Security Directory

M

MarkerCS

markercs.cz

45

MarkerCS is a small non-profit organization focused on providing non-formal education training primarily for youth workers and teachers in Slovakia and the Czech Republic. Their website offers detailed information about their training programs, educational principles, and testimonials from past participants, positioning them as a niche educational provider supported by the Erasmus+ program. Technically, the website is built on WordPress using the Astra theme and Elementor page builder, hosted by a Czech registrar and hosting provider. The site is moderately performant, mobile-optimized, and SEO-friendly but lacks some advanced accessibility features. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but the absence of security headers and formal privacy and cookie policies indicates room for improvement. Overall, the website is professional and trustworthy but could enhance compliance and security transparency.

Y

YoDel

yodel.sk

42

YoDel is a small-scale educational conference focused on new approaches to working with young people, primarily targeting youth workers and educators in Slovakia. The website provides detailed program information and workshop descriptions, demonstrating a clear business purpose and target audience. Technically, the site is built on WordPress using Elementor and Yoast SEO, with modern fonts and some SEO optimization. However, Google Analytics is installed but not configured, and no privacy or cookie policies are present, which impacts privacy compliance. Security posture is moderate with HTTPS enabled but lacking security headers and explicit security policies. Overall, the site is professional and functional but could improve in privacy and security transparency.

M

MSE Camsoft GmbH

camsoft.de

52

MSE Camsoft GmbH is a German-based small technology company specializing in custom software development with a focus on mobile software and dispatch systems for industrial and commercial sectors such as construction, airport services, and vehicle rental. Their business model is B2B, providing tailored software solutions integrated into existing IT environments. The website is professionally designed with clear navigation and relevant content targeting business clients. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, but relies on an outdated Google Analytics script and lacks visible security headers, indicating room for modernization and security improvements. Security posture is moderate with no critical vulnerabilities detected but missing best practices such as security headers and cookie consent mechanisms. WHOIS data aligns well with the website's German business identity, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

E

Evangelische Kirche in Mitteldeutschland (EKM)

ekmd.de

48

The Evangelische Kirche in Mitteldeutschland (EKM) is a large, established religious organization serving multiple German federal states including Sachsen-Anhalt, Thüringen, parts of Sachsen and Brandenburg. The website serves as an information hub for religious services, community engagement, social justice initiatives, press releases, and career opportunities. It targets a broad audience interested in religious and social activities within central Germany. The organization maintains a strong regional presence with official contact points and active social media channels. Technically, the website uses modern frameworks such as Symfony, Bootstrap, and Matomo analytics, hosted via INWX, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and some security best practices, though explicit security and privacy policies are not prominently linked. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission and community engagement.

K

KOLL Steine

koll-steine.de

46

KOLL Steine operates as a specialized supplier of stone products, catering to customers interested in natural stones for construction and landscaping. The website is built on WordPress using the Avada theme and integrates common SEO and analytics tools such as Yoast SEO and Google Analytics. The technical infrastructure is standard for small to medium-sized businesses, hosted on rzone.de servers. Security posture is moderate but lacks advanced security headers and explicit privacy or cookie policies, which are critical for GDPR compliance. No incident response or vulnerability disclosure information is provided, indicating room for improvement in security transparency. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

I

inspiration Miller

inspiration-miller.de

42

Inspiration Miller is a small freelance consultancy based in Germany specializing in IT consulting, data protection, and auditing services. The business leverages over 25 years of experience and cooperates with reputable certification bodies such as DEKRA and TÜV-Süd. The website presents a professional image with clear contact information and a focus on compliance and certifications. Technically, the site is built on Joomla CMS with standard modern libraries and includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and well-suited for its target SME audience in technology and related sectors.

Mobilis Sport's website functions primarily as a login portal for users, likely members or customers of a sports-related service based in Hungary. The site provides minimal public-facing content beyond the login form and basic cookie usage disclosure. The business appears to be small and relatively young, founded around 2020, with no detailed business description or contact information available on the site. The technical infrastructure uses common open-source libraries such as AngularJS, jQuery, and AdminLTE for UI styling, indicating a moderate level of digital maturity but with room for modernization and improvement in SEO and accessibility. From a security perspective, the site employs basic best practices such as HTTPS assumed usage and password masking on login forms. However, it lacks important security headers, CSRF protections, and a proper cookie consent mechanism, which lowers its security posture. No explicit privacy policy or terms of service are present, which raises compliance concerns especially under GDPR. The absence of contact information and business credentials further limits trust and credibility. Overall, the website is functional for its purpose but lacks comprehensive security, privacy, and business transparency features. The domain age and WHOIS data suggest a legitimate small business operation, but the site would benefit from enhanced security controls, privacy disclosures, and richer content to improve user trust and compliance. Strategic recommendations include implementing full GDPR-compliant privacy and cookie policies, adding security headers and CSRF protections, fixing minor JavaScript issues, and providing clear business contact information to enhance credibility and user confidence.

