Security Directory

F

filmfriend

filmfriend.ch

58

filmfriend.ch is a Swiss-based streaming platform offering feature films, documentaries, and kids movies accessible via library cards. The service targets a general audience including families, providing ad-free content on multiple devices. Technically, the website is built on Angular 18.2.8 and uses CDN hosting for content delivery, ensuring moderate performance and good mobile optimization. Security posture is strong with HTTPS and secure forms, but lacks explicit privacy and cookie policies. No contact or incident response information is provided, which could impact user trust and compliance. Overall, the platform is professional and trustworthy with room for improvement in privacy compliance and transparency.

D

divibib GmbH

onleihe.com

10

divibib GmbH operates a professional digital platform focused on simplifying library lending services, notably through its Onleihe solution which supports e-books, e-audio, e-paper, and e-learning for libraries. The company positions itself as a leading provider in the digital library lending market in Germany, targeting libraries and their users with a suite of apps and services. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting trust and user engagement. Technically, the website employs modern web technologies including Matomo analytics for privacy-conscious tracking, Font Awesome for icons, and a CMS platform (PIM.RED) for content management. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security-wise, HTTPS is enforced and cookie consent is implemented, but the site lacks visible security headers and published security policies, which are recommended for enhanced protection. Overall, the security posture is solid but could be strengthened by adding explicit security policies, incident response contacts, and improved header configurations. The absence of privacy and terms of service pages is a compliance gap that should be addressed. The domain registration data aligns well with the website content, indicating legitimacy and trustworthiness. No adult or questionable content is present, making the site safe for general audiences.

Q

Qbet

qbets.de

54

Qbet is a German-focused online gambling platform offering casino games, live casino, and sports betting services. The website promotes a unique real-time cashback system without wagering requirements, targeting adult users interested in online gambling in Germany. The platform features a professional design with consistent branding and a good user experience, optimized for mobile devices. Technically, the site uses modern web technologies, including Cloudflare DNS and CDN services, custom fonts, and structured data for SEO. Security posture is moderate, with HTTPS implied and Cloudflare protection, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is supported by professional content and consistent domain usage, though contact information is missing. Overall, the site is functional and trustworthy for its niche but requires improvements in privacy and security transparency.

U

Uno Digital Media B.V.

portimaomotorsports.pt

10

The website portimaomotorsports.pt serves as a localized portal for the BetOnRed online casino brand targeting Portuguese players. Operated by Uno Digital Media B.V., the platform offers a comprehensive range of gambling services including casino games, live dealer experiences, and sports betting. The business is licensed under Curaçao eGaming, ensuring regulatory compliance for international operations. The site features a professional design, clear navigation, and extensive content covering bonuses, games, and responsible gaming policies. Technically, the site employs modern web standards with optimized mobile responsiveness and fast loading times. Security posture is solid with HTTPS enforced, though some security headers are missing and cookie consent mechanisms are not explicitly implemented. Contact information is primarily via email support, with no phone numbers provided. Overall, the platform presents a trustworthy and professional gambling service for the Portuguese market.

U

Uno Digital Media B.V.

cprating.pt

49

Nine Casino Portugal is an online gambling platform targeting Portuguese players, offering a wide range of casino games and sports betting options. Founded in 2020 by Uno Digital Media B.V., it operates under a Curaçao eGaming license, providing a trustworthy but not Portugal-licensed service. The platform features over 5000 casino games, including slots, table games, and live dealer options, alongside sports and e-sports betting. It supports multiple payment methods including traditional and cryptocurrency options. The website is well-designed, mobile-optimized, and provides detailed information about bonuses, games, and payment processes. However, it lacks explicit privacy and cookie consent mechanisms and does not provide phone support, relying on email and live chat for customer service.

A

Araxio Development N.V.

gransino-casino.de

60

Gransino Casino is a newly established online gambling platform founded in 2024, targeting primarily the German market. Operated by Araxio Development N.V. and licensed in Curaçao, it offers a broad range of casino games including slots, live dealer games, and sports betting. The platform emphasizes attractive bonuses, secure payment methods, and a user-friendly mobile experience. Its market position is that of an emerging competitor with a focus on quality gaming and customer engagement through social media and positive user reviews. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and leverages Cloudflare for DNS and CDN services, enhancing security and performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could benefit from additional security headers and a visible cookie consent mechanism to improve privacy compliance. Overall, the security maturity is moderate with no critical vulnerabilities detected. The site maintains GDPR compliance through its privacy policy and offers multiple contact channels, though direct phone support is absent. The domain registration aligns with the business timeline and ownership claims, supporting legitimacy. Strategic improvements in security headers and privacy transparency would enhance trust and compliance. The risk profile is moderate, typical for online gambling platforms, with recommendations focusing on strengthening security policies, enhancing privacy mechanisms, and maintaining transparent communication with users to foster trust and regulatory adherence.

