Security Directory

T

Thomann

thomann.fr

56

Thomann is a leading European e-commerce retailer specializing in musical instruments, accessories, and related equipment. The website targets musicians and music enthusiasts, offering a wide range of products including guitars, drums, keyboards, studio equipment, and DJ gear. The company positions itself as a market leader with a large inventory and comprehensive customer services such as repair and warranty. The website is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, the site employs modern JavaScript frameworks and integrates Google Tag Manager for analytics. It uses HTTPS with strong security practices including CAPTCHA on login forms and a detailed cookie consent mechanism, reflecting a mature digital infrastructure. The site is mobile optimized and accessible, with good SEO practices. Security posture is strong with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, which could be improved. Privacy compliance is robust with GDPR-aligned policies and user consent mechanisms. Overall, the domain WHOIS data is privacy protected and not publicly available, which is common for commercial entities. The website content and structure strongly indicate a legitimate and trustworthy business. Strategic recommendations include publishing explicit security and incident response policies and adding vulnerability disclosure information to enhance transparency and trust.

T

Thomann

thomann.es

58

Thomann is a leading European e-commerce retailer specializing in musical instruments, studio equipment, lighting, and PA systems. The website www.thomann.es serves the Spanish market with a comprehensive catalog and strong customer service offerings, including repair and maintenance. The company positions itself as the largest music store in Europe, targeting musicians and music enthusiasts ranging from amateurs to professionals. The business model is focused on online retail with localized shops across multiple European countries, supported by a robust digital infrastructure. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Turnstile CAPTCHA for bot protection. The site is responsive, accessible, and optimized for SEO, reflecting a mature digital presence. Security measures include HTTPS enforcement, comprehensive security headers, and cookie consent mechanisms aligned with GDPR requirements. However, explicit incident response and vulnerability disclosure policies are not publicly available. The security posture is strong with no evident vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear policies and consent mechanisms. The absence of direct contact emails or phone numbers in the visible content suggests a preference for contact via forms and service pages, which is common in large e-commerce platforms. Overall, the site demonstrates high professionalism, trustworthiness, and a user-friendly experience. Strategically, Thomann should consider publishing explicit incident response contacts and a vulnerability disclosure policy to enhance transparency and trust. Continuous monitoring of third-party scripts and tracking tools is recommended to maintain privacy compliance and security standards.

T

Thomann

thomannmusic.com

60

Thomann is a leading European e-commerce retailer specializing in musical instruments, accessories, and related equipment, with a significant presence targeting the United States market. The website offers a comprehensive catalog of products including guitars, drums, studio equipment, and software, supported by customer service features such as repair and warranty information. The business model is focused on online retail with a strong emphasis on customer trust and satisfaction, evidenced by guarantees and warranties. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and a custom modular bootstrap system. The site is well-optimized for mobile devices and accessibility, with good SEO practices and structured data for enhanced search engine understanding. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, but lacks visible security headers and active CAPTCHA enforcement. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of WHOIS data for the domain is a concern, as it reduces transparency and trustworthiness, although the website content and branding strongly indicate a legitimate and professional business. Overall, Thomann's website is professional, user-friendly, and compliant with privacy regulations, but could enhance its security posture and transparency to further strengthen trust and resilience against threats.

T

Thomann

thomannmusic.no

61

Thomann is a leading European e-commerce retailer specializing in musical instruments, accessories, and related equipment. The website targets primarily the Norwegian market, offering a wide range of products including guitars, drums, studio equipment, and software. The company positions itself as Europe's largest music retailer, providing extensive services such as repair, customer support, and a mobile app. The business model is focused on online retail with a strong emphasis on customer satisfaction and trust, supported by guarantees and warranties. Technically, the website employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and Turnstile CAPTCHA for security. The site is well-optimized for mobile devices and accessibility, with comprehensive SEO metadata and structured data. Performance is moderate, with room for improvement in loading speed and security headers. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers are not detected, and there is no publicly available security policy or incident response information. No vulnerabilities or suspicious activities were identified in the content or scripts. Overall, the website presents a professional, trustworthy, and user-friendly platform with strong privacy compliance. The lack of WHOIS data is consistent with .no domain policies and does not detract from the legitimacy of the business. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and security posture.

T

Thomann

thomann.co.uk

62

Thomann is a leading European e-commerce retailer specializing in musical instruments, accessories, studio, lighting, and PA equipment. The website targets musicians and music equipment buyers primarily in the UK and Europe, positioning itself as the market leader with a broad product range and strong customer service guarantees. The digital infrastructure employs modern JavaScript frameworks and Google Tag Manager for analytics, with a responsive and accessible design that supports a positive user experience. Security measures include CAPTCHA and cookie consent mechanisms, though explicit HTTP security headers were not detected in the provided data. The WHOIS data is unavailable due to domain registration constraints, but the website content and structure indicate a legitimate and professional business presence. Overall, the site demonstrates a mature e-commerce platform with good privacy compliance and moderate security posture.