T

Triversum Kft.

ametszet.hu

40

aMetszet, operated by Triversum Kft., is a Hungarian technology company offering integrated online services focused on transparent and simple data management. Their platform includes CRM, project management, restaurant software, inventory management, e-learning, and content management systems, targeting businesses seeking unified data solutions. The website presents a professional design with good user experience and clear navigation, though it lacks comprehensive privacy and security policies. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and Owl Carousel, ensuring mobile responsiveness and moderate performance. However, security posture is limited due to missing security headers and absence of HTTPS verification in the provided data. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the site is safe for general audiences and shows moderate trustworthiness but would benefit from enhanced security and compliance measures.

H

Hard Rock Hotels

hardrockhotels.com

72

Hard Rock Hotels operates a global hospitality and entertainment brand specializing in hotels, resorts, and casinos. The website presents a professional and consistent brand image targeting travelers and casino visitors. The business model focuses on providing hotel accommodations combined with casino and resort experiences, positioning itself as a major player in the hospitality industry. Technically, the site uses modern JavaScript libraries, multiple tag management systems, and analytics tools, indicating a mature digital infrastructure. However, mobile optimization and accessibility are basic and could be improved. Security posture is generally strong with HTTPS enforced and use of reputable third-party analytics, but lacks visible security headers and formal privacy or cookie policies. The absence of WHOIS data for the subdomain is expected and does not detract from legitimacy, as the subdomain is part of the larger hardrock.com domain. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.

L

Landeskirche Hannovers

kimusearch.de

59

KiMuSearch is a specialized online platform operated under the Evangelische Landeskirche Hannovers, designed to connect church musicians with congregations seeking musical services for worship and events. The platform facilitates registrations for both musicians and congregations, enabling posting and responding to service requests within a regional context. The website is professionally designed with a clear focus on its niche audience, providing essential features such as secure login and event listings. Technically, the site is built on Ruby on Rails with Bootstrap and Font Awesome for UI, and uses Matomo for analytics, indicating a moderate level of digital maturity. Security measures include HTTPS enforcement and CSRF protection, though some security headers and cookie consent mechanisms are missing. Overall, the site demonstrates a solid security posture appropriate for its scope, with room for improvement in privacy compliance and incident response transparency.

J

JBMC Software

directadmin.com

65

DirectAdmin is a well-established Canadian software company specializing in web hosting control panel solutions. With over 20 years in the market, it offers a lightweight, efficient, and user-friendly control panel designed for server administrators, resellers, and hosting companies. The website presents a professional and consistent brand image, highlighting key features such as automatic SSL, HTTP/2 support, and multi-level user access. The business model centers on software licensing and support services, targeting the web hosting industry globally. Technically, the website employs modern front-end technologies including jQuery, Bootstrap, and Google reCAPTCHA v3 for bot protection. The use of Cloudflare DNS and SSL indicates a secure hosting environment. Performance and mobile optimization are good, though accessibility and SEO could be improved. The site lacks explicit security headers and cookie consent mechanisms, which are areas for enhancement. From a security perspective, the site benefits from HTTPS and reCAPTCHA integration but lacks DNSSEC and visible security headers. No vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms the domain's legitimacy with consistent registration details and a long operational history. Privacy compliance is basic, with a privacy policy present but no clear GDPR compliance or cookie consent. Overall, the website is professional, trustworthy, and functional with minor gaps in privacy compliance and security best practices. Strategic improvements in these areas would enhance the site's security posture and regulatory adherence.

C

Christof Brand GmbH

christof-brand.de

54

Christof Brand GmbH is a medium-sized German company specializing in construction services including demolition, earthworks, machine rental, and recycling. The company positions itself as a reliable partner with a modern machinery fleet equipped with GPS and laser technology, targeting both private and commercial clients in the construction sector. Their website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Joomla CMS with Bootstrap and uses Matomo analytics, indicating a moderate level of digital maturity and privacy awareness. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response policies. Overall, the website is accessible, well-structured, and trustworthy, though improvements in security policies and WHOIS transparency could enhance credibility further.

G

GREEN IT Das Systemhaus GmbH

greenit.systems

72

GREEN IT Das Systemhaus GmbH is a small German IT system house specializing in sustainable IT solutions, based in Dortmund. The company positions itself as a provider that combines ecological and economic aspects to address current and future IT challenges. The website is professionally designed, well-structured, and optimized for SEO and mobile devices, reflecting a mature digital presence. Technically, the site is built on WordPress with Elementor and integrates advanced cookie consent management, multiple analytics, and marketing tools, indicating a modern and compliant infrastructure. Security posture is strong with HTTPS, Wordfence protection, and consent-based data collection, though some security headers could be improved. WHOIS data is unavailable, but the website's professional appearance and consistent branding support legitimacy. Overall, the site demonstrates a solid business and technical foundation with good privacy and security practices.

B

BikeFair | Marketplace For Bikes | Buy or Sell Your Bike

bikefair.org

62

BikeFair.org operates as an online marketplace specializing in the buying and selling of new and second-hand bicycles. The platform targets local bike enthusiasts and buyers, offering a searchable inventory of over 5,400 bikes with filters based on location and bike attributes. The business appears to be a small-sized entity founded in 2019, focusing on the transportation sector with a niche in cycling commerce. Technically, the website leverages modern web technologies including Nuxt.js, Cloudflare DNS, and CDN hosting via DigitalOcean Spaces, complemented by popular analytics and advertising tools such as Google Analytics, Microsoft Clarity, Facebook Pixel, and Bing Ads. The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms, which also impacts user trust and regulatory adherence. Overall, the website is functional and professional but would benefit from improved transparency and security practices.

