Security Directory

M

MERKUR CASINO GmbH

meingewinn.de

64

MERKUR CASINO GmbH operates a professional career portal targeting job seekers interested in casino and gaming employment opportunities in Germany. The website effectively promotes various job roles and career development options within the MERKUR GROUP, a recognized entity in the hospitality and gaming sector. The site demonstrates consistent branding and provides comprehensive information about employment opportunities, supported by links to related MERKUR group websites and social proof such as Kununu employer reviews. Technically, the website employs a modern tech stack including Bootstrap, jQuery, Google Maps API, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Analytics are implemented via Google Analytics and Matomo with proper consent mechanisms, reflecting a mature approach to data privacy. The site is well-optimized for SEO and mobile devices, though accessibility features are basic. From a security perspective, the site enforces HTTPS and integrates cookie consent management effectively. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be enhanced with additional best practices. The website is safe for general audiences, with no adult or explicit content detected. The domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness. Strategic recommendations include adding a terms of service page, publishing security policies, and implementing security headers to further strengthen the security and compliance posture.

M

Merkur Spielbanken Beteiligungs GmbH

merkur-spielbanken.de

10

Merkur Spielbanken Beteiligungs GmbH operates a network of state-licensed casinos across Germany, primarily in Nordrhein-Westfalen, Sachsen-Anhalt, and Niedersachsen. As part of the larger Gauselmann Gruppe, the company leverages decades of experience in the gambling industry, offering a mix of classic table games and modern slot machines. The website reflects a professional and comprehensive digital presence, targeting adult customers interested in legal and responsible gambling. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes a consent management platform to comply with privacy regulations. Security posture is solid with HTTPS and self-hosted analytics, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and well-aligned with the company's market position.

M

MERKUR Casino

merkur-spielhalle.de

48

MERKUR Casino operates over 350 modern gaming halls primarily in Germany and eight other European countries, positioning itself as a market leader in the gambling and hospitality sector. The website serves as a portal for information about their locations, games, prevention measures, career opportunities, and corporate information. The business model focuses on physical gaming halls with strong regulatory compliance, including age verification and prevention information. The parent company is the Gauselmann Group, a well-established entity in the industry. Technically, the website employs a modern tech stack including jQuery, Bootstrap, Font Awesome, and integrates Usercentrics for GDPR-compliant cookie consent and Matomo for analytics. The site is mobile-optimized with good navigation and SEO practices. Hosting details are not explicit but the domain and name servers indicate stable professional hosting. From a security perspective, the site enforces HTTPS and uses a consent management platform, but lacks explicit published security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The site does not use privacy protection on WHOIS, enhancing trustworthiness. The gambling nature requires adult content warnings and age verification, which are implemented. Overall, the website is professional, secure, and compliant with privacy regulations, serving a mature audience in the gambling sector. Recommendations include publishing explicit security policies, adding security headers, and implementing a vulnerability disclosure mechanism to further enhance security posture.

M

MERKUR.com AG

merkur.com

54

MERKUR.com AG operates a comprehensive German-language website focused on gaming, sports betting, and casino entertainment. The company is well-established with a domain age dating back to 1997, indicating a mature market presence. The website offers rich content including articles, news, and links to partner sites, targeting gaming enthusiasts and bettors. Technically, the site uses modern frameworks like Bootstrap and integrates advanced marketing and analytics tools such as Dynamic Yield, Matomo, and Google Tag Manager. Privacy compliance is supported by a Usercentrics consent management platform, although no explicit privacy policy or terms of service were found in the provided content. Security posture is generally good with HTTPS enforced and domain transfer protections, but could be improved by enabling DNSSEC and publishing security policies. Overall, the site is professional, content-rich, and trustworthy, serving a large audience in the gaming sector.

T

trendtours Touristik GmbH

trendtours.de

58

trendtours Touristik GmbH is a leading direct travel tour operator in Germany, specializing in bus, flight, and roundtrip package tours. Founded in 2005, the company serves German-speaking travelers with a broad portfolio of travel offers, including discounted and curated group tours. The website reflects a professional and consistent brand presence with strong trust signals such as Trustpilot integration and membership in the Deutscher Reiseverband. The target audience is primarily leisure travelers seeking organized travel experiences within Germany and abroad. Technically, the website employs modern JavaScript libraries including jQuery, Bootstrap, Swiper.js, and Font Awesome, alongside Google Tag Manager and a Usercentrics consent management platform for GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some accessibility features could be enhanced. Performance is moderate with deferred script loading and image placeholders. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy policy or terms of service in the provided content. Business credibility is strong due to clear company information, contact details, and trust indicators. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy transparency and security best practices. There is no indication of WAF or content blocking, allowing full content accessibility and analysis.

N

Norma24

norma24.de

73

Norma24 is a German online retail platform offering a wide range of Norma products with a focus on quality, variety, and fast delivery. The website is built on the Spryker e-commerce framework and leverages modern marketing and analytics tools such as Usercentrics CMP for cookie consent, Microsoft Clarity, Google Tag Manager, Facebook Pixel, and Emarsys for customer engagement and tracking. The technical infrastructure is supported by Akamai CDN services, ensuring reliable hosting and performance. Security measures include HTTPS enforcement and standard security headers, reflecting a solid security posture. However, the absence of explicit privacy policy, terms of service, and contact information pages indicates areas for compliance and transparency improvement. Overall, the website presents a professional and trustworthy e-commerce experience for general consumers in Germany.

