Security Directory

V

VR-EASY GmbH

vr-easy.com

10

VR-EASY GmbH operates a specialized SaaS platform enabling users to create, manage, and share virtual 360° tours online without the need for software installation. The company targets small to medium businesses, educational institutions, real estate professionals, and municipalities, offering tiered subscription packages tailored to various sectors. Their market position is that of a niche provider with innovative features such as integration of multimedia content and marketing tools, supported by reputable partners like Deutsche Telekom and EU funding. The website is primarily in German with English alternatives, reflecting a focus on the German market. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Popper.js, hosted on the Open Telekom Cloud which emphasizes green energy. The platform is web-based with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility is basic. The site lacks a CMS, indicating a custom-built solution. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers such as CSP or HSTS. No vulnerability disclosure or incident response policies are visible. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but no cookie consent mechanism is detected. Contact information is clear and professional, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned in its niche. Security improvements and enhanced privacy mechanisms would further strengthen its posture. The domain registration data aligns well with the business claims, supporting legitimacy.

The website 'Schulerzbistum' appears to be a minimal portal page primarily embedding another PHP page via an iframe. The content is very limited, with no visible business descriptions, contact information, or user interaction elements. The technical infrastructure relies on basic web technologies including jQuery and custom JavaScript, with no advanced frameworks or CMS detected. The site lacks modern SEO and accessibility features and shows minimal mobile optimization. Security posture is weak due to absence of HTTPS and security headers, and no privacy or cookie policies are present, indicating poor compliance with GDPR and related regulations. Overall, the site presents a low trust profile with limited business credibility and minimal content quality.

K

Karpatská nadácia

karpatskanadacia.sk

47

Karpatská nadácia is a well-established non-profit organization founded in 2007, focused on fostering prosperity and social development in Eastern Slovakia. The foundation offers grant funding, community development programs, and humanitarian aid, with a strong emphasis on supporting excluded Roma communities and aiding Ukraine. Their market position is solid within the regional non-profit sector, supported by partnerships with UNICEF and other organizations. The website reflects a professional and consistent brand image, targeting individuals and organizations committed to regional development. Technically, the website is built on a modern WordPress CMS platform using Elementor and Astra theme, hosted by Websupport. It employs contemporary web technologies including jQuery, Google Tag Manager, and CookieYes for cookie consent management. The site is mobile-optimized with good SEO and accessibility basics, though some accessibility features could be enhanced. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS with DNSSEC enabled, employs cookie consent with granular user controls, and integrates tracking tools like Google Analytics, Microsoft Clarity, and Facebook Pixel responsibly. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a published security policy and incident response contact information, which are recommended for improved transparency and readiness. Overall, the website is trustworthy, compliant with GDPR, and professionally maintained. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and improving accessibility compliance to further strengthen the security posture and user trust.

Ľ

ĽudiaĽuďom.sk

ludialudom.sk

70

ĽudiaĽuďom.sk operates as Slovakia's first fully open and universal online donation platform, facilitating direct financial aid from donors to beneficiaries with a focus on transparency and public benefit. The platform's unique self-organizing model empowers donors to decide which causes to support without operator interference. Technically, the website employs common web technologies including jQuery, Google Tag Manager, Hotjar, and Cookiebot for analytics and cookie consent management. The site is accessible, mobile-optimized, and uses HTTPS, but lacks explicit privacy and terms of service pages and security headers, which are areas for improvement. Security posture is moderate with no critical vulnerabilities detected, but enhancements in security headers and incident response policies are recommended. Overall, the domain is well-established and consistent with the business purpose, indicating a trustworthy and legitimate operation.

C

Centrum pre filantropiu

cpf.sk

40

Centrum pre filantropiu is a well-established Slovak non-profit organization dedicated to fostering philanthropy and charitable giving in Slovakia for over 23 years. The organization connects donors with those in need and manages philanthropic strategies and grant programs. Their website reflects a mature digital presence with clear messaging, professional design, and comprehensive content focused on their mission and projects. Technically, the site is built on WordPress using modern plugins and tracking tools such as Google Tag Manager, Facebook Pixel, and Hotjar, indicating a good level of digital maturity. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and headers. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact information, supporting its credibility as a non-profit entity.

