Security Directory

P

Palmovka TEĎ

palmovkated.cz

58

Palmovka TEĎ is a community-focused web platform initiated by the Prague 8 municipal district to connect stakeholders and inform residents and visitors about local development, leisure activities, work opportunities, and quality living in the Palmovka area of Prague. The site features extensive listings of local businesses, services, and events, supported by social media channels and Google Analytics for user tracking. The domain is registered with a Czech registrar consistent with the website's local focus and language. Technically, the site uses modern web technologies including JavaScript, SVG graphics, and Google Tag Manager, with good mobile optimization and SEO practices. However, it lacks explicit privacy and cookie policies, and security headers are not detected, representing compliance and security gaps. Overall, the site is a legitimate, well-structured local community resource with moderate security posture and room for improvement in privacy compliance and security best practices.

E

Erhvervsstyrelsen

regelforum.dk

48

Regelforum.dk is the official website of a Danish government advisory forum established in 2019 under the Danish Business Authority (Erhvervsstyrelsen). The forum consists of 21 members representing a broad cross-section of Denmark and focuses on recommending simpler regulatory frameworks for businesses, both at national and EU levels. The website provides comprehensive information about the forum's activities, recommendations, and news updates, targeting Danish businesses and government stakeholders. The site is professionally designed, mobile-optimized, and uses Drupal CMS with clear navigation and consistent branding. From a technical perspective, the website employs modern web technologies including Drupal, JavaScript, and CSS, with SVG logos and responsive design. It includes a cookie consent mechanism and uses Piwik Pro for analytics, indicating a moderate level of digital maturity. However, some security best practices such as DNSSEC and security headers are not enabled or visible, suggesting room for improvement in security hardening. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but lacks explicit security policies or incident response contacts. Privacy compliance is strong with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professional, reflecting its government affiliation and purpose. Strategically, the site should enhance security by enabling DNSSEC, implementing security headers, and publishing a vulnerability disclosure or security policy. These steps will improve trust and resilience against cyber threats while maintaining compliance and user confidence.

E

Erhvervsstyrelsen

nemhandel.dk

66

Nemhandel.dk is a Danish government-operated platform managed by Erhvervsstyrelsen (Danish Business Authority) that facilitates electronic invoicing and e-commerce document exchange primarily for public sector entities and businesses in Denmark. The platform enjoys a strong market position with over 67,000 registered recipients and processes over 31 million e-commerce documents annually, reflecting high adoption and trust within its target audience. The website is well-branded, consistent, and professionally designed, supporting a good user experience and accessibility. Technically, the site is built on Drupal CMS with modern web technologies, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, although some security headers and DNSSEC are missing. Privacy compliance is strong, with clear privacy and cookie policies aligned with GDPR requirements. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration is consistent with the official government entity, enhancing legitimacy and trust.

K

Komitéen for god Fondsledelse

godfondsledelse.dk

64

Komitéen for god Fondsledelse is a Danish government committee under Erhvervsstyrelsen focused on providing nineteen recommendations regarding foundation governance, including communication, board composition, and leadership remuneration. The website serves as an authoritative resource for foundation boards and stakeholders, offering guidance tools, annual reports, and news updates. The site is well-branded, professionally designed, and consistently maintained with clear contact information and official affiliation, positioning it as a trusted source in its niche. Technically, the website is built on Drupal CMS with modern web technologies such as SVG graphics and JavaScript. It is mobile-optimized and accessible, with good SEO practices and a cookie consent mechanism in place. Performance is moderate, and while HTTPS is enabled, some security headers and DNSSEC are missing, indicating room for security enhancements. From a security perspective, the site demonstrates basic best practices including HTTPS and cookie consent but lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or suspicious content were detected. The domain registration is consistent with the website's government affiliation and business purpose, enhancing trustworthiness. Overall, the website is a reliable, professional, and secure platform for its intended audience, with recommendations to improve security headers and DNSSEC to further strengthen its posture.

G

God betalingsskik

godbetalingsskik.dk

60

God betalingsskik is a Danish initiative promoting a healthy payment culture among businesses, emphasizing timely payments and reasonable payment terms. Supported by a broad coalition of Danish business organizations, it serves as a non-profit advocacy platform to foster better payment practices. The website is built on Drupal CMS with modern front-end technologies and is mobile optimized, providing a professional and consistent user experience. However, it lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is basic with HTTPS enabled but missing advanced security headers and DNSSEC. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is trustworthy and serves its business purpose effectively but should enhance compliance and security documentation.

E

Energieküste

ready-charged-career.de

46

The website 'Ready. Charged. Career!' serves as a regional career platform focused on renewable energy opportunities at the German North Sea coast, branded as Energieküste. It targets professionals, students, and career changers interested in the energy transition, providing information on training, education, and job openings. The platform is supported by a network of partner companies and educational institutions, enhancing its market position as a key regional hub for energy sector careers. Technically, the site is built on Kirby CMS, employs Matomo for privacy-conscious analytics, and uses modern web technologies including SVG graphics and responsive design. Hosting is managed via Schlund Technologies, with a good SSL configuration and privacy compliance mechanisms in place, including cookie consent and GDPR-aligned privacy policies. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though explicit security policies and incident response contacts are not published. No critical vulnerabilities or exposed sensitive data were detected. The site is fully accessible without WAF or blocking mechanisms, ensuring a smooth user experience. Overall, the site demonstrates a high level of professionalism, content quality, and technical maturity, making it a trustworthy and effective platform for its intended audience. Strategic improvements could focus on enhancing security headers and publishing formal security policies to further strengthen trust and compliance.

