX FINANCE, s.r.o. is a Slovak financial services company specializing in vehicle financing for Peugeot and Citroën brands. It operates as a subsidiary of ESSOX, s.r.o., with a history linked to PSA Finance Slovakia. The website presents clear business information, branding consistent with PSA Group, and targets Slovak vehicle buyers. Technically, the site uses standard web technologies with legacy Google Analytics integration and basic cookie consent mechanisms. Security posture is adequate with HTTPS and cookie consent but lacks published security policies or incident response details. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

C

Clustaar

clustaar.com

62

Clustaar is a French technology company specializing in AI-powered chatbot solutions aimed at enhancing customer service and conversational automation. Founded in 2013, the company targets businesses seeking to leverage conversational AI to improve customer interactions and feedback analysis. The website is built on WordPress using the Divi theme, hosted by OVH sas, and employs Cloudflare DNS services. The technical infrastructure is modern but basic, with HTTPS enabled and reCAPTCHA implemented for form security. However, the site lacks explicit privacy, cookie, and terms of service policies, as well as detailed contact information and security policies, which are important for compliance and trust. Overall, the website presents a professional and business-focused image with good design and user experience but could improve in privacy compliance and security transparency.

Č

Česká televize

ct24.cz

66

ČT24 is the official news portal of Česká televize, the Czech Republic's public television broadcaster. It provides trusted, up-to-date news, live broadcasts, weather updates, and podcasts primarily targeting the Czech-speaking general audience. The website is professionally designed with consistent branding and high-quality content, positioning it as a leading national news source. Technically, the site leverages modern web technologies including React and Next.js, with integrations for analytics and user tracking via Google Tag Manager and Microsoft Clarity. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site demonstrates a mature digital presence with good performance and accessibility, supporting its role as a trusted media outlet.

S

Svět neziskovek, z.ú.

grantovydiar.cz

46

Grantový diář is a Czech Republic-based subscription service focused on providing non-profit organizations with a comprehensive and up-to-date listing of grant opportunities. The website serves as a centralized platform for fundraisers and non-profit managers to find relevant funding calls, with over 1000 grants tracked annually. The business operates under the parent foundation Nadace Neziskovky.cz and has been active since 2014, establishing a credible presence in the Czech non-profit sector. The service offers personalized notifications, advertising options, and a user-friendly online tool to simplify grant searching and management. Technically, the website employs modern JavaScript frameworks, likely Vue.js, and integrates analytics and marketing tools such as Google Analytics and Facebook Pixel. Hosting is provided by a reputable Czech registrar and hosting provider, Active24. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses secure forms with validation. However, it lacks explicit security headers and does not publicly disclose a security policy or incident response contacts. Privacy compliance is partial, with a cookie consent banner present but no dedicated privacy policy or terms of service pages found. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a trustworthy and professional service for its target audience, with room for improvement in privacy and security transparency. Strategic recommendations include publishing privacy and terms documents, enhancing security headers, and formalizing incident response communications to strengthen compliance and trust.

É

Éveil'O'Goût

eveilogout.com

45

Éveil'O'Goût is a French non-profit association based in Dijon focused on food education and nutrition awareness. The organization offers educational animations, training sessions, and interventions to promote a sensory and holistic approach to alimentation. The website is professionally designed using WordPress and includes clear navigation, contact information, and relevant content targeted at the general public and educators interested in food education. Despite the lack of WHOIS data, the site presents a trustworthy and consistent brand image with good content quality and user experience. Technically, the site uses modern web technologies and SEO best practices but lacks some security headers and cookie consent mechanisms. The security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in security policies and compliance documentation.

D

DataRankr

slotcatalog.com

70

SlotCatalog, operated by DataRankr and registered under Internet Invest, Ltd. dba Imena.ua, is a well-established online platform specializing in comprehensive reviews and rankings of online slot games and casinos. Founded in 2015, the website offers extensive content including game reviews, casino evaluations, bonus offers, and SlotRank popularity metrics, targeting adult gambling enthusiasts globally. The platform maintains a consistent brand presence with active social media channels and structured data markup enhancing SEO and discoverability. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and libraries like Chart.js and Twitter Typeahead for enhanced user experience. Hosting and DNS services are managed via Cloudflare, ensuring reliable performance and HTTPS security. The site is mobile-optimized with good navigation clarity and professional design, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses Cloudflare DNS, but lacks explicit security headers and published security policies. No privacy or cookie policies were detected, indicating potential compliance gaps with GDPR and other privacy regulations. No contact emails or phone numbers are publicly available, limiting direct communication channels. No WAF or blocking mechanisms were detected, and no vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, SlotCatalog presents a credible and professional online gambling review service with moderate technical maturity and security posture. To enhance trust and compliance, the site should implement comprehensive privacy and cookie policies, security headers, and publish incident response and vulnerability disclosure information.