S

SCHWING Stetter

schwing-stetter.fr

42

SCHWING Stetter is a well-established French company specializing in the manufacturing, transport, and fabrication of concrete machinery and equipment. With a history dating back to 1985 and a domain registered since 1998, the company holds a solid market position in the construction and industrial equipment sector. Their key offerings include concrete batching plants, mixers, pumps, and recycling stations, supported by after-sales services and spare parts. The website targets construction professionals and businesses, providing detailed product information and service options. Technically, the website is built on WordPress with modern plugins and optimizations, hosted by OCI CLOUD, ensuring a reliable digital presence. Security measures include HTTPS, Google reCAPTCHA on forms, and cookie consent mechanisms, although some security headers could be improved. Overall, the site demonstrates good content quality, professional design, and compliance with privacy regulations, supporting a trustworthy business image.

Z

Zartbitter e.V. Köln

washilft.org

61

WAS HILFT is a German non-profit project operated by Zartbitter e.V. Köln, dedicated to combating sexual violence through education, support, and awareness. The website offers multimedia content, legal information, and prevention theater aimed primarily at youth and their social circles. The project is funded by governmental and city institutions, reinforcing its legitimacy and trustworthiness. Technically, the website is built on WordPress with common plugins and demonstrates good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent implemented, though improvements such as enabling DNSSEC and security headers are recommended. Privacy compliance is strong, with a comprehensive privacy policy and cookie management in place. Overall, the website is professional, trustworthy, and safe for general audiences.

Zartbitter e.V. operates an online webshop focused on educational and preventive materials related to child protection, sexual abuse prevention, and child rights. The website offers a variety of products including books, brochures, posters, and multimedia targeted primarily at parents, educators, and professionals working with children and youth. The business model is a niche non-profit e-commerce platform serving the German-speaking market (Germany, Austria, Switzerland). Technically, the website is built on WordPress with WooCommerce and uses several plugins for product display, discount rules, and GDPR compliance. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers. Performance is moderate with a good user experience and clear navigation. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, security headers like Content-Security-Policy and HSTS are not evident and should be implemented. There is no published security policy or incident response contact information. Overall, the website is safe, professional, and trustworthy for its target audience. The lack of direct contact information and detailed WHOIS data slightly limits business credibility assessment. Strategic improvements in security headers and transparency around security policies would enhance trust and compliance.

D

DT Study Club

dtstudyclub.com

54

DT Study Club is a large, globally recognized online dental education platform offering free continuing education webinars to dental professionals. The website is professionally designed, mobile-optimized, and uses modern web technologies including WordPress, Bootstrap, and Matomo analytics. Security posture is moderate with HTTPS and reCAPTCHA implemented, but lacks explicit privacy and security policies. The absence of WHOIS data is a concern for domain legitimacy, though the active presence and partnerships with reputable dental organizations support its credibility. Privacy compliance is partial with a cookie consent mechanism but no visible privacy policy. Overall, the platform serves a large audience with quality educational content but should improve transparency and security documentation.

D

Dental Tribune International

dental-tribune.com

57

Dental Tribune Germany is a professional online portal delivering daily news, webinars, market and product information focused on the dental industry in Germany. It is part of the global Dental Tribune International network, providing dental professionals, students, and industry stakeholders with up-to-date trends and innovations in dentistry. The website offers a variety of content including news articles, educational webinars, events, and a marketplace for dental products and services. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Bootstrap, and Matomo analytics, and is hosted on AWS Cloudfront CDN, ensuring reasonable performance and availability. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism present but no explicit privacy policy found in the provided content. The domain WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the website content and branding align with a reputable international dental media company. Overall, the site is professional, content-rich, and serves its target audience effectively.

O

OEMUS MEDIA AG

oemus.com

51

OEMUS MEDIA AG is a well-established German media company specializing in dental medicine publications and professional education. The company offers a broad portfolio including specialist journals, seminars, and congresses targeting dental professionals. Their website reflects a mature business with a strong market position in the healthcare media sector, supported by 30 years of experience. Technically, the site uses standard web technologies such as jQuery and hosts media assets on Amazon S3, delivering moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and HTTP security headers. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively.

A

Align Technology Switzerland GmbH

aligncampus.com

52

Align Technology Campus is a specialized educational platform targeting dental professionals, offering webinars and continuing education focused on digital orthodontics and Invisalign products. The platform is professionally designed, uses modern web technologies including WordPress, Bootstrap, and integrates consent management and tracking tools such as TrustArc and Facebook Pixel. The website is well-structured with clear navigation and relevant content for its target audience. Security posture is good with HTTPS and reCAPTCHA implemented, though some security headers are missing. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanisms. However, the absence of WHOIS data for the domain www.aligncampus.com is a notable anomaly that reduces domain registration trustworthiness. Overall, the site is credible and professional but would benefit from improved domain transparency and enhanced security headers.