T

TixforGigs

tixforgigs.com

70

TixforGigs operates as an online ticketing platform primarily serving the German market, offering ticket sales, event listings, and artist and venue promotion. The website is well-structured, mobile-optimized, and provides a user-friendly experience with features such as login, registration, password reset, and two-factor authentication. Privacy and cookie policies are present, reflecting GDPR compliance and a privacy-conscious approach. However, the absence of WHOIS data and explicit terms of service pages slightly detract from the overall trustworthiness. The technical stack includes modern JavaScript frameworks and libraries, and the site uses HTTPS with captcha protections on forms, enhancing security posture. Overall, the platform appears legitimate and professionally maintained but would benefit from improved transparency in domain registration and security headers.

S

Startup Denmark

startupdenmark.info

65

Startup Denmark is an official government-supported program designed to facilitate entrepreneurs from outside Denmark in launching their businesses within one of the world's most digitalized and entrepreneur-friendly countries. The website provides comprehensive guidance on visa application processes and access to Denmark's strong entrepreneurial ecosystem. The program targets startup founders seeking to establish their ventures in Denmark, offering visa facilitation and business support services. The site is professionally designed, mobile-optimized, and provides clear navigation and relevant content, reflecting a high level of digital maturity. Technically, the website is built on the Drupal CMS platform, leveraging modern web technologies including JavaScript and SVG graphics. The site demonstrates good performance and accessibility standards, with a cookie consent mechanism and privacy policy in place, indicating compliance with GDPR requirements. Analytics are conducted via Piwik Pro, ensuring moderate user tracking with privacy considerations. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks certain security headers such as Content-Security-Policy and X-Frame-Options, which are recommended to enhance protection. There is no visible security policy or incident response contact information, representing an area for improvement. The WHOIS data is limited due to TLD restrictions but does not raise concerns, and the domain is consistent with an official government program. Overall, the website presents a trustworthy and professional front for the Startup Denmark program, with minor technical and security enhancements recommended to further strengthen its posture and compliance.

S

Stadt Karlsruhe

karlsruhe.de

69

The website www.karlsruhe.de serves as the official digital portal for the city of Karlsruhe, Germany, providing residents and visitors with access to a wide range of municipal services, information on city administration, social programs, environmental initiatives, cultural events, and mobility options. The site is well-positioned as a comprehensive government resource, targeting local citizens, businesses, and stakeholders. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies including SVG graphics and Matomo analytics configured with privacy in mind. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security-wise, the website enforces HTTPS and employs a cookie consent mechanism aligned with GDPR requirements, though it lacks explicit security policy and incident response disclosures. Overall, the site is trustworthy, professionally maintained, and compliant with relevant privacy regulations, with no detected blocking or WAF interference.

D

Datenwerkbank

datenwerkbank.de

54

Datenwerkbank is a small, specialized web service provider based in Stuttgart, Germany, founded in 2024 by Manuel Deutsch, a freelance web developer with over 10 years of experience. The company focuses on website maintenance, support, and optimization services primarily for WordPress and Kirby CMS platforms, targeting agencies and medium-sized businesses. Their offerings include regular updates, backups, SEO optimization, hosting with green energy, and personalized support, delivered through clear service packages with transparent pricing. The website reflects a professional and trustworthy brand with strong customer references and a clean, responsive design. Technically, the website employs modern web standards including responsive images, SVG graphics, and privacy-conscious analytics via Matomo with cookies disabled. Hosting is provided by netcup, a reputable German provider, and the site uses HTTPS with canonical URLs for SEO. While the site lacks explicit security headers and a cookie consent mechanism, it demonstrates good privacy practices and GDPR compliance through its privacy policy and minimal tracking. From a security perspective, the site shows good practices such as regular backups and CMS updates included in service packages, but could improve by implementing security headers and publishing a security policy or incident response contact. No vulnerabilities or suspicious WHOIS patterns were detected, and the domain registration aligns with the business founding date, supporting legitimacy. Overall, Datenwerkbank presents a secure, professional, and privacy-aware web presence suitable for its target market. Strategic improvements in security headers and cookie consent would enhance compliance and trust further.

S

SSI SCHÄFER Gruppe

ssi-schaefer.com

10

SSI SCHÄFER Gruppe is a globally operating enterprise specializing in modular warehouse and logistics systems, software solutions, and comprehensive intralogistics services. The company positions itself as a worldwide leader in intralogistics, offering innovative technologies and software to enhance efficiency and sustainability in warehousing, order picking, and transport processes. Their business model focuses on B2B engagements across multiple industries, providing tailored solutions for various market segments. The website reflects a mature digital presence with professional design, multilingual support, and extensive content covering products, services, corporate philosophy, and sustainability initiatives. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Usercentrics for cookie consent management, ensuring compliance with privacy regulations. The site is mobile-optimized, accessible, and SEO-friendly, with embedded multimedia content enhancing user engagement. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and an incident response contact is absent. Overall, the website demonstrates a strong security and compliance stance suitable for an enterprise of its scale, with clear business credibility and trust indicators. The absence of WHOIS data suggests privacy protection, which is reasonable for a large corporation. Strategic recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and providing explicit incident response contacts to further strengthen trust and security transparency.

