Security Directory

Rich Audience is a programmatic advertising technology company operating a marketplace that connects advertisers and publishers globally. Founded in 2015 and headquartered in Spain, it offers advanced programmatic solutions including private premium ecosystems (#core technology), advanced targeting, and reporting tools. The company targets advertisers seeking transparent and secure brand communication and publishers aiming to monetize their websites effectively. The website demonstrates a mature digital presence with modern technologies such as Yii Framework, Bootstrap 4, and Google Tag Manager integration. Security practices include HTTPS enforcement, CSRF protection, and consent management integration, though DNSSEC is not enabled and security headers are not explicitly detected. Legal and privacy policies are comprehensive and GDPR compliant, supporting trust and compliance. Overall, the website is professional, well-structured, and accessible, reflecting a credible and established business in the media and advertising technology sector.

TripleLift is a well-established technology company specializing in creative advertising solutions and SSP services, operating since 2012. The company targets advertisers, publishers, and consumers with advanced creative technology, data targeting, and programmatic advertising solutions including CTV and retail media. Their market position is strong with a large enterprise footprint and trusted by leading brands and publishers. Technically, the website is built on WordPress with modern libraries such as GSAP and Swiper, integrated with HubSpot for marketing and analytics, and uses Usercentrics for consent management. The site is hosted under Amazon Registrar with domain security measures in place. Security posture is solid with HTTPS, domain locking, and consent mechanisms, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website is professional, compliant with GDPR, and demonstrates good digital maturity.

S

Sharethrough

sharethrough.com

72

Sharethrough is a global omnichannel programmatic advertising platform focused on delivering enhanced ad experiences across multiple channels. The company recently merged with Equativ, expanding its market presence and capabilities. Sharethrough offers proprietary ad enhancement technologies, inventory curation, and sustainability-focused advertising solutions, targeting advertisers, publishers, and agencies. The website reflects a mature digital presence with comprehensive content, multimedia, and clear navigation. Technically, the site leverages modern web technologies including Google Analytics, Tag Manager, Weglot for translations, and UniConsent for consent management, hosted on a performant CDN infrastructure. Security posture is strong with HTTPS, reCAPTCHA on forms, and privacy compliance mechanisms, though explicit security headers and incident response contacts are not publicly detailed. WHOIS data is unavailable, likely due to privacy protection, but the website's professional branding and external references support legitimacy. Overall, the site scores well on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy and professional platform in the ad tech industry.

R

Refinery89

refinery89.com

65

Refinery89 is a technology company specializing in programmatic advertising and ad monetization services targeted at publishers. Founded in 2018, the company positions itself as a revolutionary platform designed by publishers for publishers to optimize ad revenue. The website reflects a professional digital presence built on WordPress with modern tools such as Elementor and Yoast SEO, indicating a mature digital infrastructure. Multiple analytics and tracking technologies are employed to monitor user behavior and optimize marketing efforts. Security posture is adequate with HTTPS and reCAPTCHA integration; however, the absence of security headers and formal privacy and cookie policies indicates room for improvement in compliance and security best practices. Overall, the domain registration data is consistent and transparent, supporting the legitimacy of the business.

The domain c4t.cc is registered since 2013 with a reputable registrar and has a valid registration status. However, the website content is completely empty with no metadata, no visible text, no forms, no external links, and no contact information. This indicates the site is either inactive, under construction, or blocked by security mechanisms. The lack of HTTPS and security headers further reduces the security posture. No privacy or cookie policies are present, and no business information or branding is visible. Overall, the website lacks any digital maturity or business presence to assess. The domain registration is consistent and legitimate, but the absence of content and security features poses a risk for trust and usability.

STRATO GmbH operates a professional web hosting and cloud services platform primarily serving customers in Germany. The analyzed page is a customer login portal providing access to various services including webmail, server login, and cloud storage (HiDrive). The company maintains a strong market position in the German hosting industry with a subscription-based business model. The website content is well-structured, professionally designed, and optimized for mobile and accessibility standards. Technically, the site uses modern frontend technologies such as jQuery 3.6.0, Bootstrap 5, and FontAwesome icons. The presence of cookie consent modals and GDPR-compliant privacy policies indicates a mature digital compliance posture. Performance is moderate with good SEO and accessibility features. Security posture is solid with HTTPS enforced and secure login forms including captcha. However, the absence of explicit security headers and published security policies or incident response contacts suggests room for improvement. No vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy, safe, and professionally maintained with a good balance of privacy compliance and user experience. Strategic recommendations include enhancing security headers, publishing security policies, and providing clear incident response contacts to further strengthen trust and compliance.

R

Rebrandly

rebrandly.com

72

Rebrandly is a technology company specializing in branded link shortening and marketing analytics. Positioned as a market leader, it offers a SaaS platform that enables marketing teams and developers to create smart links, QR codes, and custom domains to boost campaign performance and track ROI. The website demonstrates a mature digital presence with modern technologies, comprehensive compliance badges (SOC 2, HIPAA, GDPR), and a strong focus on user privacy and consent. The technical infrastructure leverages Webflow CMS, Google Tag Manager, Microsoft Clarity, and reCAPTCHA, ensuring a secure and performant user experience. Security posture is strong with HTTPS enforcement and compliance certifications, though public WHOIS data is unavailable, indicating privacy protection which slightly impacts trust. Overall, the site is professional, well-branded, and trustworthy for its target audience.

