Security Directory

T

Titan Leaf Solution

titanleafsolutions.com

56

Titan Leaf Solution is a small manufacturing business specializing in the production and nationwide distribution of leaf vacuums through a dealer network. The company targets dealers and customers across the United States, focusing on leaf containment and vacuum solutions. The website is built on the Wix platform, leveraging Wix's Thunderbolt framework and standard web technologies such as JavaScript, HTML5, and CSS3. The site is moderately optimized for mobile devices and provides basic SEO and accessibility features. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and privacy compliance mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the website content is professional and business-focused. Overall, the site presents a moderate risk profile with recommendations to improve security headers, privacy policies, and domain registration transparency.

NVIDIA is a globally recognized leader in AI computing, graphics processing, and high-performance computing technologies. The company focuses on innovation in GPUs, AI platforms, gaming, autonomous vehicles, and robotics, positioning itself as a key player in the technology sector. The website reflects this leadership with comprehensive content, professional design, and clear messaging tailored to technology enthusiasts and enterprise clients. Technically, the site leverages modern web technologies including Adobe Experience Manager CMS, advanced JavaScript frameworks, and robust analytics and marketing tools, ensuring a fast, responsive, and accessible user experience. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response information are not publicly detailed. Overall, the site demonstrates high professionalism and trustworthiness, with no signs of blocking or WAF interference, and complies well with privacy regulations such as GDPR. The absence of WHOIS data is likely due to registry privacy policies rather than suspicious activity, given the brand's global stature.

A

ASUS

asus.com

79

ASUS is a globally recognized technology corporation specializing in the design, manufacture, and sale of a wide range of consumer and business technology products including laptops, phones, routers, monitors, and motherboards. The company maintains a strong market position as a leading brand in the technology sector, serving both consumer and enterprise markets with innovative and quality products. Their website reflects a mature digital presence with comprehensive product information, campaigns, and support resources. Technically, the site leverages modern web frameworks such as Nuxt.js, integrates analytics and marketing tools like Google Tag Manager and Bazaarvoice, and provides a responsive and accessible user experience. Security-wise, the site enforces HTTPS and includes cookie consent mechanisms and a security advisory page, though it lacks some advanced security headers and explicit incident response contact details. The absence of WHOIS data is notable but likely due to privacy or registrar policies rather than malicious intent. Overall, ASUS demonstrates a strong security posture and compliance with privacy regulations, supporting its reputation as a trustworthy enterprise technology provider.

I

IP-Projects

ip-projects.de

69

IP-Projects is a medium-sized German hosting provider specializing in flexible and customized hosting solutions including web hosting, dedicated servers, virtual servers, and SSL certificates. With over 16 years of experience, the company emphasizes customer support, transparency, and high-quality infrastructure located exclusively in certified German data centers. The website reflects a professional and trustworthy business with clear service offerings and strong partner affiliations. Technically, the site is well-implemented with modern technologies, fast performance, and good mobile optimization. Security posture is strong with HTTPS, DDoS protection, and firewall solutions, though some minor improvements in security policy disclosure and cookie consent are recommended. Overall, the domain and business information are consistent and legitimate, supporting a high trust level.

Z

Zentralverband der deutschen Seehafenbetriebe e.V.

zds-seehaefen.de

54

The Zentralverband der deutschen Seehafenbetriebe e.V. (ZDS) operates as a German industry association representing seaport operators. The website serves as an informational portal primarily targeting businesses and stakeholders involved in maritime logistics and seaport operations within Germany. The site is built on WordPress using the Divi theme, indicating a moderate level of digital maturity but with room for improvement in content richness and user engagement. Technical infrastructure is standard for a WordPress site, with basic mobile optimization and moderate performance. Security posture is weak due to the absence of security headers, privacy policies, and incident response information, which are critical for compliance and trust in today's regulatory environment. Overall, the site is functional but lacks comprehensive security and privacy features, limiting its credibility and compliance standing.

H

HERO Computers s.r.o.

herocomp.cz

50

HERO Computers s.r.o. is a Czech Republic based IT services company specializing in comprehensive IT solutions including network management, software development, IT outsourcing, hardware supply and service, telecommunication, and security solutions. The company targets businesses seeking reliable and tailored IT support and has established a strong market presence with reputable partners and clients. The website reflects a professional and consistent brand image with detailed service offerings and clear contact channels. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and integrates security features like HTTPS, hCaptcha, and cookie consent mechanisms, indicating a mature digital infrastructure. Security posture is strong with proper SSL configuration, security headers, and form protections, though the absence of a public security policy and incident response information suggests room for improvement. Overall, the website is trustworthy, well-structured, and compliant with GDPR, providing a positive user experience and business credibility.