S

Urlaub in Schleswig-Holstein - Natur, Kultur, Seeluft: SH-Tourismus

sh-tourismus.de

42

The website www.sh-tourismus.de serves as a regional tourism portal promoting the Schleswig-Holstein area in Germany. It provides comprehensive information about vacation destinations, cultural highlights, activities, and accommodations, targeting tourists interested in the North and Baltic Sea regions. The site is professionally designed with clear navigation and multi-language support, enhancing user experience and accessibility. Technically, it is built on TYPO3 CMS, integrates Google Tag Manager for analytics, and employs Usercentrics for GDPR-compliant cookie consent management. Hosting is provided by kundenserver.de, consistent with the domain's nameservers. Security posture is moderate with HTTPS usage and consent management, but lacks explicit security headers and published privacy or terms policies. No contact information or incident response details are found, which could impact user trust and compliance. Overall, the site is safe, well-branded, and serves its business purpose effectively, though improvements in transparency and security practices are recommended.

C

co2online

co2online.de

76

co2online is a German nonprofit organization providing independent and free energy saving advisory services focused on electricity, heating, and energy-efficient modernization. The website targets private households and individuals interested in climate protection and energy savings. It offers key services such as energy saving tips, funding information, and online energy checks. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates a comprehensive accessibility tool (digi·access) supporting multiple languages, reflecting a strong commitment to inclusivity. Security posture is moderate with HTTPS usage implied but lacks explicit security headers and formal privacy or cookie policies. No contact information or incident response details are found in the provided content, which limits transparency. Overall, the site is professional, trustworthy, and well-structured but would benefit from enhanced privacy compliance and security disclosures.

S

Shell

shell.dk

64

Shell i Danmark operates as the Danish branch of the global energy and petrochemical conglomerate Shell plc. The website serves both private and business customers in Denmark, offering services such as fuel supply, Shell Card management, car wash, and electric vehicle charging. The site reflects a strong market position supported by Shell's international brand and local licensee DCC Energi A/S. The business model focuses on energy distribution and customer service within Denmark, leveraging Shell's global expertise and technology.

K

KOSMAS

kosmas.at

73

KOSMAS is a specialized full-service marketing agency based in Vienna, Austria, focusing on providing tailored marketing solutions for medical practices, particularly doctors. Their services include web design, online marketing, corporate identity, graphic design, and IT services, aimed at increasing patient acquisition and retention. The company has a strong market position supported by 20 years of experience and high customer satisfaction. Technically, the website is built on WordPress with modern tools like Bricks Builder and Automatic CSS, ensuring excellent performance, mobile optimization, and SEO. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, the website is professional, secure, and compliant with GDPR, making it a reliable digital presence for the agency.

M

Multicase Norge AS

multicase.no

56

Multicase Norge AS is a Norwegian company specializing in business systems and online store solutions tailored for transaction-intensive retail businesses, serving both B2B and combined B2B/B2C markets. Established in 1997, the company positions itself as a provider of scalable logistics and growth solutions with a strong focus on efficient product flow and control. Their offerings include a flexible system with multiple modules covering order management, payment, logistics, and accounting, supported by a robust customer base across 35 countries. Technically, the website is built on the HubSpot CMS platform, leveraging modern web technologies such as Google Fonts, Google Tag Manager, and Google reCAPTCHA Enterprise for security. The site demonstrates good mobile optimization, SEO practices, and a professional design consistent with their brand identity. Security measures include HTTPS enforcement and form protection, though explicit security headers and published security policies are lacking. The security posture is solid with no visible vulnerabilities or exposed sensitive data, complemented by GDPR-compliant cookie consent mechanisms and a comprehensive privacy policy. However, the absence of a public security policy or incident response contact limits transparency. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for businesses. Overall, Multicase Norge AS presents a credible, professional online presence with strong business and technical foundations. Strategic recommendations include enhancing security header implementation, publishing security and incident response policies, and improving accessibility features to further strengthen trust and compliance.

A

Avtalefestet pensjon

afp.no

10

Avtalefestet pensjon (AFP) operates as the official Norwegian pension scheme administrator for the private sector, providing application processing and information services related to contractual pensions. The website targets both individual applicants and businesses affiliated with the AFP scheme, offering clear guidance on pension conditions, application processes, and business obligations. The organization maintains a professional online presence with consistent branding and comprehensive content in Norwegian, reflecting its government-related role. Technically, the website employs modern web technologies including JavaScript and SVG graphics, and integrates Piwik PRO analytics with privacy-conscious features such as anonymization and explicit cookie consent mechanisms. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. However, no explicit CMS or hosting provider information is discernible. From a security perspective, the site enforces HTTPS and uses cookie consent banners compliant with GDPR. While no advanced security headers were detected, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact is noted as an area for improvement. WHOIS data is unavailable due to Norid privacy policies, but the domain and website content align with a legitimate, privacy-conscious Norwegian government entity. Overall, the website presents a low-risk profile with strong privacy compliance and a solid technical foundation. Strategic recommendations include enhancing security header implementation, publishing security policies, and considering a security.txt file to improve transparency and incident response readiness.

