Security Directory

N

NEW YORKER

newyorker.de

64

NEW YORKER is a large German retail fashion brand specializing in clothing for women and men, offering multiple in-house brands such as AMISU, CENSORED, FISHBONE, SMOG, and BLACK SQUAD. The website serves as a multilingual e-commerce platform targeting a broad European audience with localized versions for many countries. The business model focuses on direct-to-consumer online sales supported by a consistent brand presence and professional design. The site uses modern web technologies including the Hugo static site generator and JavaScript modules, ensuring good performance and mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, although explicit contact information and security policies are not directly published on the landing page. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and incident response disclosures. Overall, the website is trustworthy, professional, and well-structured, supporting a strong market position in the retail fashion sector.

W

Web3 Privacy LLC

snapshot.box

59

Snapshot (snapshot.box) is a decentralized governance platform designed to facilitate voting and proposal management for DAOs and blockchain projects. Operated by Web3 Privacy LLC, the platform targets Web3 communities seeking transparent and decentralized decision-making tools. The website is modern, built with Vue.js and Headless UI, and hosted with Cloudflare DNS services, indicating a contemporary technical infrastructure. The domain is newly registered in May 2024, consistent with a recently launched platform in the evolving Web3 space. Security posture is moderate; while HTTPS is implied, no explicit security headers or DNSSEC are enabled, and no privacy or cookie policies are present on the explored page. The site lacks visible contact or incident response information, which could be improved to enhance trust and compliance. Overall, Snapshot presents a professional and functional platform with room for enhanced security and privacy compliance measures.

E

EDF power solutions Deutschland

mit-energie-arbeiten.de

54

EDF power solutions Deutschland is a medium-sized company specializing in the development, construction, and operation of renewable energy projects including onshore and offshore wind, photovoltaic systems, and battery storage solutions. As part of the international EDF power solutions group, it holds a strong market position in the German renewable energy sector. The website is professionally designed, mobile-optimized, and provides comprehensive information about the company’s services, values, and career opportunities. Technically, the site uses modern web technologies including Craft CMS, JavaScript modules, and Splide.js for interactive elements, hosted on performant infrastructure. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though it lacks explicit security policies or incident response contacts. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

E

EDF power solutions Deutschland GmbH

edf-re.de

11

EDF power solutions Deutschland GmbH is a medium-sized company specializing in the development, construction, and operation of renewable energy projects in Germany, focusing on onshore and offshore wind, photovoltaic systems, and battery storage solutions. The company targets industrial and commercial customers, offering tailored energy storage and generation solutions to support the energy transition. The website reflects a professional and modern digital presence with clear navigation, comprehensive content, and multilingual support. Technically, the site uses Craft CMS, modern JavaScript modules, and lazy loading for performance optimization. Security measures include HTTPS, CSRF protection, and cookie consent mechanisms, although explicit security policies and incident response contacts are not published. Overall, the site demonstrates a strong security posture with room for improvement in security headers and vulnerability disclosure. The WHOIS data aligns well with the business claims, confirming legitimacy and consistency. The company maintains active social media profiles and partners with relevant industry sites, enhancing credibility.

O

OeAD - Agency for Education and Internationalisation

oead.at

60

OeAD is Austria's official agency for education and internationalisation, providing advisory, support, and connection services to individuals and institutions in education, science, research, and culture globally. The website reflects a well-structured government agency portal with comprehensive information on scholarships, events, and educational programs. The target audience includes students, researchers, educational institutions, and government bodies. Technically, the site is built on TYPO3 CMS, uses modern JavaScript modules, and integrates consent management and analytics tools, indicating a mature digital infrastructure. Security posture is strong with HTTPS, consent mechanisms, and no visible vulnerabilities, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with privacy norms, though explicit privacy and terms pages were not detected in the provided content.

I

Innovation Cooperative Limited

social.coop

67

social.coop is a niche Mastodon instance operated by Innovation Cooperative Limited, a UK-based organization founded in 2017. The platform serves a community interested in cooperative and collective projects, providing a decentralized social networking service within the Fediverse. The website demonstrates a good level of content quality with active user engagement and a clear focus on its target audience. Technically, it employs modern web technologies including React and JavaScript ES modules, hosted on DigitalOcean Spaces CDN with Cloudflare DNS services. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy compliance is partial, with a basic privacy policy present but no cookie consent mechanism or terms of service found. Business credibility is strong given transparent WHOIS data and consistent domain registration details. Overall, social.coop is a trustworthy and well-maintained community platform with room for improvement in security and privacy compliance.