Z

Ze Stodoly

zestodoly.cz

10

Ze Stodoly is a small family-owned business based in the Czech Republic specializing in the production and sale of cold-pressed virgin oils such as flaxseed, poppy seed, and rapeseed oils. The company emphasizes traditional farming values and family involvement since its founding in 2018. Their market position is that of a local artisanal producer targeting health-conscious consumers interested in natural and fresh oils. The website is professionally designed with good content quality and clear navigation, supporting their business model of direct sales through an online shop and farmer markets. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and popular libraries like Swiper.js and AOS for animations. Google Analytics and Google Tag Manager are used for visitor tracking, with IP anonymization enabled. The site is mobile optimized and performs moderately well. However, no CMS or hosting provider details were identified. Security best practices such as HTTPS and cookie consent are implemented, but security headers are missing and no formal security or privacy policies are published. From a security perspective, the site has a good SSL configuration and cookie consent mechanism, but lacks published security policies, incident response contacts, and vulnerability disclosure information. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate. No WAF or blocking mechanisms were detected, and no vulnerabilities were found in the visible content. Overall, the website presents a trustworthy and professional front for a small family business with room for improvement in privacy transparency and security hardening. Strategic recommendations include publishing privacy and security policies, implementing security headers, and improving WHOIS transparency to enhance trust and compliance.

M

Město Litomyšl

litomysl.cz

54

Město Litomyšl is the official municipal government website for the city of Litomyšl in the Czech Republic. It provides comprehensive information and services for both citizens and tourists, including municipal services, cultural events, education, and tourism information. The site targets local residents and visitors, positioning itself as a key resource for public administration and community engagement. The website demonstrates consistent branding and professional content quality, supporting its role as a trusted government portal. Technically, the website employs standard web technologies such as jQuery, Google Custom Search Engine, and Fancybox for enhanced user experience. The site is mobile-optimized and features good navigation and SEO practices. However, there is room for improvement in accessibility and security headers implementation. Performance is moderate, with external dependencies on Google services. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. No critical vulnerabilities or outdated libraries were detected. The presence of a comprehensive GDPR privacy policy indicates attention to compliance, though the absence of a cookie consent mechanism is a gap. The lack of WHOIS data for the domain raises concerns about domain registration transparency, though the official nature of the content mitigates some risk. Overall, the website is a well-structured and professional municipal portal with good content and usability. Strategic improvements in security headers, cookie consent, and domain registration transparency would enhance trust and compliance.

M

Město Polička

policka.org

47

Město Polička operates an official municipal website serving residents and visitors with comprehensive city information, including news, events, official documents, and public services. The website is well-established with a domain age since 2003, reflecting a stable digital presence for the local government of Polička, Czech Republic. The site targets local citizens and visitors seeking municipal updates and services. Technically, the website uses ASP.NET Web Forms with Bootstrap and FontAwesome, providing a responsive and user-friendly interface, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing business credibility. Overall, the website is trustworthy and professionally maintained, suitable for its government function.

S

SCM Bundes-Verlag

bundesverlag.de

55

SCM Bundes-Verlag operates the bundes-verlag.net website, offering a range of Christian magazines and media products targeting children, teenagers, adults, and church community workers. Established in 2004, the company holds a solid market position in the niche Christian media retail and subscription sector in Germany. The website provides e-commerce capabilities for subscriptions, digital reading, and gift bundles, supported by a professional and consistent brand presence. Technically, the site uses a custom CMS with modern web technologies, including Matomo analytics for privacy-conscious user tracking. Mobile optimization and accessibility are well addressed, contributing to a good user experience. Security posture is adequate with HTTPS enforced and CSRF protections, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the domain registration data aligns well with the business history, supporting legitimacy and trustworthiness.

The website represents the Catholic daycare center St. Marien in Detmold, Germany, providing childcare and family support services. It operates under the umbrella of the Katholische Kindertageseinrichtungen Minden-Ravensberg-Lippe gemeinnützige GmbH, a non-profit organization. The site targets parents and families seeking quality early childhood education with a religious affiliation. The business model is community-focused, emphasizing inclusion, language development, and family partnership. Technically, the website is built on the dialogperfect® CMS platform, hosted via GoDaddy's domain services, and incorporates modern web standards including accessibility tools such as DigiAccess. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is strong with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with comprehensive privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy, safe, and professionally maintained, suitable for its target audience.

P

Pax-Bank für Kirche und Caritas eG

pax-bkc.de

63

Pax-Bank für Kirche und Caritas eG is a specialized financial institution serving church and charitable organizations in Germany. The website reflects a professional banking service tailored to the non-profit sector, emphasizing trust and sector-specific financial solutions. The market position is niche, focusing on clients within the church and social sectors. Technically, the website employs modern frameworks such as Angular and integrates analytics tools like eTracker and Dynatrace Ruxit for performance monitoring and user tracking. The site is mobile-optimized with good SEO and accessibility basics, though some improvements are possible. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and headers. Privacy compliance is partial, with cookie consent mechanisms present but no clear privacy or terms of service pages. Overall, the domain registration and hosting align well with the business identity, supporting legitimacy and trustworthiness.