B

Bundesinstitut für Arzneimittel und Medizinprodukte (BfArM)

drks.de

62

The Bundesinstitut für Arzneimittel und Medizinprodukte (BfArM) is a German federal government agency responsible for the regulation and oversight of pharmaceuticals and medical devices. The website serves as an authoritative source for clinical trial registration (DRKS), pharmacovigilance, medical device regulation, and related regulatory information. It targets healthcare professionals, researchers, regulatory bodies, and the general public seeking official information on clinical studies and medical product safety. The site is built on the Government Site Builder CMS, featuring a professional, accessible, and mobile-optimized design with comprehensive navigation and content relevant to its regulatory mission. Technically, the website employs modern web standards including responsive CSS, SVG graphics, and a manifest for progressive web app capabilities. It uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR, including opt-in for statistical cookies via Matomo analytics. No advertising or third-party marketing tools are detected, reflecting its government nature. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and cookie consent. However, explicit security headers and a public security or incident response policy are not evident. No vulnerabilities or exposed sensitive data were found. WHOIS data is minimal but consistent with a government domain managed by German federal IT infrastructure. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It provides a secure and user-friendly platform for disseminating critical regulatory information. Strategic recommendations include enhancing security header implementation, publishing a vulnerability disclosure policy, and providing clearer direct contact information for security incidents.

F

Flamingo

flamingofares.com

62

Flamingo Fares is a regional transit fare payment system serving the Tampa Bay area, offering a reloadable smart card and mobile app for seamless fare payment across multiple transit agencies. The website is professionally designed, mobile optimized, and provides clear information about the service and participating agencies. Technically, the site uses modern web technologies including Umbraco CMS, Google reCAPTCHA for form security, and SVG graphics for visual elements. Security posture is strong with HTTPS enforced and secure forms, though explicit security headers and incident response information are absent. The lack of WHOIS data for the domain is a concern and should be investigated to confirm domain legitimacy. Overall, the site is trustworthy and functional but could improve privacy compliance and security transparency.

C

Centraal Justitieel Incassobureau

cjib.nl

64

The Centraal Justitieel Incassobureau (CJIB) is a Dutch government agency under the Ministry of Justice and Security responsible for collecting fines and organizing the enforcement of penalties. The website serves as an official portal for Dutch citizens and legal entities to manage fines, view related information, and access government services. The site is well-branded, consistent, and provides multilingual support, reflecting a mature digital presence. Technically, the website is built on Drupal 10, uses modern web standards including SVG graphics, and offers good mobile optimization and accessibility. Security posture is solid with HTTPS enabled and no visible sensitive data exposure, though the absence of explicit security headers and published security policies suggests room for improvement. Privacy compliance is moderate due to missing explicit privacy and cookie policies in the provided content. Overall, the website is trustworthy and professional, aligned with its government function.

S

Stepp's Towing & Heavy Transport

steppstowing.com

61

Stepp's Towing & Heavy Transport is a well-established family-owned business operating for over 60 years, specializing in 24-hour towing, heavy transport, environmental response, and auto parts services. The company serves West Central Florida and offers nationwide heavy transportation, positioning itself as a major player with a large fleet. The website reflects a solid business presence with clear service offerings and contact information, supported by social media channels. Technically, the site uses modern web technologies including service workers for offline support and SVG graphics for visuals, hosted via Amazon CloudFront CDN. However, the absence of WHOIS data and lack of privacy and cookie policies indicate areas for improvement in transparency and compliance. Security posture is moderate with HTTPS enforced but missing some security headers and incident response information. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and domain registration transparency.

The website at savethewaves.org is currently inaccessible, returning a 403 Forbidden error page that blocks access to any substantive content. This prevents any meaningful analysis of the business, services, or user engagement features. The domain is long-established, registered since 2001 with a reputable registrar, indicating a legitimate entity behind the domain. However, the lack of accessible content, absence of privacy or cookie policies, and no visible contact or security information significantly limit the ability to assess the organization's digital maturity or security posture. The technical infrastructure appears minimal with only Google Fonts and SVG graphics loaded, hosted on SiteGround. Security posture cannot be fully evaluated due to lack of data, but no DNSSEC is enabled and no security headers are detected. Overall, the site is currently non-functional for external users, representing a critical issue for trust and usability.

U

Ulož.to Disk

quickshare.cz

72

Ulož.to Disk is a Czech Republic-based personal cloud backup service offering a range of storage plans from a free 25 GB tier up to 100 TB for paid subscribers. The service emphasizes secure file storage with end-to-end encryption and provides modern applications across multiple platforms including Windows, Android, and iOS. The website is professionally designed with clear navigation and multilingual support, targeting general users seeking reliable cloud storage and file sharing solutions. Technically, the site employs modern JavaScript frameworks, Google Tag Manager, and analytics tools, hosted likely behind Cloudflare infrastructure ensuring fast performance and security. Security posture is solid with HTTPS enforced and privacy policies in place, though explicit security policies and incident response details are not published. No vulnerabilities or suspicious elements were detected. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the cloud storage market.

F

Freeride Mountain Bike Association e.V. (FMBA)

fmbworldtour.com

48

The Freeride Mountain Bike Association e.V. (FMBA) operates the FMB World Tour, the official international circuit for freeride mountain biking disciplines. Founded in 2010 and registered as a non-profit in Munich, Germany, FMBA governs and promotes the sport through event sanctioning, athlete licensing, and ranking systems. The website serves athletes, event organizers, and fans with news, rankings, event calendars, and membership information. The organization holds a strong market position as the official governing body for freeride mountain biking.