O

On-the-Move.org AISBL

on-the-move.org

52

On the Move is a well-established non-profit organization founded in 2002, providing comprehensive resources and information on cultural mobility for artists and cultural professionals seeking international opportunities. The website serves as a trusted platform offering funding guides, open calls, mentoring, research, and events, positioning itself as a key player in the cultural mobility sector. The organization's Belgian registration and domain age align with its long-standing presence and mission. Technically, the site is built on Drupal 9, employs modern web technologies, and is optimized for mobile and accessibility, although performance is moderate. Security posture is generally good with HTTPS enabled and domain transfer protections, but lacks DNSSEC and some security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional, trustworthy, and content-rich, serving its target audience effectively.

B

Biograf Kotva

biografkotva.cz

43

Biograf Kotva operates as a local cinema in the Czech Republic, providing a comprehensive film program, online ticket sales, and additional services such as a cafe and venue rental. The website is professionally designed with clear navigation and a focus on cultural and family-friendly content. Technically, the site uses modern JavaScript libraries and asynchronous loading to enhance performance and user experience. However, the absence of privacy and cookie policies indicates potential compliance gaps with GDPR and related regulations. Security posture is generally good with HTTPS and some security best practices, but could be improved by adding security headers and formal policies. The lack of WHOIS data for the domain raises concerns about domain legitimacy and registration transparency, which impacts overall trustworthiness. Strategic improvements in privacy compliance and domain registration transparency are recommended to enhance business credibility and user trust.

G

Grandwin

grandwin.com

66

Grandwin is an established online gambling platform founded in 2012, offering a comprehensive suite of services including online casino games, live casino, virtual sports, sports betting, and esports betting. The platform targets adult users interested in gambling and betting, primarily in European markets such as Finland. The business operates under Ardevar Ltd, which is referenced in the website footer, indicating a parent or technology partner relationship. The website is professionally designed with multi-language support and clear navigation, providing a good user experience and trust signals such as responsible gaming information and live chat support. Technically, the website leverages modern web technologies including Vue.js, Google Tag Manager, and Cloudflare DNS/CDN services. It employs various third-party services for analytics, real user monitoring, and customer support chat, indicating a mature digital infrastructure. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS with a good SSL configuration and domain registration protections. However, DNSSEC is not enabled, and no explicit security or incident response policies are published. The site uses CAPTCHA and offers two-factor authentication, but the latter is off by default. No vulnerabilities or exposed sensitive data were detected in the analysis. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms, aligned with GDPR requirements. Overall, Grandwin presents a low to moderate risk profile with a solid business and technical foundation. Strategic improvements in DNS security, explicit security policies, and vulnerability disclosure programs would enhance trust and compliance further.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

ffhsh.de

59

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The organization targets filmmakers and producers primarily in Northern Germany, offering funding and industry support from project inception through production and distribution. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, optimized for performance and mobile devices. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

M

MOIN Filmförderung Hamburg Schleswig-Holstein

moin-filmfoerderung.de

60

MOIN Filmförderung Hamburg Schleswig-Holstein is a regional film funding organization supporting cinema films, high-end series, and innovative audiovisual formats across genres. The website reflects a mature digital presence with a modern tech stack based on Next.js and React, delivering excellent performance and mobile optimization. The organization maintains a strong market position in northern Germany's media sector, providing comprehensive funding programs and industry support. Security posture is robust with HTTPS, security headers, and secure form handling, though some improvements in cookie consent and incident response transparency are recommended. Overall, the site is professional, trustworthy, and well-aligned with its business objectives.

D

DeliBarry Inc.

delibarry.com

40

DeliBarry Inc. operates a parcel delivery service focused on fast, reliable shipping within the U.S., Europe, and worldwide. The company targets both general consumers and businesses requiring efficient courier services. Their business model leverages online ordering, courier partnerships, and package tracking to provide a seamless shipping experience. The website presents a professional and user-friendly interface with good mobile optimization and clear service descriptions. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Technically, the site uses modern web technologies and tracking tools but lacks visible privacy and cookie policies, which impacts compliance. Security posture is generally good with HTTPS and secure forms, but missing security headers and incident response information are gaps. Overall, the business appears operational and credible but would benefit from improved transparency and compliance documentation.