D

Decile Group

decilegroup.com

64

Decile Group is a modern venture capital service provider specializing in accelerating VC firms, launching institutional-grade funds instantly, and providing AI-powered management platforms. Their offerings include training programs, fund management SaaS, back-office solutions, and a fund of funds investment vehicle. The company targets emerging and established venture capital managers, limited partners, and individuals seeking careers in VC. Technically, the website is built on a modern stack with Ruby on Rails backend, Stimulus JS, Turbo, and CDN hosting, delivering fast performance and excellent mobile optimization. Security posture is solid with HTTPS and CSRF protections, though improvements are recommended in DNSSEC, security headers, and explicit security policies. Privacy compliance is partially met with a clear privacy policy but lacks cookie consent mechanisms. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

Function.no is a Norwegian company specializing in products and solutions related to KNX, installation, indoor climate, building automation, energy, and infrastructure. The website presents a professional and consistent brand image targeting businesses and professionals in the energy and building automation sectors. The company appears to be newly founded in 2024, with a domain registration date consistent with this timeline. The site integrates modern technologies including React-based components, Cloudflare CDN, and multiple analytics and marketing tools such as Google Analytics, Microsoft Clarity, HubSpot, and Facebook Pixel. Cookie consent is implemented comprehensively with detailed categories and third-party privacy policy links, demonstrating good privacy compliance.

F

Finans Norge Forsikringsdrift

forsikringsdrift.no

10

Finans Norge Forsikringsdrift is a Norwegian organization dedicated to developing and managing digital solutions, infrastructure, and standards for the insurance industry. The website positions the company as an important service provider within the Norwegian finance sector, offering key services such as cybersecurity tools in collaboration with DNV and various industry-specific digital services. The site is professionally designed, mobile-optimized, and provides clear contact information, enhancing its credibility. Technically, the website employs modern JavaScript modules, cloud-hosted images via Cloudinary, and integrates cookie consent and analytics tools. The site is well-optimized for SEO and accessibility, though no CMS or hosting provider details are explicitly identified. Performance is moderate with good mobile responsiveness. Security posture is strong with HTTPS enforced and cookie consent implemented. However, explicit security headers and incident response policies are not published, representing areas for improvement. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy and professional, with no signs of malicious activity or content blocking. The lack of WHOIS data due to privacy protection is typical for organizations in this sector and does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure policies, and maintaining transparency to further strengthen trust.

C

Cyberhouse GmbH

cyber.house

66

Cyberhouse GmbH is a well-established digital agency based in Austria, specializing in creating digital experiences through websites, web portals, and online shops. The company leverages leading CMS technologies such as TYPO3 and Storyblok to deliver tailored, high-quality web solutions. With multiple nominations and awards in the TYPO3 community and certifications as a Storyblok partner, Cyberhouse holds a strong market position as a trusted expert in the digital agency sector. Their services encompass UI/UX design, consulting, web development, project management, SEO, and ongoing support, targeting businesses seeking professional digital transformation and online presence enhancement. Technically, the website demonstrates a modern and performant infrastructure using ES modules, GSAP for animations, Swiper for carousels, and integrates CAPTCHA for form security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Privacy compliance is robust, with GDPR-aligned cookie consent mechanisms and a comprehensive privacy policy. Contact information is clearly presented, enhancing business credibility. From a security perspective, the site enforces HTTPS and employs CAPTCHA to mitigate automated abuse. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a security.txt or incident response contact is noted as an area for improvement. WHOIS data is unavailable due to privacy protection, which is common and justified for this business type. Overall, Cyberhouse GmbH presents a professional, trustworthy, and technically sound digital agency profile with strong compliance and security practices, suitable for clients seeking reliable web development and digital strategy services.