E

Elmeloher Grill

elmelohergrill.de

53

Elmeloher Grill is a small hospitality business operating a restaurant and grill located in Ganderkesee, Germany. The business offers traditional grill dishes, daily lunch specials, weekly menus, and catering services branded as 'Brünings Partyservice'. The website is built on WordPress using Elementor and includes modern plugins for contact forms and GDPR compliance. The site is well-structured, mobile-optimized, and provides clear contact information and social media links, supporting good customer engagement. Technically, the site uses HTTPS and includes a cookie consent mechanism, but lacks advanced security headers and explicit security policies. Marketing is supported via Facebook Pixel tracking. Overall, the site presents a professional and trustworthy online presence for a local restaurant and catering service.

T

toys-kids.de

toys-kids.de

45

toys-kids.de is a German media publishing website specializing in the toy and baby/kids product industry, offering trade magazines, industry news, event listings, and product showcases. The site targets professionals and stakeholders within this niche market and positions itself as an established media source with over 50 years of expertise. The business model revolves around media publishing and industry insights, serving a medium-sized audience primarily in Germany. Technically, the website is built on WordPress 6.8.3 with a modern plugin ecosystem including Yoast SEO, WP Rocket, Slider Revolution, and Borlabs Cookie for consent management. The site demonstrates good mobile optimization and SEO practices, though some accessibility features are basic. Hosting appears to be managed via GoDaddy's domain control services. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The site does not appear to be behind a WAF or security challenge, allowing full content access. Overall, toys-kids.de presents a professional and trustworthy online presence with good content quality and technical implementation. However, improvements in privacy policy visibility, security header implementation, and incident response transparency would enhance compliance and security posture.

K

Kuckuck Familienmagazin

kuckuck-magazin.de

63

Kuckuck Familienmagazin is a German family-oriented media publication offering articles, event listings, recipes, and DIY tips targeted at parents and families. The website is well-structured, professionally designed, and provides rich, relevant content for its audience. It operates on the Metro Publisher CMS platform and leverages Amazon Cloudfront CDN for content delivery. Advertising is managed via Google Ad Manager and Google Adsense, with user tracking through Google Analytics configured for IP anonymization. The site includes a cookie consent banner compliant with GDPR requirements. Security posture is good with HTTPS enforced, but could be improved by adding additional security headers and publishing a formal security policy. WHOIS data is minimal but consistent with the hosting environment, indicating a legitimate domain. Overall, the website is safe, trustworthy, and professionally maintained.

D

Dosdoce.com

dosdoce.com

58

Dosdoce.com is a Spanish digital cultural media portal established in 2004, focusing on trends and news in the book and cultural sectors. It serves as a digital nexus for publishers, bookstores, libraries, museums, and foundations, providing news, studies, interviews, and training services. The website demonstrates a mature digital infrastructure built on WordPress with common plugins for SEO, analytics, and user engagement. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced security headers and explicit incident response contacts. The absence of WHOIS data is a notable anomaly but does not detract from the site's professional content and user trust. Overall, Dosdoce.com presents a credible and well-maintained platform for its niche audience.

A

A.V.I. Allgemeine Verlags- und Informationsgesellschaft mbH

avi-fachmedien.de

56

A.V.I. Allgemeine Verlags- und Informationsgesellschaft mbH operates a specialized media portal focused on educational content for teachers and schools in Germany. The company publishes official bulletins from education ministries and various association magazines, targeting educators, school administrators, and educational authorities. Their market position is niche and focused on the education sector with a small company size. Technically, the website is built on TYPO3 CMS and uses common JavaScript libraries such as jQuery and Flexslider. Hosting is provided by aditsystems.hosting. The site is moderately performant, mobile-optimized, and has basic SEO and accessibility features. Privacy and cookie policies are implemented with consent mechanisms, but no advanced analytics or tracking tools are detected. From a security perspective, the site enforces HTTPS and uses cookie consent but lacks explicit security headers and a dedicated security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. WHOIS data is limited, showing generic hosting nameservers without detailed registrant information, which slightly reduces trust but does not raise major concerns. Overall, the website is professional, trustworthy, and safe for general audiences. It effectively serves its educational publishing purpose with clear contact information and compliance with privacy regulations. Strategic improvements could focus on enhancing security headers, adding incident response details, and improving SEO and accessibility further.

D

der Freitag

freitag.de

57

Der Freitag is a German weekly newspaper focusing on politics, economy, and culture, serving a German-speaking audience interested in these topics. The website acts as a digital platform for the newspaper, offering news articles and subscription services. The business model centers on media publishing with a strong digital presence, positioning itself as an established player in the German media landscape. The company targets readers seeking in-depth political and cultural content. Technically, the website uses a modern stack including Plone CMS, Google Tag Manager, Matomo analytics, and advanced header bidding technologies for advertising. Consent management is implemented via Sourcepoint, indicating GDPR compliance efforts. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are not explicitly detected. Privacy compliance is supported by consent mechanisms but lacks explicit privacy and terms of service pages. Overall, the website is professional, trustworthy, and well-optimized for mobile users. Recommendations include publishing clear privacy and security policies, enhancing security headers, and providing contact information for improved transparency and compliance.