The website represents the official digital presence of the Conseil départemental de Seine-et-Marne, a French local government entity. It provides a broad range of public services and information targeting residents, professionals, and partners within the Seine-et-Marne department. The site is well-structured with clear navigation and integrates social media channels to enhance outreach. Technically, it is built on Drupal 8, hosted by SCALEWAY, and uses Matomo for analytics, indicating a modern and privacy-conscious approach to user tracking. Security posture is solid with HTTPS and domain transfer protections, though it lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. Overall, the domain registration and website content are consistent and legitimate, reflecting a trustworthy government service portal.

DVGW Deutscher Verein des Gas- und Wasserfaches e.V. is a well-established, independent association focused on providing reliable, technically sound, and safe gas and water supply standards and services. With a history spanning over 165 years, it serves as a recognized rule setter and innovation driver in the German gas and water sectors, also engaging internationally. The organization offers a broad range of services including standardization, certification, research, vocational training, and technical consulting, targeting professionals and stakeholders in the energy and water industries. Technically, the website is built on TYPO3 CMS, hosted on Microsoft Azure infrastructure, and employs modern web technologies including SVG graphics, JavaScript libraries, and privacy-conscious analytics tools like Matomo and eTracker. The site is well-optimized for mobile devices and accessibility, with good SEO practices. Cookie consent mechanisms are implemented, reflecting attention to privacy compliance. From a security perspective, the site uses HTTPS and integrates cookie consent and privacy-respecting analytics. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not found, representing areas for improvement. No critical vulnerabilities or suspicious content were detected, and the domain WHOIS data aligns well with the organization's profile, indicating high legitimacy. Overall, the website presents a professional, trustworthy, and content-rich platform for its audience, with a strong business credibility and technical foundation. Strategic enhancements in privacy and security transparency would further strengthen its posture.

K

Kreativní Česko – Novinky, Akce a Podpora Kreativních Odvětví

kreativnicesko.cz

67

Kreativní Česko is a Czech national portal dedicated to the cultural and creative industries, providing news, events, funding opportunities, and resources for artists, designers, and innovators. The website serves as an information hub and support platform for stakeholders in the creative sector within the Czech Republic. It positions itself as a key resource for cultural professionals and creative entrepreneurs, fostering innovation and collaboration in the industry. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Cookiebot for cookie consent management. The site is served over HTTPS with a good SSL configuration, ensuring secure communication. The design is responsive and optimized for mobile devices, with a clear navigation structure and good SEO practices. However, no specific CMS or hosting provider information was identified. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent mechanisms. Security headers like HSTS and X-Content-Type-Options are present, though the implementation of Content-Security-Policy and Subresource Integrity could further enhance security. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie management, aligning with GDPR requirements. Overall, the website presents a professional and trustworthy front for its intended audience. The lack of publicly available WHOIS data limits transparency regarding domain registration, but the site content and technical setup support its legitimacy. Strategic recommendations include enhancing security headers, improving accessibility features, and publishing terms of service and incident response policies to strengthen trust and compliance.

1

1win-casino.md

1win-oficial.md

56

1Win Moldova operates as an online gambling platform licensed in Curaçao, offering a comprehensive range of betting and casino games to primarily Moldovan players. The website is professionally designed, mobile-optimized, and provides detailed information about games, bonuses, and betting options. Technically, the site uses WordPress CMS, Cloudflare for DNS and CDN, and integrates analytics tools such as Google Tag Manager and Yandex Metrika. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are absent. The domain WHOIS data shows a future creation date inconsistent with the business's stated history, which slightly impacts trust. Overall, the platform appears legitimate and well-positioned in the Moldovan gambling market but would benefit from enhanced privacy compliance and transparency.