M

MERKUR GROUP

gauselmann.com

63

The MERKUR GROUP website represents a well-established international company specializing in the development and provision of slot machines, gaming machines, casinos, sports betting, and related financial services. With a history dating back to 1957, the company positions itself as a leader in the gaming industry with a large workforce and multiple subsidiaries. The website content is professionally presented, targeting industry partners, customers, and potential employees. Technically, the site employs modern frameworks such as Bootstrap and integrates analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms in place, though some security headers could be improved. The WHOIS data is privacy protected, which is common for corporate domains, but limits transparency. Overall, the site is trustworthy and professionally maintained, with moderate room for security and compliance enhancements.

B

Böllhoff

boellhoff.com

66

Böllhoff is a globally recognized leader in joining technology, specializing in fastening and assembly solutions primarily for the manufacturing and automotive sectors. The company positions itself as a competence leader with a strong emphasis on innovation and quality, supported by ISO certifications. Their website reflects a professional and consistent brand image targeting industrial clients and suppliers. Technically, the site employs modern technologies such as Google Tag Manager and Usercentrics for consent management, hosted behind Cloudflare, ensuring good performance and security. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a public vulnerability disclosure or incident response page is noted. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. However, the lack of WHOIS data reduces domain trustworthiness, suggesting privacy protection or registration anomalies. Overall, the website is safe, professional, and trustworthy, with room for improvement in transparency and accessibility.

T

TechSoup Česká Republika

techsoup.cz

63

TechSoup Česká Republika is a regional non-profit technology service provider focused on delivering discounted and donated software, hardware, and IT services to non-profit organizations primarily in Czechia. The website demonstrates a solid market position supported by partnerships with major technology brands such as Microsoft, Cisco, and Bitdefender. The platform offers educational workshops, technical support, and a comprehensive product catalog tailored to the non-profit sector. Technically, the site is built on Drupal 7 with modern JavaScript libraries and integrates GDPR-compliant cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is professional, trustworthy, and well-optimized for its audience.

I

ISOPARTNER Nederland

isopartner.nl

69

ISOPARTNER Nederland is a specialized distributor and producer of innovative technical insulation solutions, serving professional clients primarily in the manufacturing, construction, and energy sectors within the Netherlands. The company operates under the parent group IPCOM-Groep and offers a comprehensive range of services including custom and standard insulation products, professional advice, and logistics support. The website is well-structured, professionally designed, and provides clear navigation and multilingual support, reflecting a mature digital presence. Technically, the site is built on Drupal 10 with modern integrations such as Google Tag Manager, Usercentrics CMP for cookie consent, and Google reCAPTCHA for form security. Security posture is solid with HTTPS enforced and anti-bot measures, though explicit security headers and incident response policies are absent. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR. Overall, the website projects high business credibility and trustworthiness.

N

NORMA

norma-online.de

61

NORMA is a well-established German retail discount grocery chain offering a wide range of discounted food and household products. The website serves as a digital platform for showcasing current offers, store locations, and additional services such as online shopping and career opportunities. The site is professionally designed with consistent branding and clear navigation, targeting general consumers in Germany and neighboring countries. Technically, the website uses modern JavaScript libraries, is hosted on Akamai CDN, and employs HTTPS with cookie consent management, indicating a mature digital infrastructure. Security posture is solid with no visible vulnerabilities or exposed sensitive data, though explicit security headers and policies could be improved. Privacy compliance is partial, with cookie consent present but no explicit privacy policy or terms of service detected. Contact is available via forms but lacks direct emails or phone numbers. Overall, the website is trustworthy and professional, suitable for its retail business model.

M

MERKUR GROUP

gauselmann.de

64

MERKUR GROUP is a well-established enterprise in the gaming and hospitality sector, with over 65 years of experience providing and developing slot machines, casinos, sports betting, and related services. The company targets players, industry professionals, and job seekers, positioning itself as a major player in the European gaming market with a large workforce and multiple subsidiaries. The website reflects a professional corporate presence with comprehensive content in German and English, emphasizing responsible gaming and corporate social responsibility. Technically, the site uses modern frameworks like Bootstrap and integrates analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. WHOIS data is limited due to privacy protection but aligns with a legitimate enterprise. Overall, the site is trustworthy, well-branded, and compliant with privacy regulations.

W

WHMCS Limited

whmcs.com

65

WHMCS Limited operates a leading web hosting automation platform that streamlines billing, provisioning, domain reselling, and support for web hosting businesses globally. Positioned as a market leader with over 35,000 customers in more than 200 countries, WHMCS offers a comprehensive suite of services including billing automation, SSL automation, and integrated support tools. The company targets web hosting providers, domain registrars, software developers, and cloud hosting providers, delivering a modular and developer-friendly platform. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Google Tag Manager, Microsoft Clarity, and LiveChat, ensuring fast performance, mobile responsiveness, and good accessibility. The site integrates multiple analytics and marketing tools, demonstrating digital maturity and a strong focus on user engagement and conversion. From a security perspective, WHMCS enforces HTTPS and uses several security best practices, including a responsible disclosure program. However, explicit security headers and a dedicated security policy page are not evident, and incident response contact details are not clearly published. The WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but does not significantly impact overall trust given the professional web presence. Overall, WHMCS presents a secure, professional, and trustworthy online presence with strong business credibility and technical implementation. Strategic improvements in security transparency and incident response communication would further enhance their security posture and customer trust.