T

Thomann

thomannmusic.ch

61

Thomann is a leading European retailer specializing in musical instruments, studio, lighting, and sound equipment. The website targets musicians and music enthusiasts primarily in Switzerland and Europe, offering a broad range of products and services including repair and maintenance. The company positions itself as a market leader with a strong online presence and comprehensive customer support. Technically, the website employs modern JavaScript frameworks, responsive design, and integrates Google Tag Manager and Cloudflare Turnstile CAPTCHA for security and analytics. Security posture is strong with HTTPS, secure forms, and cookie consent mechanisms, although explicit security policies and incident response details are not publicly disclosed. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a safe and user-friendly shopping experience.

T

Thomann

thomann.at

58

Thomann is a leading European e-commerce retailer specializing in musical instruments, studio, lighting, and PA equipment. The website targets musicians and music enthusiasts primarily in Austria and Europe, offering a wide range of products and services including repair and maintenance, customer support, and a mobile app. The company positions itself as the market leader with a large inventory and strong customer guarantees. Technically, the website employs modern JavaScript frameworks, Google Tag Manager for analytics, and Cloudflare Turnstile CAPTCHA for bot protection. The site is well-optimized for performance, mobile devices, and accessibility, with comprehensive cookie consent and privacy policies indicating good GDPR compliance. Security posture is strong with HTTPS enforcement and secure login mechanisms, though explicit security policies and incident response contacts are not publicly available. Overall, the website is professional, trustworthy, and secure, with minor areas for improvement in transparency around security policies.

M

Musikhaus Thomann

static-thomann.de

63

Musikhaus Thomann operates Europe's largest online retail platform for musical instruments and related equipment, targeting musicians and music enthusiasts primarily in Germany and Europe. The website demonstrates a mature e-commerce business model with a strong market position as a leader in its sector. Key services include sales of instruments, studio and lighting equipment, repair services, and a mobile app for enhanced customer engagement. The platform supports multiple languages and currencies, reflecting its broad European reach. Technically, the website employs modern web technologies including JavaScript frameworks, SVG icons, and Google Tag Manager for analytics. It features responsive design optimized for mobile and desktop, with good SEO and accessibility practices. The site uses HTTPS with strong SSL configuration, although some security headers are not explicitly detected. Cookie consent mechanisms are implemented with user options, supporting GDPR compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and secure login forms, but lacks published security policies or incident response contacts. CAPTCHA is implemented but currently disabled, which could be improved to mitigate automated abuse. No vulnerabilities or suspicious content were detected. WHOIS data aligns with the business claims, showing consistent domain registration and no privacy protection, indicating legitimacy. Overall, the website is professional, secure, and compliant with privacy regulations, serving a large customer base with a trustworthy online presence. Strategic recommendations include enabling CAPTCHA, publishing security policies, and enhancing security headers to further strengthen the security posture.

T

Thomann

thomann.de

60

Thomann is a leading European e-commerce retailer specializing in musical instruments and related accessories. The website serves a broad international audience with multiple language and country-specific versions, positioning itself as Europe's largest music retailer. The platform offers a wide range of products including guitars, drums, studio equipment, lighting, and PA systems, supported by strong customer service features such as a 30-day money-back guarantee and a 3-year warranty. Technically, the website employs modern web technologies including JavaScript, SVG icons, and Google Tag Manager for analytics and marketing. The site is well-optimized for mobile devices and accessibility, with clear navigation and professional design. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though explicit security headers and published security policies are absent. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

C

Cilvēktiesību gids

cilvektiesibugids.lv

44

The website www.cilvektiesibugids.lv is a Latvian human rights guide providing educational content on various human rights topics and everyday situations. It targets the general public interested in human rights education and operates as a non-profit entity. The platform offers thematic articles, rights information, court practice summaries, and interactive tests in Latvian, Russian, and English. Technically, the site uses modern web technologies including self-hosted Matomo analytics for privacy-conscious tracking, Google Fonts, and cookie consent mechanisms. The design is professional, mobile-optimized, and accessible, with clear navigation and multilingual support. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and published security policies. No vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and serves as a valuable educational resource in the human rights domain.

Ž

Žmogaus teisių gidas

zmogausteisiugidas.lt

42

Žmogaus teisių gidas is a Lithuanian educational website dedicated to human rights and civic education. It offers thematic articles, tests, court practice summaries, and resources to educate the public on human rights issues. The site targets a general audience interested in learning about human rights in everyday situations. The platform is supported by reputable European and Baltic organizations, indicating a non-profit educational mission. Technically, the website employs modern web technologies including Matomo analytics with privacy-respecting default settings, Google Fonts, and cookie consent mechanisms. The site is mobile optimized and accessible, with a clear navigation structure. Security posture is moderate, with HTTPS enforced but lacking explicit security headers and vulnerability disclosures. WHOIS data for the domain is unavailable, which reduces trustworthiness from a domain registration perspective. Overall, the website is a credible educational resource with room for improvement in privacy policy transparency and security best practices.