T

Techore Holding B. V.

magari-ristorante.pt

49

Fairspin Casino, operated by Techore Holding B.V., is an established online gambling platform launched in 2018, licensed in Curacao. It leverages blockchain technology to provide transparency and fairness in gaming, offering a wide range of casino games and sports betting options primarily targeting Portuguese-speaking players. The website is professionally designed with good content quality and mobile optimization, providing a user-friendly experience. Technically, it uses modern web standards and lazy loading for performance, though no major frameworks or CMS were detected. Security posture is solid with HTTPS and secure forms, but lacks some advanced security headers and published incident response policies. Contact information is comprehensive, including email, phone, and social media channels, enhancing business credibility. Overall, the site is trustworthy and well-positioned in the online gambling market, though improvements in privacy compliance and security transparency are recommended.

N

Nationale Dekade gegen Krebs

dekade-gegen-krebs.de

60

The website 'Die Nationale Dekade gegen Krebs' is a German government-backed initiative led by the Bundesministerium für Bildung und Forschung (BMBF) to advance cancer research and support affected individuals. It serves as a comprehensive platform providing information on research projects, patient involvement, partner organizations, and relevant events. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it uses the Government Site Builder CMS, modern JavaScript libraries like Slick Slider and MediaElement.js, and is hosted by ITZBund, ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism that complies with GDPR, although some security headers could be improved. The site uses Matomo analytics with anonymized data collection and explicit user consent, reflecting good privacy practices. No contact emails or phone numbers are explicitly listed, and no terms of service page is found. Overall, the website is trustworthy, secure, and well-aligned with its mission as a national cancer research initiative.

The Literarisches Zentrum Göttingen is a regional non-profit cultural institution dedicated to promoting literature and literary events in Göttingen, Germany. It offers a variety of programs including evening readings, youth programs, workshops, and special projects supported by public and private sponsors. The website reflects a well-established cultural center with a clear focus on community engagement and literary education. Technically, the site is built on a Django-based platform with standard web technologies such as HTML5, CSS3, and jQuery. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security measures include CSRF protection on forms, but lack visible security headers and cookie consent mechanisms. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture.

L

LFK – Die Medienanstalt für Baden-Württemberg

lfk.de

58

LFK – Die Medienanstalt für Baden-Württemberg is a regional media regulatory authority focused on ensuring diversity and compliance in private broadcasting and internet offerings within Baden-Württemberg. The organization also promotes media competence, youth protection, media quality, and media pedagogy through research and educational initiatives. The website reflects a professional and comprehensive digital presence, built on TYPO3 CMS, with a clear structure and good accessibility. It uses privacy-conscious analytics (Matomo) and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS and secure script loading, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain registration and hosting align with the institutional nature of the entity, supporting high legitimacy and trust.

D

DZ BANK AG

dzbank.de

64

DZ BANK AG is a major German cooperative central bank serving over 700 cooperative banks in Germany. It offers a broad range of financial services including corporate banking, institutional client services, capital markets, and sustainability consulting. The website is professionally designed, well-structured, and targets financial institutions and corporate clients. Technically, the site uses Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Matomo and Google Tag Manager for analytics with user consent management via Usercentrics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust with clear cookie and privacy policies. Overall, the domain and website present a trustworthy and professional digital presence for DZ BANK AG.

E

easyCredit

easycredit.de

66

easyCredit is a German financial services provider specializing in instant credit and loan products, serving over one million customers. The website is professionally designed using WordPress and optimized with Yoast SEO, targeting German-speaking consumers seeking simple and fast financing solutions. The technical infrastructure is standard with modern web technologies, but lacks visible advanced security headers and explicit privacy or cookie policies in the provided content. Security posture is moderate with room for improvement in policy transparency and incident response readiness. Overall, the website is trustworthy and well-positioned in the finance sector but should enhance privacy compliance and security practices to meet higher standards.

U

Union Investment Service Bank AG

fondssparen-mit-plan.de

53

The website fondssparen-mit-plan.de is associated with Union Investment Service Bank AG, a reputable financial institution in Germany specializing in investment products such as Fondssparpläne (fund savings plans). The site currently serves a 404 error page, indicating the requested content is not available. The business focus is on long-term wealth accumulation through personalized investment strategies. The branding is consistent with Union Investment, but the content is minimal and lacks essential pages such as privacy policy, cookie policy, terms of service, and contact information. From a technical perspective, the site uses Cloudflare DNS services and standard web technologies including CSS, JavaScript, and SVG graphics. However, there is no evidence of advanced frameworks or CMS usage. The site shows basic mobile optimization and accessibility but poor SEO due to the 404 status and meta robots directives preventing indexing. Security posture is limited based on the provided data. No explicit security headers or HTTPS details were found, and no incident response or security policies are disclosed. The absence of privacy and cookie policies indicates non-compliance with GDPR best practices. No forms or data collection mechanisms are present on the analyzed page, reducing immediate data protection risks but also limiting user engagement. Overall, the website appears legitimate and aligned with a known financial entity but is currently non-functional for end users due to the 404 error. Strategic improvements should focus on restoring content, implementing privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.