H

Hessischer Rundfunk

hr.de

63

Hessischer Rundfunk (hr) is the official public broadcasting institution for the German state of Hessen and a founding member of the ARD consortium. The website hr.de serves as a comprehensive portal for news, cultural programming, radio and television services, and public information. It targets the general public in Hessen and Germany, offering a wide range of media content including live streams, press releases, event information, and career opportunities. The business model is publicly funded broadcasting, emphasizing transparency and public service.

L

LITERADTOUR

literadtour.net

64

LITERADTOUR is a small cultural project based in Germany, focused on promoting reading and literature through a book ambassador traveling across the country. The website is professionally designed using Squarespace, featuring good mobile optimization and clear navigation. The project leverages social media platforms such as Instagram, YouTube, TikTok, and Facebook to engage its audience. Technically, the site uses modern web technologies and enforces HTTPS with HSTS, indicating a strong security posture. However, the absence of a privacy policy, terms of service, and verified contact information limits its privacy compliance and business credibility. Additionally, the WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy. Overall, the site is safe and trustworthy for general audiences but would benefit from enhanced transparency and compliance documentation.

Z

ZDF

zdf.de

65

ZDF is a major German public television broadcaster offering a comprehensive streaming portal with films, series, documentaries, and live TV. The website is professionally designed, mobile-optimized, and uses modern web technologies such as Next.js and Apollo GraphQL, reflecting a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy policies are not clearly presented in the analyzed content. The domain is legitimate and consistent with the broadcaster's identity, though registrant details are restricted due to DENIC policies. Overall, the site serves a broad general audience with high-quality media content.

G

GALORE

galore.de

44

GALORE is a German interview magazine focused on cultural, societal, and lifestyle topics, offering authentic and insightful interviews with notable personalities. The website serves as a platform for magazine subscription, cultural articles, and newsletters, targeting a general audience interested in culture and society. The business operates in the media sector with a niche market position and a small company size. Technically, the website uses modern web technologies including Bootstrap and Owl Carousel, with Google Analytics for user tracking. The site is mobile optimized and has good SEO practices, though no CMS is explicitly identified. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which impacts privacy compliance. No explicit contact information or security policies are published, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and safe for general audiences.

S

Society for Scholarly Publishing

sspnet.org

62

The Society for Scholarly Publishing (SSP) operates a professional membership website dedicated to advancing scholarly publishing. The organization provides educational events, career resources, community engagement, and industry news targeted at professionals in academic publishing and related sectors. The website is well-structured, professionally designed, and optimized for both desktop and mobile users. It employs a modern technology stack centered on WordPress with integrations for analytics, advertising, and user engagement. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. Privacy policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the site represents a legitimate, established non-profit entity with a clear mission and professional online presence.

B

BLNR Publishing GmbH

blnreview.de

62

Berlin Review is a German-based cultural and literary magazine published by BLNR Publishing GmbH. The website offers a multilingual platform featuring essays, reviews, and memos focused on books and ideas, targeting readers interested in intellectual and cultural discourse. The business model centers on subscriptions, online reader editions, and donations, positioning itself as a niche media outlet with a consistent brand and good content quality. Technically, the site uses modern JavaScript libraries such as jQuery and Stripe for payment processing, with a cookie consent mechanism and Google Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and multilingual support. Security posture is solid with HTTPS and basic best practices, though some security headers could be improved. Privacy compliance is adequate with a privacy policy and cookie consent, but lacks explicit terms of service or incident response contacts. Overall, the domain registration data aligns well with the business, indicating legitimacy and trustworthiness.

M

MAGNET Werkstatt für Verständigung

demoslam.org

59

demoSlam.org is a German-based educational non-profit organization focused on facilitating dialogue and understanding among people with differing opinions through their demoSlam dialog format. The website presents a professional and consistent brand with clear descriptions of their services, events, and educational offerings. Their market position is niche, targeting individuals and organizations interested in social cohesion and dialogue facilitation. Technically, the site is built on the Tilda CMS platform, leveraging modern web technologies and providing a mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and DNSSEC could improve resilience. Privacy compliance is supported by GDPR-consistent consent mechanisms and a privacy policy, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

3

3E Company

3eonline.com

69

3E Company operates a suite of specialized software platforms focused on chemical management, product notification, compliance, and supply chain sustainability. The company targets businesses requiring regulatory compliance and chemical safety management solutions, positioning itself as an established provider in this niche market. The website serves as a portal hub linking to various client login areas and informational resources hosted primarily on the parent domain 3eco.com. Technically, the site employs modern web technologies including Bootstrap, jQuery, and analytics tools such as Heap and ContentSquare, indicating a moderate level of digital maturity. However, the absence of structured data and limited SEO optimization suggest room for improvement. Security posture is adequate with HTTPS implied and monitoring scripts in place, but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. The WHOIS data is unavailable, raising some concerns about domain registration legitimacy, though the business presence and external links support authenticity. Overall, the site is professional and functional but would benefit from enhanced security and privacy compliance measures.