T

Tibe AS

gjerholm.no

51

TIBE Oslo is a creative agency specializing in visual solutions and creative concepts designed to deliver impactful results. The company operates as part of a network of bureaus across Norway, offering services such as graphic design, strategy, and advisory to business clients seeking to enhance their brand presence. The website reflects a professional and consistent brand image, targeting organizations and businesses in need of creative communication services. Technically, the website employs modern web technologies including Google Tag Manager for analytics and TermsFeed for cookie consent management, ensuring GDPR compliance. The site is mobile-optimized with good SEO practices and uses SVG graphics and lazy loading for performance. However, no CMS or hosting provider details are explicitly detected, and some security headers are missing, which could be improved. From a security perspective, the site enforces HTTPS and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data due to privacy protection slightly reduces trust but is common for small businesses. Overall, the security posture is solid but could benefit from enhanced security headers and explicit incident response contact information. The overall risk assessment is low, with the website presenting a trustworthy and professional front for a legitimate business. Strategic recommendations include implementing additional security headers, publishing a security policy, and providing clearer contact information for security incidents to further enhance trust and compliance.

A

Appel Nowitzki

appelnowitzki.com

55

Appel Nowitzki is a specialized consulting and design agency focused on real estate marketing and corporate design. Established in 2012, the company offers integrated strategy, design, and content services aimed at creating sustainable brand identities for real estate clients. The agency has a strong market position supported by numerous prestigious design awards and a professional online presence. Technically, the website is built on the Contao CMS platform, uses modern web technologies including SVG graphics and JavaScript, and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks DNSSEC and security headers, and does not publish privacy or terms of service policies. Overall, the website is professional, trustworthy, and business-focused with minimal user tracking and a cookie consent mechanism implemented. Strategic improvements in security and compliance documentation would enhance trust and regulatory adherence.

G

Generation PSY – DGPPN e.V.

generation-psy.de

61

Generation PSY is a non-profit youth initiative under the German Society for Psychiatry and Psychotherapy, Psychosomatics and Neurology (DGPPN). The website serves as an educational and engagement platform targeting young psychiatrists, medical students, and healthcare professionals interested in psychiatry. It offers campaigns, mentoring, networking events, and career information to promote psychiatry as a profession. The site is well-branded, professionally designed, and content-rich, reflecting a clear mission and target audience. Technically, the website is built on WordPress with modern web technologies, including lazy loading and cookie consent management, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is robust with comprehensive privacy and cookie policies and GDPR-aligned consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity, supporting its role as a reputable non-profit healthcare initiative.

O

OFFLINE GmbH

offline.ch

49

OFFLINE GmbH is a Swiss technology company based in Luzern specializing in modern web application development, legacy software modernization, and CTO-as-a-Service offerings. With approximately 14 years of experience, they serve a diverse clientele ranging from startups to established enterprises, emphasizing quality and sustainable technical solutions. The website reflects a professional and modern digital presence, built using the Hugo static site generator, optimized for performance and mobile devices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the site lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. Overall, the company demonstrates strong business credibility and technical maturity with room for improvement in privacy and security transparency.

L

Legeforeningen

legeforeningen.no

10

Legeforeningen is a well-established Norwegian medical association founded in 1886, serving as a professional body for doctors and medical students across Norway. The website provides comprehensive information about the association's advocacy, educational offerings, membership benefits, and job opportunities. It targets medical professionals and students, positioning itself as a key player in Norway's healthcare sector. The site is professionally designed with consistent branding and high-quality content, reflecting its authoritative market position. Technically, the website employs modern JavaScript frameworks such as Vue.js, integrates Matomo for analytics, and uses Microsoft Application Insights for telemetry. The CMS appears to be Episerver, supporting a structured and responsive design. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are well implemented with appropriate meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not publicly disclose security policies or incident response procedures. Privacy compliance is partially addressed with a privacy and cookie policy present, but no explicit cookie consent mechanism is detected. The domain WHOIS data is consistent with the organization's identity, supporting legitimacy. Overall, Legeforeningen's website is a credible, professional platform with strong business credibility and good technical implementation. Enhancements in security headers, privacy consent mechanisms, and public security policies would further strengthen its posture.

T

Task Force CSIRT

trusted-introducer.org

73

The Task Force CSIRT website serves as a central hub for cybersecurity incident response teams, focusing on fostering a trusted community with a European emphasis. It offers core services including community collaboration, training through TRANSITS, and the Trusted Introducer infrastructure which maintains a directory of cybersecurity teams. The website positions itself as a key player in the cybersecurity incident response ecosystem, targeting professionals and organizations involved in security operations and incident handling. Technically, the website employs modern web technologies such as Bootstrap for responsive design, SVG for graphics, and standard CSS and JavaScript. The site is hosted under a reputable registrar (Gandi SAS) with HTTPS enabled, ensuring secure communications. The site demonstrates good mobile optimization and basic accessibility features, though no CMS or advanced frameworks are detected. From a security perspective, the site benefits from HTTPS and domain transfer protection but lacks DNSSEC and explicit security headers. There is no visible incident response contact or vulnerability disclosure policy, and cookie consent mechanisms are absent, which could be improved for compliance. No analytics or tracking scripts are detected, indicating a privacy-conscious approach. Overall, the website is professional, trustworthy, and focused on its niche audience. It could enhance its security posture and privacy compliance by adding DNSSEC, security headers, cookie consent, and clearer contact and policy disclosures.