I

Internetagentur dd-media.de

werratal-wetter.de

50

The website www.werratal-wetter.de serves as a regional weather data and information portal focused on the Kalirevier area in Germany. It provides current and historical weather data, local event information, and regional news links. The site is operated by Internetagentur dd-media.de, a small agency specializing in regional digital services. The business model centers on providing free weather data and regional content to residents and visitors, supported by related regional sites and a marketplace. Technically, the site uses a modern technology stack including Bootstrap, jQuery, and Matomo analytics, with good mobile optimization and basic accessibility features. Security posture is solid with HTTPS and cookie consent management, though it lacks advanced security headers and explicit incident response information. Privacy compliance is well addressed with GDPR-aligned policies and a Usercentrics consent mechanism. Overall, the site is professional, trustworthy, and well-branded for its niche regional audience.

U

unimess GmbH

anwaltskanzlei-marketing.de

42

The website represents unimess GmbH, a specialized marketing agency focused on legal professionals such as lawyers and tax advisors in Germany. Their services include internet presence creation, marketing consulting, print media, and office equipment for law firms. The company positions itself as an experienced niche player with a nationwide clientele. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and well-structured, providing a professional user experience. Security posture is moderate; while HTTPS is assumed, no explicit security headers or policies are visible, and no cookie consent mechanism is implemented despite analytics usage. WHOIS data aligns with the company branding, indicating legitimacy. Overall, the site is professional and trustworthy but could improve in security and privacy compliance aspects.

The website www.werbeagentur-juwelier.de represents unimess GmbH, a small specialized advertising agency focused on jewelers and jewelry manufacturers. The company offers services including internet agency solutions, marketing, and advertising tailored to this niche market. The website content is professional and consistent with the business focus, targeting German-speaking jewelers and related manufacturers. The technical infrastructure employs modern front-end libraries such as jQuery, Bootstrap, and Font Awesome, with Matomo analytics integrated for user tracking without cookies. The site is mobile optimized and provides a good user experience with clear navigation and design consistency. However, contact information is not explicitly visible on the main page, and no forms or social media links are present in the analyzed content.

I

INTERVISTA AG

intervista-ag.de

49

INTERVISTA AG operates as a specialized provider of sales automation and digitalization software solutions primarily targeting the insurance and finance sectors in Germany. Their offerings include consulting, software development, and operational services designed to enhance sales efficiency and digital transformation for their clients. The company positions itself as a partner for businesses seeking to outperform competitors through innovative technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as Beaver Builder and Yoast SEO, indicating a mature digital infrastructure. The presence of tracking and analytics tools like Matomo and Leadinfo suggests an active approach to user engagement and lead generation, although privacy compliance mechanisms are lacking. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and explicit policies. Overall, the website is professional and content-rich but would benefit from enhanced privacy and security disclosures to improve trust and compliance.

O

Oberfranken Offensiv e.V.

oberfranken.de

50

Oberfranken Offensiv e.V. is a regional non-profit association dedicated to promoting the development, innovation, and cultural richness of the Oberfranken region in Germany. The website serves as an information portal highlighting regional projects, events, and campaigns to foster community engagement and regional pride. It targets residents, businesses, and institutions interested in the region's growth and quality of life. The association positions itself as a key regional player with a focus on innovation and community collaboration. Technically, the website is built on the Weblication CMS platform and uses modern web technologies including JavaScript, jQuery, and Font Awesome. It employs Piwik/Matomo for analytics, indicating a preference for privacy-conscious tracking. The site is mobile-optimized with good SEO practices and a cookie consent mechanism compliant with GDPR. Performance is moderate with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and provides cookie consent controls but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's regional and organizational identity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with privacy regulations, though it could enhance its security posture and transparency by adding formal security policies and incident response information.

Norsk Havforskerforening is a Norwegian non-profit association dedicated to marine research and science. The organization primarily serves the Norwegian marine research community by organizing annual conferences, disseminating news, and providing membership services. The website is professionally maintained using WordPress and features content primarily in Norwegian, with some English posts. It targets marine researchers, students, and professionals interested in marine science. The association's market position is specialized and regional, focusing on education and non-profit sectors. Technically, the website uses common web technologies such as WordPress, jQuery, and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks some security headers and visible privacy or cookie policies, indicating room for improvement in compliance and security best practices. The domain WHOIS data is not publicly available, suggesting privacy protection, which is justified for this type of organization. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures.