T

The Chemours Company

chemours.de

59

The Chemours Company operates as a global leader in the chemical industry, specializing in the production and distribution of advanced chemical products such as fluoropolymers, titanium technologies, refrigerants, and high-performance lubricants. The website targets industrial clients, investors, and partners, emphasizing sustainability and innovation. The company maintains a strong market position with a comprehensive portfolio of trusted brands and a clear corporate responsibility commitment. Technically, the website employs modern analytics and tracking tools, is well-optimized for mobile devices, and demonstrates good SEO and accessibility practices. Security posture is robust with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and DNS setup align with the company's corporate identity, supporting legitimacy and trustworthiness.

T

The Chemours Company

nafion.com

63

The website www.nafion.com represents the Nafion™ brand, a product line of The Chemours Company specializing in membranes, dispersions, and resins primarily serving the chemical, chlor-alkali, energy, and transportation industries. The site positions Nafion™ as a leading provider with over 50 years of experience, offering advanced materials that improve process efficiency and support emerging clean energy applications. The business model is B2B, targeting industrial manufacturers and energy sector clients. The website is professionally designed, mobile-optimized, and rich in relevant content, including white papers and industry applications, reinforcing its market position. Technically, the site employs modern web technologies including Google Tag Manager, Microsoft Application Insights for analytics, and cookie consent management via CookieLaw.org. The site is hosted securely with HTTPS and shows good SEO and accessibility practices. However, explicit security headers are not detected, and no dedicated security policy or incident response information is published, indicating room for improvement in security transparency. From a security perspective, the site demonstrates a solid baseline with encrypted connections and no visible vulnerabilities or exposed sensitive data. The absence of WHOIS registration data for the domain www.nafion.com raises concerns about domain legitimacy or possible use of subdomains or aliases under the Chemours corporate umbrella. This discrepancy impacts trustworthiness and business credibility scores. No direct company contact emails or phone numbers are published, with contact facilitated via forms only. Overall, the website is a high-quality, professional resource for industry stakeholders but would benefit from enhanced security disclosures, domain registration transparency, and direct contact information to improve trust and compliance posture.

T

The Chemours Company

viton.com

63

The Viton™ website represents a high-performance fluoroelastomer brand operated by The Chemours Company, a large and established chemical manufacturing entity. The site provides comprehensive product information, industry applications, technical resources, and sales support aimed at industrial and manufacturing sectors such as automotive, aerospace, chemical processing, and oil and gas. The brand is positioned as a leader in durable, chemical-resistant elastomer products, targeting engineers and industrial buyers. Technically, the website employs modern JavaScript libraries, Google Tag Manager, and Microsoft Application Insights for analytics and performance monitoring. It is well-structured with responsive design and accessibility considerations, delivering a professional user experience. The site uses HTTPS and secure external resources but lacks explicit security headers and a published security policy or incident response contacts. From a security perspective, the site shows good practices with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a comprehensive privacy policy and cookie consent mechanisms. However, the absence of a vulnerability disclosure program or security.txt file is noted. WHOIS data for the domain is unavailable publicly, likely due to privacy or registrar policies, but the site’s corporate affiliation and branding strongly support legitimacy. Overall, the website is professionally maintained, secure, and compliant with privacy standards, serving a clear B2B industrial market. Strategic recommendations include enhancing security headers, publishing incident response information, and improving transparency around vulnerability disclosures to further strengthen trust and security posture.

K

Krytox™ Lubricants

krytox.com

69

Krytox™ Lubricants is a specialized brand offering high-performance lubricants designed for extreme industrial conditions, serving sectors such as aerospace, automotive, and manufacturing. The brand operates under the parent company Chemours and positions itself as a leader in durable and sustainable lubricant solutions. The website reflects a mature digital presence with comprehensive product and industry information, supported by modern analytics and consent management technologies. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response details are not published. The absence of WHOIS registration data is a notable gap but does not detract significantly from the overall legitimacy given the strong brand association and professional web presence. Strategic recommendations include publishing detailed security and incident response policies and adding vulnerability disclosure mechanisms to enhance trust and compliance.

T

The Chemours Company

freon.com

60

The website www.freon.com represents the Freon™ refrigerants brand, operated by The Chemours Company, a recognized enterprise in the energy and chemical manufacturing sector. The site provides detailed information about refrigerant products, industry applications, and support resources targeting HVAC professionals and commercial/residential users. The content is professionally curated, with strong branding consistency and linkage to the parent corporate site, indicating a mature business presence. Technically, the site employs modern tracking and consent management tools, is mobile optimized, and delivers a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and telemetry tools in place, though it lacks explicit security policies and incident response contacts. The absence of WHOIS data for the domain is a notable concern, reducing domain registration transparency and trustworthiness, but the overall site content and corporate association mitigate some risk. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site scores well on content quality, technical implementation, and privacy compliance, with room for improvement in security disclosures and domain registration transparency.

