Security Directory

E

Evangelische Landeskirche in Baden

ekiba.de

53

The Evangelische Landeskirche in Baden operates a comprehensive and professionally designed website serving as an information and community engagement platform for its members and the general public interested in religious and social topics in the Baden region of Germany. The site provides extensive content on church activities, social services, educational programs, and community events, positioning itself as a key regional religious institution. Technically, the website leverages Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a mature digital infrastructure with good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement, privacy-conscious analytics, and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the website is trustworthy, GDPR compliant, and free from suspicious or adult content, reflecting a low-risk profile for users and stakeholders.

K

Katholische Landjugendbewegung (KLJB) der Erzdiözese Freiburg

kljb-freiburg.de

45

The Katholische Landjugendbewegung (KLJB) der Erzdiözese Freiburg is a German non-profit youth organization focused on engaging young people in rural areas through education, events, and community activities. The website serves as an information hub for members and interested parties, providing contact details, event information, and organizational news. It is affiliated with the national KLJB and the international MIJARC movement, positioning it as a regional player with broader connections. Technically, the website is built on Edith CMS and uses jQuery libraries alongside Matomo analytics for user tracking with respect to privacy preferences. The site is hosted on German servers (Goneo) and employs HTTPS for secure communication. The design is professional, mobile-optimized, and accessible, though some SEO and security best practices could be improved. From a security perspective, the site uses HTTPS and respects cookie consent for tracking. However, it lacks explicit privacy and cookie policies, security headers, and incident response contact information, which are areas for improvement. No critical vulnerabilities or suspicious elements were detected. Overall, the website is trustworthy and professional, serving its non-profit mission effectively. Strategic enhancements in privacy transparency and security hardening would further strengthen its posture.

K

Katholische Landbewegung Freiburg (KLB)

klb-freiburg.de

45

Katholische Landbewegung Freiburg (KLB) is a small non-profit organization dedicated to supporting Christian life and community in rural areas around Freiburg, Germany. The website provides information about their mission, events, spiritual offerings, and campaigns to preserve rural culture and environment. Their target audience includes rural community members and those interested in Christian faith and rural life. Technically, the site is built on Edith CMS, uses common JavaScript libraries like jQuery and Bootstrap, and integrates Matomo for analytics with some privacy controls. Security posture is moderate with HTTPS enforced but lacks explicit security headers and formal privacy policies. Contact information is limited but includes an email and a contact page. Overall, the website is professional, well-structured, and trustworthy for its niche audience.

K

Katholische Landfrauenbewegung Freiburg (KLFB)

kath-landfrauen.de

45

The Katholische Landfrauenbewegung Freiburg (KLFB) is a regional non-profit organization dedicated to supporting women and families in rural areas within the Erzdiözese Freiburg. The website serves as an informational and event platform, providing news, event listings, and educational content aligned with its mission. The organization positions itself as a community advocate with a focus on Christian values and rural development. Technically, the website is built on Edith CMS, leveraging jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with w-commerce.de. The site is accessible, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and some privacy considerations via Matomo's cookie disabling, but lacks explicit privacy and cookie policies and security headers. Overall, the site reflects a trustworthy and professional presence for a small non-profit entity.

E

Erzdiözese Freiburg - Bildungshäuser und Familienferienstätten

bildungshaus-neckarelz.de

55

Bildungshaus Neckarelz is a small, non-profit educational and hospitality organization based in Mosbach-Neckarelz, Germany, affiliated with the Erzdiözese Freiburg. The website offers detailed information about seminars, courses, accommodation, and conference facilities, targeting individuals and groups interested in personal and professional development in a welcoming environment. The business model focuses on education and hospitality services with a strong community orientation. Technically, the website is built on Edith CMS and uses common JavaScript libraries such as jQuery and AblePlayer, with Matomo analytics integrated respecting user consent. The site is hosted on fibcom.de nameservers and enforces HTTPS, providing a secure browsing experience. The design is professional, mobile-optimized, and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and respects tracking consent but lacks explicit security headers and formal privacy and cookie policies, which are compliance gaps. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices to improve user trust and regulatory adherence.

R

Referat Kirche und Ländlicher Raum Erzdiözese Freiburg

landpastoral.de

43

The website 'Kirche im Ländlichen Raum' represents the Referat Kirche und Ländlicher Raum of the Erzdiözese Freiburg, a church-affiliated non-profit organization focused on supporting and fostering community life in rural areas of Germany. It provides information, news, and collaboration opportunities with various rural and church-related organizations. The site targets rural communities and church members, offering resources and event information to strengthen social and spiritual ties. Technically, the website is built on Edith CMS, uses modern JavaScript libraries such as jQuery and Bootstrap, and integrates Matomo for analytics with respect to user privacy. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, HTTPS is enforced, but the absence of explicit security headers and cookie consent mechanisms indicates room for improvement. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the website's purpose and content, indicating legitimacy.

Z

Združenie Informačných a poradenských centier mladých v SR (ZIPCeM)

icm.sk

43

The website icm.sk represents a well-established non-profit organization, Združenie Informačných a poradenských centier mladých v SR (ZIPCeM), which operates a national network of youth information centers across Slovakia. Founded in 2003, the organization provides verified, anonymous, and tailored information and counseling services to young people on topics such as employment, education, travel, addictions, and human rights. The site targets youth and stakeholders interested in youth development and support services. The business model is focused on non-profit service delivery with partnerships involving governmental and educational institutions. The website content is professionally presented, consistent, and relevant to its audience.