H

Hülskens GmbH & Co. KG

huelskens-kies-sand.de

50

Hülskens GmbH & Co. KG is a well-established German company specializing in the extraction and supply of mineral raw materials such as sand and gravel, primarily serving the construction and infrastructure sectors. With over 100 years of experience and multiple regional subsidiaries, the company emphasizes sustainable land use and ecological projects alongside its core business. The website reflects a professional and regionally focused business model with clear communication of services and corporate values. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies including Bootstrap and jQuery. It is hosted on agenturserver infrastructure, with good mobile optimization and SEO practices. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. The absence of analytics scripts suggests a privacy-conscious approach. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant, with room for improvement in security policy transparency and header implementation. The risk level is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain and improve security and compliance posture.

A

Asociace regionálních značek, z.s.

regionalni-znacky.cz

44

Asociace regionálních značek, z.s. is a Czech non-profit association dedicated to certifying and promoting regional products, services, and experiences with guaranteed quality and origin. Operating since 2005, it manages 32 regional quality brands across 31 Czech regions, serving both consumers interested in authentic regional goods and producers seeking certification and cooperation. The website offers rich content including product categories, regional information, news, and event calendars, supported by an e-shop partner site. Technically, the site uses modern frontend technologies such as Bootstrap, Swiper.js, Leaflet.js, and Google Analytics, providing a responsive and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking some advanced security headers and explicit security policies. The absence of WHOIS data reduces domain registration trust but does not detract from the legitimacy of the business itself. Overall, the site is professional, trustworthy, and well-positioned in its niche.

R

Raben Group

raben-group.com

79

Raben Group is a well-established European logistics company specializing in transport, warehousing, and supply chain management services. The company targets businesses requiring comprehensive logistics solutions and maintains a strong market presence in Poland and other European countries. Their website reflects a professional and consistent brand image, with clear service offerings and accessible contact information. Technically, the website is built using modern web technologies including Nuxt.js and Swiper.js, providing a responsive and user-friendly experience across devices. Security-wise, the site enforces HTTPS and includes standard security headers, though it lacks a publicly available security policy or incident response details. The absence of WHOIS registration data is a notable anomaly that slightly reduces trustworthiness but does not detract significantly from the overall legitimacy of the business. Privacy and cookie policies are present and indicate GDPR compliance, supporting a positive privacy posture. Overall, the website is professional, secure, and business-focused, suitable for its target audience.

M

Město Červený Kostelec

cervenykostelec.cz

41

Město Červený Kostelec operates an official municipal website serving residents and visitors with comprehensive information about the town's administration, public services, news, and community events. The website is well-structured, primarily in Czech, and targets local citizens and stakeholders. It provides key services such as contact details, public documents, and updates on municipal activities, positioning itself as a trusted local government resource. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Swiper.js, running on the Munipolis CMS platform. It is mobile-optimized and offers a moderate performance profile. The site uses HTTPS and implements cookie consent mechanisms, reflecting a reasonable level of digital maturity. From a security perspective, HTTPS is enforced, and no immediate vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and vulnerability disclosure mechanisms suggests room for improvement. Privacy compliance is supported by a dedicated GDPR page and cookie consent, but terms of service and incident response contacts are missing. Overall, the website is a reliable and professional municipal portal with good content quality and user experience. The lack of WHOIS data limits domain trust assessment, but the site itself shows no signs of malicious activity. Strategic recommendations include enhancing security headers, adding terms of service, and publishing a security.txt file to improve transparency and trust.

F

Ferienhof Hardthöhe

farm-wedding.de

49

Farm Wedding on Hof Hardthöhe is a specialized wedding and event venue located in Germany, offering comprehensive wedding planning and farm event services. The business targets couples seeking a rural, charming location for their wedding ceremonies and receptions, complemented by accommodation options and decoration services. The website is professionally designed using TYPO3 CMS and Bootstrap, providing a good user experience with clear navigation and mobile optimization. Social media integration and a cookie consent mechanism demonstrate digital maturity and privacy awareness. Security posture is adequate with HTTPS and cookie controls, though security headers and incident response information are absent. Overall, the site is trustworthy and well-positioned in its niche market.