A

Awin AG

awin1.com

74

Awin AG operates a global affiliate marketing platform that connects advertisers, publishers, and agencies to drive online business growth. The company is positioned as a large player in the affiliate marketing industry with a broad customer base and a strong parent company, Axel Springer Group. Their platform offers scalable solutions tailored to different business needs, supported by a modern technical infrastructure including advanced analytics and marketing automation tools. The website demonstrates high digital maturity with excellent design, mobile optimization, and accessibility. Security posture is strong with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site reflects a professional and trustworthy business with a solid market presence.

R

Rhenus Logistics SE & Co. KG

rhenus.group

76

Rhenus Logistics SE & Co. KG operates as a global logistics service provider offering a comprehensive range of customized solutions including transport, warehousing, port logistics, and digital supply chain services. The company positions itself as an experienced and innovative partner with over 100 years of industry presence and a network spanning more than 70 countries. Their business model focuses on B2B logistics services tailored to various industries such as automotive, healthcare, fashion, chemicals, and high-tech sectors. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript frameworks and integrates a consent management platform (Usercentrics) for GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Hosting and analytics are supported by Cloudflare and Google Tag Manager, indicating a robust and scalable setup. From a security perspective, the site enforces HTTPS and uses privacy-compliant cookie consent mechanisms. However, explicit security headers and incident response contacts are not prominently published, suggesting areas for improvement. No vulnerabilities or exposed sensitive data were detected in the analysis. The WHOIS data is privacy protected, which is typical for enterprises, and no suspicious patterns were found. Overall, the website demonstrates a high level of professionalism, security awareness, and compliance, making it a trustworthy platform for business clients. Strategic recommendations include enhancing security headers, publishing incident response information, and establishing a vulnerability disclosure policy to further strengthen trust and security posture.

K

KKCG

kkcg.com

67

KKCG is a well-established investment and innovation group headquartered in Switzerland, operating across multiple sectors including entertainment, energy, technology, real estate, and diversified ventures. With a presence in over 40 countries and a significant EBITDA exceeding €1.5 billion, KKCG positions itself as a major multinational player leveraging its own resources to transform industries. The company maintains a professional and modern digital presence, utilizing advanced web technologies and analytics tools to engage its audience effectively. Social media integration and multilingual support further enhance its global reach. Security-wise, KKCG employs HTTPS, security headers, and reputable hosting and DNS providers, reflecting a strong security posture. However, the absence of an explicit privacy policy and security incident response information suggests areas for improvement in compliance and transparency. Overall, KKCG demonstrates a high level of business credibility and digital maturity, with recommendations to enhance privacy disclosures and formalize security policies to align with best practices.

M

Messe Düsseldorf GmbH

euroshop.de

63

EuroShop is a globally recognized retail trade fair organized by Messe Düsseldorf GmbH, hosting a large-scale event in Düsseldorf, Germany. The website provides comprehensive information about the event, exhibitor services, visitor preparation, and media resources. The technical infrastructure leverages modern web technologies including Vue.js, Matomo analytics, and Usercentrics for consent management, indicating a mature digital presence. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be improved. The site is free from blocking mechanisms and adult content, targeting retail professionals worldwide.

M

Mattoni

mattoni.cz

57

Mattoni.cz is a professionally designed website representing a well-established mineral water brand in the Czech Republic. The company offers a range of natural mineral water and flavored beverages, emphasizing health benefits and sustainability. The website is built on modern web technologies including Webflow CMS, Google Analytics, Hotjar, and Usercentrics for cookie consent management, indicating a mature digital infrastructure. Security posture is adequate with HTTPS and cookie consent implemented, but lacks visible security headers and explicit privacy and terms policies, which are important for compliance and trust. The absence of WHOIS data limits domain trust analysis, but the website content and branding suggest a legitimate business. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and providing clear contact information for security incidents to enhance trust and compliance.

M

Messe Düsseldorf GmbH

euroshop-tradefair.com

68

EuroShop is a globally recognized retail trade fair organized by Messe Düsseldorf GmbH, headquartered in Düsseldorf, Germany. The website promotes the upcoming EuroShop 2026 event, emphasizing its position as the world's leading retail trade fair with a broad international audience and diverse exhibitor base. The business model centers on event organization, exhibitor services, and visitor engagement within the retail sector. The website demonstrates a mature digital presence with modern technologies, good mobile optimization, and structured content that supports user navigation and engagement. Security posture is strong with HTTPS enforcement and consent management, though explicit security headers and incident response information are absent. Overall, the site reflects a trustworthy and professional business entity with consistent WHOIS data and transparent advertising practices.