S

Startupticker

startupticker.ch

59

Startupticker.ch is a well-established Swiss media platform focused on delivering high-quality news, reports, and event information related to the Swiss startup ecosystem. It serves entrepreneurs, investors, and innovation stakeholders by providing timely and relevant content, supported by a network of reputable partners and sponsors. The platform offers a variety of services including news articles, event calendars, venture capital reports, and an ecosystem directory, positioning itself as a key information hub in Switzerland's startup landscape. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Google Analytics, ensuring a responsive and user-friendly experience across devices. Security-wise, the site uses HTTPS and basic security headers but lacks advanced headers and a formal security policy or incident response contact, which are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, with minor gaps in privacy compliance and security best practices.

B

Bildungswerk der Erzdiözese Freiburg

bildungszentrum-digital.de

10

The Digitales Bildungszentrum website serves as a digital platform for the Bildungswerk der Erzdiözese Freiburg, focusing on adult education through online workshops and media literacy programs. It targets adults, church employees, seniors, and families, providing educational content and interactive learning opportunities. The platform consolidates regional educational offerings into a centralized online presence, enhancing accessibility and engagement. Technically, the website employs a modern frontend stack including jQuery, Bootstrap-like components, FontAwesome, and is powered by the Edith CMS backend. It uses Matomo for analytics with respect to user cookie preferences, indicating a moderate level of digital maturity. The site is mobile-optimized and structured for good SEO and accessibility, though some accessibility features could be improved. From a security perspective, the site enforces HTTPS and respects user tracking preferences, but lacks visible security headers and explicit privacy or cookie policies. No vulnerability disclosures or incident response contacts are published, which could be improved to enhance trust and compliance. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and well-positioned within its niche but would benefit from enhanced privacy compliance and security documentation to align with best practices and regulatory requirements.

P

PR Newswire Canada

newswire.ca

76

PR Newswire Canada operates a leading press release distribution platform serving businesses and PR professionals across Canada. As part of the Cision group, it offers a comprehensive suite of services including press release distribution, content amplification, investor relations, and AI-powered content creation. The website demonstrates a mature digital presence with multiple client portals and a strong focus on compliance and user experience. Technically, the site is built on Adobe Experience Manager with modern JavaScript libraries such as jQuery and Bootstrap, supported by Adobe Launch for analytics and tag management. The site is mobile optimized, accessible, and SEO friendly, with a moderate performance profile. Security posture is strong with HTTPS enforced, multiple security headers, and a cookie consent mechanism aligned with GDPR requirements. However, the absence of a public vulnerability disclosure policy and incident response contact details suggests areas for improvement in transparency and security communication. Overall, the domain's WHOIS data is privacy protected, which is typical for enterprise media companies. The website content and external references strongly support the legitimacy and trustworthiness of the business. Strategic recommendations include publishing explicit security policies, enhancing incident response visibility, and maintaining compliance transparency.

The website 'Wioski tematyczne' is a Polish project dedicated to promoting and strengthening thematic villages in Poland, funded by the EOG Funds. It serves as an informational and community platform offering standards, maps, news, and a forum for thematic villages. The project targets a general audience interested in rural development and cultural initiatives. Technically, the site is built on WordPress with common plugins like Yoast SEO and jQuery libraries, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, representing areas for improvement. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced security and compliance measures.

A

Adrez Group a.s.

adrezliving.com

50

Adrez Group a.s. operates a hospitality business specializing in vacation apartments and boutique hotels located in the heart of Prague. The company offers a modern online booking system with contactless check-in and 24/7 customer support, targeting travelers seeking comfortable city-center accommodations. Their market position is supported by multiple properties and positive customer reviews, positioning them as a reputable local hospitality provider. Technically, the website employs a mature technology stack including jQuery, Google Analytics, Facebook Pixel, and a third-party booking engine (Mews). The site is mobile-optimized with good SEO practices and interactive features, though some improvements in accessibility and security headers could enhance the technical posture. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms aligned with GDPR. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure pages indicates room for improvement in security transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a professional, trustworthy front with moderate technical sophistication and good privacy compliance. The lack of WHOIS data transparency slightly reduces trust but is mitigated by consistent business information and active social media presence. Strategic enhancements in security policies and technical headers would further strengthen their security posture.

W

Wolters Kluwer ČR, a. s.

aspi.cz

64

ASPI, operated by Wolters Kluwer ČR, a. s., is a well-established Czech legal information service with over 30 years of market presence. The website offers comprehensive legal databases, AI-powered assistants, calculators, and practical tools aimed at legal professionals, government entities, and businesses requiring reliable Czech legal content. The platform demonstrates a strong market position supported by professional branding and consistent content quality. Technically, the site uses modern JavaScript libraries and frameworks, including jQuery, Bootstrap, and Select2, with a responsive design and good accessibility features. Security posture is adequate with HTTPS and GDPR-compliant cookie consent mechanisms, though explicit security headers and incident response policies are not evident. The absence of WHOIS data reduces domain trust assessment but does not detract from the site's professional appearance and business legitimacy. Overall, ASPI presents a mature digital infrastructure with a focus on legal content delivery and user experience.