L

Limeleaf Worker Collective, LLC

blueskydirectory.com

59

Bluesky Directory is a niche online platform providing a curated directory of tools, applications, and resources related to the Bluesky social media platform. Operated by Limeleaf Worker Collective, LLC, the website targets Bluesky users and developers seeking to discover and explore ecosystem offerings. The business model centers on content curation and community engagement through featured listings, profiles, and news aggregation. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, and Cloudflare hosting, delivering a fast and mobile-optimized user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

B

Buskerud fylkeskommune

bfk.no

64

Buskerud fylkeskommune operates as the regional government authority for Buskerud county in Norway, providing public services, political information, and educational resources. The website serves residents and stakeholders with relevant information about the county's services and governance. The domain and branding are consistent with a government entity, and the content is primarily in Norwegian, targeting local users. The business model is public sector focused, emphasizing service delivery rather than commercial activities. Technically, the website employs a mix of modern JavaScript modules and legacy jQuery libraries, hosted on a CMS platform identified as Acos CMS. The site uses Google Fonts and external icon fonts, with Siteimprove Analytics integrated for monitoring accessibility and quality. The website is moderately performant and well-optimized for mobile devices, with good accessibility and SEO practices observed. From a security perspective, the site uses HTTPS (implied by domain and external resources), but no explicit security headers were detected in the provided content. There is no visible privacy or cookie policy, nor incident response or security contact information, indicating gaps in compliance and transparency. No vulnerabilities or suspicious content were found, and the domain registration is consistent with the official government entity, supporting legitimacy. Overall, the website is a credible government portal with good content and technical implementation but requires improvements in privacy compliance and security transparency to enhance trust and regulatory adherence.

T

TutoTOONS

tutotoons.com

69

TutoTOONS is a well-established kids games studio and publisher founded in 2013, offering a portfolio of family-friendly and educational digital games targeted at children and their parents. The company operates a subscription-based model through its TutoClub membership, providing premium access to games with unlocked content and no ads. The website reflects a strong market position with a professional design, clear navigation, and consistent branding. Technically, the site leverages modern web technologies including Laravel Livewire, JavaScript modules, and integrates multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar. It is hosted behind Cloudflare DNS and CDN services, ensuring good performance and security. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved and a formal security policy is absent. Overall, the site is safe, compliant with GDPR, and trustworthy, with no adult or questionable content detected.

A

Akershus fylkeskommune

afk.no

66

Akershus fylkeskommune is a Norwegian regional government entity providing a wide range of public services including education, health, transport, and political information. The website serves residents and stakeholders of Akershus county with relevant information and resources. Technically, the site uses a custom CMS (Acos CMS), modern CSS with variables, and includes legacy jQuery along with modern JavaScript modules. The site is mobile optimized and accessible, with good SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and using an outdated jQuery version. Privacy compliance is partial with a cookie consent mechanism but no explicit privacy policy found. Overall, the site is professional and trustworthy, consistent with a government authority.

T

Tula Mics

tulamics.com

64

Tula Mics operates a professionally designed e-commerce website specializing in high-quality USB microphones and standalone mobile recorders. Founded in 2019, the company targets podcasters, YouTubers, musicians, and remote workers seeking portable, studio-quality sound solutions. The website leverages Shopify's platform with a modern theme and integrates multiple analytics and marketing tools to optimize user experience and business insights. The brand maintains a consistent and trustworthy online presence with active social media channels and positive press mentions. Technically, the site is well-implemented with HTTPS, domain locking, and Cloudflare DNS, though it lacks DNSSEC and explicit security policies. Privacy compliance is basic, with a cookie consent banner but no visible privacy or terms of service pages. Overall, the site demonstrates a solid digital maturity suitable for a small e-commerce business but would benefit from enhanced privacy and security disclosures.

M

Motorsport Network

motorsport.com

67

Motorsport.com is a leading German-language motorsport news and results platform operated under the Motorsport Network brand. It provides comprehensive coverage of major racing series including Formula 1, MotoGP, DTM, and endurance racing, supported by a rich media database and an active user community. The website is professionally designed, well-optimized for mobile devices, and integrates modern web technologies including consent management for GDPR compliance. The technical infrastructure leverages CDN hosting and advanced analytics tools, ensuring fast performance and good SEO. Security posture is strong with HTTPS enforced and adblock detection implemented, though explicit security headers and incident response policies are not prominently published. Overall, the site represents a mature, trustworthy media business with a solid digital presence.