N

NevDama CZ

nev-dama.cz

57

Nev-Dama.cz is a Czech travel agency specializing in ski and summer holiday packages, targeting families, seniors, and groups primarily in the Czech Republic and surrounding countries. The website offers a comprehensive catalog of winter and summer destinations, including ski resorts, wellness stays, and bus transportation tours. The business model focuses on online bookings and seasonal promotions, positioning itself as a regional leader in winter holiday travel. Technically, the site employs modern JavaScript frameworks (Vue.js), integrates Google Analytics and Tag Manager for marketing and analytics, and uses Usercentrics for GDPR-compliant consent management. Security measures include HTTPS enforcement, reCAPTCHA for bot protection, and standard security headers, though no explicit security policy or incident response contacts are published. The absence of WHOIS data reduces transparency but does not detract from the professional presentation and trust signals on the site. Overall, the site is well-structured, mobile-optimized, and compliant with privacy regulations, making it a reliable platform for holiday bookings.

D

DER Touristik CZ a.s.

etravel.cz

55

eTravel.cz is an established online travel agency operating under the DER Touristik CZ a.s. umbrella, a major player in Central European travel markets. The website offers a broad range of holiday packages including last minute deals, exotic vacations, ski trips, wellness and spa offers, and tours by bus or own transport. The target audience is primarily Czech-speaking travelers seeking convenient and diverse travel options. The business benefits from strong brand recognition and integration within the DER Touristik group, enhancing its market position and trustworthiness. Technically, the website employs modern web technologies including Vue.js, jQuery, Google Tag Manager, and Usercentrics for consent management, reflecting a mature digital infrastructure. The site is mobile optimized with good performance and basic accessibility features. Analytics and marketing tools are used responsibly with consent mechanisms in place, supporting GDPR compliance. From a security perspective, the site uses HTTPS, reCAPTCHA for form protection, and a consent management platform, indicating a solid security posture. However, the absence of visible security headers and incomplete WHOIS data are areas for improvement. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a professional, trustworthy, and user-friendly platform for travel services. The main risk factor is the lack of WHOIS transparency, which slightly reduces domain trustworthiness but does not undermine the evident legitimacy of the business. Strategic recommendations include enhancing security headers, improving accessibility, and ensuring WHOIS data availability for full trust assurance.

M

Messe Düsseldorf GmbH

drupa.com

55

drupa, organized by Messe Düsseldorf GmbH, is the world's leading trade fair for printing technologies, focusing on innovations in print media, packaging, sustainability, and digitalization. The website serves as a comprehensive platform for exhibitors, visitors, and industry professionals to access event information, register, and engage with the printing community. The company holds a strong market position as a premier event organizer in the media sector, targeting a global audience of printing industry stakeholders. Technically, the website employs modern web technologies including Vue.js, jQuery, and various tracking and analytics tools such as Matomo and Leadlab, integrated with a consent management platform to ensure privacy compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses several security best practices, although some HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR-compliant, supporting user trust and regulatory adherence. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for drupa and Messe Düsseldorf, with minor areas for security enhancement. The lack of WHOIS data is noted but does not detract significantly from the site's legitimacy given the strong brand and operational indicators.

E

Exim

eximtours.cz

54

EXIM tours is a well-established Czech travel agency specializing in worldwide package tours, last minute deals, and specialized travel services for families, couples, and seniors. The company operates under the DER Touristik group, positioning itself as a leading player in the Czech travel market. The website reflects a mature digital presence with modern technologies such as Vue.js, Google Tag Manager, and Usercentrics for privacy compliance. Security measures include HTTPS enforcement and bot protection via Google reCAPTCHA, although explicit security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The absence of WHOIS data due to privacy protection is typical for such businesses and does not detract from the site's legitimacy. Overall, EXIM tours demonstrates a professional and trustworthy online presence suitable for its market segment.

C

CRIF - Czech Credit Bureau, a.s.

informaceofirmach.cz

10

The website www.informaceofirmach.cz is a professional business information portal operated by CRIF - Czech Credit Bureau, a.s., providing comprehensive credit and financial health data on companies primarily in the Czech Republic and Slovakia. It serves a large user base including over 7000 active users and 1150 corporate clients, offering both free and premium services such as the Semafor Cribis rating and detailed company reports. The site is well-structured, mobile-optimized, and integrates modern analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, reCAPTCHA, and privacy compliance mechanisms, though some security headers could be improved. The absence of WHOIS data due to privacy protection slightly impacts trust but is justified given the business nature. Overall, the site is a credible and valuable resource for business risk assessment and partner verification.

K

KELLO Könyvtárellátó Nonprofit Kft.

kello.hu

10

KELLO Könyvtárellátó Nonprofit Kft. is a Hungarian nonprofit organization focused on the distribution of textbooks, educational materials, and cultural products. It serves a broad audience including students, parents, schools, publishers, and libraries, positioning itself as a key national distributor and retailer in Hungary's educational sector. The website supports this mission by providing access to a webshop, library professional portal, and cultural magazine, all integrated under the KELLO brand. Technically, the website employs modern web technologies including jQuery, Bootstrap Icons, and ES modules, with Google Analytics for visitor tracking and Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized and presents a consistent, professional design with clear navigation. However, some accessibility and SEO optimizations could be improved. From a security perspective, the site enforces HTTPS and uses a cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's nonprofit educational claims, supporting high legitimacy and trustworthiness. Overall, the website presents a secure, professional, and compliant online presence for KELLO, with room for enhancements in security policy transparency and accessibility. The risk level is low, but strategic improvements in security headers and incident response disclosures are recommended.