N

Norsk Biologforening

bio.no

51

Norsk Biologforening is a well-established Norwegian non-profit organization focused on biology education and community engagement. Founded in 1981, it serves a niche audience of biology professionals and enthusiasts through memberships, conferences, publications, and expert Q&A services. The website reflects a consistent brand and provides relevant content and contact information, supporting its credibility. Technically, the site is built on Joomla CMS with Gantry 5 framework and uses modern frontend libraries, offering a good user experience and mobile optimization. However, the site lacks visible privacy and cookie policies, security headers, and explicit security or incident response policies, indicating areas for compliance and security improvement. No blocking or WAF mechanisms were detected, and the domain age supports legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

Vogel Software GmbH is a small, established German software company specializing in custom software development, particularly in Warenwirtschaft (inventory management) and Produktionsplanung (production planning) systems using Visual FoxPro and .NET technologies. Founded in 1989, the company offers tailored software solutions, coaching, and porting services, targeting SMEs in various sectors including trade, industry, and engineering firms. Their flagship products include vmAuftrag and the StarLib C# framework. The website reflects a professional and consistent brand image with detailed business and contact information, supporting their market credibility. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Google reCAPTCHA for form security. Hosting is managed via nshost2.de name servers, and the site includes analytics via Piwik. While the site is mobile-optimized and SEO-friendly, some security best practices like security headers (CSP, HSTS) are missing, and no cookie consent mechanism is implemented despite cookie usage. From a security perspective, the site uses HTTPS and protects its contact form with reCAPTCHA, but lacks explicit security policies and incident response information. The WHOIS data confirms the domain's legitimacy and long-standing registration consistent with the company's history. Overall, the site is trustworthy, safe, and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture. The risk level is low, with no signs of malicious content or blocking mechanisms. Strategic recommendations include implementing security headers, adding cookie consent, and publishing security policies to strengthen compliance and trust.

O

Organic Energy (UK) Limited

organicenergy.co.uk

56

Organic Energy (UK) Limited is a well-established UK-based supplier specializing in biomass boilers, wood pellet stoves, and solar thermal heating systems. The company targets homeowners and businesses across the UK and Ireland seeking sustainable and eco-friendly energy solutions. They offer expert system design, installation support through a network of installers, and exclusive access to the advanced ÖkoFEN Pellematic biomass boiler range. The website reflects a professional and consistent brand presence with clear contact details and customer testimonials, positioning the company as a trusted player in the renewable energy sector. Technically, the website is built on Drupal 7 with a range of JavaScript libraries including jQuery, Flexslider, and Colorbox, and integrates Google Analytics and Google Tag Manager for user tracking. The site is mobile-optimized with good SEO practices and moderate performance. Hosting is provided by Fasthosts Internet Ltd, a reputable registrar and hosting provider. However, some technical debt is evident with the use of an outdated jQuery version and lack of modern security headers. From a security perspective, the site uses HTTPS with good SSL configuration and anonymizes IP addresses in analytics. Nonetheless, it lacks several recommended security headers and a cookie consent mechanism, which impacts GDPR compliance. No incident response or vulnerability disclosure policies are published, indicating room for improvement in security governance. Overall, the website is safe, professional, and credible with a strong business foundation. Strategic enhancements in security headers, privacy compliance, and modernization of technical components would further strengthen its posture and trustworthiness.

Kassensuche GmbH operates a German-language online portal focused on helping users find and compare statutory health insurance providers (gesetzliche Krankenkassen) in Germany. The website offers multiple tools including a contribution calculator, user-type based search, and detailed benefit comparisons. The portal targets insured individuals in Germany seeking optimal health insurance options. Technically, the site uses modern JavaScript modules, jQuery, and lazy loading techniques to enhance performance and user experience. The site is hosted with reputable DNS providers and uses HTTPS, ensuring secure connections. Security posture is adequate but could be improved by adding security headers and explicit incident response information. Privacy compliance is partially met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

M

Mario Fehr

mariofehr.ch

49

The website mariofehr.ch serves as the official online presence of Mario Fehr, a government official and Regierungsrat of the Canton of Zurich, Switzerland. It provides political information, updates, and personal engagement content targeted primarily at the citizens of Zurich. The site is built on Joomla CMS and incorporates modern web technologies including jQuery and Google Analytics for visitor tracking. The design is professional, mobile-optimized, and accessible, supporting a positive user experience. Security posture is solid with HTTPS enforced and CSRF tokens present, though it lacks some advanced security headers and explicit incident response information. Privacy compliance is partial, with a privacy policy page present but no visible cookie consent mechanism. Overall, the site is trustworthy and well-aligned with its governmental purpose.

The International Arctic Social Sciences Association (IASSA) is a small, established non-profit organization focused on Arctic social sciences research and collaboration. Founded in 2010, it operates through elected councils and a general assembly, providing services such as organizing international congresses, publishing newsletters, and facilitating mentorship and awards programs. The website reflects a professional and consistent brand targeting researchers and academics interested in Arctic social sciences. Technically, the site uses Joomla CMS with Bootstrap and jQuery, hosted behind Cloudflare DNS, and includes Google Analytics for visitor tracking. While the site is mobile-optimized and well-structured, it lacks key privacy and cookie policies and does not implement DNSSEC or security headers, which are important for enhancing security and compliance. The security posture is moderate with room for improvement, especially in transparency and user data protection. Overall, the website is trustworthy and safe for general audiences, with no adult or questionable content detected.