The Medienanstalt Berlin-Brandenburg (mabb) operates as the joint media regulatory authority for the German states of Berlin and Brandenburg. The organization focuses on ensuring media diversity, supporting local journalism, combating disinformation, and enhancing media literacy across all generations. Their services include media oversight, sustainable media funding, and public engagement through educational initiatives. The website reflects a professional and well-structured digital presence, leveraging modern web technologies and a reputable CMS (Contao). It is hosted behind Cloudflare, ensuring reliable DNS and security infrastructure. Privacy and cookie policies are comprehensive and GDPR compliant, with a clear consent mechanism implemented. Contact information is transparent, including physical address, phone numbers, and email, complemented by active social media channels on Facebook, LinkedIn, and Vimeo. Security posture is strong with HTTPS enforced, CSRF protection, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government-related media authority.

I

Institut für Pastorale Bildung der Erzdiözese Freiburg KdöR

theologischer-kurs.de

44

Theologischer Kurs Freiburg is an educational initiative operated by the Institut für Pastorale Bildung der Erzdiözese Freiburg, offering a specialized theological course for adults and church volunteers. The course has a strong market position as the only diocesan theological course in Germany with a 50-year history, providing foundational theological knowledge and pathways to academic qualifications such as a Bachelor in Practical Theology. The website reflects a professional and consistent brand image aligned with its religious and educational mission. Technically, the website is built on the W-Commerce CMS platform, leveraging modern JavaScript libraries like jQuery and AblePlayer, and employs Matomo for privacy-conscious analytics. The site is mobile-optimized, accessible, and performs moderately well. Hosting and DNS are managed by W-Commerce GmbH, consistent with the website's author metadata. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and restricts third-party content until user consent is given, demonstrating good privacy compliance. However, explicit security policies and incident response contacts are not found, representing areas for improvement. Overall, the website is trustworthy, safe, and well-suited for its target audience. Strategic recommendations include adding a security.txt file, incident response information, and enhancing security headers to further strengthen the security posture.

G

Geistliches Zentrum St. Peter

geistliches-zentrum.org

49

Geistliches Zentrum St. Peter is a German non-profit spiritual center offering a variety of programs including spiritual retreats, exercises, contemplations, training, and monastery tours. The website targets individuals interested in spiritual growth and religious education, positioning itself as a regional center for contemplative and educational services. Technically, the site is built on Edith CMS, uses jQuery and Bootstrap frameworks, and integrates Matomo for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable, which limits domain trust verification. Overall, the site is professional and trustworthy for its intended audience but could improve in privacy compliance and security best practices.

B

Bildungswerk der Erzdiözese Freiburg

bwerk.de

43

Bildungswerk der Erzdiözese Freiburg is a state-recognized institution specializing in Catholic adult education within the Erzdiözese Freiburg region in Germany. The organization provides open adult education services, including workshops, seminars, and community engagement programs, primarily targeting adults and volunteers in the Catholic community. The website reflects a professional and consistent brand presence with clear navigation and relevant content in German. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and employs HTTPS with good security headers, although some improvements in privacy compliance and security disclosures are recommended. Overall, the website is trustworthy and well-positioned in its niche educational sector.

I

Institut für Religionspädagogik der Erzdiözese Freiburg

irp-freiburg.de

43

The Institut für Religionspädagogik der Erzdiözese Freiburg operates as a regional educational and consulting center supporting Catholic religious education across various school types and kindergartens within the Erzdiözese Freiburg region in Germany. The website serves as an information hub offering educational materials, news, and training opportunities tailored to educators and institutions involved in religious pedagogy. The business model focuses on educational support and resource provision, positioning itself as a trusted regional institute affiliated with the Erzdiözese Freiburg. Technically, the website is built on the Edith CMS platform, utilizing modern web technologies such as jQuery, Bootstrap, and Matomo analytics for user tracking. The site is mobile-optimized with good SEO practices and accessibility basics in place. Hosting and domain management appear professional, with consistent use of web commerce services for site management. From a security perspective, the site employs HTTPS with a good SSL configuration and respects user tracking preferences by disabling analytics if the user denies consent. However, there are gaps in privacy compliance, notably the absence of explicit privacy and cookie policies, and no visible incident response or vulnerability disclosure information. Security headers are minimal, and accessibility could be improved. Overall, the website presents a low-risk profile with a solid business credibility and technical foundation but would benefit from enhanced privacy compliance and security best practices to strengthen trust and regulatory adherence.

E

Erzdiözese Freiburg KdöR, Referat Pastoralpsychologie im Institut für Pastorale Bildung

pastoralpsychologie-freiburg.de

10

The website pastoralpsychologie-freiburg.de represents the Referat Pastoralpsychologie, a department within the Institut für Pastorale Bildung affiliated with the Erzdiözese Freiburg. It offers educational and counseling services focused on pastoral psychology and seelsorgliche Kommunikation (pastoral care communication). The target audience includes both full-time and volunteer church workers seeking training and supervision in pastoral counseling. The site positions itself as a niche educational provider within the religious and non-profit sector in Germany. Technically, the website is built on the Edith CMS platform, utilizing modern JavaScript libraries such as jQuery and Bootstrap components for responsive design. It employs Matomo analytics, reflecting a privacy-conscious approach to user tracking. The site is hosted professionally with HTTPS enforced, ensuring secure data transmission. However, some modern security headers are missing, and no cookie consent mechanism is implemented, which could be improved for compliance. From a security perspective, the site shows good practices such as email obfuscation and HTTPS usage. There is no evidence of exposed vulnerabilities or sensitive data leakage. The absence of an incident response page or vulnerability disclosure policy is a gap. The WHOIS data indicates a legitimate domain with consistent hosting but lacks detailed registrant information, which slightly reduces trust but is not uncommon for small non-profit entities. Overall, the website is professional, trustworthy, and serves its educational mission well. Strategic improvements in privacy compliance and security headers would enhance its posture and user trust.