The website comune-info.net currently serves a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered since 2012 with Server Plan Srl, suggesting a stable registration history, but the actual website content is minimal and outdated, referencing legacy CMS versions such as Joomla 1.5 and WordPress 2.5. There is no visible business information, contact details, or privacy and cookie policies, which limits the ability to assess the business operations or compliance posture. The technical infrastructure appears basic with no modern security headers or DNSSEC enabled, and the site relies on a security service from bitninja.io for protection.

The website liberopensiero.eu is currently inaccessible beyond a security challenge page that performs a browser integrity check and automatic redirect. The visible content is minimal, showing a loading spinner and a message indicating a redirect in 4 seconds. The site appears to be running outdated CMS versions (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities. No privacy, cookie, or terms of service policies are present, nor is there any contact or business information visible. The only external link is to bitninja.io, a security service provider, indicating some level of security protection is in place. Overall, the site lacks professional content and trust indicators, and the security posture is weak due to outdated software and missing compliance elements.

Y

Young European Greens

fyeg.org

63

Young European Greens is a European non-profit youth political organization focused on green and progressive activism. The organization operates a well-structured website hosted on Squarespace, providing information about its campaigns, events, and member organizations. The technical infrastructure is modern and leverages standard web technologies and third-party services such as Google Tag Manager and social media integrations. Security posture is solid with HTTPS and HSTS enabled, though DNSSEC is not implemented. Privacy compliance is weak due to the absence of explicit privacy and cookie policies or consent mechanisms. No contact emails or phone numbers are explicitly provided on the site, which may impact user trust and compliance. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

The website giovanieuropeistiverdi.org currently serves a robot challenge screen that blocks direct access to its content. This challenge uses a JavaScript-based proof-of-work captcha mechanism, indicating the presence of a Web Application Firewall (WAF) or similar security control. Due to this blocking, no business-related content, contact information, or policies are accessible, limiting the ability to assess the company's operations or services. The domain is registered with Tucows Domains Inc. since 2019 and appears legitimate from a registration standpoint, but the lack of accessible content reduces trust and transparency. Technically, the site employs advanced client-side JavaScript for bot mitigation but lacks visible security headers or privacy compliance mechanisms. Hosting is via SiteGround name servers, and external resources are loaded from a CloudFront CDN. The site shows basic mobile optimization but poor SEO and accessibility features. No analytics or advertising scripts are detected. Security posture is moderate due to the presence of a bot challenge but lacks standard security headers and DNSSEC. Privacy compliance is absent, with no privacy or cookie policies found. Business credibility is low due to missing contact and company information. Overall, the site is inaccessible for meaningful analysis, and the AI score is capped low due to blocking. Strategic recommendations include enabling DNSSEC, adding security headers, publishing privacy and cookie policies, and providing transparent contact information to improve trust and compliance.

Associazione Pensare Insieme operates as a non-profit think tank and cultural association based in Italy, focusing on political, social, economic, and cultural discourse. The organization publishes articles, organizes events, and distributes newsletters to engage a general audience interested in these topics. The website is professionally designed using WordPress, with good SEO and mobile optimization, reflecting a moderate level of digital maturity. Security measures include HTTPS enforcement, security headers, and a cookie consent mechanism, though explicit security policies and incident response contacts are absent. Overall, the site presents a trustworthy and professional image with room for enhancement in security transparency and accessibility.

M

My Live Chat

mylivechat.com

51

My Live Chat is a well-established provider of live chat software solutions, offering both free and premium services to businesses aiming to enhance customer engagement and support. The company has a strong market presence with over 746,000 accounts and notable clients including Sony, Intel, and Microsoft. Their product suite includes live chat, proactive chat, visitor monitoring, mobile chat apps, and extensive customization options, positioning them as a competitive SaaS provider in the customer communication technology sector. Technically, the website is built on a modern ASP.NET framework with integration of JavaScript libraries, Bootstrap icons, and Google Fonts, hosted on Amazon AWS infrastructure. The site demonstrates excellent mobile optimization, fast performance, and good SEO practices. However, some security best practices such as explicit security headers and published security policies are missing. From a security perspective, the site uses HTTPS with strong SSL encryption and asynchronous script loading to minimize performance impact. There are no visible vulnerabilities or exposed sensitive data. However, the absence of a cookie consent mechanism, security policy, and incident response information indicates room for improvement in compliance and transparency. Overall, the website is professional, trustworthy, and technically sound, with a high legitimacy score based on domain age and WHOIS data. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and implementing additional security headers to strengthen the security posture.