F

Förderverein Finower Wasserturm und sein Umfeld e.V.

wasserturm-finow.de

58

The Förderverein Finower Wasserturm und sein Umfeld e.V. operates a cultural museum dedicated to preserving the industrial heritage of the Messingwerksiedlung and the Finower Wasserturm in Germany. The website offers detailed historical content, virtual 360° tours, and visitor information, targeting cultural enthusiasts and regional tourists. The organization is a small non-profit founded in 2003, relying on donations and volunteer support. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, jQuery, and specialized 360° tour software (krpano) integrated with the VR-Easy CMS. Hosting is provided via rzone.de nameservers. Security posture is adequate with HTTPS and client-side validation but lacks advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility.

M

Ministerium der Justiz des Landes Nordrhein-Westfalen

vr-jva.nrw

55

The website vr-jva.nrw is an official government digital platform operated by the Ministerium der Justiz des Landes Nordrhein-Westfalen, providing a virtual 360° tour of correctional facilities in North Rhine-Westphalia, Germany. It serves an educational and informational purpose, targeting the general public and potential applicants interested in the justice system. The site features interactive virtual tours, quizzes, and contact forms to engage users. Technically, the site employs modern web technologies including HTML5, CSS3, JavaScript, and licensed krpano software for immersive virtual tours. Hosting is provided by Global Village GmbH, with a domain registered under the government ministry. The site is mobile-optimized and includes basic accessibility features, though SEO and privacy compliance could be improved. From a security perspective, the site uses HTTPS and input validation on forms but lacks DNSSEC and important security headers. No privacy or cookie policies are present, representing compliance gaps. The WHOIS data confirms legitimacy and consistency with the government entity. No signs of blocking or WAF interference were detected. Overall, the site is trustworthy and professionally implemented but would benefit from enhanced privacy compliance, security hardening, and explicit incident response information to improve user trust and regulatory adherence.

B

buff.rocks GmbH

buff.media

54

buff.rocks GmbH is a small digital and advertising agency based in Magdeburg, Germany, specializing in creative and strategic services including TYPO3 CMS web projects, design, campaigns, content marketing, hosting, and digital transformation. The company is part of the +Pluswerk network, enhancing its market position and service capabilities. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technically, the site leverages TYPO3 CMS, modern JavaScript libraries, and Matomo analytics for user tracking, with good performance and accessibility features. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers could be improved. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. WHOIS data is unavailable or malformed, limiting domain registration trust verification, but the business legitimacy is supported by consistent branding, client testimonials, and industry memberships. Overall, the site scores well on content quality, technical implementation, security, privacy, and business credibility.

O

OEMUS MEDIA AG

oemus.com

51

OEMUS MEDIA AG is a well-established German media company specializing in dental medicine publications and professional education. The company offers a broad portfolio including specialist journals, seminars, and congresses targeting dental professionals. Their website reflects a mature business with a strong market position in the healthcare media sector, supported by 30 years of experience. Technically, the site uses standard web technologies such as jQuery and hosts media assets on Amazon S3, delivering moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and HTTP security headers. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively.

M

MedicVision Optikk AS

medicvision.no

10

MedicVision Optikk AS is a Norwegian company specializing in customized optical solutions for medical practice and microscopy. Their offerings include magnifying glasses, microscopes (notably ZEISS Research Microscopy Solutions), medical lighting, and diagnostic instruments tailored for healthcare professionals and researchers. The company operates a physical showroom in Arendal, Norway, providing hands-on product trials and service capabilities including adjustments and repairs. The website reflects a professional and focused business model targeting healthcare and research sectors with a clear B2B and B2C sales approach. Technically, the website is built on modern web standards with responsive design, CSS grid, and flexbox layouts, likely powered by the Umbraco CMS. It uses privacy-conscious analytics (Plausible Analytics) and lazy loading for images, enhancing performance and user experience. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. No forms are present on the main page, reducing potential security risks. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. Incident response and vulnerability disclosure information are also absent. The domain is newly registered in April 2024, consistent with the company's recent founding, and WHOIS data shows no privacy protection, supporting legitimacy. Overall, MedicVision's website is professional, trustworthy, and well-aligned with its business goals but would benefit from enhanced privacy compliance and security hardening to improve its security posture and regulatory adherence.

W

Web Best Practice LTD

webbestpractice.co.uk

47

Web Best Practice LTD is a UK-based web development company with over 20 years of experience, specializing in web design, digital marketing, and branding services. The company targets businesses primarily in Manchester and across the UK, offering a full in-house team and a portfolio of over 1000 websites. The website is professionally designed, mobile optimized, and includes comprehensive customer reviews and contact options. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, with appropriate privacy and cookie consent mechanisms in place. Security posture is good with HTTPS and reCAPTCHA implemented, though explicit security headers are not detected and could be improved. WHOIS data is unavailable due to domain naming rules violation, which raises some legitimacy concerns, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a mature digital presence with room for security enhancements.