B

Beratungsdienst Familie & Betrieb der KLB Freiburg

familie-und-betrieb.de

44

Beratungsdienst Familie & Betrieb der KLB Freiburg is a non-profit agricultural family advisory service affiliated with the Catholic Land Movement in the Freiburg Archdiocese. It provides confidential, cost-free counseling to agricultural families facing challenges such as succession, family conflicts, financial difficulties, and health issues. The website offers detailed information about its services, partners, publications, and contact options, primarily targeting German-speaking agricultural communities in Germany, Austria, and Switzerland. Technically, the site is built on Edith CMS, uses jQuery and Bootstrap frameworks, and integrates Matomo analytics with privacy-conscious settings. Security posture is good with HTTPS and some security headers, though improvements like cookie consent and security.txt are recommended. The domain registration and hosting align well with the business profile, indicating legitimacy and consistency.

R

Referat Ehe-Familie-Diversität im Erzbistum Freiburg

eintagfueruns.de

46

The website 'Heiraten in der Erzdiözese Freiburg' serves as an official informational platform managed by the Referat Ehe-Familie-Diversität within the Archdiocese of Freiburg. It provides comprehensive resources, event listings, and guidance for couples preparing for a church wedding, focusing on the Catholic and ecumenical communities in Germany. The site is well-positioned as a niche regional service provider with a clear target audience and a consistent brand identity aligned with the Archdiocese's mission. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and the Edith CMS platform, hosted likely by w-commerce.de. It integrates Matomo analytics with privacy-conscious configurations, though it lacks a cookie consent mechanism. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and privacy compliance are recommended. From a security perspective, the site uses HTTPS with a solid SSL configuration and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's purpose and hosting, indicating a legitimate and trustworthy domain. Overall, the website presents a low-risk profile with good business credibility and technical implementation. Strategic enhancements in privacy compliance and security best practices would further strengthen its posture.

L

LearningApps.org

learningapps.org

52

LearningApps.org is an established educational platform founded in 2010, offering interactive and multimedia learning blocks aimed at educators and students. The platform operates primarily as a free service supported by donations, focusing on providing customizable educational apps and collections to enhance learning experiences. The website is professionally designed with consistent branding and clear navigation, targeting a global audience with multilingual support. Technically, the site uses a custom CMS with a technology stack including jQuery, Bootstrap, Font Awesome, and Matomo analytics, hosted by netcup GmbH. While the performance and mobile optimization are moderate, the site maintains a good level of accessibility and SEO basics. Security-wise, the site enforces HTTPS and uses secure login iframes but lacks DNSSEC and modern security headers, and it uses an outdated jQuery version, which could pose risks. Privacy compliance is basic, with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the website is trustworthy and safe for general audiences, with room for improvement in security and privacy practices.

Kulturrat Thüringen e.V. is a regional non-profit umbrella organization dedicated to representing and promoting cultural and artistic interests within the Free State of Thuringia, Germany. The organization provides advocacy, cultural education projects, political dialogue on cultural matters, and awards cultural honors such as the Kulturnadel. The website reflects a focused mission targeting cultural institutions, artists, policymakers, and the public in Thuringia. Technically, the site is built on the Contao CMS platform, leveraging common JavaScript libraries such as jQuery and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are not evident and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a clear privacy policy and cookie banner. Overall, the site is professional, trustworthy, and aligned with its non-profit cultural mission.

T

Team Zones.sk

plzplz.de

47

plzPLZ.de is a specialized online service providing postal code lookup for Germany updated for the year 2025. The website offers search functionality by city, street, or postal code, targeting general users needing quick postal code information. The business appears to be a small-scale information service operated by Team Zones.sk, with sister sites for other countries' postal codes. Technically, the site uses standard web technologies including jQuery, Google Fonts, Google Tag Manager, and Adsense for monetization. The site is hosted on websupport.sk nameservers and employs HTTPS with a consent management platform to comply with GDPR cookie regulations. Security posture is moderate with no critical vulnerabilities detected but lacks explicit security headers and published privacy or terms of service pages. Advertising is extensive with multiple third-party ad networks and tracking vendors integrated. Overall, the website is functional, well-structured, and provides a useful niche service with moderate trustworthiness and compliance.