I

International Centre for Reindeer Husbandry

reindeerherding.org

51

The International Centre for Reindeer Husbandry (ICR) operates a well-structured website dedicated to the promotion, research, and support of reindeer husbandry and indigenous Arctic cultures. The organization serves a niche audience including indigenous peoples, researchers, and environmental advocates, providing news, projects, and educational resources. The website is professionally designed using Joomla CMS and modern web technologies such as Bootstrap and jQuery, with good mobile optimization and clear navigation. From a technical perspective, the site employs standard libraries and frameworks and is hosted by Arctic Portal, a relevant partner. Performance is moderate with room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, and does not publish explicit security or privacy policies. Cookie consent is implemented, indicating some privacy awareness. Overall, the website is trustworthy and safe, with no adult or questionable content. However, it lacks direct company contact emails and phone numbers, relying on social media for contact. The WHOIS data is consistent with the organization's profile, showing a domain age appropriate for its history. Strategic improvements in security headers, DNSSEC, and privacy documentation would enhance compliance and trustworthiness.

M

Malaurie Institute of Arctic Research Monaco-UVSQ

miarctic.org

51

The Malaurie Institute of Arctic Research Monaco-UVSQ is a small, specialized academic and research institute focused on Arctic humanities and the work of Professor Jean Malaurie. Affiliated with the University of Versailles Saint-Quentin-en-Yvelines, it offers research projects, publications, and academic events targeting scholars and students interested in Arctic studies. The website reflects a professional and consistent brand with good content quality and clear navigation. Technically, it uses Joomla CMS with modern frontend libraries and is hosted behind Cloudflare DNS with GoDaddy as registrar. Security posture is moderate with HTTPS enabled but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the institute.

A

Arctic Yearbook - Arctic Yearbook

arcticyearbook.com

48

The Arctic Yearbook website serves as an academic publication platform focused on Arctic geopolitics and security, produced in collaboration with the Northern Research Forum and the University of the Arctic. It offers annual yearbooks, scholarly papers, briefing notes, and commentaries targeting researchers, policymakers, and stakeholders interested in Arctic affairs. The site is positioned as a niche authoritative source with a small-scale, non-commercial business model. Technically, the site is built on Joomla CMS using standard libraries such as jQuery, Bootstrap, and Font Awesome, with integration of Twitter feeds and Google Analytics for social media and analytics. The site is moderately optimized for mobile and performance but lacks advanced accessibility features. Security posture is moderate with HTTPS enabled and domain registration protections in place, but lacks DNSSEC and security headers, and no privacy or cookie policies are present. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is trustworthy and professional but could improve privacy compliance and security hardening.

B

Bund der Deutschen Landjugend e.V.

newbie-direktvermarktung.de

58

The Newbie Toolkit website is an educational platform designed to support new entrants into agricultural direct marketing, primarily targeting individuals in Germany and Europe interested in sustainable farming business models. It is affiliated with the Bund der Deutschen Landjugend e.V. and Fachhochschule Südwestfalen, supported by EU Horizon 2020 funding. The site offers structured content, interactive graphics, and links to external resources to facilitate knowledge sharing and networking within the agricultural sector. Technically, the site is built on WordPress using WPBakery Page Builder and several plugins to enhance functionality and GDPR compliance. The website is mobile-optimized with good navigation and content relevance. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and policies could improve resilience. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness.

B

Bayerische Musikakademie Marktoberdorf

modakademie.de

43

The Bayerische Musikakademie Marktoberdorf is a regional Bavarian music academy focused on providing a wide range of music education services including vocal and instrumental courses, choir and orchestra leadership training, and music pedagogy. It serves musicians, educators, and enthusiasts primarily within Bavaria, Germany. The website reflects a medium-sized educational institution with a professional and consistent brand presence, supported by its parent organization, the Bayerischer Musikrat. Technically, the website employs a modern tech stack with Bootstrap, jQuery, and third-party integrations for user consent and reviews, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit incident response policies. Overall, the site is accessible, well-structured, and trustworthy with no signs of malicious content or blocking mechanisms.

S

Stadt Heringen (Werra)

heringen.de

51

Stadt Heringen (Werra) is the official municipal government website serving the city of Heringen (Werra) in Germany. The site provides comprehensive information about city administration, local news, events, citizen services, and tourism. It targets residents, visitors, and local stakeholders, offering a broad range of public service information and resources. The website maintains a consistent and professional brand image aligned with its governmental role. Technically, the site employs a modern tech stack including Bootstrap for responsive design, jQuery, Font Awesome icons, and integrates Matomo analytics for privacy-conscious user tracking. It also uses Usercentrics for GDPR-compliant cookie consent management and EqualWeb for accessibility enhancements. The site is moderately performant and well-optimized for mobile devices, with good SEO and accessibility practices. From a security perspective, the website enforces HTTPS and uses a consent management platform to comply with privacy regulations. However, it lacks explicit HTTP security headers and does not publicly disclose a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is solid but could be improved with additional headers and transparency. The website is safe for general audiences, containing no adult or questionable content. Contact information is clearly provided, including phone numbers and contact links. The domain WHOIS data aligns with the municipal nature of the site, showing consistent name servers and no privacy protection, supporting legitimacy. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to ensure ongoing security and compliance.