The website embertone.com is currently inaccessible due to a security challenge page implementing a client-side proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to the site content. As a result, no meaningful business, contact, or policy information is available from the page. The domain is registered since 2011 with GoDaddy.com, LLC and uses SiteGround nameservers, suggesting a legitimate registration and hosting setup. However, the lack of visible content and policies limits the ability to assess the company's business model or compliance posture. Technically, the site uses JavaScript with Web Workers for the CAPTCHA challenge and assets served via Cloudfront CDN. Security best practices such as DNSSEC and security headers are not enabled or visible. Overall, the site scores low on content quality, privacy compliance, and business credibility due to the blocking mechanism and lack of accessible information.

V

Verband Region Rhein-Neckar

vrrn.de

59

The Verband Region Rhein-Neckar is a public law corporation based in Mannheim, Germany, responsible for cross-border regional planning and development in the tri-state area of Baden-Württemberg, Hessen, and Rheinland-Pfalz. Established in 2006, it serves as a key regional planning authority coordinating transportation, energy, and regional development projects. The organization maintains a strong market position as a government entity with a medium-sized operational structure and multiple related institutions. The website reflects a professional and comprehensive digital presence with clear content and user-friendly navigation targeting residents, planners, and stakeholders in the region. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrates privacy-respecting Matomo analytics, and includes accessibility features such as the Eye-Able widget. Hosting is provided by Hetzner Online GmbH, a reputable provider. The site is mobile-optimized and SEO-friendly, though no explicit CMS or frameworks were detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a clientTransferProhibited domain status, indicating domain transfer protection. However, DNSSEC is not enabled, and no HTTP security headers were detected in the provided data. There is no published security policy or incident response contact, which could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its public service role. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing HTTP security headers to strengthen the security posture further.

G

Gesundheitsregion Metropolregion Rhein-Neckar

mrn-gesundheit.de

55

Gesundheitsregion Metropolregion Rhein-Neckar is a cooperative regional health initiative focused on promoting health, prevention, and healthcare services within the Rhein-Neckar metropolitan area. The organization collaborates with over 80 experts and various partners to foster sustainable and innovative health solutions. The website reflects a strong regional presence with professional content and clear communication aimed at residents, healthcare professionals, and organizations in the region. Technically, the site uses modern web technologies including Matomo for privacy-respecting analytics and is built on the Kirby CMS platform. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie information, though no explicit consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness, supporting its role as a regional health network.

LinkedIn is a leading global professional networking platform owned by Microsoft, serving over a billion members worldwide. The website de.linkedin.com targets German-speaking users, offering services such as professional networking, job search, e-learning, and recruiting solutions. The platform is positioned as a market leader in the technology sector with a strong enterprise presence. Technically, the site employs modern web technologies including JavaScript frameworks and Google Identity Services for authentication, ensuring a fast, mobile-optimized, and accessible user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and public security policies could be enhanced. Privacy compliance is robust with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, the site demonstrates high professionalism, trustworthiness, and content quality, making it a reliable platform for professional users.

D

Diözese Innsbruck

dibk.at

48

The website www.dibk.at serves as the official online portal for the Diocese of Innsbruck, a regional religious authority in Austria. It provides comprehensive information about the Catholic Church's activities, faith-related events, educational resources, and community services targeted primarily at members of the Catholic community in Tirol and interested visitors. The site is well-branded, consistent, and offers a good user experience with clear navigation and mobile optimization. Technically, it is built on the Ibexa CMS platform, utilizing JavaScript and jQuery libraries, and employs HTTPS for secure communications. Security best practices are partially implemented, though some security headers are missing and no explicit security policy or incident response contacts are published. The site does not display advertising or tracking scripts, indicating a privacy-conscious approach. WHOIS data confirms the domain's legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and suitable for its intended audience.

L

Lidl Schweiz

lidl.ch

78

Lidl Schweiz operates as a major retail supermarket chain in Switzerland, offering a wide range of grocery products and weekly promotions. The website www.lidl.ch serves as an information portal for customers, providing access to current offers and company information. The business is part of the Schwarz Gruppe, a large international retail group, and holds a strong market position in the Swiss retail sector. The site targets general consumers seeking affordable supermarket products. Technically, the website employs modern JavaScript frameworks, integrates third-party services such as YouTube and Kameleoon for marketing and analytics, and uses OneTrust for cookie consent management. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the website enforces HTTPS, uses standard security headers, and manages user consent for tracking scripts, reflecting a mature security posture. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Overall, the site is professional, trustworthy, and compliant with GDPR, with minimal security or privacy concerns detected.