R

Rohlik.cz

rohlik.cz

66

Rohlik.cz is a leading online supermarket in the Czech Republic, specializing in fast delivery of fresh and quality groceries directly to consumers' homes. The website demonstrates a strong market position with a focus on convenience and product variety, supported by promotional campaigns and a user-friendly interface. Technically, the site is built on modern frameworks such as Next.js and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security measures are robust, with HTTPS enforced and multiple security headers present, although explicit privacy and terms of service documentation are not clearly accessible, which could be improved. Overall, the site presents a professional and trustworthy e-commerce platform with moderate risk due to missing WHOIS transparency and contact details.

S

SportAccord

sportaccord.sport

52

SportAccord is a globally recognized organization dedicated to connecting International Sport Federations, cities, right holders, and businesses to shape the future of sport. The website reflects a professional and well-established entity with a strong market position in organizing major sports business conferences and events such as the SportAccord Convention and the International Federation Forum. The content is rich, relevant, and targeted towards sports industry stakeholders and leaders worldwide. Technically, the website is built on WordPress with modern plugins and integrates advanced analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and monitoring tools in place, though explicit security headers and a public security policy could enhance trust further. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the website presents a credible and trustworthy digital presence for SportAccord.

E

E.ON

eon.cz

73

E.ON Czech Republic operates as a major energy supplier providing electricity and gas services primarily to households, businesses, and municipalities. The company emphasizes competitive pricing, renewable energy solutions, and digital customer engagement through its Energie24 app and online contract management. The website reflects a mature digital presence with comprehensive service offerings and customer support. Technically, the site leverages modern web technologies including Kentico CMS, jQuery, and integrates analytics and consent management tools, ensuring good performance, SEO, and privacy compliance. Security posture is strong with HTTPS enforcement and consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data is a notable transparency gap but does not detract from the overall legitimacy indicated by the website content and branding.

Immonet is a major German real estate marketplace operated by AVIV Germany GmbH, offering a comprehensive platform for buying, renting, and selling properties including houses, apartments, and commercial real estate. The website targets individuals and businesses in Germany seeking real estate services, providing additional tools such as financing calculators, relocation services, and real estate valuation. The platform is well-positioned in the German market with a professional and user-friendly interface.

A

AVIV Germany GmbH

immowelt.de

65

Immowelt.de is a leading German real estate portal operated by AVIV Germany GmbH, offering a comprehensive platform for property search, rental, purchase, and related services such as financing and moving assistance. The website targets private individuals and real estate professionals seeking residential and commercial properties across Germany. It holds a strong market position, evidenced by multiple awards and partnerships with reputable service providers like SCHUFA and Interhyp. Technically, the website employs modern web technologies including React and integrates a consent management platform (Usercentrics) for GDPR compliance. Hosting is managed via Amazon AWS, ensuring reliable performance and scalability. The site is well-optimized for mobile devices and accessibility, with a clean, professional design and clear navigation. From a security perspective, immowelt.de enforces HTTPS, implements key security headers, and avoids exposing sensitive data in its HTML content. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Privacy compliance is partially addressed through the use of a consent management platform, but the absence of a clearly accessible privacy policy and terms of service reduces overall compliance confidence. Overall, immowelt.de presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy transparency and security documentation would further strengthen its risk posture and user trust.

P

PERI, spol. s r.o.

peri.cz

33

PERI, spol. s r.o. is a leading Czech supplier of construction equipment specializing in formwork, scaffolding, and engineering services. With over 50 years of experience, the company offers innovative and efficient solutions tailored to meet diverse project requirements. The website reflects a mature digital presence with comprehensive product portfolios, customer portals, and active communication channels. Technically, the site employs modern web technologies, including JavaScript frameworks, SVG icons, and consent management tools, ensuring a responsive and user-friendly experience. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security headers could be further confirmed. The absence of WHOIS data is likely due to privacy protection, common for enterprises of this scale. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

P

PAX

pax-bags.de

54

PAX-Bags.com represents a medium-sized manufacturing business specializing in emergency backpacks, insert bags, and accessories with custom sizing and interior fittings. The company targets organizations requiring specialized emergency equipment, positioning itself as a niche manufacturer in this sector. The website is built on TYPO3 CMS with a modern technology stack including Bootstrap and jQuery, and integrates privacy compliance tools such as Usercentrics CMP and Google Tag Manager with consent mode. The site is professionally designed with good navigation and mobile optimization, though SEO is limited by a noindex robots directive. From a security perspective, the website enforces HTTPS and uses consent management for privacy compliance, but lacks explicit security headers and detailed security or incident response policies. No contact emails or phone numbers are clearly presented on the homepage, which may impact user trust and support accessibility. The absence of WHOIS data for the domain is a notable anomaly, reducing domain registration trustworthiness despite the professional website presence. Overall, the site demonstrates a solid technical foundation and privacy compliance but would benefit from enhanced security headers, clearer contact information, and resolution of WHOIS data visibility to improve trust and legitimacy. Strategic improvements in these areas would strengthen the security posture and business credibility.