L

LAG Spiel und Theater in Thüringen e.V.

lag-thueringen.de

36

LAG Spiel und Theater in Thüringen e.V. is a regional non-profit organization founded in 1992, dedicated to youth culture and theater education in Thüringen, Germany. It coordinates member theater groups, supports educational initiatives, organizes theater events for students, and provides resources such as a specialized library. The website reflects a focused mission with clear content targeting theater professionals, educators, and youth cultural initiatives in the region. Technically, the site is built on the Contao CMS platform, uses jQuery and SVG graphics, and demonstrates moderate performance with good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though additional security headers and policies could enhance protection. Privacy compliance is evident with a GDPR-aligned privacy policy and cookie banner. No contact emails or phone numbers are explicitly provided on the homepage, which may limit direct communication. Overall, the website is professional, trustworthy, and well-aligned with its mission, though it could benefit from enhanced security practices and more visible contact information.

I

Institut für Auslandsbeziehungen (ifa)

kulturaustausch.de

49

Kulturaustausch is a cultural magazine operated under the Institut für Auslandsbeziehungen (ifa), focusing on international relations, culture, and society with contributions from global authors. The website serves as a platform for in-depth dossiers, articles, and print issues, targeting readers interested in diverse international perspectives. Technically, the site is built on TYPO3 CMS, employs Matomo for analytics, and uses modern web technologies ensuring good performance, accessibility, and SEO. Security posture is solid with HTTPS and some security best practices, though additional headers could enhance protection. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a mature privacy stance. Contact is primarily via a web form, with no direct emails or phone numbers publicly listed. Overall, the site is professional, trustworthy, and well-positioned in the media and non-profit cultural sector.

O

Organized Crime and Corruption Reporting Project

occrp.org

75

The Organized Crime and Corruption Reporting Project (OCCRP) operates as a reputable non-profit media organization specializing in investigative journalism focused on exposing organized crime and corruption globally. The website serves as a comprehensive platform offering investigative reports, news, features, and data tools targeted primarily at journalists, researchers, and the general public interested in transparency and accountability. OCCRP maintains a strong market position as a leading investigative journalism consortium with a clear mission and professional presentation. Technically, the website employs modern web technologies including ES modules, Vue.js framework, and integrates performance and security monitoring tools such as New Relic and Google reCAPTCHA. The site is well-optimized for mobile devices, demonstrates fast loading times, and adheres to good SEO and accessibility standards, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and uses CAPTCHA to protect forms, indicating a solid security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security governance. Overall, OCCRP's website reflects a trustworthy and professional organization with a strong commitment to investigative journalism. Strategic recommendations include publishing detailed security and incident response policies, adding a security.txt file for vulnerability reporting, and enhancing contact information transparency to further strengthen trust and compliance.

C

Crash Days

crashdays.de

39

Crash Days is a niche event-focused website promoting automotive crash testing events primarily targeting industry professionals and enthusiasts in Germany. The site provides links to event registration and related crash test service providers but lacks detailed business or contact information. Technically, the website uses basic web technologies including SVG graphics and JavaScript but does not employ advanced frameworks or CMS platforms. The site shows moderate performance and basic mobile optimization but lacks accessibility and SEO enhancements. Security posture is weak with no detected HTTPS confirmation, security headers, or privacy policies, exposing the site to potential risks and compliance issues. Overall, the site is functional for its limited purpose but requires significant improvements in security, privacy compliance, and business transparency to enhance trust and professionalism.

N

NIC.br - Núcleo de Informação e Coordenação do Ponto BR

registro.br

63

Registro.br is the official Brazilian domain registry responsible for managing .br domain registrations. Operated by NIC.br, it serves individuals and organizations in Brazil seeking to register and manage their internet domain names under the .br country code. The website provides domain search, registration, and management services, along with educational resources and security awareness content. The site is well-positioned as a trusted authority in the Brazilian internet ecosystem, supported by partnerships with CGI.br and CERT.br. Technically, the website employs modern web technologies including Vue.js and JavaScript ES modules, ensuring a responsive and performant user experience. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and professional design. Security best practices are observed with HTTPS enforcement and secure form handling, although some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms are absent. From a security perspective, the domain registration details align with the official registry, showing high legitimacy and no suspicious patterns. No vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit incident response contact information and vulnerability disclosure policies, which could enhance trust and security posture. Overall, Registro.br presents a high-quality, trustworthy, and professional web presence suitable for its critical role in Brazil's internet infrastructure. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance profile.

A

Affino

affino.com

69

Affino is a technology company specializing in AI-enhanced customer experience solutions delivered via a unified SaaS platform. Their offerings include personalization, automation, AI-powered search, adaptive analytics, and conversion funnel optimization. The company positions itself as a leader providing hands-on services to help clients outperform competitors. Technically, the website employs modern front-end technologies such as HTML5, CSS3, JavaScript, jQuery, and SVG graphics, with a proprietary CMS platform. The site is well-designed, mobile-optimized, and provides clear navigation and professional content. Security posture is moderate with HTTPS implied and secure login forms, but lacks explicit security headers and published security policies. Privacy compliance is limited with no visible privacy or terms of service pages, though a cookie policy with consent mechanism is present. WHOIS data is unavailable, which reduces trustworthiness but the professional presentation and contact information support business credibility. Overall, the site is suitable for business audiences seeking AI-driven customer experience platforms.

I

IdentityStream AS

identitystream.com

68

IdentityStream AS is a Norwegian software company specializing in identity and access management (IAM) solutions, primarily targeting banks and financial institutions. The company offers modular software designed to provide a solid foundation for effective enterprise governance, focusing on identity security as a key enabler for digital transformation. Their market position is strong within Norway, supported by notable clients in the banking sector and a clear focus on compliance and automation. The website reflects a professional and modern digital presence built with Gatsby and Tailwind CSS, optimized for performance and mobile devices. Security posture is good with HTTPS and modern frameworks, but lacks explicit security policies and privacy compliance documentation. Overall, the company demonstrates credibility and technical maturity, though improvements in privacy and security transparency are recommended.

