Security Directory

G

Gemeinde Holzwickede

holzwickede.de

61

Gemeinde Holzwickede operates as the official municipal government website providing comprehensive information and services to residents and stakeholders of Holzwickede, Germany. The site offers access to municipal services such as online appointment bookings, service directories, contact information, and community news. It serves as a central hub for local government communication and citizen engagement. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and a specialized Verwaltungsportal CMS platform. It features responsive design, accessibility options like contrast modes and font resizing, and a cookie consent mechanism compliant with GDPR. The site integrates social media channels and provides structured navigation for ease of use. From a security perspective, the website enforces HTTPS, uses captcha mechanisms to mitigate abuse, and implements detailed cookie consent with opt-in/out categories. However, it lacks publicly available security policies, incident response contacts, and security.txt files. No critical vulnerabilities or exposed sensitive data were detected in the content. Overall, the website demonstrates a solid digital presence for a small government entity with good content quality, user experience, and privacy compliance. Strategic improvements in security transparency and incident response readiness would enhance trust and resilience.

S

Stadt Herten

herten.de

64

Stadt Herten operates an official municipal website providing comprehensive information and services to its citizens and visitors. The site covers a wide range of topics including citizen services, city administration, cultural events, and urban development. It targets residents and stakeholders of the city, offering online tools such as appointment scheduling and event calendars. The website is built on TYPO3 CMS and employs modern web technologies ensuring good accessibility and user experience. Security posture is adequate with HTTPS enforced and obfuscated email addresses, though it lacks explicit security policies or incident response contacts. Overall, the site is trustworthy and professionally maintained, reflecting the city's commitment to digital public service.

S

Stadt Essen

essen.de

60

The website www.essen.de is the official digital presence of the city of Essen, Germany, serving as a comprehensive portal for municipal services, news, and citizen engagement. It offers a wide range of information including job opportunities, city maps, cultural events, and social services, targeting residents, visitors, and businesses within the city. The site is well-branded with consistent city identity elements and maintains a high level of professionalism and content quality. Technically, the site employs modern web technologies such as jQuery, Bootstrap, ArcGIS for mapping, and integrates accessibility tools like ReadSpeaker. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature approach to privacy and user data protection. The site is mobile optimized and accessible, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site enforces HTTPS and uses standard security headers to protect users. While no explicit security policy or incident response contacts are published, the site shows no signs of vulnerabilities or exposed sensitive data. The WHOIS data is limited due to DENIC's privacy restrictions but aligns with expectations for an official government domain, supporting the site's legitimacy. Overall, www.essen.de demonstrates a strong digital maturity for a government portal, balancing user experience, privacy compliance, and security. Strategic improvements could include publishing a dedicated security policy and enhancing security headers for further protection.

S

Stadt Dorsten

dorsten.de

56

The website www.dorsten.de serves as the official municipal portal for the city of Dorsten in Germany, providing comprehensive information and services related to local government, culture, education, social welfare, and economic development. It targets residents, visitors, and businesses within the city, offering a broad range of public services and community resources. The site is built on a modern open-source technology stack, primarily using the Neos CMS and Flow PHP framework, hosted on reputable infrastructure provided by Hetzner. The website demonstrates good digital maturity with responsive design, clear navigation, and integration of privacy-conscious analytics via Matomo. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in security headers and published security policies. Privacy compliance is moderate, with a cookie consent mechanism present but lacking an explicit privacy policy and terms of service. Overall, the site is professional, trustworthy, and safe for general audiences, reflecting the standards expected of a government entity.

G

grandfilm produktion gmbh

grandfilm-produktion.de

42

Grandfilm Produktion GmbH is a small German media company specializing in international auteur film production and distribution. Founded in 2014, it operates primarily in Frankfurt and Nürnberg, focusing on festival-premiered films and co-productions with notable filmmakers. The website is built on WordPress using Elementor and jQuery, reflecting a modern but basic technical infrastructure. While the site is accessible and professionally designed, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers. Contact information is clearly provided, enhancing business credibility. Overall, the website serves its niche audience well but could improve compliance and security practices.

A

A-WebSys, spol. s r.o.

awebsys.cz

62

A-WebSys, spol. s r.o. is a Czech-based technology company specializing in custom internet and mobile application development since 2003. With over 40 employees, the company offers a broad range of services including web applications, web presentations, mobile apps, and fintech solutions. Their market position is that of an established medium-sized player with a strong local presence and reputable clients. The website reflects a professional and modern digital infrastructure utilizing popular JavaScript libraries and frameworks such as jQuery, Bootstrap, and TinyMCE, alongside marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Security posture is solid with HTTPS enforced and reCAPTCHA implemented on contact forms, though there is room for improvement in security headers and incident response transparency. The absence of WHOIS data reduces domain trust but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism in Czech language.