N

Nanotrix

nanotrix.ai

29

Nanotrix is a technology company specializing in artificial intelligence solutions, originating as a spin-off from the Faculty of Mechatronics at the Technical University of Liberec. The company focuses on developing AI-powered systems such as recommendation engines and chatbots, leveraging proprietary language and vectorization models. Their market position is that of a niche AI provider with strong academic and industry partnerships, targeting businesses seeking to harness AI capabilities. Technically, the website is built on WordPress with modern themes and plugins, optimized for mobile and accessibility, though lacking some advanced security headers and privacy compliance features. Security posture is generally good with HTTPS enforced, but improvements are recommended in privacy policy visibility and security headers. Overall, the website is professional and trustworthy, with clear contact information and partner references, but could enhance compliance and security transparency.

H

Hostnet

hostnet.nl

71

Hostnet is a well-established Dutch company specializing in domain registration, web hosting, email services, VPS, SSL certificates, and website building solutions. Founded in 1999, it holds a strong market position in the Netherlands as a leading provider of online infrastructure services. The company targets individuals and businesses seeking reliable and comprehensive web presence solutions, offering a broad portfolio including managed WordPress hosting and professional website creation services. Hostnet emphasizes customer support availability seven days a week and maintains trust through certifications such as ISO 27001. Technically, Hostnet employs a modern technology stack including JavaScript frameworks (Angular), Google Tag Manager, and Cookiebot for privacy compliance. The website is fast, mobile-optimized, and accessible, reflecting a mature digital infrastructure. Hosting is provided on their own platform, ensuring control over performance and security. From a security perspective, Hostnet enforces HTTPS with strong SSL configurations and implements key security headers. The presence of a cookie consent mechanism and a phishing alert on the homepage demonstrates proactive security awareness. However, the absence of a dedicated security policy, incident response contact, and vulnerability disclosure policy suggests areas for improvement in transparency and incident readiness. Overall, Hostnet presents a low-risk profile with high business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies and establishing a formal vulnerability disclosure channel to enhance trust and compliance further.

C

Central Bank of Iceland

cb.is

75

The Central Bank of Iceland operates as the national financial authority responsible for monetary policy, financial stability, and regulatory oversight within Iceland. The website serves as a comprehensive portal offering detailed information on monetary policy, financial supervision, payments infrastructure, licensing, and statistical data. It targets a broad audience including consumers, financial institutions, and government entities, positioning itself as a trusted and authoritative source in the Icelandic financial sector. Technically, the website employs modern web technologies such as Blazor Server, JavaScript modules, and CSS3, supported by Veva CMS. It integrates accessibility features and cookie consent mechanisms, reflecting a mature digital infrastructure. The site demonstrates good performance and mobile optimization, with clear navigation and professional design. From a security perspective, the site enforces HTTPS, utilizes cookie consent management, and holds ISO 27001 certification, indicating a strong commitment to information security. However, there is room for improvement by enabling DNSSEC, adding explicit security headers, and publishing incident response contacts or vulnerability disclosure policies. Overall, the website presents a low-risk profile with high trustworthiness, professional content, and compliance with privacy regulations. Strategic enhancements in security headers and transparency around incident response would further strengthen its security posture.

M

METANET

metanet.ch

73

METANET is a well-established Swiss hosting and cloud services provider with over 25 years of experience, serving more than 60,000 customers. The company specializes in web hosting, managed WordPress cloud, VPS, dedicated servers, domain registration, and business email services, all hosted within Swiss data centers to ensure compliance with strict local data protection laws. Their market position is strong within Switzerland, focusing on both business and private customers with a comprehensive portfolio of IT infrastructure solutions. Technically, the website employs modern web technologies including JavaScript, SVG icons, and integrates Google Tag Manager and Consentmanager.net for analytics and cookie consent management. The site is responsive, fast-loading, and optimized for mobile devices, reflecting a mature digital infrastructure. SEO and accessibility features are well implemented, supporting a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the security posture is solid but could be enhanced with additional headers and transparency. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration patterns. The company demonstrates strong business credibility and compliance with GDPR through clear privacy and cookie policies. Strategic recommendations include implementing additional security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and security culture.

F

ForCamping s.r.o.

4camping.cz

73

ForCamping s.r.o. operates 4camping.cz, a leading Czech retailer specializing in outdoor and camping equipment. The company combines e-commerce with a network of 21 physical stores, offering over 12,000 products. The website targets outdoor enthusiasts, hikers, cyclists, and families, positioning itself as a market leader with recognized awards such as ShopRoku. The business model focuses on providing a comprehensive product range with customer advisory services and a loyalty program. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and a proprietary e-commerce framework named Asgard. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data limits full domain legitimacy verification, but the professional presentation and business presence support trust. Overall, the site is well-structured, user-friendly, and compliant with GDPR requirements.

D

Deutscher Ärzteverlag

praxisbedarf-aerzteverlag.de

65

Deutscher Ärzteverlag operates an e-commerce platform specializing in medical practice supplies, diagnostic equipment, medical literature, and related products targeted primarily at doctors and practice owners in Germany. The website presents a professional and well-structured online shop with clear navigation and a focus on healthcare retail. Technically, the site leverages modern JavaScript, Google Tag Manager for analytics, and Usercentrics for cookie consent management, likely built on the Shopware CMS platform. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, there is a lack of visible privacy policy and terms of service pages, which are critical for compliance and user trust. Security headers are not evident, and no explicit incident response or vulnerability disclosure information is provided, indicating room for improvement in security posture. Overall, the site is functional, professional, and trustworthy but could enhance compliance and security transparency.