C

Cision PR Newswire

prnewswire.com

76

PR Newswire, a division of Cision, is a leading global press release distribution and media engagement company founded in 1954. The company offers comprehensive news distribution, targeting, monitoring, and marketing solutions to help businesses connect with target audiences worldwide. Their market position is strong as an enterprise-level media service provider with a broad portfolio of services including the Amplify platform for communications management. Technically, the website is built on Adobe Experience Manager CMS and leverages modern web technologies such as jQuery, Bootstrap, and Adobe Launch for analytics and tag management. The site is mobile optimized, accessible, and SEO friendly, providing a professional user experience with clear navigation and rich content. From a security perspective, the site enforces HTTPS, implements several security headers, and uses secure forms. However, some security best practices like Content-Security-Policy and vulnerability disclosure mechanisms are absent. The WHOIS data is not publicly available, likely due to privacy protection, which is justified for a large enterprise. Overall, the security posture is good but could be improved with additional headers and transparency. The overall risk assessment is low with no critical vulnerabilities detected. Strategic recommendations include enhancing security headers, publishing privacy and terms policies explicitly, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

S

Slovenská inšpekcia životného prostredia

sizp.sk

49

Slovenská inšpekcia životného prostredia (SIŽP) is the official Slovak government authority responsible for environmental inspection, state supervision, and enforcement related to environmental protection. The website serves as a comprehensive portal providing information on environmental laws, inspection activities, public notices, and various environmental sectors such as water, air, nature, waste, and genetics. It targets the general public, government bodies, and environmental professionals, positioning itself as a key regulatory entity in Slovakia's environmental governance. Technically, the website uses a legacy but stable technology stack including jQuery and ASP.NET frameworks, with integration of Google Analytics and Google Tag Manager for tracking. The site is mobile-optimized, accessible, and well-structured with clear navigation. However, it lacks some modern security headers and cookie consent mechanisms, which are important for GDPR compliance and enhanced security posture. From a security perspective, the site benefits from HTTPS encryption and absence of exposed sensitive data. Yet, it does not publish explicit security policies, incident response contacts, or vulnerability disclosure information, which could improve transparency and trust. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the official government entity, indicating high legitimacy. Overall, the website is professional, trustworthy, and serves its governmental function effectively. Strategic improvements in privacy compliance and security best practices would enhance its security posture and user trust.

Naše voda is a Czech informational website focused on water-related topics such as water supply, fisheries, flood prevention, and water cleanliness. The site targets both the general public and professionals interested in water management and environmental issues. It operates as a content publishing platform providing news, event information, and educational articles. Technically, the site is built on WordPress with common plugins like Yoast SEO and integrates Google Analytics and Adsense for tracking and monetization. The website is mobile-optimized and has good SEO practices but lacks comprehensive privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS enabled but missing security headers and no visible incident response or security policies. WHOIS data is unavailable, which reduces domain trustworthiness. Overall, the site is professional and content-rich but would benefit from improved privacy compliance and security hardening.

R

ROYAL SPA, a.s.

royalmarienbad.cz

49

ROYAL SPA, a.s. operates the Lázeňský hotel ROYAL Mariánské lázně, a well-established spa hotel located in the Czech Republic. The business focuses on providing comprehensive spa, wellness, and medical rehabilitation services, leveraging natural mineral springs and professional healthcare. The hotel targets health tourists, insured patients, and wellness seekers, offering a variety of packages and treatments. The company enjoys a strong market position supported by multiple certifications and a 30-year history. Technically, the website employs modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations.

R

Royal Spa, a.s.

lazne-losiny.cz

51

Termální lázně Velké Losiny is a well-established spa and wellness resort located in the Czech Republic, offering a variety of therapeutic and recreational services including thermal baths, spa treatments, and accommodation in multiple hotels. The resort is part of the Royal Spa group, which enhances its market position and brand recognition. The website reflects a professional hospitality business targeting a broad audience including families, seniors, and insured clients. Technically, the website uses a custom CMS with common web technologies such as jQuery, Google Tag Manager, and Facebook Pixel, providing a moderate level of digital maturity. The site is mobile responsive and SEO optimized, though some technical updates like modernizing jQuery could improve security and performance. Security posture is generally good with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and public security policies. The absence of WHOIS data is a notable transparency gap, though the business presence and certifications support legitimacy. Overall, the website is professional and trustworthy with room for security and compliance enhancements.

G

Geis CZ s.r.o.

geis.cz

51

Geis CZ s.r.o. is a well-established logistics company operating primarily in the Czech Republic, offering a broad range of transportation and logistics services including pallet transport, full truckload, warehousing, air and sea freight, packaging, and customs services. The company emphasizes sustainability and responsibility through its MissionZero program and maintains a strong international network supported by numerous branches and partners. The website reflects a professional and modern digital presence with comprehensive service information and customer engagement tools such as shipment tracking and a customer portal. Technically, the site uses common JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is moderate with HTTPS usage and cookie consent mechanisms, but lacks visible advanced security headers and explicit security policies. WHOIS data is unavailable, which slightly impacts trust but the overall business credibility remains high due to consistent branding and professional content.

E

Erzdiözese Freiburg

erzbistum-freiburg.de

44

Erzdiözese Freiburg operates as a large Catholic diocese in Germany, providing spiritual, educational, and social services to approximately 1.6 million Catholics in the region. The website serves as an information portal with extensive content on faith, pastoral care, education, and community engagement. Technically, the site is built on Edith CMS with a modern tech stack including jQuery, Bootstrap, and Matomo analytics, hosted by w-commerce.de. The site is accessible, mobile-optimized, and well-structured, though it lacks explicit privacy and cookie policies. Security posture is good with HTTPS and no visible vulnerabilities, but could be improved with additional security headers and published policies. Overall, the website is professional and trustworthy, serving a non-profit religious organization with a strong regional presence.