Winbay3.com is an online casino and sports betting platform recently launched in 2024. The website offers gambling services targeting adult users interested in online casino games and sports wagering. The platform is built using modern web technologies including Angular and is hosted with Cloudflare DNS services, indicating a contemporary technical infrastructure. However, the website lacks visible privacy policies, terms of service, and contact information, which are critical for regulatory compliance and user trust in the gambling industry. Security posture is moderate with HTTPS enabled and domain status protections in place, but DNSSEC is not enabled and security headers are not evident. Overall, the site is functional but requires improvements in compliance and security transparency.

G

Goetheanum TV

goetheanum.tv

67

Goetheanum TV is a specialized media platform offering video content centered on anthroposophy, targeting a general audience interested in cultural and educational material. The platform operates on a subscription and video-on-demand business model, leveraging a modern technical infrastructure including Uscreen OTT platform, Tailwind CSS, and various JavaScript libraries. The website is professionally designed, mobile-optimized, and supports multiple languages, enhancing accessibility and user experience. Security posture is solid with HTTPS enforced and domain transfer protections, though some improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies, aligning with GDPR requirements. Overall, the platform presents a trustworthy and professional digital presence with moderate tracking and advertising practices.

G

Advantage - Building User-First Ad Formats. | Advantage

get-advantage.org

51

The website www.get-advantage.org represents an open-source project named Advantage, which provides a set of customizable, high-performance web components designed to simplify and standardize high-impact display advertising on the web. The project targets web developers and publishers seeking advanced advertising infrastructure solutions. The site is well-structured with clear navigation and professional design, leveraging modern technologies such as VitePress and Tailwind CSS to deliver a fast and mobile-optimized user experience. However, the site lacks explicit business contact information, privacy policies, and terms of service, which limits its business credibility and privacy compliance posture. From a technical perspective, the website employs a modern frontend stack with ES modules and responsive design. The absence of forms reduces the attack surface, but no security headers were detected in the provided data, indicating room for improvement in security hardening. The WHOIS data is unavailable due to a malformed query or privacy protection, which is common for open-source projects but reduces transparency. The domain appears active and legitimate based on website content and GitHub presence. Security posture is moderate; HTTPS is implied but no explicit security headers or incident response contacts are present. No analytics or tracking scripts were detected, suggesting minimal user tracking and good privacy by design, though the lack of privacy and cookie policies is a compliance gap. Overall, the site is safe with no adult or questionable content detected. Strategic recommendations include implementing comprehensive privacy and cookie policies, adding security headers, providing contact information for security and business inquiries, and improving WHOIS transparency if possible to enhance trust and compliance.

T

The Marshall Project

themarshallproject.org

64

The Marshall Project is a nonprofit news organization specializing in investigative journalism and reporting on the U.S. criminal justice system. It operates multiple newsletters and local network projects, positioning itself as a trusted source for criminal justice news and analysis. The website demonstrates a mature digital presence with a modern tech stack including JavaScript ES modules, Ruby on Rails backend indications, and CDN hosting via Amazon Cloudfront. Analytics tools like Google Analytics and Parsely are used for user engagement tracking. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers and cookie consent mechanisms could be improved. WHOIS data is unavailable due to query failure, but the website's professionalism and nonprofit status support its legitimacy. Overall, the site is well-designed, content-rich, and trustworthy for its audience.

F

Fleet Maintenance

fleetmaintenance.com

59

Fleet Maintenance is a specialized media platform providing news, best practices, and educational resources focused on truck maintenance and commercial vehicle fleet management. The website serves industry professionals and fleet leaders with a variety of content including articles, webinars, whitepapers, videos, and career resources. The site is part of a larger media group with several affiliated brands, indicating a strong market presence in the transportation media sector. Technically, the website is built on modern frameworks such as Nuxt.js and Vue.js, delivering a responsive and well-structured user experience. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and privacy policies suggests room for improvement. The lack of WHOIS data is a notable concern for domain legitimacy, but the professional content and branding mitigate some risk. Overall, the site is a credible and valuable resource for its target audience but should enhance privacy compliance and domain transparency.