K

KaffeeShop 24 GmbH

teekontor.de

54

KaffeeShop 24 GmbH operates the Sylter Teekontor online shop specializing in premium teas inspired by the island of Sylt. The company offers a wide range of teas including black, green, fruit, herbal, and specialty blends, emphasizing quality, natural ingredients, and sustainability with bio-certification. The website targets tea enthusiasts and connoisseurs seeking exclusive and high-quality tea products. Technically, the site is built on the Shopware 6 platform, uses modern JavaScript libraries, integrates PayPal for payments, and employs Google reCAPTCHA v3 for bot protection. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though no explicit security policy or incident response information is published. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and legal pages.

A

ABN AMRO Bank N.V.

abnamro.com

73

ABN AMRO Bank N.V. is a leading Dutch financial institution providing comprehensive banking services including retail, private, and corporate banking. The website serves a broad audience ranging from individual customers to large enterprises, offering services such as loans, investments, mortgages, and insurance. The bank holds a strong market position in the Netherlands with a large customer base and multiple subsidiaries. Technically, the website is built with modern frameworks and technologies, optimized for performance and mobile devices, and demonstrates good SEO and accessibility practices. Security posture is robust with HTTPS enforcement, security headers, and clear incident response contacts. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the site reflects a mature digital presence aligned with the bank's reputation and regulatory requirements.

B

Bundesnetzagentur

breitbandmessung.de

71

Breitbandmessung.de is the official broadband measurement platform operated by the German Bundesnetzagentur, providing consumers and stakeholders with tools to measure internet speed and mobile network availability. The website offers multiple services including a desktop app, browser-based speed tests, and a mobile app for detecting mobile network coverage gaps (Funkloch-App). It also publishes annual reports and interactive visualizations to inform the public about broadband performance across Germany. Technically, the website employs modern web standards with responsive design, SVG icons, and progressive web app features. It uses Bootstrap for layout and custom fonts for branding consistency. The site is optimized for mobile devices and accessibility, with proper meta tags and structured navigation. External links to official app stores enhance user engagement. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. While no explicit security headers or incident response contacts are published, no vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with anonymized user tracking and clear cookie categorization. Overall, Breitbandmessung.de demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government service. Recommendations include enhancing security header implementation, publishing a security.txt file, and providing explicit incident response information to further strengthen security posture and transparency.

D

dataforest GmbH

dataforest.net

66

dataforest GmbH is a German-based hosting and cloud services provider with over 15 years of experience, specializing in tailored IT solutions for businesses, public institutions, and freelancers. Their offerings include dedicated servers, managed services, cloud storage, DDoS protection, colocation, and IT consulting, all hosted in highly certified German data centers ensuring compliance with GDPR. The company targets a broad B2B audience, emphasizing reliability, performance, and data protection. Technically, the website is built on Webflow with modern web technologies, optimized for performance and mobile devices, and integrates a consent management platform for privacy compliance. Security posture is strong with HTTPS and no visible vulnerabilities, though explicit security headers and a public security policy are absent. WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency but does not detract from the professional presentation and service quality. Overall, dataforest presents as a credible and trustworthy hosting provider with a strong focus on German market compliance and customer support.

M

mediaform, s.r.o.

mediaform.cz

45

mediaform, s.r.o. is a boutique marketing, UX, and design studio based in Prague, Czech Republic, founded in 2011. The company specializes in creating technologically advanced and aesthetically pleasing digital applications and presentations, focusing on effective user experience and attention to detail. Their client portfolio includes notable brands such as L'Oréal, Marks & Spencer, and the Ministry of Interior of the Czech Republic, indicating a strong market position within the media and marketing sector. The website reflects a professional and consistent brand image targeting businesses seeking specialized marketing and design services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools like Google Analytics and Facebook Pixel. Hosting is provided by VAS Hosting, with domain registration dating back to 2011, consistent with the company's founding year. The site is mobile optimized and provides a good user experience, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

H

HAKOM

hakom.hr

10

HAKOM is the Croatian national regulatory agency responsible for overseeing electronic communications, postal services, and railway transport sectors. Established in 2009, it operates as a government entity providing regulatory oversight, licensing, market analysis, and consumer protection services. The website serves as an information portal and digital service platform for users and operators within these sectors, offering multiple e-services applications to facilitate electronic submissions and data management. The agency maintains a strong national presence with consistent branding and official social media channels, reinforcing its credibility and trustworthiness. Technically, the website employs standard web technologies including HTML5, CSS, JavaScript, and SVG icons, with a responsive design optimized for mobile devices. The site uses HTTPS and includes cookie consent mechanisms, demonstrating compliance with privacy regulations. While no advanced frameworks or CMS are explicitly detected, the site performs moderately well with good accessibility and SEO practices. From a security perspective, the site benefits from HTTPS and cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data confirms domain legitimacy with consistent registration details matching the agency's official profile. Overall, HAKOM's website is a professional, secure, and compliant platform that effectively supports its regulatory mission. Strategic improvements could include publishing detailed security policies and incident response information to enhance transparency and trust further.