D

DJK Sportjugend

djk-sportjugend.de

61

DJK Sportjugend is a German non-profit youth sports organization affiliated with the Catholic DJK-Sportverband. It focuses on inclusive youth work, social and cultural diversity, and prevention initiatives such as anti-racism and sexualized violence prevention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of young people and sports communities. Technically, the site uses modern web technologies and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a strong legitimacy score.

O

Oranto GmbH

studienplattform.ch

53

Oranto GmbH operates the Studienplattform.ch, a specialized software platform designed to facilitate clinical and non-clinical studies with integrated CMS, CRM, and LMS capabilities. The company positions itself as a niche provider with a decade of experience, offering tailored study design and management solutions primarily targeting research institutions and clinical study leaders. The platform emphasizes data protection and GDPR compliance, catering to a German-speaking audience with professional and clear content presentation. Technically, the website is built on TYPO3 CMS and employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Overall, the website demonstrates a mature digital presence with good usability and trustworthiness, though cookie consent and formal security policies could be enhanced for full compliance.

V

Vereinigte Industrieverbände von Düren, Jülich, Euskirchen und Umgebung e.V.

extraviv.de

38

The website extraviv.de serves as a members-only information portal for the Vereinigte Industrieverbände von Düren, Jülich, Euskirchen und Umgebung e.V., a regional industry association in Germany. It provides employers and association members with access to documents, newsletters, event information, and other resources relevant to their business operations and networking. The site is primarily in German and targets local employers within the manufacturing and non-profit sectors. Technically, the site uses a custom or unknown CMS with JavaScript libraries such as jQuery UI and Modernizr, hosted on servers associated with kasserver.com. The design is professional and consistent, though mobile optimization and accessibility are basic. Security posture is moderate with a login form secured by POST but lacks advanced security headers and cookie consent mechanisms. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's business purpose, indicating legitimacy. Overall, the site scores well on business credibility and content quality but could improve technical implementation and security practices.

The website www.mein-t-raum.de is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) protecting the site from automated access or potential threats. Due to this blocking, no actual business content, contact information, or policies are accessible for analysis. The domain is hosted on the Jimdo platform as inferred from the nameservers, and Cloudflare provides security and performance services. The lack of visible content and business data limits the ability to assess the company's market position, services, or compliance posture. Security-wise, the use of Cloudflare WAF and CAPTCHA is a positive indicator, but the absence of security headers and policies reduces the overall security maturity score. Privacy compliance and business credibility cannot be evaluated due to missing information.

W

World4You Internet Services GmbH

j.berlin

71

Sedo.com operates as a domain marketplace platform specializing in domain sales and parking services. The analyzed page indicates that the domain j.berlin is available for purchase, targeting domain investors and businesses seeking premium domain names. The company behind the domain registration is World4You Internet Services GmbH, an established registrar founded in 1998, which aligns with the domain's age and legitimacy. The website employs modern web technologies including JavaScript ES modules and Cloudflare DNS services, ensuring a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection in place, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is minimal on this page, with no explicit privacy policy or terms of service detected, but a cookie consent mechanism is implemented. Overall, the site presents a basic but functional domain sales landing page with moderate trustworthiness and business credibility.

D

DJK Landesgemeinschaft Berlin e.V.

djk-berlin.de

58

DJK Landesgemeinschaft Berlin e.V. is a regional Catholic sports association in Berlin, Germany, serving approximately 500,000 members across more than 1,000 clubs nationally. The organization focuses on promoting sports activities, events, and community engagement within the Catholic sports community. Their website provides comprehensive information about the association, news, events, and member clubs, targeting members and interested parties in the sports and religious community. Technically, the website is built on AmphiCMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, featuring responsive design and moderate performance. Security posture is solid with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its non-profit mission effectively.

Z

Zentralverband Deutscher Schornsteinfeger e.V.

zds-schornsteinfeger.de

54

Zentralverband Deutscher Schornsteinfeger e.V. (ZDS) is a well-established German trade union and professional association serving the chimney sweep industry since 1907. The organization provides member services including advocacy, education, publishing, and employment support. The website reflects a mature digital presence with clear navigation, professional content, and active social media engagement. Technically, the site is built on Liferay CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. Security posture is adequate with HTTPS and secure login forms, but lacks visible security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-suited for its target audience of industry professionals and members.

L

LAG Main4Eck

fabuly.de

9

Fabuly.de is a regional discovery platform focused on the Bavarian Untermain area, offering curated content and interactive maps for nature, history, technology enthusiasts, and sustainability advocates. The platform includes a related ecoKompass subsite dedicated to promoting sustainable projects and eco-friendly solutions. The website is professionally designed with consistent branding and good content relevance, targeting a general audience interested in regional exploration and sustainability. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted on servers indicated by the nameservers your-server.de and second-ns domains. Mobile optimization and navigation clarity are good, though accessibility features are basic. Security posture is moderate with no visible security headers or advanced policies, and no cookie consent mechanism is present. WHOIS data is minimal but consistent with a small regional platform. Overall, the site is safe, trustworthy, and compliant with GDPR based on the presence of a privacy policy, but improvements in security headers and contact transparency are recommended.