Gesetzlichekrankenkassen.de is an established German online comparison portal operated by Kassensuche GmbH, specializing in statutory health insurance providers. The site offers comprehensive price and service comparisons, membership application assistance, and detailed information on statutory health insurance benefits. It targets German residents seeking to compare and switch statutory health insurance providers, including employees, self-employed, retirees, and students. The platform leverages 25 years of experience and provides detailed, transparent data to help users make informed decisions.

B

Bayerischer Musikrat

bayerischer-musikrat.de

45

The Bayerischer Musikrat is a prominent non-profit cultural organization dedicated to promoting music culture in Bavaria. It operates various projects, competitions, and funding programs targeting musicians, music associations, and cultural stakeholders. The website reflects a well-established entity with a clear focus on community engagement and cultural enrichment. Technically, the site employs a modern tech stack including Bootstrap and jQuery, with a cookie consent mechanism via Usercentrics, indicating GDPR compliance awareness. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Overall, the site is professional, trustworthy, and serves its target audience effectively.

K

KREA DIGITAL s.r.o.

krea.com

59

KREA DIGITAL s.r.o. is a Slovak-based IT company specializing in the development of web and mobile applications, IT outsourcing, and business system solutions. With over 14 years of experience, the company serves a diverse client base including notable brands, positioning itself as a reliable IT partner for custom software development and IT professional outsourcing. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and hCaptcha, ensuring responsive design and user-friendly navigation. Security measures include HTTPS enforcement and CAPTCHA integration on forms, although explicit security policies and headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy. Overall, the company presents a credible and professional digital presence with room for enhanced security transparency and WHOIS data clarity.

T

The English College in Prague - Anglické gymnázium, o.p.s.

englishcollege.cz

57

The English College in Prague is a reputable international educational institution offering British and IB curricula to students in Prague. The website reflects a well-established school with a strong academic reputation, supported by multiple accreditations and a comprehensive online presence. The technical infrastructure is based on WordPress with modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The absence of WHOIS data slightly impacts trust but is mitigated by the school's transparent contact information and social media presence. Overall, the site demonstrates professionalism, compliance with privacy regulations, and a user-friendly experience.

A

Ascherslebener Computer GmbH

ascherslebener-computer.de

53

Ascherslebener Computer GmbH is a well-established German software company specializing in municipal software solutions for traffic authorities and regulatory bodies. With over 30 years of experience and a client base spanning more than 700 administrations across 15 federal states, the company offers products such as ALVA 9 and OWI 9 to streamline administrative processes related to traffic and offenses. The website reflects a professional and consistent brand image, targeting government entities and related sectors. Technically, the site is built on WordPress with modern plugins and themes, ensuring good performance and mobile optimization. Security measures include HTTPS, cookie consent management, and spam protection via hCaptcha, though some security headers could be improved. Privacy compliance is strong, with clear GDPR-aligned policies and cookie management. Overall, the site demonstrates a mature digital presence with solid business credibility and trust indicators.

L

Landkreisentsorgung Schwarzenberg GmbH

landkreisentsorgung.eu

52

Landkreisentsorgung Schwarzenberg GmbH operates as a regional waste disposal and recycling service provider primarily serving the Schwarzenberg/Erzgebirge area in Germany. The company offers a comprehensive range of services including municipal waste collection, bulky waste disposal, hazardous waste handling, wastewater services, document destruction, container rental, and city cleaning. Their market position is that of a trusted local service provider with a focus on environmental sustainability and compliance. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder and Ultimate VC Addons. The technology stack includes jQuery, Bootstrap, and Font Awesome, hosted likely via Variomedia AG. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism via Borlabs Cookie. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is supported by a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website is professional, trustworthy, and well-aligned with the business's regional service model. The absence of critical security issues and the presence of trust indicators such as certifications and clear contact information contribute to a strong credibility profile. Strategic improvements could focus on enhancing security headers and publishing explicit security policies to further strengthen the security posture.

D

DOTEX Wirkwaren GmbH

dotex.de

46

DOTEX Wirkwaren GmbH is a German textile manufacturing company specializing in the production, finishing, and custom tailoring of knitted and woven fabrics. Positioned regionally near the Swiss border, the company targets B2B customers seeking high-quality, customized textile solutions. Their website reflects a professional and consistent brand image with clear navigation and relevant content focused on their manufacturing capabilities and product offerings. The company maintains an active social media presence on Facebook and Instagram, enhancing their market visibility. Technically, the website is built on Joomla CMS and utilizes modern frontend technologies such as jQuery, Bootstrap, and Smart Slider 3. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no visible cookie consent mechanism. Overall, the security posture is stable but could be enhanced by implementing security headers, a cookie consent mechanism, and publishing incident response contacts. The domain WHOIS data is limited but consistent with the business claims, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis. Strategic recommendations include improving security headers, adding cookie consent for GDPR compliance, publishing a security policy, and enhancing incident response transparency to strengthen trust and compliance.