S

Středisko volného času RADOVÁNEK

radovanek.cz

44

Středisko volného času RADOVÁNEK is a well-established non-profit educational and leisure center based in Plzeň, Czech Republic, with a history dating back to 2005 and organizational roots spanning 75 years. The organization offers a broad range of educational clubs, camps, cultural events, and projects targeting children, youth, and adults in the Plzeň region. The website reflects a professional and consistent brand presence, showcasing partnerships, awards, and a comprehensive offering of services. Technically, the site is built on Joomla CMS with modern frameworks like Gantry 5 and uses common libraries such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie management. Overall, the site is trustworthy, user-friendly, and well-positioned in its regional educational sector.

E

Einersen Gull

einersengull.no

59

Einersen Gull is a well-established Norwegian jeweler operating both a physical store in Arendal and an e-commerce platform. The company offers a range of jewelry products including engagement rings, wedding rings, and exclusive brands such as Ole Lynggaard and Georg Jensen. Their website reflects a professional retail business with a focus on quality service and trusted brand partnerships. The digital infrastructure is built on WordPress and WooCommerce, leveraging modern web technologies and performance optimizations such as lazy loading and consent management for GDPR compliance. Security posture is solid with HTTPS enforcement and standard security headers, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the website is trustworthy, user-friendly, and compliant with privacy regulations, supporting the company's market position as a niche local jeweler.

N

N2 Applied

n2applied.com

50

N2 Applied is a Norwegian technology company specializing in plasma-based nitrogen fertiliser production technology. Their innovative approach offers sustainable, fossil-free fertiliser solutions that address environmental challenges and reduce dependency on traditional fossil fuel-based processes. The company targets farms and industrial operations seeking local, circular, and electric fertiliser production alternatives. Their website reflects a professional and modern digital presence built on WordPress, incorporating SEO and GDPR compliance tools. Social media integration and clear contact information enhance their business credibility. Security posture is solid with HTTPS and cookie consent mechanisms, though improvements like DNSSEC and security headers could be made. Overall, N2 Applied demonstrates a mature business and digital infrastructure aligned with their market position as a technology innovator in the energy sector.

A

Arendal Hotell AS

hotellarendal.no

71

Hotell Arendal is a hospitality business operating a modern hotel located centrally in Arendal, Norway. Established in 2020 and opened in 2021, it offers 91 hotel rooms and targets travelers and groups seeking accommodation in the city. The website is professionally designed using WordPress with the Divi theme, integrating booking services via Mews, and includes clear contact information and social media presence. The business positions itself as a smart, comfortable, and efficient hotel in the local market. Technically, the site uses modern web technologies including jQuery, Google Tag Manager, and Google Analytics, with a cookie consent mechanism ensuring GDPR compliance. Security posture is good with HTTPS enabled, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the website reflects a legitimate, trustworthy hospitality business with good digital maturity.

A

Arendals Dampskibsselskab AS

ads.no

10

Arendals Dampskibsselskab AS (ADS) is a historic and privately owned shipping company based in Arendal, Norway, with operations dating back to 1857. The company focuses on shipping and offshore project management, investment activities, and outsourcing ship management to industry leaders. ADS manages subsidiaries such as ADS Maritime Holding Plc, a listed investment company, and AET Sea Shuttle AS, specializing in shuttle tankers. The website reflects a professional corporate presence with clear business information and contact details. Technically, the site is built on WordPress with the Divi theme and integrates Google Analytics and consent management tools, indicating a mature digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. The lack of WHOIS data limits domain trust verification, but the overall business credibility and website quality are high.

E

Eyde Material Park

eydematerialpark.com

10

Eyde Material Park is a sustainable industrial park based in Norway, focusing on the battery value chain and supporting the green transition. The website presents a professional and consistent brand image, targeting businesses and stakeholders in the energy and green technology sectors. The business model revolves around providing industrial park facilities and infrastructure to companies involved in battery production and related green industries. Founded in 2021, the company positions itself as a key player in Norway's green industrial landscape. Technically, the website is built on WordPress using Elementor and Yoast SEO, hosted with Azure DNS, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, though DNSSEC is not enabled and security headers are missing. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Analytics are implemented via Plausible Analytics, reflecting a privacy-conscious approach. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

H

Headon Rekruttering

headonrekruttering.no

10

Headon Rekruttering is a newly established Norwegian recruitment agency specializing in headhunting and staffing for communication, marketing, design, and technology roles. The company targets businesses seeking specialists for permanent, freelance, or temporary positions. The website reflects a professional and modern digital presence built on WordPress with Elementor, integrating marketing and analytics tools such as HubSpot and Google Tag Manager. While the site is well-designed and optimized for SEO and mobile use, it lacks explicit privacy and terms of service policies, which are critical for compliance and user trust. Security posture is adequate with HTTPS enforced and cookie consent implemented, but the absence of security headers and incident response information suggests room for improvement. Overall, the domain registration aligns with the business founding date, supporting legitimacy. Strategic enhancements in privacy compliance and security practices would strengthen the company's digital trustworthiness.