B

Badische Neueste Nachrichten

bnn.de

61

Badische Neueste Nachrichten (BNN) is a well-established regional daily newspaper serving Karlsruhe and its surrounding regions in Germany. The website provides comprehensive local news coverage, subscription services, and digital ePaper access, positioning itself as a leading regional media outlet. The business model focuses on subscription revenue, classified ads, and digital content delivery, targeting regional readers interested in local news and events. The company operates under Badendruck GmbH, with a consistent and professional brand presence across its digital platforms. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager, and Chartbeat analytics, alongside a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Hosting and DNS are managed via nodesecure.com servers, indicating professional infrastructure. From a security perspective, the site uses HTTPS and cookie consent mechanisms effectively, though explicit security headers are not evident in the provided data. No critical vulnerabilities or exposed sensitive data were detected. Privacy policies and terms of service are present and comprehensive, supporting regulatory compliance. The absence of direct contact emails or phone numbers in the HTML suggests contact is managed through dedicated service portals. Overall, BNN.de demonstrates a mature digital presence with strong business credibility and compliance posture. Strategic improvements could include enhanced security header implementation and publishing explicit incident response contacts to further strengthen trust and security posture.

G

graz.social

graz.social

71

graz.social operates as a regional Mastodon social networking server primarily serving the Graz area and its surroundings. It is managed by a non-profit association focused on promoting ethical digital culture. The platform leverages the open-source Mastodon software (version 4.4.7) and provides a community-driven social media experience within the fediverse. The website content includes user-generated posts on diverse topics, reflecting an active and engaged user base. The business model is community-centric, emphasizing privacy and ethical digital interaction rather than commercial gain. Technically, the site employs modern web technologies including React and Ruby on Rails frameworks, with modular JavaScript and SVG-based UI elements. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured content. Performance is moderate, with no significant technical debt or errors detected. Hosting details are not explicitly disclosed. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks some security headers and does not provide a cookie consent mechanism or terms of service, which are areas for improvement. No vulnerabilities or malicious content were detected. Privacy compliance is basic, with a privacy policy present but no explicit GDPR compliance indicators or data protection officer contact information. Overall, graz.social presents a trustworthy and well-maintained community platform with a strong ethical focus. Strategic recommendations include enhancing privacy compliance with cookie consent, publishing terms of service, adding security headers, and providing clearer contact and incident response information to strengthen trust and security posture.

E

Erhvervsstyrelsen

boligejer.dk

10

Boligejer.dk is an official Danish government website operated by Erhvervsstyrelsen, providing comprehensive guides, tools, and data services for individuals involved in buying or selling property in Denmark. The platform offers property search capabilities, access to property data reports, and expert consultation services, positioning itself as a trusted and authoritative resource in the real estate sector. The website is well-branded with consistent government identity and targets a general audience interested in property transactions.

S

Signify Holding

signify.com

67

Signify Holding operates as a global leader in connected LED lighting products, systems, and services, serving both business and private customers. The company maintains a strong market position with a comprehensive portfolio including well-known brands such as Philips and Interact. The website reflects a mature digital presence with professional design, clear navigation, and targeted content for various customer segments including lighting professionals and system integrators. Technically, the site is built on Adobe Experience Manager, leveraging modern web technologies and performance optimization tools. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates high professionalism and trustworthiness, although the lack of WHOIS data slightly reduces domain registration transparency.

M

Město Milovice

mesto-milovice.cz

48

Město Milovice operates an official municipal website serving residents and visitors with comprehensive local government information, including news, public notices, contacts, and event calendars. The site is positioned as the authoritative source for municipal services in Milovice, Czech Republic, and targets local citizens and stakeholders. The business model is a government service portal focused on transparency and community engagement. Technically, the website uses a modern CMS platform (Vismo), employs HTTPS for secure communications, integrates Google reCAPTCHA for form security, and offers multilingual support via Google Translate. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers are missing. From a security perspective, the site maintains a solid posture with encrypted connections and anti-bot measures but lacks explicit incident response contacts and advanced security headers. No vulnerabilities or suspicious content were detected. Privacy compliance is basic but present, with GDPR-related information and cookie policy available. Overall, the website is trustworthy, professional, and well-maintained, with a strong legitimacy score based on domain age and WHOIS data. Strategic improvements could enhance security headers and incident response transparency to further strengthen trust and compliance.

Č

Český rozhlas

irozhlas.cz

64

iROZHLAS is the official news portal of Český rozhlas, the Czech public radio broadcaster. It provides reliable and fast news coverage from the Czech Republic and worldwide, including audio content and live broadcasts. The website is professionally designed, mobile-optimized, and rich in content, targeting the general public interested in news and current affairs. Technically, it uses a modern tech stack including Google Tag Manager, Chartbeat, and Gemius for analytics, and implements cookie consent mechanisms to comply with privacy regulations. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. WHOIS data is unavailable, likely due to privacy protection, but the site’s branding and content quality indicate high legitimacy. Overall, the site is a trusted and authoritative media source in the Czech Republic.