B

Bundesvereinigung Kulturelle Kinder- und Jugendbildung e.V. (BKJ)

kompetenznachweiskultur.de

41

Kompetenznachweiskultur.de is a German non-profit educational website focused on providing a cultural competence certification for youth aged 12 and above. The initiative is supported by the Bundesvereinigung Kulturelle Kinder- und Jugendbildung e.V. (BKJ) and the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth (BMFSFJ). The website serves as an informational and networking platform for cultural educators and young participants, emphasizing personal and social skill development through cultural activities. Technically, the site is built on WordPress using the Genesis Framework and Showcase Pro theme, hosted by Schlund Technologies. It employs common JavaScript libraries such as jQuery and jQuery UI, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks some advanced security headers and cookie consent mechanisms. No direct contact emails or phone numbers are present on the homepage, with contact facilitated via a dedicated page. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Active Radio a.s.

youradio.cz

60

Youradio.cz is a Czech online music streaming and podcast platform operated by Active Radio a.s. It offers users the ability to listen to curated music moods, create personalized playlists, and access podcasts via web and mobile applications. The service targets Czech-speaking users seeking free and premium music streaming experiences with social and community features. Technically, the website employs modern JavaScript libraries, integrates multiple analytics and advertising platforms, and supports mobile responsiveness. Privacy and cookie policies are clearly presented with consent management mechanisms, reflecting GDPR compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. The absence of WHOIS data limits domain trust verification but the website content and branding indicate a legitimate media service. Overall, Youradio.cz presents a professional, user-friendly platform with moderate technical maturity and good privacy practices.

G

Geis SK s.r.o.

geis-group.sk

49

Geis SK s.r.o. is a well-established logistics and transportation company operating primarily in Slovakia with a strong international presence through its parent Geis Group. The company offers a comprehensive range of logistics services including pallet transport, full truckload transport, warehousing, air and sea freight, and packaging solutions. The website reflects a mature business with over 75 years of experience, targeting business customers requiring reliable logistics solutions. Technically, the website uses a modern tech stack including jQuery, Google Tag Manager, Hotjar, and a web chat system, hosted on a German hosting provider. The site is mobile optimized and provides good user experience and navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business. The site is free from adult or questionable content and complies well with GDPR requirements.

R

Royal Spa, a.s.

diana-losiny.cz

48

The website www.diana-losiny.cz represents Wellness hotel DIANA Velké Losiny, a medium-sized hospitality business operating in the Czech Republic's Jeseníky region. It offers accommodation, wellness services, therapeutic procedures, sports facilities, and family-friendly amenities. The hotel is part of the Royal Spa group, a recognized spa and wellness operator in the Czech market. The site is professionally designed with good content quality, clear navigation, and mobile optimization, targeting tourists and wellness seekers. The business model focuses on hospitality and wellness services with additional conference facilities and gourmet cuisine offerings. Technically, the website uses a custom CMS platform with common JavaScript libraries such as jQuery, Google Tag Manager, and Facebook Pixel for analytics and marketing. The site is served over HTTPS with good SSL configuration, though security headers are not explicitly detected. Cookie consent mechanisms and privacy policies are implemented, indicating a good level of privacy compliance. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site shows good practices such as HTTPS enforcement and cookie consent but lacks explicit security policies and incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain registration trustworthiness, but the strong brand association with Royal Spa and consistent business information support legitimacy. Overall, the site presents a low risk but would benefit from enhanced security headers and domain registration transparency. Strategic recommendations include implementing security headers, publishing a security policy and vulnerability disclosure, and verifying domain registration details to improve trust and compliance.

K

Králický Sněžník, z.ú.

kralickysneznik.net

43

Králický Sněžník, z.ú. operates a comprehensive tourism promotion website for the Králický Sněžník region in the Czech Republic. The site provides detailed information on local attractions, accommodation options, events, and live weather and webcam feeds, targeting tourists and visitors interested in outdoor activities and regional culture. The business model focuses on destination marketing and supporting local hospitality services. Technically, the website employs modern JavaScript libraries such as jQuery, Leaflet.js for interactive maps, and Google Tag Manager for analytics and tracking, indicating a moderate level of digital maturity. The site is mobile-optimized and features a cookie consent mechanism aligned with GDPR requirements. Security-wise, the website uses HTTPS with good SSL configuration and implements cookie consent, but lacks explicit security headers and incident response contact details, which are areas for improvement. The absence of WHOIS registrant data introduces some uncertainty regarding domain registration legitimacy, though the website content and contact information suggest a legitimate regional tourism entity. Overall, the website presents a professional and trustworthy front for regional tourism promotion with moderate technical and security maturity.

G

Gmina Baborów

baborow.pl

58

Gmina Baborów operates an official municipal website serving the local community in Poland, providing public announcements, event information, and access to government services. The site is well-structured, uses modern web technologies including Bootstrap and jQuery, and integrates Google Analytics for visitor insights. The website demonstrates good digital maturity with mobile optimization and accessibility features. Security posture is adequate with HTTPS and CSRF protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is limited by the absence of a dedicated privacy policy page, but cookie consent is implemented. Overall, the domain registration data aligns well with the website's official nature, indicating high legitimacy and trustworthiness.