H

HORNBACH Baumarkt AG

hornbach.cz

66

HORNBACH Baumarkt AG operates a leading DIY and home improvement e-commerce platform in the Czech Republic, targeting both hobbyists and professional builders. The website offers a broad range of products from flooring to garden supplies and tools, supported by physical stores and project planning resources. The company maintains a strong market position with consistent branding and active social media presence. Technically, the site uses modern web technologies including StencilJS, Usercentrics for consent management, and Dynatrace for performance monitoring, indicating a mature digital infrastructure. Security posture is robust with HTTPS enforced and consent-based loading of third-party services, though explicit security headers and detailed privacy policies could be improved. Overall, the site is professional, user-friendly, and trustworthy, though the absence of WHOIS data slightly reduces domain trustworthiness.

M

Max-Planck-Gesellschaft zur Förderung der Wissenschaften

max-planck.de

62

The Max-Planck-Gesellschaft website represents a leading German non-profit research organization focused on fundamental scientific research across 84 institutes. The site targets researchers, academics, students, and the general public interested in science. It offers extensive information on research, career opportunities, publications, and innovation initiatives. Technically, the website employs modern JavaScript frameworks, a modular AMD architecture, and a professional CMS (JustRelate CX Cloud). It is hosted on infrastructure consistent with the organization's domain and uses HTTPS with cookie consent managed by Usercentrics. Security posture is strong with no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages in the provided content, but cookie consent mechanisms are in place. Overall, the website is professional, trustworthy, and well-structured, reflecting the organization's high credibility and market position.

T

Time and Date AS

timeanddate.com

66

Timeanddate.com is a well-established website operated by Time and Date AS, providing comprehensive and reliable information and tools related to time, time zones, calendars, weather, and astronomy. The site targets a broad audience including individuals and professionals worldwide who require accurate and up-to-date time and date data. It operates a business model primarily supported by advertising with optional paid supporter services for enhanced user experience. The website demonstrates a strong market position as a leading global provider in its niche. Technically, the website employs modern JavaScript frameworks, ad management technologies including Google Publisher Tags and Amazon APS, and a consent management platform to ensure GDPR compliance. The site is well-optimized for mobile devices, accessible, and SEO-friendly, delivering a good user experience with fast loading times. The use of multiple ad networks and tracking services is balanced with user consent mechanisms. From a security perspective, the site enforces HTTPS and implements best practices for secure forms and data handling. However, explicit security headers like X-Frame-Options and X-Content-Type-Options are not evident in the HTML and could be improved. The absence of a published security policy or incident response contact is noted. The WHOIS data is unavailable, which is unusual but does not currently detract from the site's legitimacy given its professional presentation and long-standing operation. Overall, timeanddate.com presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security header implementation, publishing a security policy and incident response contacts, and considering a security.txt file to improve transparency and trust.

G

Global-Tickets by TD Entertainment C.V.

global-tickets.com

67

Global-Tickets by TD Entertainment C.V. is a well-established e-commerce platform specializing in the sale of motorsport event tickets and related travel packages, focusing on Formula 1, MotoGP, and DTM events worldwide. With over 25 years of experience and a large customer base exceeding 850,000 satisfied clients, the company holds a strong market position supported by official partnerships with numerous racing circuits and high customer trust ratings on platforms like Trustpilot and Google. The website offers a comprehensive and user-friendly shopping experience, including VIP and group event options, with a focus on secure payment and insured ticket delivery. Technically, the website employs modern web technologies including Bootstrap, jQuery, Owl Carousel, and integrates multiple tracking and marketing tools such as Google Tag Manager, Facebook Pixel, Bing Ads, and Usercentrics for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a professional and accessible user experience. Security practices include HTTPS encryption, secure payment processing, and ticket insurance, although explicit security headers could be improved. The security posture is solid with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Business credibility is reinforced by transparent company information, multiple trust indicators, and consistent WHOIS data matching the business claims. Overall, Global-Tickets presents a trustworthy, professional, and secure platform for motorsport ticket sales, with recommendations to enhance security headers and publish dedicated security policies to further strengthen their security posture.

T

Technische Hochschule Georg Agricola

thga.de

58

Technische Hochschule Georg Agricola (THGA) is a specialized engineering university located in Bochum, Germany, offering a broad range of practice-oriented Bachelor and Master degree programs in engineering disciplines such as mechanical engineering, electrical engineering, and industrial engineering. The institution maintains strong industry partnerships to ensure excellent job prospects for its graduates. The website reflects a mature digital infrastructure built on TYPO3 CMS, leveraging modern web technologies and providing a mobile-optimized, accessible, and SEO-friendly user experience. Privacy and cookie compliance are well implemented with a consent management platform and a comprehensive privacy policy. Security posture is solid with HTTPS enforced and minimal exposure of sensitive data, though some improvements in security headers and incident response transparency are recommended. Overall, the website presents a professional, trustworthy, and user-friendly platform that effectively supports the institution's educational mission and stakeholder engagement.