O

Organized Crime and Corruption Reporting Project

occrp.org

75

The Organized Crime and Corruption Reporting Project (OCCRP) operates as a reputable non-profit media organization specializing in investigative journalism focused on exposing organized crime and corruption globally. The website serves as a comprehensive platform offering investigative reports, news, features, and data tools targeted primarily at journalists, researchers, and the general public interested in transparency and accountability. OCCRP maintains a strong market position as a leading investigative journalism consortium with a clear mission and professional presentation. Technically, the website employs modern web technologies including ES modules, Vue.js framework, and integrates performance and security monitoring tools such as New Relic and Google reCAPTCHA. The site is well-optimized for mobile devices, demonstrates fast loading times, and adheres to good SEO and accessibility standards, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, implements key security headers, and uses CAPTCHA to protect forms, indicating a solid security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for improvement in transparency and security governance. Overall, OCCRP's website reflects a trustworthy and professional organization with a strong commitment to investigative journalism. Strategic recommendations include publishing detailed security and incident response policies, adding a security.txt file for vulnerability reporting, and enhancing contact information transparency to further strengthen trust and compliance.

C

CO2ero e.V.

co2ero.de

55

CO2ero e.V. is a German non-profit organization dedicated to climate protection through education and sustainable development initiatives primarily targeting schools and educational institutions. The organization offers workshops, campaigns, and resources to support climate action and sustainability goals, positioning itself as a niche leader recognized by UNESCO's BNE 2030 program. Their website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience. Technically, the website employs modern web technologies including asynchronous JavaScript loading and Matomo analytics configured to disable cookies, indicating a privacy-conscious approach. The site is served over HTTPS with good performance and mobile optimization, though no explicit CMS or hosting provider details are evident. Accessibility is basic but functional, and SEO practices appear adequate. From a security perspective, the site benefits from HTTPS and privacy-aware analytics but lacks explicit security headers, a published privacy or cookie policy, and a vulnerability disclosure mechanism. Contact information is clearly provided, enhancing trust. The WHOIS data shows eco-friendly hosting consistent with the organization's mission but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website is safe, professional, and credible with room for improvement in privacy compliance and security best practices. No adult or questionable content is present, and the site is fully accessible without WAF or blocking mechanisms.

N

NIC.br - Núcleo de Informação e Coordenação do Ponto BR

registro.br

63

Registro.br is the official Brazilian domain registry responsible for managing .br domain registrations. Operated by NIC.br, it serves individuals and organizations in Brazil seeking to register and manage their internet domain names under the .br country code. The website provides domain search, registration, and management services, along with educational resources and security awareness content. The site is well-positioned as a trusted authority in the Brazilian internet ecosystem, supported by partnerships with CGI.br and CERT.br. Technically, the website employs modern web technologies including Vue.js and JavaScript ES modules, ensuring a responsive and performant user experience. The site is mobile-optimized, accessible, and SEO-friendly, with clear navigation and professional design. Security best practices are observed with HTTPS enforcement and secure form handling, although some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy, though cookie consent mechanisms are absent. From a security perspective, the domain registration details align with the official registry, showing high legitimacy and no suspicious patterns. No vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit incident response contact information and vulnerability disclosure policies, which could enhance trust and security posture. Overall, Registro.br presents a high-quality, trustworthy, and professional web presence suitable for its critical role in Brazil's internet infrastructure. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance profile.

F

Facts about Germany

tatsachen-ueber-deutschland.de

64

The website 'Facts about Germany' serves as an official multilingual information portal providing comprehensive facts about Germany's politics, economy, culture, and society. It targets a broad international audience including researchers, policy makers, and the general public. The site is government-backed and positions itself as a trusted source of factual information about Germany. Technically, it is built on Drupal 10 CMS, employs modern JavaScript modules, and integrates a Usercentrics Consent Management Platform to ensure GDPR compliance. Google Tag Manager is used for analytics with default consent set to denied, reflecting a privacy-conscious approach. Security-wise, the site enforces HTTPS and uses consent mechanisms but lacks visible security headers and explicit incident response or vulnerability disclosure pages. Overall, the site is professionally designed, mobile-optimized, and accessible, with high content quality and trustworthiness. Recommendations include adding security headers, publishing a security.txt file, and providing clearer incident response contacts to enhance security posture and compliance.