S

Stadtwerke Schwerin GmbH

swsn.de

49

Stadtwerke Schwerin GmbH is a regional utility provider based in Germany, offering a broad range of services including electricity, gas, heating, fiber-optic internet, and water supply. The company positions itself as a reliable and experienced service provider with over 30 years of operation, targeting both private and business customers in the Schwerin region. Their business model focuses on comprehensive energy and telecommunications services with customer-centric portals and digital tools such as tariff calculators. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, the website is built on Drupal 10, leveraging modern web technologies and privacy-focused analytics via Matomo with cookies disabled. The presence of Usercentrics consent management indicates a strong commitment to GDPR compliance and user privacy. The site uses HTTPS and shows good security practices, although explicit security headers and a published security policy are not evident. No security incidents or vulnerabilities are visible in the content. Overall, the security posture is solid with room for improvement in publishing incident response contacts and security policies. The domain WHOIS data is minimal but does not raise concerns, aligning with the company's regional and established presence. Privacy and cookie policies are comprehensive and implemented with consent mechanisms. The site is free from adult or questionable content, making it safe for general audiences. Strategically, the company should consider enhancing transparency around security policies and incident response to further build trust. Continued investment in technical modernization and privacy compliance will support their market position as a trusted regional utility provider.

E

Erhvervsstyrelsen

erhvervsstyrelsen.dk

57

Erhvervsstyrelsen is a Danish government agency dedicated to simplifying and promoting responsible business operations across Denmark. The website serves as an authoritative portal offering regulatory guidance, support services for startups and existing businesses, and information on sustainability reporting, digital administration, and international trade. It holds a strong market position as the official regulatory body with a large organizational size and a history dating back to 2001. The site is well-branded, professionally designed, and targets Danish businesses and entrepreneurs.

The website www.rostock.de serves as the official city portal for the Hanseatic and University City of Rostock, Germany. It provides comprehensive information on tourism, lifestyle, culture, activities, historical and maritime topics, targeting residents and visitors alike. The portal is positioned as a government entity's digital presence, offering key city-related services and information. Technically, the site is built on the Contao Open Source CMS platform, employs modern web technologies including lazy loading and cookie consent via Cookiebot, and integrates Google Tag Manager for analytics. The site demonstrates good mobile optimization and SEO practices, although accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place; however, the absence of explicit security headers and a published security policy limits its security maturity. Privacy compliance is partial, with cookie consent present but no visible privacy policy or terms of service pages. WHOIS data indicates hosting within academic and government infrastructure, consistent with the city’s profile, though registrant details are minimal. Overall, the site is trustworthy and professional but would benefit from enhanced transparency in privacy and security policies.

S

Sinch

sinch.com

73

Sinch is a well-established enterprise technology company specializing in programmable communication APIs including SMS, voice, email, video, and verification services. Recognized as a leader in the CPaaS market by Gartner, Sinch targets developers, enterprises, telcos, and marketing teams with a comprehensive suite of communication solutions. The website reflects a mature digital presence with excellent content quality, clear navigation, and strong branding consistency. Technically, the site is built on WordPress with modern SEO and performance optimizations, hosted on AWS infrastructure. Security posture is robust with HTTPS enforcement, ISO 27001 certification, and domain security best practices, though DNSSEC is not enabled and incident response contacts are not explicitly published. Overall, Sinch demonstrates a high level of business credibility and digital maturity.

D

Danish Business Authority

danishbusinessauthority.dk

59

The Danish Business Authority is a Danish government agency dedicated to facilitating and regulating business activities within Denmark. The website serves as an authoritative source for entrepreneurs, business owners, and international trade participants, offering services such as business registration guidance, export control information, and access to relevant business registers. The agency positions itself as a key enabler for business growth and compliance in Denmark, supported by a well-structured and content-rich website. Technically, the website is built on the Drupal CMS platform, employing modern web technologies including JavaScript and SVG icons. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR standards. Analytics are conducted via Piwik Pro, with explicit user consent for cookies. From a security perspective, the website enforces HTTPS and employs cookie consent for tracking. However, it lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options, which are recommended to enhance security posture. No security policy or incident response contacts are published, which could be improved to increase transparency and readiness. Overall, the website is trustworthy, professional, and well-maintained, reflecting the official nature of the Danish Business Authority. The domain registration data supports its legitimacy with a consistent history and no privacy protection masking ownership. Strategic recommendations include enabling DNSSEC, publishing security policies, and implementing additional security headers to further strengthen the security posture.

S

Stadtwerke Schwerin GmbH

stadtwerke-schwerin.de

50

Stadtwerke Schwerin GmbH is a regional utility provider delivering electricity, gas, heat, fiber-optic internet, and water services primarily to customers in Schwerin, Germany. The company positions itself as a reliable and experienced service provider with over 30 years in the market, emphasizing personal customer service and sustainable regional engagement. Their website targets both private and business customers, offering detailed product information, customer portals, and interactive tariff calculators. Technically, the site is built on Drupal 10, uses Matomo for analytics, and integrates Usercentrics for cookie consent management, reflecting a modern and privacy-conscious digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website is professional, well-structured, and trustworthy, supporting the company's market position as a key regional energy and telecommunications provider.