E

Ebner Media Group GmbH & Co. KG

developer-world.de

56

Developer World, operated by Ebner Media Group GmbH & Co. KG, is a well-established German platform focused on software developers, offering events, knowledge sharing, and community engagement. The website serves as a hub for developer conferences such as DWX and DDC, provides technical insights, training opportunities, and publishes the dotnetpro magazine. The platform targets professional developers and IT specialists, positioning itself as a key player in the German-speaking developer ecosystem with a history dating back to 1984. Technically, the website employs modern web technologies including asynchronous JavaScript loading, a consent management platform (Usercentrics), Google Tag Manager, and structured data (JSON-LD) for SEO enhancement. The site is mobile-optimized, accessible, and uses a CMS likely based on Contentstack. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses a consent mechanism for cookies, but lacks explicit security headers like CSP or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with clear privacy and cookie policies, and GDPR adherence is evident. Overall, Developer World presents a professional, trustworthy, and content-rich platform with a solid security posture and compliance framework. Strategic improvements could include publishing a formal security policy, incident response contacts, and enhancing security headers to further harden the site.

W

webalytics

webalytics.de

48

webalytics is a German IT system house specializing in hosting, web marketing, and data security services. The company operates its own data center in Frankfurt am Main and maintains partnerships with reputable security vendors such as Symantec, Kaspersky, Veeam, and Lancom. The website reflects a professional and business-focused approach, targeting companies seeking scalable and flexible IT solutions. Technically, the site is built on WordPress with Elementor, incorporating modern analytics and consent management tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms, though a dedicated security policy and incident response information are absent. Overall, the domain registration data aligns with the website content, supporting legitimacy and trustworthiness.

R

Rewardful Inc.

getrewardful.com

69

Rewardful Inc. operates a specialized SaaS affiliate and customer referral tracking software platform designed primarily for SaaS professionals, digital creators, and marketers. The company positions itself as a leader in ease of setup, evidenced by its #1 rating on G2 and verified Stripe partnership. Their software offers seamless integration with Stripe and Paddle, flexible commission structures, and robust API support, catering to businesses seeking to launch and manage affiliate programs efficiently. Technically, the website is built on Webflow CMS and integrates modern marketing and analytics tools such as Google Tag Manager, Intercom, and VWO, reflecting a mature digital infrastructure. The presence of Usercentrics CMP indicates attention to privacy compliance, although explicit privacy and terms of service pages are not found. Security posture is solid with HTTPS and consent management but lacks some advanced security headers and published policies. The absence of WHOIS data for the domain is a notable concern, potentially impacting trust and legitimacy verification. Overall, Rewardful presents as a professional and credible SaaS affiliate software provider with room for improvement in transparency and security documentation.

B

British Pacific Properties Limited

britishproperties.com

57

British Pacific Properties Limited is a well-established real estate developer focused on creating exceptional residential communities in West Vancouver, Canada. With a legacy dating back to 1931, the company emphasizes quality, nature, and lifestyle in its developments. The website serves as a professional platform to showcase their communities, history, and upcoming projects, targeting prospective home buyers and residents interested in upscale neighborhoods. Technically, the website is built on WordPress and leverages modern JavaScript libraries such as jQuery and GSAP for interactive elements. Hosting is provided by GreenGeeks, and the site includes Google Tag Manager and Usercentrics for analytics and consent management, indicating a moderate level of digital maturity. The site is mobile optimized and has good SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections enabled. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no published security policy or incident response contact, which could be improved. Privacy and cookie policies are present and include consent mechanisms, supporting GDPR compliance. Overall, the website is professional, trustworthy, and secure for its business purpose. Recommendations include enabling DNSSEC, adding security headers, publishing a security policy, and enhancing accessibility to further strengthen the security posture and compliance.

R

Remo

remo.co

62

Remo is a technology company specializing in virtual event management platforms that enable immersive online events with real connections and engagement. Their platform supports virtual conferences, webinars, networking, and hybrid events, positioning them as a leading SaaS provider in the virtual events space. The company targets event organizers, enterprises, educational institutions, and associations, offering a comprehensive suite of interactive tools to enhance attendee experience. Technically, Remo's website is built on modern web technologies including Webflow CMS, Google Fonts, Microsoft Clarity for analytics, Visual Website Optimizer for A/B testing, and Usercentrics for cookie consent management. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements security headers. It uses Google reCAPTCHA Enterprise to protect forms and has a cookie consent mechanism aligned with GDPR. However, explicit security policies and incident response information are not publicly available, indicating room for improvement in transparency. Overall, Remo presents a professional, trustworthy, and compliant online presence with a strong market position. The risk profile is low, with no detected vulnerabilities or suspicious activity. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection officer contacts and certifications.