R

REQ AS

req.no

10

REQ AS is an independent and privately owned investment firm operating primarily in Norway and Sweden, specializing in long only equity funds and direct real estate investments. The company targets family offices, private investors, investment companies, foundations, trusts, and institutional investors. The website presents a professional image with clear business descriptions and a focus on fundamental analysis and qualitative research to deliver best-in-class returns. The firm appears to be small in size with a focused business model and a consistent brand presence online. Technically, the website is built on WordPress using the Divi theme and several plugins including Complianz for GDPR compliance and Divi Machine for content management. The site integrates Google Analytics for tracking and Mailchimp for marketing communications, including a GDPR-compliant newsletter subscription form. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers are not explicitly detected and no public security policy or incident response information is available. The WHOIS data shows an anomalous future creation date, which raises questions about domain registration data accuracy but does not detract from the professional presentation and content quality of the website. Overall, the website is well-structured, compliant with privacy regulations, and suitable for its target audience, though improvements in security transparency and WHOIS data verification are recommended.

T

TEDxArendal

tedxarendal.com

10

TEDxArendal is an independent TEDx event organizer based in Arendal, Norway, operating since 2013. The website serves as a platform to promote the annual event, provide ticket sales, and share program and speaker information. The business targets a general audience interested in TEDx talks and educational events. Technically, the website is built on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. The site is mobile-optimized and uses privacy-friendly analytics (Plausible). Security posture is adequate with HTTPS and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

A

Advokatfirma Haakstad & Co DA

haakstad.no

10

Advokatfirma Haakstad & Co DA is a modern law firm based in the Agder region of Norway, providing legal services to businesses, private individuals, and public authorities. Established in 2012, the firm positions itself as a practical and cost-effective legal solutions provider. Their website reflects a professional and consistent brand image, targeting a Norwegian-speaking audience with clear navigation and relevant content. The firm maintains multiple physical offices and active social media profiles, enhancing their market presence. Technically, the website is built on WordPress using Elementor and Yoast SEO, indicating a mature digital infrastructure with good SEO and mobile optimization. The site uses HTTPS and modern JavaScript libraries, with moderate performance and basic accessibility features. Analytics are handled via Plausible Analytics, reflecting a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some security headers and formal security policies, which could be improved. Privacy compliance is partially addressed with a privacy policy but lacks a cookie consent mechanism. No incident response or vulnerability disclosure information is provided, which are areas for enhancement. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in security and privacy compliance. Strategic improvements in security headers, cookie consent, and incident response transparency would strengthen their posture and client trust.

V

Volt Power Analytics

voltpoweranalytics.com

65

Volt Power Analytics is a specialized energy market analysis company focused on the Nordic and European power markets. Founded in 2022, it offers advanced forecasting tools and data services designed to support power market professionals, investors, and analysts in navigating the energy transition. Their product suite includes real-time market intelligence, long-term price forecasts, and tailored commodity databases, emphasizing renewable energy and green transition support. The company positions itself as an independent and trusted provider with a strong focus on customization and data transparency. Technically, the website is built on WordPress with Elementor and integrates modern SEO and analytics tools such as Yoast SEO, HubSpot, and Plausible Analytics. The site is well-optimized for mobile and accessibility, with good performance and clear navigation. Security practices include HTTPS, domain transfer protection, and cookie consent mechanisms, though DNSSEC is not enabled and some advanced security headers are missing. The security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact is a gap. Privacy compliance is strong with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Business credibility is high, supported by clear contact information, professional content, and trust signals such as client logos and LinkedIn presence. Overall, Volt Power Analytics presents a professional, secure, and privacy-conscious digital presence suitable for its target market. Strategic improvements in DNS security and published security policies would further enhance trust and resilience.

E

Eyde-klyngen

eydecluster.com

52

Eyde-klyngen is a Norwegian cluster organization focused on fostering growth and competitiveness in the green process industry sector. Established in 2007, it serves as a collaborative platform for core companies and competence providers to develop sustainable industrial solutions. The website presents a professional and well-structured digital presence, leveraging modern web technologies and CMS (Umbraco), with good mobile optimization and accessibility. Security posture is strong with HTTPS and security headers properly implemented. However, the absence of a publicly accessible privacy policy and terms of service pages, combined with missing WHOIS registration data, introduces concerns regarding compliance and domain legitimacy. Social media integration and event information enhance engagement with the target audience. Overall, the website reflects a credible and established business entity within the Norwegian energy and manufacturing sectors.