M

MAS Bohdanečsko

mas-bohdanecsko.cz

39

MAS Bohdanečsko is a regional non-profit organization based in the Czech Republic, focused on local community development through the LEADER method, supported by EU and national funding. The organization aims to improve quality of life and the environment by managing and distributing grant funds and implementing local development strategies. Their website reflects a community-oriented approach with detailed information on organizational structure, strategies, and projects. Technically, the website uses modern responsive design with Bootstrap 5 and SVG graphics, but lacks explicit CMS identification and advanced technical optimizations. Security posture is weak due to absence of security headers, privacy policies, and incident response information, which are critical for compliance and trust. Overall, the website is accessible and informative but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

D

DJK Sportjugend

djk-sportjugend.de

61

DJK Sportjugend is a German non-profit youth sports organization affiliated with the Catholic DJK-Sportverband. It focuses on inclusive youth work, social and cultural diversity, and prevention initiatives such as anti-racism and sexualized violence prevention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of young people and sports communities. Technically, the site uses modern web technologies and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a strong legitimacy score.

V

Verein Deutscher Zementwerke e.V.

vdz.info

69

The Verein Deutscher Zementwerke e.V. (VDZ) operates as a leading research and competence center for the cement, concrete, and environmental protection sectors in Germany. Established in 1877, it serves as a non-profit association providing technical, scientific, and economic-political services including research, certification, consulting, and training to the cement industry and related stakeholders. The website reflects a mature and professional organization with comprehensive service offerings and a strong market position in the energy and manufacturing sectors. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies including SVG graphics and asynchronous JavaScript modules for enhanced user experience. It integrates Matomo analytics for privacy-conscious user tracking and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, indicating a well-maintained digital infrastructure. From a security perspective, the site enforces HTTPS and employs secure form handling practices. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and trust. No vulnerabilities or suspicious content were detected, and the WHOIS data aligns consistently with the website's claims, supporting legitimacy. Overall, the VDZ website demonstrates a high level of professionalism, security, and compliance suitable for its industry and audience. Strategic improvements in security policy transparency and incident response readiness would further strengthen its security posture and stakeholder confidence.

E

EP Power Grit

eppowergrit.com

53

EP Power Grit is a specialized manufacturer and global supplier of high-quality abrasives and industrial minerals based on aluminum, iron, and calcium silicates, natural minerals, glass, and other raw materials. The company operates production facilities in Germany, Belgium, the Netherlands, and Finland, with local customer service in several European countries. Their product portfolio includes disposable abrasives, reusable abrasives, special abrasives, and industrial minerals, complemented by flexible packaging and logistics services. The website is professionally designed, multi-lingual, and provides detailed product and service information, targeting industrial and construction sectors worldwide. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics with a cookie consent mechanism, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and privacy compliance, though some security headers and explicit policies could be improved. The WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the professional content and business presence suggest a legitimate operation. Overall, the website presents a trustworthy and mature digital presence for EP Power Grit.

X

XIMA MEDIA GmbH

xima.de

67

XIMA MEDIA GmbH is a specialized digital agency focused on delivering digital solutions and services to public sector institutions in Germany. Their offerings include TYPO3 and Drupal website development, OpenText solutions, UX/UI design, agile project management, and compliance with BITV standards. They also promote their proprietary low-code platform, formcycle, which facilitates digital form and process management. The company demonstrates a strong market position with reputable clients and a professional online presence. Technically, the website is built on TYPO3 CMS with modern web technologies, optimized for performance, mobile responsiveness, and SEO. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are not publicly disclosed. Overall, the website reflects a mature, trustworthy business with good digital maturity and compliance practices.

V

Verein Deutscher Zementwerke e.V.

vdz-online.de

68

The Verein Deutscher Zementwerke e.V. (VDZ) is a well-established German non-profit association serving as a leading research and competence center for the cement, concrete, and environmental protection sectors. Founded in 1877, it provides a broad range of services including research, certification, consulting, and professional training to the cement industry. The website reflects a professional and comprehensive digital presence with multilingual support and clear navigation tailored to industry professionals and stakeholders. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies including SVG graphics and asynchronous JavaScript loading. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. The website is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the organization's identity and domain usage, supporting legitimacy. Overall, the VDZ website presents a trustworthy, professional, and secure platform that effectively supports its business objectives and stakeholder engagement.

G

Gemeinsamer Bundesausschuss

g-ba.de

58

The Gemeinsamer Bundesausschuss (G-BA) is a central German government institution responsible for regulating healthcare services and ensuring quality in the healthcare system. The website serves as the official portal for disseminating information about the G-BA's work, including guidelines, decisions, public meetings, and innovations in healthcare. It targets healthcare professionals, policymakers, patients, and the general public interested in healthcare regulation in Germany. The site is well-branded, professionally designed, and provides comprehensive content relevant to its mission. Technically, the website employs modern web technologies including Matomo for privacy-conscious analytics, deferred JavaScript loading, and SVG graphics for branding. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Hosting appears stable and professional, with no signs of blocking or WAF interference. From a security perspective, the site uses HTTPS with strong SSL configuration and respects user privacy by disabling cookies in analytics and honoring Do Not Track signals. However, it lacks explicit security headers and does not publicly disclose security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong regarding the privacy policy, but cookie consent mechanisms are absent. Overall, the G-BA website is a trustworthy, authoritative source with high content quality and professional presentation. It demonstrates a solid security posture with room for improvement in transparency and security header implementation. The domain registration data aligns well with the website's purpose, reinforcing legitimacy. Strategic recommendations include enhancing security headers, adding cookie consent, and publishing security and vulnerability disclosure policies.