C

C&A

c-and-a.com

71

C&A is a well-established European fashion retailer offering affordable clothing for men, women, children, and babies. The company operates a comprehensive e-commerce platform with a broad product range including seasonal collections, plus sizes, and special bargains. The website is professionally designed with clear navigation and targets a general audience seeking quality fashion at fair prices. Technically, the site uses modern web technologies such as React and Cloudinary for image hosting, and implements cookie consent via OneTrust. Security posture is strong with HTTPS enforced and standard security headers present, though no public vulnerability disclosure or security.txt file is found. The WHOIS data is unavailable, which slightly reduces domain trust but the overall business credibility remains high based on website content and contact information.

The website www.eversportscorporate.com is currently inaccessible beyond a robot challenge screen that implements a JavaScript proof-of-work captcha. This indicates the presence of a Web Application Firewall (WAF) or security mechanism blocking direct access to the site content. No business information, contact details, or policies are available on the page, and the WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered or privacy-protected to an extreme degree. The technical infrastructure relies on JavaScript and AWS Cloudfront CDN for serving challenge assets, but no CMS or business platform is detectable. Security posture is weak due to lack of visible HTTPS confirmation, security headers, or compliance documentation. Overall, the site is not currently usable for business or customer engagement, and trustworthiness is low.

H

Helium Development

customerfields.com

65

Customer Fields is a specialized SaaS provider offering Shopify store owners tools to collect, manage, and approve customer data through custom registration forms and customer profiles. The company operates under Helium Development, with a focus on enhancing Shopify customer account capabilities. The website demonstrates a professional and consistent brand presence with clear business offerings targeted at e-commerce merchants and developers. Technically, the site uses modern JavaScript frameworks and integrates analytics and customer engagement tools such as Google Analytics, Hotjar, and Intercom, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and domain protections in place, though improvements could be made by enabling DNSSEC and adding security headers. Privacy and cookie policies are present but hosted on the parent company site, with no direct contact information or incident response details visible on the main site. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

M

MDR (Mitteldeutscher Rundfunk)

mdrjump.de

62

MDR JUMP is a digital entertainment brand operated by Mitteldeutscher Rundfunk (MDR), a major public broadcaster in Germany. The website serves as a hub for radio streaming, podcasts, video content, event information, and traffic updates primarily targeting audiences in Eastern Germany and Mitteldeutschland. The platform is well-branded, professionally designed, and integrates social media and Alexa skill support to enhance user engagement. The content is diverse, catering to a broad general audience with a focus on entertainment and community.

S

Süddeutsche.de GmbH

sueddeutsche.de

63

Süddeutsche.de GmbH operates a leading German news website providing current news, commentary, and background reports. The site targets a broad audience interested in national and international news, leveraging a digital subscription and advertising business model. The company maintains a strong market position in the German media landscape with a professional and consistent brand presence. Technically, the website employs a modern tech stack including subscription management via Piano, Google Tag Manager, Datadog logging, and advanced advertising technologies. The site is mobile optimized and uses consent management platforms to comply with GDPR requirements. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly published. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, though improvements in transparency around security and contact information could enhance user trust.

E

EVIE – Engagement, Vielfalt und Integration im Ehrenamt

phronesis-bildung.de

58

The website 'EVIE – Engagement, Vielfalt und Integration im Ehrenamt' is a German non-profit focused on promoting volunteer engagement, diversity, and integration within community and neighborhood projects. It offers educational training programs such as 'Fortbildung für Vereinsmitglieder', 'Train the Trainer', and 'Nachbarschafts-Coach'. The site is built on the Squarespace platform, leveraging modern web technologies and hosting infrastructure, providing a moderate performance and good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, which impacts compliance. Contact information is not clearly provided, limiting direct communication channels. Overall, the site is professional and trustworthy within its niche but could improve privacy compliance and user contact accessibility.

B

Biosphären-VHS St. Ingbert

vhs-igb.de

43

Biosphären-VHS St. Ingbert is a municipal adult education provider offering a wide range of courses and cultural events to the citizens of St. Ingbert, Germany. The website reflects a well-structured and content-rich platform targeting community education, integration, health, languages, and digital literacy. The institution holds a solid local market position as a trusted public education entity. Technically, the site uses a proprietary CMS (CMX) with modern web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in cookie consent and security policy transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks some advanced privacy and security disclosures.

B

Bichinger Software & Consulting

jobboersencheck.de

62

Jobboersencheck.de is a German-language online platform specializing in the comparison and evaluation of job boards. It provides independent employer and applicant reviews, enabling users to make informed decisions about where to post or search for jobs. The platform is developed by Bichinger Software & Consulting and features a modern, user-friendly interface with a focus on job market transparency in German-speaking regions. Technically, the site employs React components, Cookiebot for GDPR-compliant cookie management, and Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible advanced security headers and explicit security policies, indicating room for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with a moderate risk profile primarily due to missing explicit privacy and security documentation.