C

Chemours Company

opteon.com

70

The Opteon website represents a professional and well-maintained digital presence for the Opteon brand, which is a part of the Chemours Company. The business focuses on providing sustainable, high-performance refrigerants and specialty fluids with low global warming potential, targeting industrial and commercial sectors such as refrigeration, air conditioning, automotive, electronics, and specialty chemical applications. The website supports multiple languages, indicating a global market reach and a B2B business model. The content is relevant, well-structured, and aligned with the brand's sustainability messaging. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Microsoft Application Insights for analytics and monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured navigation. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit CSP headers were not confirmed in the HTML. The site includes a cookie consent mechanism and privacy policy consistent with GDPR compliance. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy, incident response information, or vulnerability disclosure page suggests room for improvement in transparency and security communication. The WHOIS data for the domain www.opteon.com is missing or unavailable, which is unusual but does not appear to impact the legitimacy given the strong corporate branding and association with Chemours. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include publishing a security policy and vulnerability disclosure, enhancing security header implementation, and ensuring WHOIS data transparency to improve trust and compliance further.

C

Chemours

tipure.com

67

The website represents Chemours' Ti-Pure™ brand, a leading global manufacturer of chloride-process titanium dioxide (TiO₂). The site targets industrial and commercial customers across coatings, plastics, laminates, and paper sectors, offering product information, support, and online purchasing options. The brand is positioned as an innovator with global manufacturing capabilities, supported by professional content and consistent branding. Technically, the site employs modern analytics tools such as Google Tag Manager and Microsoft Application Insights, and implements cookie consent via OneTrust, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced, but lacks explicit security headers and published incident response or vulnerability disclosure information, which are areas for improvement. The WHOIS data for the domain is unavailable or indicates the domain may not be registered, which raises concerns about domain legitimacy despite the professional website content. Overall, the site is well-designed, accessible, and trustworthy from a user perspective, but domain registration inconsistencies warrant further verification.

T

The Chemours Company

teflon.com

67

The website represents The Chemours Company's Teflon™ brand, a globally recognized name in fluoropolymer products serving multiple industries including automotive, communications, and industrial manufacturing. The site offers comprehensive product information, industry solutions, and consumer resources, reflecting a mature and well-established business model with both B2B and B2C elements. The digital infrastructure leverages modern technologies such as Google Tag Manager, Microsoft Application Insights, and OneTrust for privacy compliance, hosted likely behind Cloudflare for performance and security. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and incident response disclosures are absent. The absence of WHOIS data is unusual but does not detract significantly from the site's legitimacy given strong brand consistency and corporate linkage. Overall, the site is professional, secure, and privacy-conscious, suitable for its enterprise audience.

CloudPit is a cloud platform service operated under dogado GmbH, a German company established in 2015. The website analyzed is primarily a login portal for users to access cloud infrastructure management services. The business targets IT professionals and organizations requiring cloud hosting and management solutions. The platform appears to be a niche player in the cloud technology sector with a medium-sized company profile. Technically, the website employs standard web technologies including JavaScript and CSS, with scripts loaded from its own domain. The site uses HTTPS with a valid CSRF token for form security, but lacks advanced security headers and visible privacy or cookie policies. The site is moderately optimized for performance and mobile use but could improve accessibility and SEO features. From a security perspective, the site demonstrates basic good practices such as HTTPS and CSRF protection but lacks DNSSEC and security headers that would enhance protection. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms a consistent and legitimate domain registration with no privacy protection, matching the business location and entity. Overall, the website is functional and trustworthy but would benefit from enhanced privacy compliance, security hardening, and more comprehensive business transparency. Strategic improvements in these areas would strengthen user trust and regulatory compliance.

D

Domainers Registrar AG

domainers.de

45

Domainers Registrar AG is a German-based domain registrar specializing in domain registration and management services primarily for European markets. Established since 2008, the company emphasizes personal service, efficient domain portfolio management, and transparent pricing. Their offerings include domain registration for popular TLDs such as .de, .eu, and .com, alongside value-added services like reseller systems, API integrations, smartphone apps, and SSL certificate provisioning. The website reflects a mature digital presence built on WordPress with modern plugins and security features such as CAPTCHA and two-factor authentication.

D

Datatrans

datatrans.com

61

Datatrans is a Swiss-based payment solutions provider offering a flexible and customizable payment platform tailored for companies demanding advanced payment capabilities. The website presents a professional image with consistent branding and a clear focus on payment services, targeting business clients. The technical infrastructure leverages modern web technologies including Vue.js, and integrates reputable analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Cookiebot for privacy compliance. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and CSRF protection, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates good digital maturity and compliance with GDPR, supporting trustworthiness and business credibility.