T

Tourismusverband Franken e.V.

frankentourismus.de

61

Tourismusverband Franken e.V. operates a comprehensive regional tourism website focused on promoting the Franconia region in Germany. The site offers extensive information on cultural, culinary, wellness, and outdoor activities, targeting tourists and visitors interested in exploring the area. The business model centers on tourism promotion and providing travel-related services including event listings and online booking options. The website is well-positioned as an official regional tourism association with a consistent brand and strong trust indicators such as verified social media presence and GDPR-compliant cookie consent. Technically, the website employs modern tracking and analytics tools including Google Analytics, Plausible, and Umami, integrated via Google Tag Manager. The site uses a custom or proprietary CMS with good mobile optimization, accessibility, and SEO practices. The presence of a strict referrer policy and HTTPS indicates a solid security foundation, although some security headers are missing. The cookie consent mechanism is robust and aligned with GDPR requirements. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available security policies or incident response contacts, which could be improved to enhance transparency and preparedness. No WAF or blocking mechanisms were detected, and the WHOIS data aligns well with the website's claims, indicating legitimacy. Overall, the website is professional, secure, and trustworthy with excellent content quality and user experience. Strategic recommendations include publishing a security policy, adding incident response contacts, and enhancing security headers to further strengthen the security posture.

V

vdek and Ersatzkassen

gesund-digital.info

47

Gesund digital is a German-language digital health education platform supported by major health insurers such as vdek and Ersatzkassen. It aims to empower users, particularly older adults and insured members, to effectively use digital health applications and understand digital health services. The website provides structured modules on finding, understanding, and trusting digital health offerings, including electronic patient records and telemedicine. Technically, the site uses modern frontend technologies like Alpine.js and serves content over HTTPS with a cookie consent mechanism, reflecting a moderate to good level of digital maturity. Security posture is solid with no evident vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie consent. The WHOIS data is privacy protected, which is justified given the healthcare context, and no suspicious patterns were detected. Overall, Gesund digital presents a trustworthy, professional, and user-friendly platform for digital health literacy.

Lebensmittelmarketing.net is a niche educational website providing free online access to updated academic and professional publications related to food marketing and regional marketing. The site is operated by AFC Consulting Group AG and targets German-speaking professionals and academics interested in these topics. The business model focuses on offering valuable content without direct monetization or advertising. Technically, the website uses basic HTML5 and CSS with minimal interactivity and moderate mobile optimization. There is no evidence of advanced CMS or analytics tools, indicating a simple infrastructure. Security posture is limited; no HTTPS or security headers information was provided, and no privacy or cookie policies are present, which poses compliance and security risks. The domain registration is consistent and legitimate, with no privacy protection and an appropriate domain age. Overall, the website is functional but requires improvements in security, privacy compliance, and contact transparency to enhance trust and user confidence.

B

Bund der Deutschen Landjugend e.V. (BDL)

junglandwirte.de

56

The website junglandwirte.de represents the 'Projekt Junglandwirt:innen', a cooperative initiative by the Bund der Deutschen Landjugend (BDL) and the Deutschen Bauernverband, aimed at supporting young farmers and winemakers in Germany. It provides a comprehensive platform for networking, education, and career development, with a strong emphasis on sustainable agriculture, succession planning, and empowerment of women in the agricultural sector. The site is well-positioned as a central hub for young agrarians, backed by reputable organizations and funding bodies.

I

Ingenieurbüro EBL

socialorga.de

40

SocialOrga is a German-based software provider specializing in modular administrative solutions for voluntary social and ecological service organizations such as FSJ, BFD, and FÖJ. The company offers a flexible software suite that supports participant management, deployment sites, seminar organization, and financial accounting. Their business model focuses on modular software sales with custom extensions and integration services, targeting organizations managing voluntary services. The website is professionally designed, mobile-optimized, and hosted on Hetzner servers, indicating a modern technical infrastructure. The use of Next.js and Matomo analytics reflects a contemporary digital maturity level. Security posture is moderate with HTTPS implied but lacks explicit security headers and vulnerability disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security transparency.

L

Lutherweg in Hessen e.V.

lutherweg1521.de

51

Lutherweg in Hessen e.V. is a small non-profit association dedicated to promoting pilgrimage and hiking along the Lutherweg1521 route between Worms and Wartburg, focusing on cultural heritage related to Martin Luther. The website serves as an informational hub offering route details, pilgrim accommodations, events, and ordering services for pilgrimage-related items. The target audience includes pilgrims, hikers, and cultural tourists interested in religious and historical trails in Germany. Technically, the website is built on WordPress with standard web technologies including JavaScript and CSS, and it is hosted on servers using rzone.de name servers. The site is mobile-optimized with good navigation and content relevance, though it lacks some advanced technical frameworks or analytics integrations. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but it lacks security headers and formal security policies. Privacy compliance is mostly met with a comprehensive privacy policy, but no cookie consent mechanism is present. Overall, the site is trustworthy and professional, serving its niche well without evident security or compliance risks.