C

Comply.org: Easily demonstrate SaaS Privacy Compliance (by PrivacyCloud)

comply.org

62

Comply.org is a technology-focused SaaS platform designed to help businesses easily demonstrate privacy compliance and responsible AI practices. The website positions itself as a tool for SaaS providers and organizations needing to showcase their adherence to privacy regulations. The business model centers around providing compliance demonstration services, likely targeting small to medium-sized enterprises in the technology sector. The site uses modern web technologies including React, Bootstrap, and Softr, indicating a contemporary technical infrastructure with moderate digital maturity. Mobile optimization is good, and the site loads with moderate performance. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and consent mechanisms. WHOIS data is incomplete and privacy protected, which limits trust but does not necessarily indicate malicious intent. Overall, the site is functional but would benefit from enhanced privacy disclosures, contact information, and security best practices to improve trust and compliance.

Sky Way Travel Center is a small local business operating a travel center in Western New Mexico, providing essential services such as gasoline, food (Subway), restrooms, and a gift shop featuring local Native American artisan products. The website is built on WordPress using the Astra theme and Beaver Builder plugin, reflecting a moderate level of digital maturity with good mobile optimization and SEO practices. The technical infrastructure is standard for small business websites, with no advanced analytics or tracking detected. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not provide cookie consent or privacy compliance mechanisms. Overall, the website is functional and trustworthy for its business purpose but could improve in security and privacy compliance.

Sky City Travel Center is a regional travel and hospitality business located in Western New Mexico, offering a range of services including fuel for trucking fleets, dining, shopping, and a casino with slot machines. The business targets travelers and fleet operators along Route 66 and Interstate 40, positioning itself as a premier travel center in the region. The website reflects this with clear service descriptions and contact information. Technically, the site is built on WordPress using modern plugins and themes, with Cloudflare providing DNS and CDN services. SEO is well implemented, and the site is mobile optimized. Security posture is adequate with HTTPS and domain transfer protection, but lacks some advanced security headers and published policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with room for improvement in security and privacy practices.

Z

Zartbitter e.V.

zartbitter.de

64

Zartbitter e.V. is a German non-profit organization focused on counseling and prevention of sexual violence against children and youth. The organization provides direct counseling services, educational workshops, and training for parents and professionals. It is recognized nationally for its engaging materials and theater productions addressing sensitive topics such as digital violence and children's rights. The website reflects a mature, well-structured digital presence with clear branding and comprehensive content tailored to its target audience. Technically, the website is built on WordPress using Elementor and several specialized plugins for events, SEO, and cookie management. Hosting is provided by SchlundTech, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. Privacy and cookie policies are implemented with consent mechanisms, reflecting good compliance with GDPR. Security posture is solid with HTTPS enforced and no obvious vulnerabilities or exposed sensitive data. However, some recommended security headers are not explicitly detected, and no formal security policy or incident response contact is published. The site does not appear to use extensive tracking or advertising, focusing instead on user privacy and minimal data collection. Overall, Zartbitter e.V. presents a trustworthy, professional online presence appropriate for a sensitive non-profit mission. Strategic improvements could include publishing a security policy, adding vulnerability disclosure information, and enhancing security headers to further strengthen trust and compliance.

X

XENOMEDIA internetbureau

xenomedia.nl

56

XENOMEDIA internetbureau is a well-established Dutch digital services company specializing in web design, online marketing, hosting, and communication services. With over 25 years of experience, it targets small to medium businesses and multinationals, offering a comprehensive suite of services including website and webshop development, Microsoft 365 solutions, and marketing communications. The company maintains a professional online presence with clear branding and consistent messaging. Technically, the website is built primarily on Drupal 9 with WordPress components, leveraging modern web technologies and third-party services such as Google Tag Manager and WP Statistics for analytics. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and explicit incident response policies suggests room for improvement. Privacy compliance is adequate with clear privacy and cookie policies, but lacks an active cookie consent mechanism. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

D

DJK Landesverband NRW e.V.

vollwertsport.de

46

The website www.vollwertsport.de represents the DJK Landesverband NRW e.V., a small non-profit organization focused on promoting values in sports through seminars, events, and educational products. The site serves a niche audience interested in sports education and community engagement within the NRW region of Germany. The business model revolves around non-profit activities supplemented by an e-commerce shop offering value-based sports products. Technically, the site is built on a modern WordPress platform using WooCommerce and Avada theme, with SEO and cookie consent mechanisms properly implemented. Security posture is good with HTTPS and cookie consent, though some security headers and explicit policies could be enhanced. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and legal pages. No critical security or content safety issues were detected.