C

Czech Society for Mass Spectrometry

czechms.org

44

The Czech Society for Mass Spectrometry is a professional scientific association based in Olomouc, Czech Republic, affiliated with Palacký University. It serves research scientists and professionals in the field of mass spectrometry by organizing events, seminars, and providing informational resources. The website reflects a niche, well-established organization focused on advancing mass spectrometry techniques within the Czech scientific community. The site content is professional and consistent with the organization's mission, featuring event announcements and partner collaborations with reputable scientific and commercial entities. Technically, the website employs standard web technologies including HTML, CSS, JavaScript, and Google Analytics for visitor tracking. The site is moderately optimized for performance and accessibility but lacks advanced frameworks or CMS detection. Mobile optimization is basic, and SEO practices are adequately implemented through meta tags and structured navigation. However, there is no evidence of modern security headers or comprehensive privacy and cookie policies, which are important for compliance and user trust. From a security perspective, the site uses HTTPS as indicated by secure links, but no explicit security headers were detected in the provided data. The login form for members lacks visible advanced protections such as CAPTCHA. The absence of privacy, cookie, and terms of service policies, as well as incident response and vulnerability disclosure information, indicates gaps in compliance and security transparency. WHOIS data is unavailable due to a malformed request, limiting domain registration trust verification. Overall, the website presents a professional and trustworthy front for a small scientific association but would benefit from enhanced security practices, privacy compliance, and WHOIS transparency to improve trustworthiness and regulatory adherence.

P

Pixman

pixman.cz

74

Pixman.cz is a Czech digital agency specializing in web development, e-commerce solutions, and digital marketing services. The company offers a range of services including website and e-shop development, integration with Microsoft Dynamics 365 Business Central, online marketing strategies, creative visuals, and content management with Sitecore CMS. Their market position is that of a specialized small agency targeting businesses seeking modern digital solutions with a focus on fair play and digital innovation. Technically, the website employs a modern technology stack including PHP, JavaScript, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and Visual Website Optimizer. The site uses Sitecore CMS and promotes integration with Microsoft Business Central, indicating a mature digital infrastructure. The website is mobile optimized and includes a comprehensive cookie consent mechanism, reflecting good digital maturity and privacy awareness. From a security perspective, the site enforces HTTPS and uses cookie consent to comply with GDPR. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The WHOIS data is unavailable, likely due to privacy protection, but the website content and business information appear legitimate and professional. Overall, Pixman.cz presents a trustworthy and professional digital presence with good privacy compliance and a solid technical foundation. Strategic improvements in security header implementation and public security policies would enhance their security posture further.

S

SIA ČR - Rada výstavby, z.s.

siacr.cz

59

SIA ČR - Rada výstavby, z.s. is a Czech non-profit association coordinating efforts in architecture, construction, and urban planning sectors. The organization focuses on harmonizing measures in these fields within the Czech Republic, especially in the context of EU integration. The website reflects a professional presence with event announcements and partnerships with related industry organizations, indicating a well-established market position in the national construction and architecture community. Technically, the website is built on the Webnode platform, leveraging modern web standards and Amazon Cloudfront CDN for hosting. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements are possible, such as adding security headers and enhancing accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, demonstrating basic compliance with privacy regulations. The absence of explicit privacy policy and terms of service pages, as well as missing security headers, suggests room for improvement in security posture and compliance maturity. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy and professional, serving its target audience effectively. Strategic enhancements in privacy documentation, security headers, and contact transparency would further strengthen its security and compliance stance.

P

Pro-idea s.r.o.

koloshop.cz

64

Koloshop.cz is a professional e-commerce retailer specializing in bicycles, bicycle components, and related services such as servicing and rentals. The website targets cycling enthusiasts and general consumers primarily in the Czech Republic and neighboring countries, offering a wide range of products including mountain, road, trekking, and children's bikes. The company behind the site is Pro-idea s.r.o., a medium-sized retail entity with a consistent brand presence and a well-structured online platform. Technically, the website employs modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and uses several third-party services for recommendations, chat support, and user verification. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

H

Hithit s.r.o.

hithit.com

59

Hithit s.r.o. operates a Czech crowdfunding platform that connects creative individuals such as artists, designers, developers, and sportspeople with their supporters. The platform facilitates reward-based crowdfunding campaigns, enabling project creators to raise funds and offer exclusive rewards to backers. Established since 2012, Hithit holds a solid position in the Czech market with a medium-sized business footprint and a consistent brand presence. Technically, the website leverages modern JavaScript libraries and integrates multiple third-party services including Google Analytics, Facebook SDK, and Twitter widgets. Hosting is supported by Amazon CloudFront CDN, ensuring moderate performance and good mobile optimization. The site implements cookie consent mechanisms and uses HTTPS, but lacks some advanced security headers and explicit security policies. From a security perspective, the platform enforces HTTPS and cookie consent but does not publish a dedicated security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS registration data reduces trust slightly, but the overall business credibility remains high based on website content and contact transparency. Overall, Hithit presents a professional and trustworthy crowdfunding service with room for improvement in security policy transparency and WHOIS data availability. Strategic enhancements in security headers and incident response disclosures would strengthen its security posture and user trust.