O

Obec Červená Voda

cervenavoda.cz

44

Obec Červená Voda operates as the official municipal government website for the town of Červená Voda in the Czech Republic. It provides residents and visitors with essential information about local government services, community news, tourism, and events. The website serves as a central hub for municipal communication and public service announcements, positioning itself as a trusted local government resource. The business model is focused on public service rather than commercial activity, targeting local citizens and tourists. Technically, the website employs a custom CMS with a modern JavaScript stack including jQuery, Swiper.js, and various UI libraries. It integrates Google Analytics and Facebook SDK for analytics and social media engagement. The site is mobile optimized and uses HTTPS with a valid SSL certificate, ensuring secure data transmission. However, there is room for improvement in security headers and privacy compliance features. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and no visible sensitive data exposure. The absence of security headers and explicit privacy and cookie policies are notable gaps. No vulnerabilities or suspicious activities were detected in the content. The WHOIS data is unavailable due to privacy protection, which is common for Czech domains and does not detract from the site's legitimacy. Overall, the website is a well-maintained municipal portal with good content quality and user experience. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and publishing incident response contacts to improve trust and compliance. These steps will strengthen the site's security posture and align it better with GDPR and other regulatory requirements.

W

Web Commerce GmbH

konradsblatt.de

47

Konradsblatt is a German regional Catholic weekly newspaper serving the Archdiocese of Freiburg. The website provides news, commentary, subscription services, and an online shop for related publications. The business is positioned as a trusted religious media outlet with a clear target audience in the Catholic community. The website is professionally designed, mobile-optimized, and uses Edith CMS as its content management system. It integrates Matomo analytics with some privacy considerations. Security posture is good with HTTPS and basic security headers, but lacks explicit privacy and cookie policies as well as incident response information. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

H

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o.

adalbertinum.cz

53

HRADECKÁ KULTURNÍ A VZDĚLÁVACÍ SPOLEČNOST s.r.o. operates as a regional cultural and educational organization in Hradec Králové, Czech Republic. The website serves as a comprehensive platform for cultural events, educational courses, venue rentals, and ticket sales, targeting the general public including families and youth. Supported by local government entities, it holds a stable market position as a trusted regional service provider. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google Analytics, ensuring a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data is a concern for domain transparency but does not detract from the professional presentation and trust signals on the site. Overall, the site is well-maintained, GDPR compliant, and provides valuable cultural services to its community.

F

Freiburger Orientierungsjahr

freiburger-orientierungsjahr.de

45

The Freiburger Orientierungsjahr website represents a small, regionally focused educational and faith-based orientation year program affiliated with the Archdiocese of Freiburg. It offers young adults a structured year for personal development, study and career orientation, and faith strengthening. The website is professionally designed with clear navigation and consistent branding, targeting primarily German-speaking youth seeking guidance after high school. Technically, the site uses Edith CMS, jQuery, Bootstrap, and Matomo analytics, hosted on professional infrastructure with HTTPS and cookie consent mechanisms in place. Security posture is solid with no critical vulnerabilities detected, though some security best practices like security headers and incident response policies could be improved. Overall, the site is trustworthy, GDPR compliant, and safe for general audiences.

A

as4u.cz, s.r.o.

cz-mesta.eu

60

The website www.cz-mesta.eu serves as an online encyclopedia dedicated to nearly 1400 towns and settlements in the Czech Republic, focusing on their urbanistic and historical development. It is a niche cultural and historical resource published in collaboration with the Sdružení historických sídel Čech, Moravy a Slezska and managed by as4u.cz, s.r.o. The site offers rich content including maps, photographs, and detailed descriptions, targeting general audiences interested in Czech urban history. The business model is informational, providing free access under a Creative Commons license, positioning itself as a trusted cultural reference within its domain. Technically, the site uses a custom CMS named Public4u, with frontend technologies including jQuery, jQuery UI, Leaflet.js for maps, and Swiper.js for sliders. The site is moderately performant, mobile-optimized, and SEO-friendly, though accessibility features are basic. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. From a security perspective, the site uses HTTPS but does not expose security headers or incident response information. No vulnerabilities or sensitive data exposures were found in the content. The domain WHOIS data is privacy protected as per EURid policy, which is reasonable for this type of informational site. Overall, the security posture is moderate but could be improved by adding security headers, privacy notices, and vulnerability disclosure mechanisms. The overall risk assessment is low, with the main recommendations focusing on enhancing privacy compliance and security best practices to improve trust and regulatory adherence. The site is professionally designed and trustworthy for its intended audience, with no signs of malicious or adult content.

The website www.mladifotografujipamatky.cz is a platform dedicated to a youth photography contest focused on capturing historical monuments, organized by the Czech non-profit association Sdružení historických sídel Čech, Moravy a Slezska, z.s. It serves a niche cultural heritage audience primarily within the Czech Republic, providing contest information, galleries, and event updates. The site is well-branded and consistent with its mission, targeting young photographers and cultural enthusiasts. Technically, the site uses the Public4u CMS platform, jQuery libraries, and integrates Mapy.cz APIs for mapping features. The website is moderately optimized for performance and mobile devices, with a clear navigation structure and good content quality. However, accessibility and SEO optimizations are basic and could be improved. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or cookie policies, indicating gaps in compliance and security best practices. No analytics or tracking scripts were detected, suggesting minimal user tracking. WHOIS data is unavailable, likely due to registry privacy policies, which limits domain trust analysis but the site’s content and contact information support legitimacy. Overall, the website is functional and professional for its purpose but would benefit from enhanced security measures, privacy compliance, and technical improvements to increase trust and user experience.