I

IBT Bunkering & Trading

ibtbunker.com

44

IBT Bunkering & Trading is a well-established global bunker trader based in Hamburg, Germany, with over 45 years of market presence. The company specializes in marine fuel supply, offering services such as spot trading, formula-based contracts, and price hedging to shipping companies worldwide. Their business model focuses on building long-term, reliable relationships with clients and suppliers, supported by a strong network and industry memberships. Technically, the website employs modern web technologies including Bootstrap and JavaScript, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled and domain registration is stable, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security practices would strengthen its posture.

I

Industrieverband Steine und Erden Baden-Württemberg e.V.

azubiste.de

51

The website www.bockaufsteine.de serves as an educational and promotional platform for vocational training in the stones and earths industry in Baden-Württemberg, Germany. It is operated by the Industrieverband Steine und Erden Baden-Württemberg e.V., an industry association. The site provides detailed information about various professions, training paths, and career opportunities, targeting young people interested in apprenticeships. The business model focuses on industry promotion and education rather than direct commercial services. Technically, the website is built on a simple CMS (cumodis simple cms) and uses standard web technologies such as HTML5, CSS3, and JavaScript. It is hosted on German UI-DNS nameservers and employs HTTPS with good SSL configuration. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. However, it lacks advanced SEO features, accessibility enhancements, and modern frameworks. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers, incident response policies, vulnerability disclosure mechanisms, and contact information for security issues. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy for its intended audience. It demonstrates good privacy compliance and business credibility but could improve its technical and security posture by adding security headers, explicit policies, and contact details. The domain WHOIS data is minimal but consistent with the business purpose, supporting legitimacy.

U

Universität Duisburg-Essen

uni-due.de

57

The Universität Duisburg-Essen is a prominent German university offering a wide range of educational and research services. The website reflects a well-established institution with a clear focus on serving students, researchers, alumni, and staff. It provides comprehensive information about study programs, research activities, campus life, and international cooperation. The university maintains a strong digital presence with official social media channels and updated news content. Technically, the website is built on the IMPERIA CMS platform and uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It incorporates MathJax for mathematical content rendering. The site is mobile-optimized and accessible, with good SEO practices evident. However, some modern security headers and explicit security policies are not visible, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS (implied by domain and standard practice, though SSL details are not explicit in the data). No WAF or blocking mechanisms were detected, and no critical vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is supported by a comprehensive GDPR privacy policy, but cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is professional, trustworthy, and well-maintained, suitable for its educational mission. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance.

G

Gute Botschafter GmbH

gute-botschafter.de

47

Gute Botschafter GmbH is a German-based medium-sized company specializing in brand positioning and marketing communication services. Their website presents a professional and comprehensive overview of their offerings, targeting primarily medium-sized enterprises and non-profit organizations. The company emphasizes authentic and sustainable brand communication, supported by a multidisciplinary team. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Lottie animations, with Google Tag Manager integrated for analytics and marketing purposes. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and includes a consent mechanism for tracking but lacks explicit privacy and terms of service pages, as well as some security headers, which are areas for improvement. WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, the website scores well on content quality, business credibility, and technical implementation, with moderate scores on security posture and privacy compliance.

U

Uniper

uniper-digital.de

60

Uniper Digital operates a secure customer login portal leveraging Microsoft Azure B2C identity services. The website serves as an authentication gateway for Uniper's digital energy services, targeting customers and partners in the energy sector. The platform uses modern OAuth2 and OpenID Connect protocols to ensure secure access. The technical infrastructure is robust, hosted on Azure cloud, and employs contemporary JavaScript frameworks and libraries. Security posture is strong with HTTPS enforced and secure token handling, although explicit security headers could be improved. Privacy compliance is limited on the login page, lacking visible privacy and cookie policies. Overall, the site reflects a mature digital presence aligned with corporate branding and security best practices.

S

Schwing Stetter (UK) Ltd

schwing-stetter.co.uk

51

Schwing Stetter (UK) Ltd is a well-established manufacturer and supplier specializing in concrete production and placement equipment, including concrete pumps, batching plants, truck mixers, and concrete recyclers. The company positions itself as a global leader in the concrete equipment industry, serving primarily construction professionals and contractors in the UK. Their business model focuses on manufacturing, distribution, and after-sales services, supported by a professional and content-rich website that reflects their market position. Technically, the website employs modern web technologies such as Google Tag Manager, reCAPTCHA, and service workers, ensuring a secure and user-friendly experience. The site is mobile-optimized with good SEO practices and clear navigation, although some improvements in accessibility and security headers could enhance the overall technical posture. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact forms, indicating a baseline security awareness. However, the absence of explicit security policies, incident response contacts, and security headers suggests room for improvement in security maturity. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, but this does not detract from the legitimacy of the business as evidenced by the professional website and consistent branding. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen the security posture.