DVGW Kongress GmbH is a specialized event organizer focused on the gas and water sectors in Germany. As a wholly owned subsidiary of the reputable DVGW association, it develops and manages innovative conferences, seminars, congresses, trade fairs, and online event formats. The company holds a strong market position within the energy and water industry, targeting professionals and stakeholders with a comprehensive portfolio of events and services including agency and sponsorship offerings. The website reflects a professional and consistent brand image with excellent content quality and clear navigation. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries and privacy-respecting analytics via Matomo. The site is mobile optimized and demonstrates good SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website presents a trustworthy and professional digital presence aligned with its business objectives. The domain registration data is consistent with the business claims, enhancing legitimacy. Privacy and cookie policies are comprehensive and GDPR compliant, supporting strong privacy compliance. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and maintaining regular audits of third-party scripts to further strengthen security and compliance posture.

The DVGW-Forschungsstelle am Engler-Bunte-Institut (DVGW-EBI) is a reputable research institution affiliated with the Karlsruhe Institute of Technology, focusing on innovations in gas and water to support the energy transition. The organization provides research, testing, and certification services primarily in the energy sector, emphasizing safety, environmental protection, and technical standards. The website reflects a mature digital presence with professional design, clear navigation, and bilingual support. Technically, it leverages TYPO3 CMS and integrates privacy-conscious analytics (Matomo) alongside a robust cookie consent mechanism. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

DVGW e.V. is a well-established German association specializing in the gas and water sectors, focusing on technical standards, safety, hygiene, and environmental protection. The website serves as a portal for vocational education and training, offering events, inhouse training, and certification services to professionals in the energy industry. The organization enjoys a strong market position with approximately 14,000 members and a history dating back to 1859. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is hosted on INWX infrastructure. It features good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the website is professional, trustworthy, and provides comprehensive educational content for its target audience.

DVGW Service & Consult GmbH is a specialized service provider in the German energy and water sectors, offering consulting, IT services, management, and occupational safety solutions. The company operates as a subsidiary or closely affiliated entity of the DVGW association, which has a long-standing history since 1859. Their market position is that of a trusted expert providing technical and organizational support to energy and water industry stakeholders. The website reflects a professional and consistent brand image with clear service offerings and a focus on industry-specific solutions. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery and Bootstrap. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and cookie consent mechanisms, indicating compliance with GDPR and privacy best practices. However, no explicit security policies or incident response contacts are published, which could be improved. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. The use of HTTPS and cookie consent scripts are positive indicators. The absence of security headers and formal security documentation suggests room for enhancement. No WAF or blocking mechanisms were detected, allowing full content accessibility. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing formal security and incident response policies, enhancing security headers, and providing direct contact information for security incidents to strengthen trust and compliance.

D

D.I.SEVEN SERVICE

disevenservice.cz

43

D.I.SEVEN SERVICE is a professional security and cleaning service provider operating throughout the Czech Republic since 2004. The company offers a broad range of services including physical security, personal protection, event security, cleaning services, and substitute fulfillment (náhradní plnění) to help clients meet legal employment obligations for persons with disabilities. The website is well-structured, professionally designed, and targets businesses and organizations seeking reliable security and compliance services. Technically, the site is built on WordPress with modern plugins and integrates Google Analytics and Google Tag Manager for tracking. Security measures include HTTPS and Google reCAPTCHA on forms, though explicit security headers and vulnerability disclosure policies are absent. The domain WHOIS data is unavailable, which limits trust analysis, but the website content and social media presence support legitimacy. Overall, the site demonstrates a solid digital presence with room for improvement in privacy and security transparency.

D

D.I.SEVEN, a.s.

diseven.cz

51

D.I.SEVEN, a.s. is a well-established Czech security agency operating since 1995, providing comprehensive security and cleaning services across the Czech Republic. The company employs over 2500 professionals and serves more than 600 clients, leveraging proprietary security technologies such as a centralized protection control panel (PCO), electronic gatehouse systems, and patrol tracking solutions. Their market position is strong, supported by a significant annual turnover exceeding 1 billion CZK and active social responsibility initiatives. Technically, the website employs modern analytics and tracking tools including Google Tag Manager, Google Analytics, Facebook Pixel, and Google reCAPTCHA v3, indicating a mature digital infrastructure. The site is well-designed, mobile-optimized, and offers clear navigation and rich content. Security posture is solid with HTTPS enforced and secure form handling, though improvements are recommended in security headers and incident response transparency. The absence of WHOIS data reduces domain registration trust signals but does not detract from the evident legitimacy and professionalism of the business. Overall, the website and business demonstrate a high level of credibility and operational maturity.

D

D.I.SEVEN FACILITY

disevenfacility.cz

47

D.I.SEVEN FACILITY is a Czech Republic-based facility management service provider specializing in security, cleaning, and substitute fulfillment services. The website presents a professional and consistent brand image targeting general business audiences in the facility management sector. The technical infrastructure includes common web analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK, indicating a moderate level of digital maturity. However, the absence of WHOIS data and lack of visible privacy or cookie policies suggest gaps in transparency and compliance. Security posture is moderate with HTTPS implied but lacking security headers and explicit security policies. Overall, the site is accessible without WAF or blocking mechanisms, but domain legitimacy cannot be fully verified due to missing WHOIS information.