E

Ebner Media Group

page-online.de

64

PAGE online is a well-established German media platform specializing in design, creativity, typography, and related industry news. It serves creative professionals and agencies with editorial content, events, webinars, and a digital and print magazine shop. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Google Tag Manager, and Usercentrics for GDPR compliance. Advertising is managed primarily through Google Ad Manager and Adsense, with clear consent mechanisms in place. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. The domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

P

plusserver

plusserver.com

75

plusserver is a leading German cloud service provider specializing in managed cloud solutions, dedicated servers, and hybrid cloud offerings. The company targets business and enterprise customers seeking reliable cloud services hosted in German data centers. The website is professionally designed, primarily in German, and emphasizes compliance with GDPR and ISO 27001 certification, reinforcing its market position as a trustworthy cloud provider in Germany. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools such as Google Tag Manager, Matomo, and HubSpot, reflecting a mature digital infrastructure. Security-wise, the website enforces HTTPS, implements key security headers, and uses a consent management platform to comply with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected, though the absence of a public security.txt and explicit incident response contacts suggests room for improvement. The WHOIS data is unavailable, which is unusual but likely due to privacy protection, and while this introduces some uncertainty, the overall trust signals and professional presentation mitigate concerns. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and improving accessibility features to further strengthen compliance and security posture.

H

Haus des Stiftens für Unternehmen und Non-Profits gGmbH

stifter-helfen.de

52

Stifter-helfen is a German non-profit IT portal operated by Haus des Stiftens für Unternehmen und Non-Profits gGmbH. It facilitates IT product donations, discounted software, and IT-related knowledge sharing for non-profit organizations, foundations, and associations primarily in Germany. The website is well-positioned as a leading platform in this niche, supported by partnerships with major IT companies and a clear focus on serving the non-profit sector. Technically, the site runs on Drupal 7 with modern JavaScript libraries and integrates Usercentrics for GDPR-compliant consent management and Stripe for payment processing. The site is mobile-optimized and accessible, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional, serving its target audience effectively.

H

Haus des Stiftens gemeinnützige GmbH

hausdesstiftens.org

60

Haus des Stiftens gemeinnützige GmbH is a German social enterprise dedicated to facilitating societal engagement by supporting foundations, companies, private individuals, and non-profit organizations. With over 30 years of experience, it offers a broad range of services including project management, digital solutions, and educational programs such as webinars and workshops. The organization positions itself as a key enabler of philanthropy and corporate social responsibility in Germany. Technically, the website is built on WordPress using modern plugins and frameworks, ensuring good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. The lack of WHOIS transparency is mitigated by strong trust signals on the site. Overall, the website is professional, content-rich, and trustworthy, serving a specialized non-profit sector audience.

H

Haus des Stiftens für Unternehmen und Non-Profits gGmbH

stifter-helfen.at

65

Stifter-helfen Österreich operates as a specialized IT portal dedicated to serving non-profit organizations, foundations, and associations in Austria. The platform facilitates access to donated IT products, discounted software licenses, and cloud services, complemented by relevant IT knowledge and workshops. Positioned as a leading resource in the Austrian non-profit sector, it leverages partnerships with major IT vendors and organizations to provide valuable resources to its target audience. The website is professionally designed, content-rich, and well-structured to support user engagement and service delivery. Technically, the site is built on Drupal 7 with modern JavaScript libraries such as jQuery 3.6 and LayerSlider for interactive content. It employs Usercentrics for GDPR-compliant cookie consent management and integrates Google Tag Manager and Stripe.js for analytics and payment processing respectively. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the website enforces HTTPS, utilizes security headers, and protects forms with CSRF tokens inherent to Drupal. The presence of a consent management platform indicates strong privacy compliance. However, there is no explicit security policy or incident response contact information published, and the underlying Drupal 7 CMS is outdated, which may pose future security risks if not maintained. Overall, the website presents a low-risk profile with strong legitimacy, clear business purpose, and good compliance posture. Strategic recommendations include publishing a security.txt file, enhancing incident response transparency, and planning for CMS modernization to maintain security and operational resilience.

G

GuideCom AG

guidecom.de

52

GuideCom AG is a German-based technology company specializing in software solutions for banking, human resources, and organizational management. The company positions itself as a digital transformation partner for over 750 customers, ranging from medium-sized enterprises to large DAX-listed corporations. Their key offerings include the GuideCom HR Suite, Sales & Service Cloud tailored for banking, and digital meeting management software. The website reflects a professional and modern digital presence, leveraging TYPO3 CMS and integrating advanced marketing and analytics tools such as Google Tag Manager, Marketo, and Usercentrics for GDPR-compliant consent management. Technically, the website is well-structured with good mobile optimization, accessibility, and SEO practices. Security measures include HTTPS enforcement, appropriate security headers, and consent-based tracking scripts, indicating a mature security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the site could improve by publishing explicit incident response contacts and a vulnerability disclosure policy. Overall, GuideCom AG demonstrates a strong business credibility and digital maturity, with a secure and compliant online presence. The domain registration data aligns with the business claims, reinforcing trustworthiness. The site is safe for general audiences and does not contain any adult or questionable content.

G

Goethe-Institut

goethe.de

68

The Goethe-Institut is a globally recognized cultural and educational institution of the Federal Republic of Germany, dedicated to promoting the German language and fostering international cultural exchange. With a presence in 99 countries and 150 institutes worldwide, it offers German language courses, examinations, cultural programs, and support for migration and integration. The website reflects this global reach with localized content and extensive service offerings. Technically, the site employs modern web technologies including jQuery, Bootstrap, and a consent management platform, hosted on Microsoft Azure DNS infrastructure, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance, including GDPR adherence and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and secure digital presence. Overall, the Goethe-Institut website demonstrates high professionalism, trustworthiness, and effective communication of its mission and services.