S

SCHWING Stetter Algérie

schwing-stetter-algerie.com

48

SCHWING Stetter Algérie is a medium-sized subsidiary of the German SCHWING group specializing in the marketing and distribution of concrete production, transport, and pumping machinery. The company targets construction and industrial clients primarily in Algeria, leveraging the global reputation and product range of its parent group. The website presents a professional and consistent brand image with detailed product offerings and event participation announcements, supporting its market position as a leading supplier in the concrete machinery sector. Technically, the website is built on a standard modern stack including Bootstrap and jQuery, hosted by OVH sas. It offers moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The absence of a CMS suggests a custom or static site approach. Security posture is basic, with no DNSSEC, no visible security headers, and no published privacy or cookie policies, indicating room for improvement in compliance and protection. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks critical security best practices such as HTTPS enforcement details, security headers, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. However, the lack of direct contact emails or phone numbers and absence of privacy-related policies reduce trust and compliance scores. Overall, the website is functional and professional but requires enhancements in privacy compliance, security hardening, and contact transparency to improve trustworthiness and regulatory adherence.

T

TC-Innovations GmbH

leader-shops.de

49

Leader Shops, operated by TC-Innovations GmbH, is a specialized e-commerce coaching platform focused on helping online shop owners achieve market leadership through proven strategies, sales psychology, and expert mentoring. The website is professionally designed, well-structured, and optimized for SEO and mobile devices. It leverages modern web technologies and the Shopware platform to deliver a seamless user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site demonstrates a mature digital presence with strong trust signals such as customer testimonials and industry awards.

R

Religionspädagogisches Institut Loccum

rpi-loccum.de

61

The Religionspädagogisches Institut Loccum (RPI Loccum) is a well-established non-profit educational institution affiliated with the Evangelisch-Lutherische Landeskirche Hannovers in Germany. It specializes in religious pedagogy and theological education, offering a broad range of professional development courses, events, and educational materials primarily targeting religious educators, schools, and church communities. The website reflects a mature organization with a 75-year history, providing comprehensive content and services in German. The business model focuses on education, training, and community engagement within the religious sector.

H

HoldMyTicket

holdmyticket.com

66

HoldMyTicket operates as an online ticketing platform specializing in selling tickets and promoting events for venues and festivals. The website targets event organizers, venues, and ticket buyers, offering a digital solution for event management and ticket sales. The platform positions itself as a niche player in the event ticketing industry with a focus on festivals and live entertainment. Technically, the website employs modern web technologies including JavaScript, Google Analytics, Facebook SDK, and reCAPTCHA for security and analytics. Hosting assets on Amazon S3 and using CDNs indicates a scalable infrastructure. Security posture is generally good with HTTPS enforced and bot management via Queue-it; however, the absence of explicit security headers and published privacy or terms of service pages suggests room for improvement. The WHOIS data for the subdomain is unavailable, indicating it is part of a larger domain, which slightly reduces trust but does not negate legitimacy. Overall, the website is professional, functional, and safe for general audiences.

R

Red Tiger

redtiger.com

70

Red Tiger is a well-established gaming software provider specializing in casino games and marketing tools for casino operators. The company is part of Evolution Gaming, a major player in the online gaming industry. Their website demonstrates a strong market position with a focus on innovative bonusing tools, tournaments, and jackpot offerings. The site is professionally designed, mobile-optimized, and provides clear information about their products and services. Technically, the website uses modern frameworks such as Vue.js and Nuxt.js, hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is strong with HTTPS enforced, proper domain registration locks, and multiple regulatory certifications displayed. Privacy compliance is evident with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

S

SAASOA

saasoa.com

46

SAASOA is a regional socio-economic consultative council focused on facilitating and coordinating development programs and policies for socio-economic growth in the Eastern Cape, South Africa. The organization operates on a membership model serving government agencies and socio-economic stakeholders. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap. It demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and SEO enhancements. The cookie consent mechanism is implemented with an opt-in model, reflecting a commitment to privacy compliance. From a security perspective, the site lacks visible HTTP security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the security posture is moderate but could benefit from improvements in headers, policies, and domain registration clarity. The overall risk assessment indicates a functional and professional website with moderate trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, improving accessibility and SEO, and resolving domain registration transparency issues to strengthen trust and compliance.