M

Muzeum Těšínska

muzeumct.cz

46

Muzeum Těšínska is a regional museum and cultural institution operating under the Moravskoslezský kraj government in the Czech Republic. The website serves as an information portal for museum exhibitions, educational programs, publications, and events targeting the general public interested in regional history and culture. The institution holds a stable market position as one of four regional museums in the area, offering a variety of services including virtual tours and club memberships. Technically, the website is built on Joomla CMS with Bootstrap and jQuery frameworks, integrating modern web technologies such as Google Analytics and Facebook Pixel for visitor tracking with user consent. The site is mobile responsive and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made in security headers and performance optimization. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data limits domain registration trust analysis, but the official affiliation and consistent branding support legitimacy. No explicit security policies or incident response contacts are published. Overall, the website presents a professional and trustworthy digital presence for a government-affiliated cultural institution. Strategic recommendations include enhancing HTTP security headers, publishing vulnerability disclosure and incident response information, and improving technical performance to further strengthen security and compliance posture.

T

TRISIA, a.s.

trisia.cz

48

TRISIA, a.s. is a cultural and educational center located in Třinec, Czech Republic, offering a variety of services including cultural events, educational programs, venue rentals, and subscription-based event packages. The website presents a professional and well-structured platform targeting the general public interested in culture and community activities in the Beskydy region. Technically, the site uses modern JavaScript libraries and frameworks such as jQuery, Nette, and Owl Carousel, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced and a detailed cookie consent mechanism, though it lacks some security headers and a published privacy policy. The absence of WHOIS data is a notable concern, reducing domain trustworthiness, but the website content and contact information support legitimacy. Overall, the site scores well on content quality, business credibility, and security, with room for improvement in privacy compliance and technical security headers.

S

SEVEN SPORT s.r.o.

insportline.eu

55

inSPORTline, operated by SEVEN SPORT s.r.o., is a large European e-commerce business specializing in the manufacturing and retail of fitness equipment and related sporting goods. The website presents a professional and comprehensive product catalog including fitness machines, e-bikes, moto gear, outdoor equipment, and health and beauty products. The company targets fitness enthusiasts and general retail customers across multiple European countries, positioning itself as a leading brand in its sector. The digital infrastructure leverages modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and marketing tools like Targito and SmartSupp Chat, indicating a mature digital marketing and analytics setup. Security posture is solid with HTTPS enforced and no visible critical vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and indicate GDPR compliance, supporting trust and regulatory adherence. Overall, the website is well-designed, user-friendly, and trustworthy, with a good balance of content quality and technical implementation.

S

SEVEN SPORT s.r.o.

e-insportline.pl

59

The website www.e-insportline.pl represents a large-scale e-commerce platform specializing in fitness and sports equipment retail and wholesale in Poland. The company behind the site is SEVEN SPORT s.r.o., positioning itself as the largest producer and seller of fitness equipment in Poland. The site offers a broad catalog of products, promotions, and customer support, targeting consumers interested in fitness and sports gear. The business model is primarily online retail with wholesale capabilities, serving a Polish-speaking audience with consistent branding and professional presentation. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Google Analytics, Microsoft Clarity, and several marketing and retargeting tools such as Persoo and Targito. The site is mobile-optimized, accessible, and SEO-friendly with structured data markup enhancing search engine visibility. Performance is moderate, with lazy loading and deferred script loading implemented to improve user experience. From a security perspective, the site enforces HTTPS with good SSL configuration and includes standard security headers. Forms use POST methods and no sensitive data is exposed in the HTML. However, the site lacks a publicly visible security policy or incident response information, and no vulnerability disclosure or security.txt file is present. Privacy compliance is basic, with a privacy policy and cookie consent mechanism in place, but could be enhanced with explicit GDPR statements. Overall, the website is professional, trustworthy, and safe for general audiences. The absence of WHOIS data reduces transparency but is common for commercial sites using privacy protection. No adult or questionable content is present. Strategic recommendations include publishing a security policy, incident response contacts, and vulnerability disclosure information to improve trust and compliance.

S

SC SPORT BRANDS DISTRIBUTION SRL

insportline.ro

64

SC SPORT BRANDS DISTRIBUTION SRL operates the inSPORTline.ro website, a Romanian e-commerce platform specializing in sports equipment and articles. The company offers a wide range of fitness and sports products, targeting general consumers interested in sports and fitness. The website is well-structured, professionally designed, and provides clear navigation and product categorization. It supports customer engagement through loyalty programs, authorized service, and warranty offerings. Technically, the site is built on the PrestaShop CMS platform, utilizing modern JavaScript libraries and analytics tools such as Google Analytics and Facebook SDK. The site is mobile-optimized and implements GDPR-compliant cookie consent mechanisms. Security posture is good with HTTPS enforced and secure cookie practices, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a trustworthy and professional online retail presence.

S

SEVEN SPORT s.r.o.

insportline.si

51

The website www.insportline.si is an established e-commerce platform specializing in fitness and sports equipment retail, targeting primarily the Slovenian market. Operated by SEVEN SPORT s.r.o., the domain has been active since 2010, reflecting a mature business presence. The site offers a broad range of products including fitness machines, sports gear, outdoor equipment, and health and beauty items, supported by promotional campaigns and a structured product catalog. The business model is retail-focused with a clear online sales channel and regional sister sites across Europe. Technically, the site employs modern web technologies such as jQuery, Bootstrap, and Swiper.js, integrated with Google Analytics and Facebook Pixel for marketing and analytics purposes. The site is mobile-optimized with good SEO practices and structured data enhancing search visibility.