S

Studierendenwerk Kaiserslautern

studierendenwerk-kaiserslautern.de

48

Studierendenwerk Kaiserslautern operates as a regional non-profit organization providing essential student services including housing, dining, childcare, and counseling for approximately 20,000 students across multiple campuses in Germany. The website reflects a well-structured and professional digital presence, leveraging TYPO3 CMS and modern cookie consent management via Usercentrics, ensuring compliance with GDPR regulations. The content is relevant and targeted to the student community, with clear navigation and multilingual support (German and English). Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website demonstrates a mature digital infrastructure suitable for its institutional role.

C

Chamaeleon AG

chamaeleon.de

65

Chamaeleon AG is a German-based technology company specializing in advanced content management systems (CMS) and digital solutions for enterprises and public administration. Their flagship product, the ionas CMS, offers WYSIWYG editing optimized for web and mobile platforms. The company positions itself as 'Die Webarchitekten' (The Web Architects), emphasizing tailored digital architecture and support services. The website reflects a medium-sized business with a clear focus on B2B clients in both private and governmental sectors. Technically, the website is built on a modern CMS platform (ionas4) with JavaScript frameworks and uses SystemJS for module loading. Hosting appears to be provided by Deutsche Telekom, inferred from the nameservers. The site is mobile-optimized and includes SEO best practices such as meta tags and canonical URLs. Performance is moderate with no major technical issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, explicit security headers (e.g., CSP, HSTS) are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The absence of direct contact emails or phone numbers suggests a preference for contact via web forms. Overall, the website demonstrates a professional and trustworthy digital presence with good privacy compliance and a solid technical foundation. Strategic improvements could include publishing formal security policies, adding security headers, and providing direct contact information for incident response. These enhancements would strengthen the security posture and business credibility further.

A

AD4NET s.r.o.

ad4net.eu

65

AD4NET s.r.o. is a small media services company specializing in digital advertising product optimization primarily serving the DACH region. Their website presents a professional image with clear descriptions of their services including job advertisements, media design, and typesetting. The company positions itself as a leading provider in its niche with a focus on quality and flexible resources. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and includes a cookie consent mechanism compliant with GDPR. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. The absence of public WHOIS data is due to EURid privacy policies, which is common and justified for this business type. Overall, the website is trustworthy and well-maintained.

The FAIR GmbH operates an international accelerator research center in Darmstadt, Germany, focusing on antiproton and ion research to explore fundamental physics. The website serves a diverse audience including researchers, students, partners, and the public, providing scientific information, career opportunities, and news updates. The organization holds a strong market position as a major European research initiative with international collaborations. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics, and implements GDPR-compliant privacy and cookie policies with consent mechanisms. The site is well-structured, mobile-optimized, and professionally designed, supporting good user experience and trust. Security posture is adequate with HTTPS and privacy controls, but lacks some advanced security headers and explicit incident response information. Overall, the website is trustworthy, safe, and aligned with its scientific mission.

H

Helmholtz-Institut Mainz

hi-mainz.de

56

The Helmholtz-Institut Mainz website represents a reputable scientific research institute specializing in physics and chemistry of superheavy elements and related fields. The site is professionally designed using TYPO3 CMS and integrates cookie consent management via Cookiebot, reflecting a mature digital presence. The content is targeted primarily at the scientific community, academics, and students, with clear navigation and multilingual support. Technically, the site employs modern web standards with HTTPS enforced, though lacks some advanced security headers. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and accessible platform. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, the absence of explicit contact emails, phone numbers, and security policies suggests areas for improvement in transparency and incident response readiness. Overall, the website demonstrates a solid security posture and business credibility consistent with a medium-sized research institution in Germany.

A

ALEX Berlin

alex-berlin.de

64

ALEX Berlin operates the digital media platform 'ALEX Kosmos', providing livestreams of TV and radio, podcasts, videos, and community-driven content primarily targeting the Berlin region. The platform positions itself as a creative and participatory media hub for an urban audience, offering crossmedia content accessible 24/7. The business model revolves around media streaming and community engagement, supported by a modern web infrastructure and compliance with European data protection laws. Technically, the website leverages modern JavaScript frameworks, a consent management platform for GDPR compliance, and is hosted on a reputable provider with HTTPS enforced, ensuring secure user interactions. The site demonstrates good mobile optimization and accessibility features, though some advanced security headers could be improved. Security posture is strong with no visible vulnerabilities or exposed sensitive data, but lacks explicit published security policies or incident response contacts. Overall, the platform is trustworthy, professionally designed, and compliant with privacy regulations, making it a reliable media service for its audience.