M

MASLATON Rechtsanwaltsgesellschaft mbH

maslaton.de

42

MASLATON Rechtsanwaltsgesellschaft mbH is a German law firm specializing in renewable energy law, air traffic law, and other civil and public law areas. With headquarters in Leipzig and branches in Munich and Cologne, the firm serves businesses, municipalities, and aviation clients. It holds a strong market position as a top-ranked law firm in energy law, offering comprehensive legal services including wind energy, biomasse, photovoltaic, and electromobility. The website reflects a professional and trustworthy brand with clear contact channels and client testimonials. Technically, the website uses modern web technologies including Matomo analytics configured for privacy, SVG icons, and responsive design. Hosting is via kasserver.com, and the site is served over HTTPS with good SSL configuration. However, no explicit cookie consent mechanism or advanced security headers were detected, indicating room for improvement in privacy compliance and security hardening. Security posture is solid with no visible vulnerabilities or exposed sensitive data, but the absence of a security policy or incident response contacts suggests limited transparency in security governance. The firm demonstrates GDPR compliance through a comprehensive privacy policy and cookie-less tracking setup. Overall, the website and domain registration data align well, indicating a legitimate and credible business presence. Strategic recommendations include implementing cookie consent, enhancing security headers, and publishing security and incident response policies to further strengthen trust and compliance.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-bettgefluester.de

42

Bettgeflüster is a German health campaign operated by the BKV association, focusing on promoting healthy sleep habits through educational content, multimedia resources, and downloadable materials. The campaign targets the general public interested in improving sleep quality and overall health. The website is built on WordPress, leveraging modern web technologies such as Breeze caching and Google Fonts, and is hosted with domain control services consistent with the domain registration. The site is well-structured, mobile-optimized, and provides clear navigation and relevant content. Security posture is solid with HTTPS enforced, though it lacks some security headers and cookie consent mechanisms, which are recommended for GDPR compliance. Contact information is clearly provided with official email and physical address, enhancing business credibility.

O

OneTicket.cz

oneticket.cz

67

OneTicket.cz is a Czech Republic-based transportation ticketing platform offering a unified railway ticketing system across multiple carriers. Operated by the state enterprise CENDIS under the Ministry of Transport, it provides various ticket types including single, route, and network passes, as well as family and corporate accounts. The platform targets railway passengers seeking convenient and flexible travel options within the Czech rail network. The website is professionally designed, mobile-optimized, and provides comprehensive service information and user support. Technically, it leverages modern web technologies such as React and Google Fonts, with a moderate performance profile and good SEO and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit incident response policies are absent. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates high business credibility and trustworthiness with official backing and transparent contact information.

B

BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V.

bkk-like-dich-selbst.de

41

The website 'BKK-Kampagne: Like Dich selbst!' is a health promotion platform operated by the non-profit association BKV – Interessengemeinschaft Betriebliche Krankenversicherung e. V. It focuses on educating the German public about nutrition, exercise, stress management, and addiction prevention through webinars and podcasts. The site targets a general audience interested in improving personal health and wellness. Technically, the site is built on WordPress with modern web technologies such as jQuery and Google Fonts, hosted with domain control via GoDaddy DNS. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but could improve in security and privacy transparency.

M

mhplus Krankenkasse

mhplus-krankenkasse.de

53

mhplus Krankenkasse operates as a health insurance provider in Germany, targeting private customers with a focus on excellent services and consultation. The website is built on TYPO3 CMS and hosted on plusserver.com infrastructure, indicating a stable and professional technical foundation. The site is well-designed, mobile-optimized, and provides relevant content for its audience. However, the absence of explicit privacy and cookie policies, security headers, and contact information reduces the overall security and compliance posture. The WHOIS data aligns with the business claims, showing legitimacy and consistent domain registration. Strategic improvements in privacy compliance and security practices are recommended to enhance trust and regulatory adherence.

D

DRF Luftrettung

drf-luftrettung-shop.de

54

DRF Luftrettung Shop is an e-commerce website dedicated to selling branded merchandise related to the DRF Luftrettung air rescue organization. The site offers a variety of products including patches, clothing, gift items, and helicopter models, targeting supporters and the general public interested in the organization. The website is built on the Shopware 6 platform, integrating PayPal for payment processing and featuring accessibility tools to enhance user experience. While the site demonstrates good technical infrastructure and a consistent brand presence, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is solid with HTTPS and CAPTCHA usage, but could be improved by adding security headers and a vulnerability disclosure policy.

Z

ZEISS

zeiss.co.uk

62

ZEISS United Kingdom is a regional corporate website for ZEISS, a globally recognized technology enterprise specializing in optics and optoelectronics. The site presents a professional and well-structured digital presence, reflecting the company's international market position and focus on vision care and medical technology sectors. The website leverages modern technologies including Adobe Experience Manager, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response information are absent. Privacy compliance is supported by a cookie consent mechanism, but no dedicated privacy policy page was detected on the homepage. Overall, the site is safe, trustworthy, and well-optimized for users, though WHOIS data for the www subdomain is unavailable due to query limitations, the domain is consistent with ZEISS's corporate branding and presence.