S

SEVEN SPORT s.r.o.

insportline.bg

48

SEVEN SPORT s.r.o. operates the Bulgarian e-commerce website insportline.bg, specializing in retailing fitness and sports equipment. The website targets Bulgarian consumers with a broad product range including fitness machines, sports accessories, and outdoor equipment. The company maintains a consistent brand presence across multiple regional domains, indicating a strong market position in Central and Eastern Europe. The site features a modern technical infrastructure leveraging jQuery, Bootstrap, and Swiper.js, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforcement and standard security headers, although no explicit security policy or incident response information is published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, suitable for its retail business model.

S

SEVEN SPORT s.r.o.

insportline.hu

53

inSPORTline.hu is a well-established e-commerce and retail platform specializing in premium sports equipment and fitness products. Operated by SEVEN SPORT s.r.o., the website targets general consumers interested in sports, fitness, and outdoor activities primarily in Hungary and surrounding Central European markets. The company maintains a strong regional presence with sister sites in multiple countries, offering a broad product range and customer support services. The website features a professional design, clear navigation, and comprehensive product information, supporting a positive user experience.

S

SEVEN SPORT s.r.o.

insportline.de

58

SEVEN SPORT s.r.o. operates the inSPORTline.de website, positioning itself as the largest manufacturer and seller of fitness equipment in Germany. The company offers a broad range of fitness, sports, moto, outdoor, health, beauty, and children's products through an e-commerce platform targeting German-speaking customers. The website features extensive product listings, promotional banners, and news articles relevant to fitness and sports enthusiasts. Technically, the site employs modern web technologies including jQuery, Bootstrap, Swiper.js, and Google Tag Manager, with performance optimizations such as lazy loading and deferred script loading. Hosting is provided by forpsi.cz, consistent with the company's Czech origins, while the site targets the German market. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, trustworthy, and well-structured, serving a large retail audience in the fitness sector.

S

SEVEN SPORT s.r.o.

insportline.sk

54

SEVEN SPORT s.r.o. operates the inSPORTline brand, the largest manufacturer and retailer of fitness equipment in Slovakia. The company offers a broad range of fitness, sports, outdoor, and health-related products through a professional e-commerce platform supported by physical stores. Their market position is strong within Slovakia and supported by sister sites in multiple European countries. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Bootstrap, Google Analytics, and personalization tools like Persoo. Security is well implemented with HTTPS, security headers, and secure forms. Privacy and cookie policies are present and GDPR compliant, reflecting good regulatory adherence. Overall, the business is credible, well-branded, and trustworthy.

S

Salle Gaveau Paris

sallegaveau.com

50

Salle Gaveau Paris is a well-established concert hall and event venue located in the 8th arrondissement of Paris, France. The venue offers concert hosting, event privatisation, ticket sales, and café services, positioning itself as a key player in the Parisian hospitality and entertainment sector. The website reflects a professional and consistent brand image, targeting cultural audiences and event organizers. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Slider Revolution, hosted by OVH sas, a reputable provider. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is adequate with HTTPS enabled and domain protection flags set, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the site is trustworthy and professional but could improve in privacy transparency and security hardening.

G

GTO Solutions, s.r.o.

inoutic.cz

54

KupniSila.cz is a Czech media portal operated by GTO Solutions, s.r.o., providing economic news, purchasing power analysis, price information, and consumer advice targeted at Czech citizens. The website leverages WordPress CMS with a modern theme and plugins, including Yoast SEO and Google Adsense for monetization. It maintains a professional design with good content quality and clear navigation. Security posture is adequate with HTTPS enabled and secure login forms, though some security headers are missing. Privacy and cookie policies are present and GDPR compliant, supporting user trust. Overall, the site is legitimate and well-maintained, though WHOIS data is privacy protected, which is common for small media sites.

A

Advantage Consulting, s.r.o.

acjobs.cz

59

Advantage Consulting, s.r.o., operating the website www.acjobs.cz, is a leading Czech personnel agency established in 2002. The company specializes in helping job seekers find employment and offers recruitment services to employers. The website reflects a professional business model targeting both job seekers and companies within the Czech Republic, positioning itself as the largest personnel agency in the country. The site provides a broad range of job offers and related content, including blogs and partner employer listings. Technically, the website employs a modern technology stack including Vue.js, Bootstrap, jQuery, and various JavaScript libraries for enhanced user experience and interactivity. It is mobile-optimized with good SEO practices and uses HTTPS to secure communications. The presence of cookie consent mechanisms and privacy policies indicates a commitment to GDPR compliance and user privacy. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, CSRF token usage, and cookie management. However, explicit security policies and incident response information are not publicly available, which could be improved. No critical vulnerabilities or security issues were detected in the analysis. Overall, the website is trustworthy and professional, though the absence of WHOIS data limits domain registration transparency. Strategic recommendations include enhancing security headers, publishing a formal security policy, and improving WHOIS data visibility to strengthen trust and compliance further.