H

Helsedirektoratet

helsedirektoratet.no

67

Helsedirektoratet is the Norwegian Directorate of Health, a government agency providing guidance, regulations, and support to health and care services across Norway. The organization focuses on public health, prevention, and ensuring equitable health services for all citizens. Their website serves as a comprehensive portal for national health recommendations, digital health initiatives, legal frameworks, health preparedness, and statistical reporting. The site targets health professionals, municipalities, government bodies, and the general public. Technically, the website is built on modern web technologies including React 18 and Enonic XP CMS, with integration of Google Fonts and Google Analytics for tracking. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. Privacy compliance is strong, featuring a cookie consent mechanism and a comprehensive privacy policy aligned with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration and employs best practices such as cookie consent and no visible sensitive data exposure. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies, which could be improved to enhance security posture. The WHOIS data is not publicly available, likely due to privacy protection typical for government domains, but the domain and content strongly indicate legitimacy and trustworthiness. Overall, Helsedirektoratet's website is a high-quality, secure, and trustworthy digital platform supporting Norway's health sector. Strategic improvements in security policy transparency and header implementation would further strengthen its security and compliance standing.

E

ebsygon GmbH

netzanschluss-digital.de

47

The website netzanschluss-digital.de serves as a digital network connection portal targeted at distribution network operators in Germany. It is operated by ebsygon GmbH, a small company specializing in providing flexible and cost-effective digital solutions for energy distribution networks. The site acts primarily as an informational landing page linking to the parent company's main website for more detailed information. Technically, the site uses modern frontend technologies such as SvelteKit and integrates Cloudflare Turnstile for bot protection, indicating a moderate level of digital maturity. However, the site lacks visible security headers and cookie consent mechanisms, which are important for compliance and security best practices. The security posture is adequate but could be improved by implementing additional security policies and transparency measures. Overall, the site is professional and trustworthy but minimalistic in content and features, reflecting a focused B2B service offering.

E

Evangelische Kirche der Pfalz

pfalz-evangelisch.de

57

The Evangelische Kirche der Pfalz is a large non-profit religious organization serving as one of the 20 regional churches within the Evangelical Church in Germany (EKD). Their website provides comprehensive information about church activities, events, community engagement, job opportunities, and press releases. The target audience includes church members and the general public interested in religious and community topics. The organization maintains a strong market position within the German religious sector, supported by consistent branding and a professional online presence. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript modules, Swiper.js for interactive elements, and Usercentrics for GDPR-compliant cookie management. The site is hosted on German VPS servers, optimized for mobile devices, and includes strong accessibility features such as an accessibility dashboard and keyboard navigation aids. SEO practices are well implemented with proper meta tags and structured data. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks explicit security policies, incident response information, and a vulnerability disclosure mechanism. The WHOIS data aligns well with the website content, indicating legitimacy and consistency. Overall, the site demonstrates a mature security posture with room for improvement in formal security documentation. The overall risk is low, with strong compliance to privacy regulations and good technical implementation. Strategic recommendations include enhancing security headers, publishing security policies, and adding a security.txt file to improve transparency and incident handling readiness.

W

World4You Internet Services GmbH

j.berlin

71

Sedo.com operates as a domain marketplace platform specializing in domain sales and parking services. The analyzed page indicates that the domain j.berlin is available for purchase, targeting domain investors and businesses seeking premium domain names. The company behind the domain registration is World4You Internet Services GmbH, an established registrar founded in 1998, which aligns with the domain's age and legitimacy. The website employs modern web technologies including JavaScript ES modules and Cloudflare DNS services, ensuring a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection in place, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is minimal on this page, with no explicit privacy policy or terms of service detected, but a cookie consent mechanism is implemented. Overall, the site presents a basic but functional domain sales landing page with moderate trustworthiness and business credibility.

B

Brinkmann (a brand within the Putzmeister Group)

estrichboy.de

65

EstrichBoy, a brand within the Putzmeister Group, is a well-established manufacturer and global leader in construction and mining machinery, specializing in concrete and mortar pumping equipment and screed conveyors. The company has a strong European presence and a comprehensive dealer network, supported by professional training and service offerings. The website reflects a mature digital presence with multi-language support and integrated dealer search functionality. Technically, the site is built on the Liferay CMS platform with modern JavaScript frameworks and analytics tools, ensuring a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement, CSP nonce usage, and OAuth2 authentication endpoints, although some security headers could be explicitly verified and enhanced. Privacy compliance is well addressed with clear cookie and data privacy policies and consent mechanisms. Overall, the website is professional, trustworthy, and aligned with the company's business objectives.