The Ökumenisches Heiligenlexikon is a well-established German-language informational website dedicated to providing comprehensive biographies, historical data, and religious context about saints from various Christian denominations. Founded in 1988 and online since 1998, it holds a strong market position as the most visited German site on this topic. The site offers rich content including calendars, patron saints, glossaries, and multimedia resources, targeting a general audience interested in religious and historical education. Technically, the website employs a custom-built infrastructure using standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and jQuery. It integrates Google Analytics and Adsense for tracking and monetization. The hosting appears to be with 1&1 IONOS, providing moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy policies are comprehensive and clearly presented, supporting GDPR compliance. Contact information is limited to email addresses, with no phone or physical address provided. Overall, the website demonstrates a solid security posture and high content quality, with no signs of blocking or WAF interference. It is safe for general audiences with no adult or NSFW content. Strategic recommendations include enhancing security headers, adding incident response contacts, and improving accessibility to further strengthen trust and compliance.

Die Nacht der 1000 Lichter is a well-established non-profit religious event organized primarily by the Katholische Jugend der Diözese Innsbruck and other Austrian dioceses. The website serves as an informational and engagement platform for a liturgical event held annually on October 31st, attracting tens of thousands of visitors across Austria and South Tyrol. It provides event details, multimedia content, and contact information for organizers across multiple dioceses. The target audience includes youth groups, church communities, and the general public interested in religious and cultural events. The business model is community and event-driven without commercial intent, focusing on spiritual and social engagement.

J

Javni štipendijski, razvojni, invalidski in preživninski sklad Republike Slovenije

sklad-kadri.si

54

The website www.srips-rs.si represents the official online presence of the Javni štipendijski, razvojni, invalidski in preživninski sklad Republike Slovenije, a Slovenian government institution dedicated to scholarships, workforce development, social rights, and child maintenance compensation. It serves a broad audience including students, workers, employers, and educational institutions. The site provides comprehensive information on various scholarship programs, development initiatives, worker rights, and support for disabled persons. Technically, the website is built using modern web standards and likely runs on OctoberCMS, hosted by a Slovenian registrar. It employs HTTPS and cookie consent mechanisms, with Google Tag Manager used for analytics, respecting user consent. Security posture is solid but could be improved by adding explicit security headers and publishing security policies. The domain registration data is consistent with the institution's profile, indicating legitimacy. Overall, the website is professional, trustworthy, and well-structured, though it lacks explicit privacy and terms of service pages.

D

Doctolib Srl

doctolib.it

65

Doctolib Srl operates a leading online healthcare appointment booking platform in Italy, enabling patients to find specialists and book visits easily. The company is part of the larger Doctolib group with operations in France and Germany, positioning itself as a key player in European digital healthcare services. The website is professionally designed, mobile-optimized, and rich in relevant content, targeting patients and healthcare professionals. Technically, the site leverages modern JavaScript frameworks, robust monitoring tools, and consent management solutions, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, modern security headers, and privacy compliance aligned with GDPR. No critical vulnerabilities or blocking mechanisms were detected, indicating a trustworthy and reliable platform. Overall, Doctolib presents a secure, compliant, and user-friendly service with clear business legitimacy and strong market presence.

E

Esselunga S.p.A.

esselunga.it

70

Esselunga S.p.A. is a well-established Italian supermarket chain founded in 1957, offering a wide range of retail services including physical supermarkets, online grocery shopping, loyalty programs, and specialized subsidiaries such as parafarmacia and enoteca. The website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to general consumers in Italy. Technically, the site uses modern web technologies and Adobe Experience Manager CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is basic with no explicit privacy or cookie policies detected in the provided content. Overall, the site is trustworthy and professionally managed, with strong business credibility and a comprehensive service offering.

The website circulareconomynetwork.it is currently inaccessible due to a security challenge page implementing a JavaScript-based proof-of-work captcha. This indicates the presence of a Web Application Firewall or similar security mechanism blocking direct access to the site's content. As a result, no business-related content, contact information, or policy documents are available for analysis. The domain is registered since 2018 with a valid status and no DNSSEC enabled. The page loads external resources from Amazon CloudFront CDN and uses custom JavaScript for the captcha challenge. Due to the blocking mechanism, the website's technical maturity, security posture, and privacy compliance cannot be fully assessed, resulting in a low overall AI score.