S

Spedidam

spedidam.fr

57

SPEDIDAM is a well-established French collective rights management organization founded in 1959, dedicated to protecting and managing the intellectual property rights of performing artists. The website serves as an information and service portal for artists, music users, and creators of spectacles, offering rights management, legal advice, and cultural aid programs. The organization has a significant market presence with over 115,000 rights holders and a large associate base. Technically, the website is built on WordPress with a modern tech stack including jQuery, Owl Carousel, and Swiper Slider, hosted by OVH. The site is moderately performant, mobile-optimized, and SEO-friendly, though some accessibility features could be improved. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks some security headers and explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, targeting a general audience interested in artists' rights and cultural management. However, compliance with privacy regulations could be enhanced by adding clear privacy and cookie policies and consent mechanisms. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

F

Fondation Daniel et Nina Carasso

fondationcarasso.org

56

Fondation Daniel et Nina Carasso is a non-profit organization dedicated to promoting sustainable food systems and civic art in France and Spain. The foundation operates under the aegis of Fondation de France and supports social and ecological transformation through financial grants, impact investments, and expert accompaniment. Their website reflects a professional and well-structured digital presence, targeting a broad audience including artists, researchers, and social entrepreneurs. Technically, the site is built on WordPress with modern plugins and tracking tools, ensuring good SEO and user experience. Security measures include HTTPS, reCAPTCHA, and GDPR-compliant cookie management, though some security headers could be improved. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and compliance indicators support legitimacy.

P

Port au Prince Film & Kultur Produktion GmbH

port-prince.de

40

Port au Prince is a specialized film production and distribution company based in Germany, operating through multiple GmbH entities focused on production, distribution, and media agency services. The company targets film professionals and enthusiasts, positioning itself as an award-winning niche player in the German film industry. The website reflects a professional and consistent brand image with clear business information and multiple contact channels. Technically, the site is built on WordPress with WooCommerce integration, leveraging modern plugins and tracking tools, and hosted on RZone servers. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security and privacy transparency.

Déjà-vu film UG is a small German film distribution company specializing in art-house and cinephile films. The website showcases current and repertory films with detailed descriptions and festival accolades, targeting film enthusiasts and cultural institutions. The company maintains partnerships with several VoD platforms, enhancing its distribution channels. Technically, the website uses legacy JavaScript libraries such as jQuery and custom carousel and lightbox scripts, hosted on 1blu.de servers. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. Security posture is basic with HTTPS assumed but no visible security headers or modern protections. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly presented, supporting business credibility.

R

RED BALLOON FILM GMBH

redballoonfilm.de

47

Red Balloon Film GmbH is a small, creative media company based in Hamburg, Germany, specializing in film production with a focus on children, family entertainment, and arthouse content. The company collaborates with talent and partners to deliver unique film projects, some of which have premiered at prestigious international film festivals such as Venice and Berlinale. Their website reflects a professional and consistent brand image, targeting film industry professionals and arthouse audiences. Technically, the website is built on WordPress using the Semplice theme, leveraging common JavaScript libraries like jQuery and GSAP for animations. Hosting is provided via rzone.de, and the site uses HTTPS with an excellent SSL configuration. Performance is moderate with good mobile optimization, though SEO and accessibility could be improved. No analytics or advertising scripts were detected, indicating minimal user tracking. From a security perspective, the site enforces HTTPS but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No incident response or security policy information is provided, which could be a gap in transparency and readiness. The WHOIS data is limited but does not raise immediate concerns, though more detailed registrant information would improve trust. Overall, the website is professional and trustworthy with good content quality and business credibility. However, improvements in privacy compliance, security headers, and incident response transparency are recommended to enhance security posture and regulatory adherence.

D

DOMOV HORIZONT

horizontkyjov.cz

57

DOMOV HORIZONT is a Czech non-profit organization providing residential and protected housing services for persons with disabilities. Established in 2007, it serves a local audience with specialized care offerings. The website is built on WordPress using the Astra theme and Elementor page builder, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is solid with HTTPS enforced and standard security headers present, complemented by a cookie consent mechanism and privacy policy indicating GDPR compliance. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are areas for improvement. Overall, the site is professional and trustworthy, with no signs of malicious content or blocking mechanisms.

A

ARES, spol. s r.o.

ares.sk

45

ARES, spol. s r.o. is a Slovak company specializing in barrier-free accessibility solutions, including lifting devices for disabled and seniors, automobile modifications for disabled persons, custom elevator manufacturing, gift basket production, and magazine distribution. The company operates multiple related domains, indicating a diversified business model under the parent company ALTECH. The website is professionally designed, well-structured, and targets customers requiring mobility and accessibility products and services. It holds ISO9001 certification, demonstrating commitment to quality standards. Technically, the website is built on WordPress with modern plugins such as Yoast SEO, Google Analytics, and Google Tag Manager, ensuring good SEO and analytics capabilities. The site is mobile-optimized and provides a cookie consent mechanism, reflecting GDPR compliance. However, some security headers are missing, and no explicit security or incident response policies are published. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. Privacy compliance is good with a clear privacy policy and cookie banner. Business credibility is high due to transparent contact information, certifications, and consistent branding. Overall, the website presents a trustworthy and professional digital presence for ARES, with recommendations to enhance security headers and publish incident response contacts to further strengthen security and compliance.