The website www.historickemestoroku.cz represents the Sdružení historických sídel Čech, Moravy a Slezska, a non-profit association dedicated to promoting historic towns in the Czech Republic through competitions and cultural heritage programs. The site serves as an information hub for the 'Historic Town of the Year' competition, providing news, event details, and partner information. The target audience includes municipalities, cultural heritage professionals, and the general public interested in historic preservation. Technically, the website is built on the Public4u CMS platform and uses legacy but stable technologies such as jQuery and Mapy.cz API for mapping. The site is mobile-optimized with a moderate performance profile and basic accessibility features. SEO is basic but functional, with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS but lacks visible security headers and explicit privacy or security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces transparency and trustworthiness somewhat, but the presence of official registration details and partner logos supports legitimacy. Overall, the website is a well-maintained cultural heritage portal with good content quality and business credibility but could improve in privacy compliance and security best practices. The domain WHOIS data absence is a notable concern that should be addressed to enhance trust.

The website www.soutezpamatkaroku.cz represents a non-profit organization, Sdružení historických sídel Čech, Moravy a Slezska, z.s., focused on promoting cultural heritage preservation through the 'Památka roku' competition. It serves a niche audience including historians, municipalities, and cultural heritage professionals in the Czech Republic. The site provides competition information, news updates, and resources for journalists, positioning itself as a reputable entity in the cultural heritage sector. Technically, the website uses a proprietary CMS called Public4u, along with jQuery and Mapy.cz APIs for interactive maps. The site is mobile optimized with good navigation and content structure, though it relies on somewhat dated JavaScript libraries. Performance is moderate, and SEO practices are adequately implemented. However, there is room for improvement in accessibility and modern security headers. From a security perspective, the site enforces HTTPS and does not expose sensitive data in its HTML. However, it lacks visible security headers and privacy/cookie policies, which are important for GDPR compliance and user trust. The absence of WHOIS data for the domain is a notable concern, reducing the ability to verify domain legitimacy fully. No signs of WAF or blocking mechanisms were detected, and the site appears safe with no adult or questionable content. Overall, the website is a credible and professional platform for its intended purpose but would benefit from enhanced privacy compliance, improved security headers, and verification of domain registration details to strengthen trust and security posture.

The website www.ehd.cz serves as the official platform for the European Heritage Days (Dny evropského dědictví) in the Czech Republic. It provides event listings, heritage site registrations, and promotes a mobile application to facilitate user engagement. The site targets a general audience interested in cultural heritage and related events, positioning itself as a niche cultural event promoter within the government or non-profit sector. The business appears to be operated by as4u.cz, s.r.o., a small Czech company specializing in digital solutions. Technically, the website employs a CMS named Public4u and uses common JavaScript libraries such as jQuery and Leaflet.js for interactive maps. The site is moderately optimized for mobile devices and offers a good user experience with clear navigation and relevant content. However, there is room for improvement in accessibility and SEO optimization. From a security perspective, the site lacks visible security headers and privacy compliance mechanisms such as cookie consent banners or detailed privacy policies. The absence of WHOIS data for the domain reduces trustworthiness, although the website content and branding appear professional and legitimate. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, the website is functional and serves its cultural informational purpose well but should enhance its security posture and privacy compliance to improve trust and meet regulatory requirements.

H

Hračkobraní – Festival hračky z přírodního materiálu

hrackobrani.cz

37

The website hrackobrani.cz represents a niche festival focused on toys made from natural materials, held at a castle in Kamenice nad Lipou, Czech Republic. It targets families and visitors interested in traditional and natural toys, organizing an annual event with ticket sales facilitated through an external platform (GoOut). The site is built on WordPress with common JavaScript libraries and plugins, providing a moderate level of technical sophistication but lacking advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and policies. The absence of WHOIS data and contact information reduces trust and business credibility. Overall, the site is functional and content-rich for its purpose but requires improvements in privacy compliance, security best practices, and transparency to enhance trustworthiness and user confidence.

Global Energy Services, s.r.o. is a Slovak-based company specializing in the operation, maintenance, and servicing of renewable energy installations including photovoltaic parks, wind farms, and biogas stations. As part of the WEON Group, it benefits from a broader ecosystem focused on renewable energy project development. The website presents detailed references to multiple renewable energy projects, demonstrating operational experience and a solid market presence in Slovakia. Technically, the website uses legacy JavaScript libraries and a basic responsive framework, with moderate performance and limited SEO and accessibility features. Security posture is moderate, with DNSSEC enabled but lacking modern security headers and using outdated libraries. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic improvements in security, privacy compliance, and technical modernization would enhance trust and resilience.

U

UV GROUP s.r.o.

topstavebne.sk

48

TOP STAVEBNÉ, operated by UV GROUP s.r.o., is a Slovak media platform specializing in construction materials, services, and technologies. The website serves professionals and enthusiasts in the construction and architecture sectors by providing articles, tips, inspirations, and a magazine subscription service. The platform maintains a solid market position as a regional media brand with a consistent and professional online presence. Technically, the website employs a custom CMS with common libraries such as jQuery, Bootstrap, WOW.js, and Google Analytics, ensuring moderate performance and good mobile optimization. Security-wise, the site uses HTTPS, Google reCAPTCHA for forms, and a cookie consent mechanism, but lacks advanced security headers and a published security policy. Overall, the site is trustworthy, GDPR compliant, and well-maintained, with clear contact information and partner affiliations.