The CISPA Helmholtz Center for Information Security is a prominent German national research institution specializing in cybersecurity, privacy, and trustworthy artificial intelligence. It operates as a Big Science institution within the Helmholtz Association and collaborates with academic and industry partners, including the Technical University of Munich. The website presents a professional and content-rich platform highlighting research achievements, faculty insights, and technology transfer initiatives, positioning CISPA as a leading global research center in its domain. Technically, the website employs modern web technologies such as JavaScript and CSS with responsive design and good accessibility features. However, there is limited evidence of advanced security configurations such as security headers or explicit SSL/TLS details in the provided data. The absence of visible privacy, cookie, and terms of service policies indicates areas for compliance improvement, especially concerning GDPR requirements. From a security posture perspective, while the site is accessible and professional, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data is minimal but does not raise significant legitimacy concerns given the institutional context. Overall, the site demonstrates a strong business credibility and content quality but requires enhancements in privacy compliance and security transparency. Strategically, CISPA should prioritize publishing comprehensive privacy and cookie policies, implementing cookie consent mechanisms, and enhancing security headers and incident response information to strengthen trust and compliance. These improvements will support its reputation as a leading cybersecurity research institution and ensure alignment with regulatory standards.

H

Helmholtz-Zentrum für Infektionsforschung (HZI)

helmholtz-hzi.de

60

The Helmholtz-Zentrum für Infektionsforschung (HZI) is a prominent German research institution specializing in infection biology and related scientific fields. Affiliated with the Helmholtz Association, it operates multiple locations across Germany and focuses on understanding infectious diseases and their defense mechanisms. The website serves as a comprehensive portal for scientific publications, career opportunities, public events, and knowledge transfer initiatives, targeting researchers, students, and healthcare professionals. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as Masonry and Leaflet for layout and mapping functionalities. It employs Matomo for analytics, indicating a privacy-conscious approach. The site is well-optimized for mobile devices, accessible, and SEO-friendly, with structured data and Open Graph metadata enhancing discoverability. From a security perspective, the site enforces HTTPS and uses secure forms but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no visible privacy or cookie policies or consent mechanisms, which could be improved to meet GDPR standards fully. Overall, the website reflects a high level of professionalism, trustworthiness, and technical maturity, suitable for a large research institution. Strategic improvements in privacy disclosures and security transparency would further enhance its compliance and user trust.

18Months is a small Italian technology company specializing in designing and developing cloud-based applications with a strong focus on user experience and innovation. Their flagship product, 18tickets, is a cloud ticketing application offered on a pay-per-use basis. The company positions itself as an innovative niche player in the Italian cloud application market, targeting businesses and users interested in modern cloud solutions. The website is bilingual (Italian and English) and presents a professional image with clear navigation and consistent branding. From a technical perspective, the website uses modern web technologies including JavaScript, Typekit fonts, Google Maps API, and Font Awesome icons. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. There is no detected CMS or hosting provider information. SEO optimization is basic with standard meta tags but no advanced structured data or Open Graph tags. Security posture is moderate; HTTPS is used as indicated by URLs, and a partnership with Secure Network is mentioned, suggesting some level of security awareness. However, no security headers are detected in the HTML content, and no explicit privacy or cookie policies are present, indicating compliance gaps. No incident response or vulnerability disclosure information is provided. No analytics or tracking services are detected, implying minimal user tracking. Overall, the website is safe with no adult or questionable content. The lack of privacy and cookie policies and limited security headers reduce the compliance and security scores. Contact information is limited to a contact form on a separate page, with no direct emails or phone numbers found. The site is trustworthy but could improve transparency and security practices.

18Tickets is an Italian cloud-based ticketing platform specializing in cinema and theater venues, offering an integrated pay-per-use service that combines eTicketing, cash register, bar, and e-commerce management. The platform emphasizes social engagement through integration with social networks, particularly Facebook, enhancing the user experience for both venue owners and customers. The business is positioned as an innovative solution targeting small and multiscreen cinemas in Italy, supported by its parent company 18Months. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google reCAPTCHA for security, and Typekit fonts for branding consistency. The site is mobile-optimized and provides a demo to encourage user adoption. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

H

Helmholtz Association

hifis.net

67

HIFIS (Helmholtz Federated IT Services) is a specialized IT service provider focused on delivering digital infrastructure and software services to the Helmholtz Association, a major German research organization. The website presents a professional and comprehensive overview of their offerings including cloud services, identity management, software consulting, and training. The target audience primarily includes scientists, software engineers, cloud service providers, and IT support experts within the Helmholtz ecosystem. The organization is well positioned as a key facilitator of research IT services within Germany's scientific community. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging libraries such as FontAwesome and Modernizr for enhanced UI/UX. Hosting is provided by DESY, a reputable Helmholtz research center, ensuring reliable infrastructure. The site is mobile optimized, fast loading, and accessible, with good SEO practices. Analytics are implemented via Matomo with cookies disabled, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks visible security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. There is no published security policy or incident response information, which could be improved to strengthen trust and preparedness. Overall, the website is trustworthy, professional, and well-aligned with its institutional backing. The domain registration data corroborates the legitimacy and consistency of the service. Strategic improvements in privacy compliance and security transparency would further enhance the site's security posture and user trust.