The website bonnespratiquestms.fr is a specialized platform focused on the prevention of musculoskeletal disorders (TMS) among cordistes, professionals working at heights using ropes. It is supported by OPPBTP and partners such as France Travaux sur Cordes, providing practical fiches, resources, and tools to improve occupational health and safety in the construction sector in France. The platform targets cordistes and safety professionals, offering educational content and prevention best practices. Technically, the site uses modern JavaScript libraries, Google Tag Manager, reCAPTCHA v3, and a consent management platform (Didomi), hosted on GANDI infrastructure. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. The WHOIS data shows an anomalous future domain creation date, which reduces trust from a domain registration perspective but does not detract from the professional content and partner associations. Overall, the site is a credible resource in its niche with room for improvement in transparency and security documentation.

B

B. Braun Vet Care GmbH

bbraun-vetcare.de

68

B. Braun Vet Care GmbH operates as a specialized provider of veterinary medical products and solutions, focusing on supporting veterinary clinics and practices in Germany. The company offers a broad portfolio including anesthesia, infusion therapy, wound care, and hygiene products, complemented by educational e-learning modules and infection prevention initiatives. As a subsidiary of B. Braun SE, it benefits from established market presence and brand recognition in the healthcare sector. The website is professionally designed, content-rich, and targets veterinary professionals with relevant product information and resources. Technically, the site is built on Adobe Experience Manager, leveraging modern JavaScript libraries and third-party tools for consent management and user feedback, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website reflects a trustworthy and professional business with good compliance to privacy regulations and a clear focus on its niche market.

I

intersoft consulting services AG

dsgvo-gesetz.de

51

The website dsgvo-gesetz.de serves as a comprehensive and authoritative resource for the EU General Data Protection Regulation (DSGVO) in German. It provides the official legal texts, related regulations, and practical information for companies and individuals interested in data protection compliance. The site is professionally designed, well-structured, and targets primarily German-speaking businesses and privacy professionals. It also offers related services such as external data protection officer support and seminars. Technically, the site is built on WordPress with modern SEO and performance optimizations, including the use of Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security posture is solid with HTTPS and no obvious vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and authoritative in its niche, though it lacks some compliance features like cookie consent banners and direct contact details. Strategic recommendations include enhancing privacy compliance mechanisms, publishing security and incident response policies, and improving contact transparency.

G

Gemeinsame Glücksspielbehörde der Länder (AöR)

gluecksspiel-behoerde.de

58

The Gemeinsame Glücksspielbehörde der Länder (GGL) is the official German government authority responsible for regulating the cross-state online gambling market. Its core mission is to ensure player protection, prevent gambling addiction, and enforce compliance among licensed gambling providers. The agency also combats illegal gambling and promotes research in the gambling sector. The website reflects a well-structured, professional government portal with comprehensive information for gambling providers, players, and other stakeholders. It serves as a central coordination point for regulatory matters in Germany's gambling landscape. Technically, the website is built on Joomla CMS with modern frameworks such as UIkit and jQuery, hosted likely on rzone.de infrastructure. It demonstrates good mobile optimization, accessibility features, and a clean, professional design. Security measures include HTTPS enforcement, CSRF tokens, and frame busting scripts, although explicit security headers could be improved. No signs of tracking or advertising scripts were found, indicating a privacy-conscious approach. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism and published incident response or vulnerability disclosure policies are areas for improvement. The WHOIS data aligns with the website's official nature, supporting its legitimacy. Overall, the site scores highly on content quality, technical implementation, security, privacy compliance, and business credibility, making it a trustworthy source for gambling regulation in Germany.

M

Mint Media AS

mintmedia.no

46

Mint Media AS is a Norwegian digital marketing agency established in 2016, specializing in helping small and large companies increase their digital visibility and marketing effectiveness. The company holds a Google Partner certification, underscoring its expertise in Google Ads and digital advertising. Their website showcases a professional design with clear navigation, client case studies, and trust signals such as Trustpilot reviews, positioning them as a credible player in the media sector in Norway. Technically, the site is built on WordPress with modern tools like WPBakery, Gravity Forms, and Google Tag Manager, indicating a mature digital infrastructure. Security posture is solid with HTTPS and reCAPTCHA protections, though some security headers could be enhanced. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism via Cookiebot. Overall, the site reflects a trustworthy and professional business with good digital maturity.

1

1&1 Telecom GmbH

1und1.de

72

1&1 Telecom GmbH is a major telecommunications provider in Germany offering a comprehensive range of internet and mobile telephony services. The company operates under the umbrella of United Internet AG and has a strong market presence with a focus on private and business customers. Their website reflects a professional and modern digital presence, leveraging advanced web technologies and a robust content management system (Neos CMS). The site is well-optimized for mobile devices and provides clear navigation and comprehensive service information. Security-wise, the website enforces HTTPS, employs secure form handling, and integrates reputable third-party analytics and marketing tools. Privacy compliance is well addressed with detailed policies and consent mechanisms, aligning with GDPR requirements. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, supporting the company's enterprise-level stature in the telecommunications sector.