B

Bayerischer Musikrat

blkm.de

45

The Bayerischer Landes-Musikrat (BLKM) website serves as a regional non-profit platform promoting music education, cultural projects, and networking within Bavaria. It is supported by four key partners, including three Bavarian State Ministries and the Bayerischer Musikrat e.V., positioning it as a significant governmental and cultural entity in the region. The site offers extensive information on music projects, education, funding, competitions, and research, targeting musicians, educators, and cultural organizations. Technically, the website employs a modern tech stack with Bootstrap and jQuery, enhanced by Usercentrics for GDPR-compliant cookie management. While the site is well-structured and professionally designed with good navigation and mobile optimization, it lacks explicit security headers and detailed contact information on the homepage. Security posture is moderate with HTTPS enforced and cookie consent implemented, but improvements are recommended in security headers and incident response disclosures. Overall, the website is trustworthy, safe, and compliant with privacy regulations, serving its audience effectively with room for technical and security enhancements.

A

AI dětem, z.s.

aidetem.cz

44

AI dětem, z.s. is a Czech non-profit organization specializing in education in the field of artificial intelligence. Established in 2022, it positions itself as a leader in AI education, providing comprehensive educational materials, training workshops, and technological AI assistant solutions targeted primarily at schools, educators, parents, and students. The organization emphasizes preparing future generations for a rapidly evolving technological landscape. Technically, the website is built on WordPress with Elementor and Yoast SEO, featuring modern web technologies and good mobile optimization. Security posture is solid with HTTPS and no evident vulnerabilities, though explicit security policies and incident response information are lacking. Privacy compliance is mostly addressed with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a minor gap. Overall, the website is professional, trustworthy, and well-positioned in its niche.

B

BDG - Bundesverband der Deutschen Gießerei-Industrie

wer-giesst-was.de

48

The website 'wer-giesst-was.de' is operated by the BDG - Bundesverband der Deutschen Gießerei-Industrie, an established German industry association representing foundries. It provides a comprehensive directory of German foundries with over 300 selection criteria, facilitating supplier research for manufacturing professionals. The site targets companies and professionals in the manufacturing sector seeking foundry services within Germany. The business model centers on providing industry-specific information and supplier matching services, positioning BDG as a key resource in the German foundry market. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, DataTables, Font Awesome, and Google Tag Manager for analytics and marketing. Hosting is provided by Intersolute, indicated by the domain's nameservers. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured cookie consent. From a security perspective, the site enforces HTTPS and employs a GDPR-compliant cookie consent mechanism with opt-in for analytics cookies. However, it lacks explicit security headers and does not publish a security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The security posture is solid but could be improved by adding security headers and formal incident response information. Overall, the website is professional, trustworthy, and compliant with privacy regulations. It serves its niche audience effectively with relevant content and functional features. The domain registration data aligns well with the website's purpose and business identity, indicating legitimacy and stability. No blocking or WAF mechanisms interfere with content access, allowing full analysis. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and adding terms of service to improve legal clarity and user trust.

A

Arctic Portal

arcticportal.org

54

Arctic Portal is a well-established non-profit gateway providing comprehensive information, data sharing, and consultation services related to the Arctic region. The website offers news, maps, scientific data, governance information, educational resources, and event calendars targeting researchers, policymakers, educators, and Arctic stakeholders. The organization is based in Iceland and has been operational since 2005, positioning itself as a trusted source in the Arctic domain. Technically, the website is built on Joomla CMS with modern frontend technologies including Bootstrap, jQuery, and Font Awesome. It is hosted with domain registration via GoDaddy and DNS managed by Cloudflare. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Google Analytics is used for user behavior tracking, including scroll and download events, indicating moderate user tracking practices. From a security perspective, the site enforces HTTPS and employs domain status locks to protect domain integrity. However, DNSSEC is not enabled, and no security headers were detected, which are areas for improvement. The absence of privacy and cookie policies suggests compliance gaps with GDPR and other privacy regulations. No incident response or vulnerability disclosure policies are published, which could impact trust and security readiness. Overall, Arctic Portal demonstrates a solid business and technical foundation with a strong reputation in its niche. To enhance security posture and regulatory compliance, it should implement DNSSEC, security headers, privacy and cookie policies, and publish incident response contacts. These steps will improve trustworthiness and align with best practices for data protection and user privacy.

Jean-Paul-Grundschule is a local primary school based in Schwarzenbach an der Saale, Germany, serving students, parents, and the community with educational services and school-related information. The website provides clear contact details, school news, and links to relevant educational partners and government bodies. The site is built on WordPress with Bootstrap and jQuery, indicating a standard but modern technical infrastructure suitable for a small educational institution. The website is mobile-optimized and presents a consistent brand image with official logos and structured navigation. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy PDF available but no cookie consent mechanism or GDPR-specific indicators. Overall, the site is trustworthy and professional, though improvements in privacy and security transparency are recommended.