S

Savaria

savariapatientcare.com

62

Savaria Patient Care is a healthcare-focused company specializing in patient handling solutions such as ceiling lifts, therapeutic surfaces, and related equipment. The company builds on the legacy of Handicare and SPAN-America, positioning itself as a trusted provider in clinical excellence and patient safety. Their offerings include product sales, preventative maintenance, corrective services, design support, and clinical education, targeting healthcare providers across various care settings including hospitals, long-term care, and home care. Technically, the website is built on WordPress with WooCommerce, leveraging modern web technologies and Cloudflare DNS services. The site demonstrates good mobile optimization, SEO practices, and moderate performance. Security posture is solid with HTTPS enabled and domain protections in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Overall, the security posture is good but could be enhanced by publishing security policies, incident response contacts, and vulnerability disclosure information. The business credibility is high due to consistent branding, comprehensive product portfolio, and clinical education programs. No adult or questionable content is present, making the site safe for general audiences.

O

OpenSolution.org

opensolution.org

42

OpenSolution.org is a small technology company specializing in providing free and commercial PHP-based content management and shopping cart systems, targeting webmasters and small to medium businesses. The company has a long-standing presence since 2004 and supports a user base of over 32,000 websites. Their business model includes software distribution, professional extensions, and partnerships with web design companies. Technically, the website uses a PHP backend with jQuery and Google Analytics for tracking. The site is moderately optimized for mobile and SEO, with a clean and professional design. Security posture is moderate; while HTTPS usage is assumed, no advanced security headers or explicit security policies are present. Privacy compliance is basic, with cookie notices but no consent mechanism and a basic privacy policy. Overall, the website is trustworthy and professional but could improve in security and privacy compliance to enhance user trust and regulatory adherence.

I

Ing. Radek Balon

radek-balon.cz

44

Ing. Radek Balon operates a professional videography and photography business primarily focused on wedding videos, music videos, and event coverage in the Olomouc region of the Czech Republic. The website serves as a portfolio and contact point, showcasing extensive video references and detailed service descriptions. The business is positioned as a small local service provider with a friendly and optimistic approach to client collaboration. Technically, the website is built on WordPress with modern plugins such as Elementor and WooCommerce, hosted by REG-WEDOS, and includes SEO and accessibility considerations. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is addressed with GDPR and cookie policies present and consent mechanisms active. Overall, the site is professional, trustworthy, and well-suited for its target audience.

A

Aerophile

vasqueparis2024.fr

45

The website vasqueparis2024.fr represents a public event installation called La Vasque, associated with the Paris 2024 Olympic and Paralympic Games. It is operated by Aerophile and features partnerships with governmental and cultural institutions such as the Prefecture of Île-de-France, EDF, the Louvre, and the City of Paris. The event is scheduled for summer 2025 at the Jardin des Tuileries, targeting general public visitors and Olympic enthusiasts. The business model revolves around event hosting and public engagement with sponsorship support. Technically, the website is built on WordPress with a modern tech stack including UIkit and jQuery. It uses HTTPS with a reputable hosting provider (Infomaniak Network SA) and implements cookie consent management via tarteaucitron. The site is mobile optimized and has good SEO and accessibility basics. Analytics are handled via Google Analytics (GA4) with moderate user tracking. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. The domain is newly registered in April 2025, which is unusual given the event dates but does not indicate malicious intent. Privacy policies are comprehensive and GDPR compliant. Overall, the website presents a professional and trustworthy front for a niche event tied to the Paris 2024 Olympics. Recommendations include enhancing security headers, adding a vulnerability disclosure policy, and improving direct contact information for better transparency and incident response readiness.

V

Vimec s.r.l.

vimec.biz

60

Vimec s.r.l. is an established Italian company specializing in accessibility solutions for public and private spaces, with over 45 years of experience. Their product portfolio includes stairlifts, platform lifts, home elevators, and mobile stairlifts, tailored to individual needs. The company emphasizes personalized service, quality Italian manufacturing, and a strong presence across Italy and international markets. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive product information. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and Google Tag Manager for analytics. Security posture is good with HTTPS enforced, though some security headers and explicit privacy policies are missing. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall credibility given the professional content and structured data. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

S

Subak

subak.org

60

Subak is a small non-profit organization focused on driving systemic change through collaborative climate action. The organization empowers a community of transformative not-for-profit organizations by leveraging AI, data, and policy expertise to create a healthier and safer world. Their business model centers on curating groups of not-for-profits to collaborate on sectoral missions, providing space, funding, and resources to shift policies and change narratives within chosen sectors such as energy and heat. Technically, the website is built on the Squarespace platform, utilizing modern web technologies including jQuery, Google reCAPTCHA, and various third-party plugins for enhanced user experience. The site is hosted on Squarespace's CDN, ensuring moderate performance and good mobile optimization. SEO and accessibility features are basic but functional. From a security perspective, the site enforces HTTPS with HSTS enabled, uses reCAPTCHA to mitigate bot traffic, and does not expose sensitive data. However, it lacks explicit privacy, cookie, and terms of service policies, as well as contact information for incident response or data protection officers, which are areas for improvement. Overall, the website presents a professional and trustworthy front consistent with its mission. The domain WHOIS data is privacy protected, which is typical for non-profits, and no suspicious patterns were detected. Strategic recommendations include adding comprehensive privacy and cookie policies, improving accessibility, and providing clear contact channels for security and compliance matters.