F

Freie Sachverständigenbüro-Kooperation Sauerbrey GmbH + Peter Schulze

sv-schadenmanagement.de

55

Freie Sachverständigenbüro-Kooperation Sauerbrey GmbH + Peter Schulze is a well-established German company specializing in expert appraisals and assessments for vehicles and real estate. With over 35 years of experience, they serve clients primarily in Ulm and surrounding regions, offering services such as accident damage reports, oldtimer valuations, building damage assessments, and technical consulting. Their business model focuses on providing on-site expert evaluations for both private and commercial customers. The website reflects a professional and trustworthy presence with multiple physical locations and a free hotline for customer contact. Technically, the website employs modern web technologies including Google Tag Manager, Google Analytics with IP anonymization, and Usercentrics for consent management, indicating a mature digital infrastructure. The site is mobile optimized and SEO friendly, though it appears to use a custom CMS. Performance is moderate with good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and integrates privacy-compliant analytics and consent mechanisms. However, it lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data confirms domain legitimacy consistent with the business claims. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic enhancements in security policy transparency and technical security headers would further strengthen their security posture.

G

Gusto

gusto.com

66

Gusto is a well-established technology company specializing in online payroll and HR solutions targeted primarily at small and medium-sized businesses. The company offers a comprehensive people platform that facilitates employee onboarding, payroll processing, benefits administration, and insurance management. Positioned as a leader in customer satisfaction, Gusto leverages modern SaaS delivery models to serve a large customer base with a focus on ease of use and compliance support. The website reflects a mature digital presence with professional design, clear navigation, and extensive content relevant to its business domain. Technically, the website is built on a modern stack including Next.js and React, hosted with Cloudflare DNS and CDN services. It employs advanced analytics and tracking tools such as Snowplow, FullStory, and Tealium, alongside a robust cookie consent mechanism powered by OneTrust. The site demonstrates excellent performance, mobile optimization, and accessibility features, indicating a high level of digital maturity. From a security perspective, Gusto enforces HTTPS with strong SSL configurations and implements key security headers to protect users. The presence of SOC 2 Type II and ISO 27001 certifications further underscores its commitment to security and compliance. However, there is room for improvement in publishing explicit security policies, incident response procedures, and vulnerability disclosure mechanisms to enhance transparency and trust. Overall, Gusto presents a low-risk profile with strong business credibility, technical sophistication, and privacy compliance. Strategic recommendations include enabling DNSSEC, publishing dedicated security and incident response pages, and providing clear contact information for data protection officers to further strengthen its security posture and regulatory compliance.

FOSSGIS e.V. organizes the FOSSGIS-Konferenz 2026, a leading conference in the German-speaking region focused on Free and Open Source Software for Geoinformation Systems, Open Data, and OpenStreetMap. The event targets users, developers, researchers, and enthusiasts in the GIS and open data community, providing a platform for knowledge exchange and networking. The conference is supported by multiple sponsors and academic partners, including the University of Göttingen. Technically, the website is built with standard HTML5 and CSS3, uses FontAwesome for icons, and is hosted on Schlundtech infrastructure. The site is well-structured, mobile-optimized, and SEO-friendly but lacks advanced frameworks or CMS indications. Security posture is moderate with no visible security headers or incident response policies, and no cookie consent mechanism is implemented despite GDPR relevance. Contact information is limited to an email address for conference organization. Overall, the website is professional and trustworthy but could improve in security and privacy compliance aspects.

The website amzcon.de presents itself as a German-language deal aggregator offering discounted products across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. The business model appears to be affiliate marketing, leveraging Amazon product links to generate revenue. The domain is currently marked as for sale, and WHOIS data indicates the domain is unregistered or expired, which raises concerns about the legitimacy and continuity of the business. Technically, the site uses modern HTML5, CSS3, and JavaScript with Google Fonts integration and basic client-side search functionality. However, there is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Security best practices such as delayed activation of affiliate links to prevent bot clicks are observed, but overall security posture is weak due to missing HTTPS and security headers. The site contains no adult or explicit content and targets general consumers looking for deals. Overall, the site is functional but lacks critical trust and compliance elements, and the domain status undermines its credibility.

P

pretix GmbH

pretix.social

70

pretix GmbH operates pretix.social, a Mastodon-based decentralized social media server hosting official company accounts related to their open-source and SaaS projects such as pretix and venueless. The website serves as a communication and branding platform rather than a user registration portal, with accounts managed externally. The company is positioned as a niche technology provider focused on event management and decentralized social media solutions. Technically, the site uses Mastodon 4.4.5 with React and modern JavaScript modules, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Business credibility is strong due to clear company information and legal notices. Overall, the site is professional, trustworthy, and safe for general audiences.

pretixstatus.com serves as the official system status page for the pretix event ticketing platform, providing real-time operational status updates. The website is minimalistic, focusing on clear communication of system uptime and support contact information. The business operates in the technology sector, specifically targeting event organizers requiring ticketing solutions. The domain is newly registered in early 2024, consistent with a dedicated status subdomain for the pretix platform. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with no detected CMS or complex frameworks. Hosting is likely provided by IONOS SE, the domain registrar. The site is mobile optimized with good navigation clarity but lacks advanced SEO and accessibility features. No analytics or advertising scripts are present, indicating a privacy-conscious approach. From a security perspective, the domain uses HTTPS (implied by modern web standards though SSL details are not explicit), has domain transfer protection enabled, but lacks DNSSEC and security headers. No forms or user input fields reduce attack surface. The absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, pretixstatus.com is a trustworthy and professional status page with a good baseline security posture and privacy compliance. Strategic enhancements in security headers, DNSSEC, and published security policies would strengthen its resilience and user trust.