D

DJK Sportjugend

djk-sportjugend.de

61

DJK Sportjugend is a German non-profit youth sports organization affiliated with the Catholic DJK-Sportverband. It focuses on inclusive youth work, social and cultural diversity, and prevention initiatives such as anti-racism and sexualized violence prevention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of young people and sports communities. Technically, the site uses modern web technologies and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a strong legitimacy score.

S

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau)

djk-spandau.de

47

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau) is a German non-profit sports club offering a variety of sports activities such as badminton, boule, gymnastics, Nordic walking, skate biathlon, sports shooting, table tennis, volleyball, and archery. The club targets local community members including children, adults, and people interested in inclusive sports programs. The website reflects a well-structured and accessible platform with clear navigation and content relevant to its audience. It maintains partnerships with reputable sports organizations, enhancing its community presence and trustworthiness. Technically, the website is built on Joomla CMS with modern web technologies including Bootstrap and jQuery. It is hosted on servers associated with kasserver.com and employs HTTPS with a cookie consent mechanism compliant with GDPR. Accessibility features such as screen reader support and contrast modes are implemented, indicating a commitment to inclusive design. Performance is moderate with good mobile optimization. From a security perspective, the site uses HTTPS and cookie consent banners but lacks visible security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate hosting setup. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk assessment is low with recommendations to enhance security headers, add incident response contact information, and maintain regular updates to Joomla and plugins. The website is professional, trustworthy, and compliant with privacy regulations, serving its community effectively.

G

Greystyle.com

greystyle.com

44

Greystyle.com is a small German-based graphic and web design company established since 2002, specializing in clean programming solutions and elegant design. Their market position is niche-focused, serving clients primarily in the cultural and ecclesiastical sectors in Germany. The website showcases a comprehensive portfolio of projects, emphasizing CMS development, corporate design, and print media. Technically, the site uses XHTML, JavaScript libraries including jQuery and Highslide, and Matomo for analytics, but includes some outdated Flash content. Security posture is moderate with privacy policies in place and anonymized analytics, but lacks visible security headers and cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional presentation. Overall, the site is functional and trustworthy but would benefit from modern security and privacy enhancements.

F

FRAMETRAXX UG (haftungsbeschränkt)

frametraxx.de

54

FRAMETRAXX UG operates a specialized e-commerce platform offering royalty-free (gemafreie) music for various applications including YouTube, advertising, film, and commercial use. The company targets content creators, agencies, and businesses seeking legally secure music licensing solutions. Their market position is that of a niche provider with a comprehensive catalog and clear licensing models, supported by a professional website and trusted client logos. Technically, the website is built on the Gambio e-commerce platform with modern JavaScript libraries and Google Tag Manager integration, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

D

Deutsche Atlantische Gesellschaft e.V.

ata-dag.de

38

The Deutsche Atlantische Gesellschaft e.V. is a German non-profit organization dedicated to informing and engaging the public on German and European security policy, NATO objectives, and transatlantic relations. The organization operates through events, seminars, lectures, podcasts, and publications, targeting individuals and entities interested in security and defense topics. Their market position is that of an established, reputable non-profit within the government and policy sector in Germany. Technically, the website is built on WordPress, utilizing common libraries such as jQuery, Bootstrap, and Font Awesome, with SEO optimization via Yoast. Hosting appears to be managed through kasserver.com. The site is moderately performant, mobile-optimized, and includes analytics via Matomo, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, alongside a cookie consent mechanism. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for the organization, with good content quality and business credibility. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust.

C

Cruise Gate Hamburg GmbH

cruisegate-hamburg.de

49

Cruise Gate Hamburg GmbH operates the cruise terminals in Hamburg, managing berth allocations and serving as the central contact for cruise operators. The company also markets Hamburg as a cruise destination internationally. The website is professionally designed, primarily in German, and targets cruise operators, passengers, and tourism stakeholders. Technically, the site uses modern JavaScript libraries such as jQuery and Video.js, with a CMS likely Kirby. It is mobile-optimized and SEO-friendly, though some accessibility features are basic. Security posture is good with HTTPS enforced, but lacks some security headers and explicit security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Contact is mainly via forms, with no direct emails or phone numbers visible. Social media presence is strong, enhancing trust and engagement.