Z

ZEISS

zeiss.ch

68

ZEISS Switzerland operates as a regional corporate website for the global ZEISS Group, a leading technology company specializing in optics and optoelectronics. The website serves as a language selection gateway directing users to localized content in German and French. The company is positioned as a major player in the technology sector with a focus on precision optics and related services. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and integrated with Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not publicly visible on this page. Overall, the website reflects a professional and trustworthy corporate presence with good compliance to privacy regulations.

Z

ZEISS

zeiss.se

70

ZEISS is a globally recognized leader in optics and optoelectronics, with a strong presence in Sweden as evidenced by this localized corporate website. The site provides information about ZEISS's vision care and medical technology sectors, targeting both general and professional audiences. The website is built on a modern technical infrastructure, leveraging Adobe Experience Manager CMS, Google Tag Manager for analytics, and OneTrust for cookie consent management. The design is professional, mobile-optimized, and accessible, reflecting a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and published security policies could enhance trust further. The absence of WHOIS data for the subdomain is consistent with it being a subdomain rather than a separately registered domain, and does not detract from the legitimacy of the site. Overall, the site demonstrates a high level of professionalism and compliance with privacy regulations, making it a trustworthy digital asset for ZEISS in Sweden.

Z

ZEISS

zeiss.es

10

ZEISS España is the Spanish branch of ZEISS, a globally recognized leader in optics and optoelectronics technology. The website presents a professional corporate presence with a focus on vision care, medical technology, and industrial applications. The site is well-structured, mobile-optimized, and includes modern tracking and consent technologies, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not evident in the provided data. The absence of WHOIS data limits domain registration verification, but the branding and content strongly support legitimacy. Overall, the site is a reliable and professional representation of a major technology company in Spain.

Z

ZEISS

zeiss.co.kr

62

ZEISS Korea operates as a regional branch of the global ZEISS Group, a leading technology company specializing in optics and optoelectronics. The website presents a professional corporate image with content focused on vision care, medical technology, and semiconductor manufacturing technology. The site is built on Adobe Experience Manager and employs modern web technologies including Google Tag Manager and OneTrust for cookie consent. Despite the professional presentation and rich multimedia content, the domain WHOIS data is missing or indicates the domain is not registered, which is inconsistent with the expected legitimacy of a global brand. No explicit privacy policy or terms of service were found on the main page, though a contact page is linked. The site uses HTTPS and has a cookie consent mechanism, but lacks visible security headers and published security policies. Overall, the website is well designed and functional but the domain registration anomaly and limited privacy disclosures present concerns that should be addressed.

Z

ZEISS

zeiss.co.za

64

ZEISS South Africa is a regional corporate website for ZEISS, a globally recognized technology enterprise specializing in optics and optoelectronics. The website presents a professional and consistent brand image aligned with the international ZEISS Group, targeting both general and professional audiences in the vision care, medical technology, and semiconductor manufacturing sectors. The site leverages modern web technologies including Adobe Experience Manager CMS and integrates Google Tag Manager and OneTrust for analytics and cookie consent management. Security posture is moderate with HTTPS implied but lacks visible security headers and public security policies. WHOIS data is unavailable, likely due to privacy protection, but the website's professional presentation and global brand association support its legitimacy. Overall, the site is well-structured, accessible, and optimized for SEO and mobile use, though it would benefit from publishing explicit privacy and security policies.

Z

ZEISS

zeiss.sk

69

ZEISS Slovenská republika is a regional website representing ZEISS, an international leader in optics and optoelectronics technology. The site targets both general and professional audiences interested in vision care and medical technology solutions. The business model focuses on manufacturing and providing advanced optical and medical technology products and services. The website reflects a mature digital presence with a modern CMS (Adobe Experience Manager), good SEO, and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, trustworthy, and aligned with the corporate brand.

Z

ZEISS

zeiss.ro

68

ZEISS România is the Romanian branch of ZEISS, a globally recognized leader in optics and optoelectronics technology. The website presents a professional corporate presence with a focus on vision care and medical technology sectors. The site is built on Adobe Experience Manager, leveraging modern web technologies and includes a cookie consent mechanism compliant with GDPR standards. While the WHOIS data is privacy protected under ROTLD, the website content and branding strongly align with the ZEISS international brand, indicating legitimacy and trustworthiness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital infrastructure suitable for an enterprise-level technology company.

Z

ZEISS

zeiss.pl

69

ZEISS Polska is the Polish branch of the globally recognized Carl Zeiss AG, specializing in optical and optoelectronic technologies. The website serves as a corporate portal providing information about the company's products and services in Poland, targeting both business and general audiences. The site is well-branded, multilingual, and professionally designed, reflecting the company's strong market position in the technology sector. Technically, the website is built on Adobe Experience Manager, uses modern JavaScript libraries, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The absence of WHOIS data is due to registry privacy policies and does not detract from the site's legitimacy. Overall, the website demonstrates a mature digital presence suitable for an enterprise-level technology company.