V

Venueless

venueless.org

69

Venueless is a technology company founded in 2020 that provides a SaaS platform for hosting digital, hybrid, and on-site events. Their platform supports live streaming, workshop rooms with chat, integrated scheduling, and a kiosk mode for hybrid events. The company targets event organizers and conference planners seeking versatile and scalable event solutions. The website demonstrates a strong market position with ISO 27001 certification and GDPR compliance, supported by client testimonials and open source transparency. Technically, the website uses modern web technologies including Bootstrap, FontAwesome, and Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, well-structured, and performs moderately well. Hosting and domain registration are consistent and reputable, with no blocking or WAF interference detected. From a security perspective, Venueless shows maturity with ISO 27001 certification and GDPR compliance. HTTPS is enforced, forms are protected with CSRF tokens, and no obvious vulnerabilities or exposed sensitive data were found. However, DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. Incident response contact details and vulnerability disclosure mechanisms are not publicly available. Overall, Venueless presents a trustworthy, professional, and secure digital event platform with good privacy practices. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing incident response contacts to further enhance security and compliance posture.

P

pretix

pretix.cloud

72

pretix is a technology company specializing in event ticketing software, offering a comprehensive platform that includes online ticket shops, box office solutions, and various event management tools. The company targets event organizers across multiple sectors such as conferences, festivals, concerts, and exhibitions. With over 1000 customers and ISO 27001 certification, pretix holds a strong market position as a secure and privacy-focused ticketing solution provider. The website reflects a professional and consistent brand image with clear navigation and extensive product offerings. Technically, pretix employs modern web technologies including Matomo analytics for privacy-conscious tracking, SVG graphics for UI, and a REST API for extensibility. The site is well-optimized for performance and mobile devices, providing a good user experience. Security-wise, pretix demonstrates strong practices with HTTPS enforcement and ISO certification, though it lacks some security headers and a public vulnerability disclosure policy. Contact information is clearly presented, supporting business credibility. Overall, pretix presents a trustworthy and mature digital presence with minor areas for compliance and security enhancement.

R

rami.io GmbH

rami.io

65

rami.io GmbH is a small German software development company founded in 2013 by Raphael Michel, specializing in bespoke software projects and notably the pretix ticketing solution. The company is undergoing a rebranding to pretix GmbH in July 2025, reflecting its strategic focus on the ticketing market. The website content is professional, well-structured, and targeted at businesses and organizations requiring software and ticketing solutions. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is moderate with domain transfer protections but missing DNSSEC and security headers. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though no explicit security or incident response policies are published. Overall, the domain registration data aligns well with the website claims, supporting legitimacy and trustworthiness.

L

Lawinenvorhersage | Lawinen.report

lawinen.report

55

Lawinen.report is a specialized informational platform focused on avalanche forecasting, weather data, and avalanche safety education primarily serving the Alpine regions of Tirol, Südtirol, and Trentino. It operates as a non-commercial, likely government or non-profit affiliated entity, providing critical safety information and community resources to outdoor enthusiasts and professionals. The website integrates modern web technologies including JavaScript modules and Leaflet.js for interactive mapping, delivering a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and explicit cookie consent mechanisms are recommended. Privacy compliance is good with a comprehensive privacy policy, but cookie consent and incident response information could be enhanced. Overall, the site is trustworthy, professionally maintained, and aligned with its public safety mission.

C

Carbon GmbH

carbon.ag

50

Carbon GmbH is a specialized company focused on innovative automotive body repair solutions, particularly the CBR-System for efficient exterior bodywork repairs. Established in 2002 and based in Germany, the company targets automotive repair professionals and businesses, positioning itself as a niche expert in the manufacturing sector. The website reflects a professional and consistent brand image with good content quality and clear business information. Technically, the site is built on WordPress with Elementor and integrates modern analytics and security tools such as Google Analytics, Matomo, and Wordfence, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforcement and security headers, though DNSSEC is not enabled and no public security policy or incident response information is available. Privacy compliance is well addressed with comprehensive cookie and privacy policies and active consent mechanisms. Overall, the website is trustworthy, well-maintained, and aligned with the company's business claims.

W

Württembergische Gemeinde-Versicherung a.G.

wgv.de

60

Württembergische Gemeinde-Versicherung a.G. (WGV) is a German insurance company offering a broad range of insurance products including vehicle, household contents, accident, cyber, and legal protection insurance. The company targets private individuals, municipal clients, and young people through its SmartStart program. The website reflects a well-established regional insurer with a strong market position and a focus on competitive pricing and customer service. The digital presence is modern, leveraging Angular framework and consent management platforms to ensure privacy compliance and user experience. The site is well-structured, accessible, and optimized for mobile devices, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.