I

Inovativní Plzeň

plzeninovativni.eu

60

Inovativní Plzeň operates as a regional innovation ecosystem focused on supporting and developing innovative entrepreneurship in the Plzeň region. The platform targets a broad audience including children, students, investors, and companies, providing services such as incubation, acceleration, educational programs, and community events. The website reflects a well-structured and professionally designed digital presence with multimedia content and active social media engagement. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor insights. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and explicit privacy policy documentation. Overall, the domain and website present a trustworthy and credible digital front for a government or public-sector affiliated innovation initiative.

A

AMCS

amcsgroup.de

69

AMCS is a large international technology company specializing in performance sustainability software and intelligence solutions primarily for sectors such as waste management, recycling, transport, chemical, manufacturing, and utilities. The company offers B2B software solutions aimed at improving operational efficiency, compliance, and sustainability. The website demonstrates a mature digital presence with multiple regional contact points and active social media channels, indicating a well-established market position. Technically, the website uses modern web technologies including JavaScript, Google Tag Manager, Cookiebot for consent management, and Pardot for marketing automation. The CMS detected is Umbraco, a professional content management system. The site is mobile optimized and SEO friendly with appropriate meta tags and structured data, although some accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data is a concern but may be due to privacy protection or data source limitations. Overall, AMCS presents a professional and trustworthy online presence with good privacy compliance and security posture, though improvements in transparency around privacy policies, terms of service, and security disclosures are recommended to enhance trust and compliance.

Z

ZER-QMS Zertifizierungsstelle GmbH

zer-qms.de

44

ZER-QMS Zertifizierungsstelle GmbH is a German certification body specializing in quality, environmental, energy, and occupational safety management certifications. Their services include auditing and certification for standards such as ISO 9001, ISO 14001, OHSAS 18001, and DIN Spec 91436, targeting businesses seeking compliance and sustainability certifications. The company positions itself as a reliable partner with a focus on environmental and quality standards, supported by customer testimonials and recognized certifications. Technically, the website uses modern web technologies including HTML5, CSS3, and JavaScript libraries like Siema and SimpleBar for UI enhancements. The site is mobile-optimized and well-structured, though it lacks some advanced accessibility features and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a formal vulnerability disclosure policy, which are recommended for improved security posture. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance compliance and security maturity.

E

Evangelisches Medienhaus GmbH

medienkompass.de

57

Medienkompass is a German non-profit educational platform operated by Evangelisches Medienhaus GmbH, focused on providing accessible knowledge about digital media to empower responsible and creative use. The website offers articles, seminars, newsletters, and media tips primarily targeting church communities and educators. Technically, it is built on TYPO3 CMS with a modern, accessible design and uses privacy-conscious analytics (Matomo). Security posture is good with HTTPS and consent management, though security headers and incident response policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche educational market effectively.

Z

ZERA - Zemědělská a ekologická regionální agentura, z.s.

zeraagency.eu

54

ZERA - Zemědělská a ekologická regionální agentura, z.s. is a Czech regional non-profit agency focused on agricultural and ecological initiatives, particularly compost certification, education, and sustainable farming practices. The organization targets farmers, compost operators, and environmental stakeholders, providing workshops, seminars, and consulting services. The website reflects a well-established presence with content spanning from 2016 to 2025 and partnerships with reputable governmental and European bodies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though some SEO and accessibility features could be improved. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism, but lacks visible security headers and a published privacy policy or terms of service. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy-protected, which is justified for this type of organization, though it limits external verification of domain legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy documentation, security headers, and WHOIS transparency could enhance compliance and trust further.

Anstand digital is a German non-profit educational project focused on promoting respectful and ethical behavior on the internet, particularly addressing issues like hatespeech and digital civility. It is a collaboration between the Katholische Akademie in Berlin and the Evangelische Kirche Deutschlands, funded by the German Federal Government's cultural office. The project provides educational materials, podcasts, and public discussions aimed primarily at youth and educators. Technically, the website is built on Akira CMS with modern frontend technologies including jQuery, Bootstrap, and Fancybox, delivering a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The site is free of advertising and tracking, reflecting a privacy-conscious approach. Overall, the domain and WHOIS data align with the project's legitimacy and non-profit nature.

I

ImmoGarten GmbH

immogarten.de

63

ImmoGarten GmbH operates as a specialized garden nursery and plant provider based in Frankfurt am Main, Germany. The company offers a broad range of plants including garden trees, shrubs, hedges, and garden accessories, complemented by services such as garden consultation, delivery, and planting. Their market position is that of a regional specialist with a strong presence in the Rhein-Main area, supported by partnerships with related brands and an online shop for magnolias. The website is built on Silverstripe CMS and employs modern web technologies, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a privacy policy and terms of service pages indicates compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.