V

Versorgungswerk der Landesapothekerkammer Hessen

apothekerversorgungswerk.de

40

The Versorgungswerk der Landesapothekerkammer Hessen operates as a pension insurance provider specifically for pharmacists and pharmaceutical interns in the Hessen region of Germany. It serves a niche healthcare sector audience with a focus on membership management, pension services, and providing relevant legal and organizational information. The website reflects a regional public service entity with a clear and consistent branding aligned with the Landesapothekerkammer Hessen. Technically, the website is built on a custom CMS (cms Morpheus) and uses standard web technologies such as HTML5, CSS, and Font Awesome icons. Hosting is provided by kasserver.com, a known hosting provider. The site demonstrates moderate performance and basic mobile and accessibility features. SEO and metadata are present but minimal, with no advanced structured data or analytics detected. From a security perspective, the site uses no-cache headers but lacks advanced security headers and explicit HTTPS confirmation in the provided data. No security or incident response policies are published, and no contact emails or phone numbers are directly visible, relying instead on contact forms. There are no signs of vulnerabilities or malicious content, but improvements in security posture and privacy compliance are recommended. Overall, the website is trustworthy and professional, serving its intended audience effectively. However, enhancements in privacy policy visibility, cookie consent, security headers, and incident response transparency would strengthen its compliance and security posture.

A

AGRITECHNICA

agritechnica.com

56

AGRITECHNICA is a globally recognized trade fair specializing in agricultural machinery, positioning itself as the leading event in this sector. The website serves as an information portal for the 2025 event, targeting agricultural professionals and industry stakeholders. The business model revolves around event organization and industry networking, with a strong market position as a premier trade fair in manufacturing for agriculture. Technically, the site is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, indicating a mature digital infrastructure. However, some performance and security aspects could be improved, such as implementing security headers and enhancing privacy compliance. Security posture is moderate with no evident vulnerabilities but lacks visible security best practices and policies. Overall, the site is professional and trustworthy but would benefit from improved transparency and security measures.

D

Dipl. Ing. Hartmut Schreiber

hartmutschreiber.com

48

The website hartmutschreiber.com represents a small-scale professional service focused on software architecture, primarily using .NET technologies such as C#. The site is targeted at businesses or professionals seeking software development and architecture expertise. The business appears to be an individual consultant or small entity based in Germany, with a domain age consistent with a long-standing presence since 2009. The website content is basic but relevant, with a clear navigation structure and moderate branding consistency. Technically, the site uses Joomla! CMS with standard web technologies including jQuery and Font Awesome. Mobile optimization and accessibility are basic but functional. Security posture is moderate; while HTTPS is presumably enabled (not explicitly stated), no DNSSEC or security headers are present, and no cookie consent mechanism is implemented, which impacts GDPR compliance. Contact information is limited to a contact form with no explicit emails or phone numbers displayed. No social media or certifications are visible, limiting trust signals. Overall, the site is functional and professional but could benefit from enhanced security and privacy features.

Ocean Decade is a globally recognized non-profit initiative launched in 2018, focused on generating and disseminating critical ocean knowledge to promote sustainable ocean management. The website serves as an information hub for scientists, policymakers, and stakeholders interested in ocean sustainability. It is positioned as an important international framework under the United Nations, leveraging digital tools to communicate its mission effectively. Technically, the website is built on WordPress with modern SEO and translation plugins, hosted by a reputable registrar, and secured with HTTPS. However, it lacks visible privacy and cookie policies, which are important for compliance and user trust. Security posture is moderate with HTTPS enabled and domain transfer protection, but missing DNSSEC and security headers. Overall, the site is professional, trustworthy, and safe for general audiences, but could improve privacy compliance and security transparency.

I

Innowacje i technologia w zasięgu ręki | icos-otc.eu

icos-otc.eu

9

The website icos-otc.eu is a Polish language technology news and information portal focusing on electronics, household appliances (AGD), and tools. It provides articles and insights about innovations and products in the technology sector, targeting a general audience interested in modern technologies. The site uses a modern static site generator (Gatsby) and is hosted on a CDN (Cloudfront), ensuring fast performance and good mobile optimization. Google Tag Manager is implemented for analytics and tracking purposes. Security posture is moderate with HTTPS implied but lacking explicit security headers and detailed privacy policy. No contact information or incident response details are provided, limiting direct communication channels. WHOIS data is unavailable due to privacy protection or query failure, which slightly reduces trust but is common for content websites. Overall, the site is professional, content-rich, and safe for general audiences.

G

GRITH AG

vereinonline.org

49

VereinOnline.org is a German-based SaaS provider specializing in online club and association management software. The platform offers comprehensive features including member management, event calendars, newsletters, bookkeeping, and mobile app access, targeting clubs, associations, and similar organizations. The business is operated by GRITH AG, an established company with a domain age since 2009 and recognized with awards such as Best Of Communication 2018. The website content is professional, well-structured, and primarily in German, reflecting a mature and focused business model. Technically, the site uses modern frontend technologies like Bootstrap and jQuery, supports mobile responsiveness, and integrates accessibility features. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. Security posture is moderate with some gaps such as lack of DNSSEC and missing security headers, but no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is good with a comprehensive GDPR privacy policy, though no cookie consent mechanism was detected. Contact is primarily via a web form, with no direct emails or phone numbers visible on the main site. Overall, the website is trustworthy and professionally maintained, suitable for its target audience.