Internet Port Hamburg GmbH (IPHH) is a medium-sized German technology company specializing in datacenter solutions, colocation, managed services, and fiber optic network connectivity exclusively for business customers. Founded in 1996 and operating under the parent company Portus Data Centers Company, IPHH positions itself as a reliable partner offering customized infrastructure and consulting services tailored to enterprise needs. The website reflects a professional and consistent brand image with detailed service descriptions and certifications such as ISO/IEC 27001 and Health Data Hosting (HDS) France, underscoring its commitment to security and compliance. Technically, the website is built on the Contao Open Source CMS platform and leverages modern JavaScript libraries like jQuery, Swipe.js, and Colorbox for enhanced user experience. The site is mobile-optimized with good navigation clarity and moderate performance. However, there is room for improvement in accessibility and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and cookie consent mechanisms suggests areas for enhancement. The WHOIS data for the domain www.iphh.net is unavailable, which raises some concerns about domain registration transparency. Despite this, the website content, certifications, and contact information indicate a legitimate and established business. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, IPHH demonstrates a mature digital presence with a strong focus on security and customer service, though improvements in privacy compliance and domain registration transparency are recommended.

Internet Port Hamburg GmbH (IPHH) is a medium-sized German company founded in 1996, specializing in providing colocation, housing, managed services, and IP/fiber optic connectivity exclusively to business customers. Positioned as a reliable full-service provider, IPHH emphasizes personalized service, technical excellence, and compliance with industry standards such as ISO/IEC 27001 and Health Data Hosting (HDS) certifications. Their business model focuses on B2B enterprise clients requiring secure and customized data center solutions. The website reflects a professional and consistent brand image with clear contact information and detailed service offerings. Technically, the website is built on the Contao Open Source CMS and utilizes modern JavaScript libraries such as jQuery, Swipe.js, and Colorbox for enhanced user experience. The site is mobile-optimized with good navigation clarity and moderate performance. SEO and accessibility are basic but adequate for the target audience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and cookie consent mechanisms are missing. The security posture is bolstered by the company's ISO certifications and clear emphasis on data center security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website and business present a trustworthy and professional image with room for technical and compliance enhancements. Strategically, IPHH should verify and publish domain registration details, implement cookie consent mechanisms, and provide clear incident response contacts to strengthen security culture and regulatory compliance. These steps will improve customer trust and align with best practices in data protection and cybersecurity.

Craftverk Digital's website is currently under construction, displaying only a placeholder message with no substantive content or business details. The site uses WordPress with the Impreza theme and WPBakery page builder, hosted likely by WebSupport based on nameservers. Basic security features such as HTTPS and DNSSEC are enabled, but no privacy, cookie, or terms of service policies are present, nor is there any contact information or forms. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and legitimacy. Overall, the website is in an early stage of development with minimal digital maturity and poor content quality.

C

Centrum pre filantropiu n.o.

darujme.sk

63

DARUJME.sk is a well-established Slovak online fundraising platform operated by Centrum pre filantropiu n.o., founded in 2011. It serves as a donation gateway and fundraising tool provider primarily targeting non-profit organizations and individual donors within Slovakia. The platform offers a comprehensive suite of services including secure payment processing, donor communication, administrative tools, and training resources. It holds a strong market position with over 1,000 registered organizations and nearly 40 million euros donated through its system. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to its audience.

K

Kath. St. Marien - Oberschule Berlin

marienschule-berlin.de

59

Kath. St. Marien - Oberschule Berlin is a Catholic secondary school located in Berlin Neukölln, Germany, offering integrated secondary education and gymnasium programs. The website serves as an information platform for students, parents, and the local community, providing details about school life, events, job offers, and administrative services. The school is sponsored by the Archdiocese of Berlin, which is reflected in the website's branding and partner links. Technically, the site is built on Joomla CMS with modern web technologies including jQuery and Bootstrap, and it incorporates GDPR-compliant cookie consent mechanisms. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and cookie consent implemented, though formal security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

K

Katholische Schule Sankt Franziskus

kssf-berlin.de

58

Katholische Schule Sankt Franziskus is a well-established Catholic educational institution in Berlin offering primary, integrated secondary, and gymnasiale oberstufe education. The website reflects a mature digital presence with comprehensive content, including news, events, and detailed service information for students and parents. The technical infrastructure is based on Joomla CMS with modern web technologies and good mobile optimization. Security posture is solid with HTTPS, GDPR-compliant cookie consent, and no evident vulnerabilities. However, some security headers could be improved. Overall, the site is trustworthy and professionally maintained, supporting the school's long-standing reputation.