I

Internet Society Foundation

isocfoundation.org

68

The Internet Society Foundation is a reputable non-profit organization dedicated to supporting initiatives that strengthen the Internet's function and reach globally. It operates multiple grant programs aimed at digital inclusion, resiliency, research, and emergency response, positioning itself as a key player in the Internet development ecosystem. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience of non-profits, Internet communities, and global stakeholders. Technically, the site is built on WordPress with modern plugins and tools such as Yoast SEO, Google Analytics, and CookieYes for consent management. The infrastructure supports good performance and accessibility, with mobile optimization and SEO best practices in place. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism, reflecting GDPR awareness. Contact information is transparent and includes phone, email, and physical address, enhancing business credibility. The WHOIS data is privacy protected, which is justified for this type of organization, and no suspicious patterns were detected. Overall, the site presents a low-risk profile with strong trust indicators and a professional online presence, suitable for its mission and audience.

M

Momentum Children's Charity

momentumcharity.org

55

Momentum Children's Charity is a UK-based non-profit organization dedicated to supporting families of seriously ill children, particularly those affected by cancer and other life-challenging conditions. The charity operates through partnerships with NHS hospitals across London, Surrey, and Sussex, providing services such as family support workers, therapies, respite breaks, and bereavement support. Their website reflects a professional and compassionate approach, targeting families in need as well as donors and volunteers. The charity maintains a strong market position within its regional healthcare support sector, leveraging fundraising and community engagement as key business models. Technically, the website is built on WordPress with modern plugins including Yoast SEO, Bootstrap framework, and integrates Google Tag Manager and Fundraise Up for donations. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting appears to be via a CDN provider, ensuring reasonable delivery speeds. From a security perspective, the site uses HTTPS with no visible exposed sensitive data and employs email obfuscation to protect contact information. However, security headers are not detected, and there is no public incident response or vulnerability disclosure policy, which are areas for improvement. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. Overall, the website presents a trustworthy and professional front for the charity, with strong content quality and business credibility. The lack of WHOIS data is mitigated by the charity's transparency in other trust signals. Strategic recommendations include enhancing security headers, publishing security policies, and formalizing vulnerability disclosure to further strengthen the security posture and trustworthiness.

M

Magyar Víz- és Szennyvíztechnikai Szövetség

vizertek.hu

38

The website www.vizertek.hu serves as an educational and awareness platform focused on sustainable water supply and wastewater management in Hungary. It is operated by the Magyar Víz- és Szennyvíztechnikai Szövetség in partnership with WWF Hungary and funded under the Széchenyi 2020 program. The site targets the general public to promote knowledge about tap water usage, environmental protection, and water infrastructure. The content is well-structured, informative, and consistent with the organization's mission. Technically, the site is built on WordPress and utilizes common JavaScript libraries such as jQuery, Nivo Slider, and Owl Carousel for interactive elements. Google Tag Manager is implemented for analytics and tracking purposes. The site is mobile-optimized with moderate performance and basic accessibility features. However, there is room for improvement in SEO and technical modernization. From a security perspective, the site uses HTTPS but lacks visible security headers and does not provide privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is available. No forms collecting user data were detected on the main page, reducing immediate data protection concerns but also limiting user engagement. Overall, the website is trustworthy and professional but requires enhancements in privacy compliance and security best practices to improve its risk posture and user trust.

N

NADAČNÍ FOND GES

nadacnifondges.cz

45

NADAČNÍ FOND GES is a Czech charitable foundation established in 2024 by GES ASSET HOLDING, a.s., focusing on supporting social projects in education, health, culture, sports, and social inclusion. The foundation aims to connect donors with those in need, emphasizing long-term positive impact in Czech society. The website is professionally designed using WordPress and Elementor, providing clear information about the foundation's mission, values, and activities. Contact details include a company email and physical address in Prague, but no phone numbers or social media links are provided. The absence of privacy and cookie policies indicates compliance gaps. No WHOIS data is available, which raises some concerns about domain legitimacy, though the website content and branding appear consistent and trustworthy.

O

OSTRA GROUP a.s.

ostragroup.cz

47

OSTRA GROUP a.s. is a large multi-sector strategic group based in the Czech Republic, primarily focused on transportation services including sales and servicing of transport technology, logistics, modular construction, real estate rental, and R&D of vehicle chassis components. The group also supports a professional motorsport racing team and offers diverse career opportunities. The website is professionally designed, mobile optimized, and provides clear navigation and comprehensive business information. Technically, it uses modern web technologies such as Bootstrap, jQuery, and integrates multiple analytics and advertising tools including Google Analytics, Facebook Pixel, and retargeting services. Security posture is good with HTTPS enabled and cookie consent implemented, though security headers and incident response policies could be improved. The domain registration data is consistent with the business claims and founding year, indicating legitimacy. Overall, the website presents a trustworthy and professional image suitable for its target audience of businesses and professionals in transportation and related sectors.

A

ALTECH, spol. s r.o.

altech.cz

48

ALTECH, spol. s r.o. is a Czech company specializing in manufacturing and providing tailored barrier-free accessibility solutions such as stair lifts, vertical and inclined platforms, and lifting systems for immobile persons. Established in 1992, the company holds a strong market position in the Czech Republic and exports globally. Their website reflects a mature digital presence with comprehensive product information, customer testimonials, and clear contact channels. Technically, the site is built on WordPress with modern frameworks and includes robust SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance, although no explicit security policy or incident response information is published. WHOIS data is missing, which slightly impacts domain trust but does not detract from the professional business presentation. Overall, ALTECH demonstrates a credible and trustworthy online presence aligned with its business operations.

O

Opel CZ

opel-ihned.cz

53

The website www.opel-ihned.cz serves as a comprehensive online platform for listing and filtering Opel brand vehicles available immediately from authorized dealers in the Czech Republic. It aggregates stock and demo vehicles, providing detailed filtering options by model, dealer, engine type, color, equipment, and price. The platform targets consumers seeking to purchase Opel vehicles quickly and conveniently, positioning itself as a trusted intermediary between buyers and authorized dealers. The business model focuses on lead generation and vehicle inventory display, supported by dealer contact information and location mapping. Technically, the site is built on JavaServer Faces with PrimeFaces UI components, enhanced by Bootstrap for responsive design and jQuery for interactivity. It integrates Google Tag Manager, Google Analytics, and Adform for marketing and tracking purposes, alongside a live chat service (Smartsupp). The site is mobile-optimized with good SEO practices, including structured data (JSON-LD) and Open Graph metadata, enhancing search visibility and social sharing. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, indicating awareness of privacy regulations. However, explicit security headers like Content-Security-Policy or X-Frame-Options are not evident, and no published security or incident response policies are found. The absence of WHOIS data reduces transparency but does not directly imply malicious intent. Overall, the security posture is moderate with room for improvement in policy publication and header implementation. The overall risk assessment suggests a legitimate, professionally maintained automotive sales platform with moderate technical maturity and privacy compliance. Strategic recommendations include publishing clear privacy and security policies, enhancing security headers, and establishing a vulnerability disclosure process to strengthen trust and compliance.

B

Benes Consulting Group

spolecnebezpecne.cz

43

The website 'Společně bezpečně' is a safety awareness and educational project primarily focused on increasing road safety and general safety awareness in the Czech Republic. It is a collaborative initiative involving ESSOX and the Hasičský záchranný sbor Jihočeského kraje, targeting children and the general public through educational campaigns and activities. The site presents a professional and consistent brand image with clear navigation and relevant content. Technically, it employs a modern front-end stack including jQuery, Bootstrap, and various plugins, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and use of reCAPTCHA, but lacks some security headers and explicit privacy and cookie policies. The absence of WHOIS data reduces transparency and trust somewhat, but partnerships and content quality support legitimacy. Overall, the site is a trustworthy educational resource with room for improvement in privacy compliance and security best practices.

P

Programia s.r.o.

nejlevnejsinabytek.cz

58

Nejlevnejsinabytek.cz is a Czech Republic based e-commerce platform specializing in furniture and home accessories. The website offers a large inventory of furniture products, including private label items under the NEJBY brand, and targets general consumers seeking affordable and quality home furnishings. The business is positioned as one of the largest furniture e-shops in the Czech market, providing extensive stock and a loyalty club for customers. Technically, the site uses modern JavaScript libraries, CDNs, and tracking tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks some security headers and explicit privacy policy pages. The absence of WHOIS domain registration data is a notable concern, reducing domain trustworthiness, though the website content and business presence indicate legitimacy. Overall, the site is professional and trustworthy for its market segment.

S

SEVEN SPORT s.r.o.

insportline.cz

58

SEVEN SPORT s.r.o., operating the inSPORTline brand, is a leading Czech retailer and manufacturer specializing in fitness and sports equipment. The company offers a broad range of products including fitness machines, sport accessories, moto gear, outdoor equipment, and health and beauty items. Their market position as the largest fitness equipment manufacturer and seller in the Czech Republic is supported by a comprehensive e-commerce platform and physical stores. The website demonstrates a mature digital presence with extensive product listings, promotional campaigns, and customer engagement features such as loyalty programs and rental services. Technically, the website employs modern web technologies including jQuery, Bootstrap, and Swiper.js for responsive and interactive user experience. It integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Persoo personalization scripts, indicating a sophisticated approach to user tracking and marketing. The site is well optimized for SEO, accessibility, and mobile devices, with proper meta tags and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements key security headers. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of publicly available WHOIS data reduces transparency and slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent mechanisms in place. Overall, the website presents a professional, secure, and user-friendly platform for fitness and sports retail. The main risk factor is the lack of WHOIS transparency, which should be addressed to improve trust. Strategic recommendations include publishing a dedicated security policy, incident response information, and vulnerability disclosure guidelines to further enhance security posture and customer confidence.