K

Katholische Schule Salvator

salvator-grundschule.de

59

Katholische Schule Salvator is a Catholic primary school located in Berlin, Germany, operating under the sponsorship of the Erzbistum Berlin. The website serves as an information portal for parents, students, and the local community, providing news, event updates, and essential school information. The school emphasizes a community-oriented, faith-based educational approach. The website is built on Joomla CMS and incorporates modern web technologies and GDPR-compliant cookie consent mechanisms. It offers clear contact details and regularly updated content, reflecting an active and engaged institution. Security-wise, the site uses HTTPS and cookie consent best practices but lacks explicit security policies or vulnerability disclosures. Overall, the site is trustworthy, professional, and well-maintained, suitable for its educational purpose.

K

Katholische Theresienschule Berlin

theresienschule.de

57

Katholische Theresienschule Berlin is a well-established Catholic educational institution operating under the Archdiocese of Berlin. The website serves as an information hub for students, parents, and the school community, providing news, event updates, and service information. The school emphasizes community engagement and offers a variety of extracurricular activities and workshops. The domain age and content reflect a mature and credible organization with a long history dating back over a century. Technically, the website is built on Joomla CMS with modern web technologies including jQuery and Bootstrap. It features a GDPR-compliant cookie consent mechanism and is served over HTTPS with good security practices. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some security headers and formal security policies are missing. From a security perspective, the site demonstrates a solid baseline with HTTPS enforcement and cookie management. There are no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is a gap that could be addressed to improve trust and preparedness. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is trustworthy, professional, and well-maintained, suitable for its educational purpose. Strategic recommendations include enhancing security transparency, adding incident response information, and implementing additional security headers to further harden the site against potential threats.

K

Katholische Schule Sankt Hildegard

kssh-berlin.de

61

Katholische Schule Sankt Hildegard is a recognized Catholic educational institution in Berlin providing primary and secondary education with a focus on children and youth with specific educational needs. The website serves as an information portal for students, parents, and educators, offering news, events, and service information. The school is supported by the Archdiocese of Berlin and holds a digital education certification (fobizz Schule 2024/25). The site is well-structured, professionally designed, and regularly updated with relevant content.

K

Katholische Studierende Jugend

ksjberlin.de

45

KSJ Berlin is a non-profit youth organization focused on engaging students and young people in Berlin through volunteer activities, school participation, and societal involvement. The organization operates as part of the Catholic youth umbrella (BDKJ) but is inclusive of all beliefs. Their website provides information about membership, events, and community platforms such as a Discord server. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Fonts, and is hosted with domain control services. It is mobile optimized and includes SEO best practices. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of youth in Berlin.

okaJ is a small non-profit youth organization based in Berlin, Germany, focused on providing an open, catholic, and active community for young people. The organization supports youth groups within the church, offers networking opportunities, spiritual programs, and volunteer engagement. The website reflects a professional and consistent brand image targeting youth and youth groups in the Berlin area. Technically, the site is built on WordPress with common plugins and uses Google reCAPTCHA for form security. While the site is well designed and user-friendly, it lacks privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the domain and website appear legitimate and trustworthy for their stated purpose.

D

DJK Landesgemeinschaft Berlin e.V.

djk-berlin.de

58

DJK Landesgemeinschaft Berlin e.V. is a regional Catholic sports association in Berlin, Germany, serving approximately 500,000 members across more than 1,000 clubs nationally. The organization focuses on promoting sports activities, events, and community engagement within the Catholic sports community. Their website provides comprehensive information about the association, news, events, and member clubs, targeting members and interested parties in the sports and religious community. Technically, the website is built on AmphiCMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, featuring responsive design and moderate performance. Security posture is solid with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its non-profit mission effectively.

L

Lobbe

lobbe.app

56

Lobbe operates a German-language website providing digital tools and services for waste management, including a personalized waste collection calendar, container ordering, and recycling location information. The company targets residents in German municipalities where it operates, positioning itself as a regional service provider with a medium-sized business profile. The website is built on WordPress with modern plugins and demonstrates good content quality, accessibility, and SEO optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response details could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the site is professional, trustworthy, and serves its intended audience effectively.

L

Lobbe Containerdienst

containerdienst-lobbe.de

51

Lobbe Containerdienst is a German company specializing in container rental services for various waste types including construction debris and garden waste. The company offers an online platform for customers to order containers easily. The website is built on WordPress using Elementor and incorporates SEO best practices with Yoast SEO and structured data. The technical infrastructure is modern and supports good mobile optimization and accessibility. Security posture is adequate with HTTPS enabled and some privacy measures in place, but lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the site is professional and trustworthy with room for improvement in privacy and security transparency.