R

Red Tiger

redtiger.com

70

Red Tiger is a well-established gaming software provider specializing in casino games and marketing tools for casino operators. The company is part of Evolution Gaming, a major player in the online gaming industry. Their website demonstrates a strong market position with a focus on innovative bonusing tools, tournaments, and jackpot offerings. The site is professionally designed, mobile-optimized, and provides clear information about their products and services. Technically, the website uses modern frameworks such as Vue.js and Nuxt.js, hosted behind Cloudflare DNS, ensuring good performance and security. Security posture is strong with HTTPS enforced, proper domain registration locks, and multiple regulatory certifications displayed. Privacy compliance is evident with comprehensive privacy and cookie policies and a consent mechanism. Overall, the website reflects a mature digital presence with high trustworthiness and professionalism.

S

Stiftung Creative Kirche

chormusicals.de

57

The website www.chormusicals.de represents the Stiftung Creative Kirche, a well-established non-profit organization focused on producing and promoting choir musicals across Germany. With over 30 years of experience, the organization offers cultural musical events, choir participation opportunities, and ticket sales. The site is professionally designed, content-rich, and targets choir enthusiasts and audiences interested in musical theater. Technically, the site is built on TYPO3 CMS and integrates modern JavaScript libraries and privacy-respecting analytics tools such as Matomo. The presence of a cookie consent mechanism via Klaro demonstrates a commitment to privacy compliance. Security posture is solid with HTTPS enforced, though some HTTP security headers are not visibly implemented. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

V

VM

vm.com

53

VM operates as a pioneering domain NFT marketplace, leveraging blockchain technology to facilitate seamless domain trading, transfers, lending, and escrow services. Registered as an ICANN-accredited registrar in Hong Kong since 2022, VM positions itself as a trusted platform for Web3 domain asset management. The website demonstrates a modern technical infrastructure built on Vue.js and integrates with popular blockchain wallets such as MetaMask, indicating a mature digital presence. Security posture is strong with HTTPS enforcement and standard security headers, although explicit security policies and incident response details are not publicly available. The absence of WHOIS data for the domain raises some concerns about registration transparency, but the presence of recognized partners and clear privacy policies mitigates some risk. Overall, VM presents a credible and innovative business with room for improvement in transparency and security disclosures.

S

Studio StillSoft

studiostillsoft.com

45

Studio StillSoft is a small creative or digital studio established around 2020, focusing on showcasing selected projects through a minimalistic website design. The business appears to target a general audience interested in creative digital services, positioning itself as a niche player in the creative industry. The website is simple and visually oriented, with limited textual content and no explicit business or contact details visible on the homepage. Technically, the website uses modern JavaScript modules and CSS with a probable Vue.js framework, hosted on Websupport infrastructure. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. No CMS or third-party marketing/analytics tools are detected, indicating a lightweight and straightforward technical setup. From a security perspective, the site lacks critical security headers and privacy compliance mechanisms such as privacy or cookie policies. The domain registration is legitimate and consistent with the business profile, but the absence of security best practices and contact information reduces trustworthiness. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, the website scores moderately on content and business credibility but scores low on security and privacy compliance. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

E

Evangelische Kirche der Pfalz

evpfalz.de

57

The Evangelische Kirche der Pfalz website serves as the official digital presence of one of the 20 regional Protestant churches in Germany under the EKD umbrella. It provides comprehensive information about church activities, events, community engagement, job opportunities, and press releases. The site targets a broad audience including church members, volunteers, and the general public interested in religious and community topics. The organization positions itself as a large, established non-profit religious entity with a strong regional presence in Germany. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript frameworks such as Swiper.js for interactive elements and Usercentrics for GDPR-compliant cookie management. The site is well-optimized for mobile devices, accessibility, and SEO, demonstrating a mature digital infrastructure. Hosting appears to be managed via German-based servers, consistent with the organization's regional focus. From a security perspective, the site enforces HTTPS and integrates privacy proxy servers to enhance data protection. While no explicit security headers were detected in the provided data, the overall posture is strong with no visible vulnerabilities or exposed sensitive information. The presence of a cookie consent mechanism and clear privacy policies indicates good compliance with GDPR requirements. However, the site could improve by publishing a dedicated security policy and incident response contacts. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to transparency. It effectively balances user experience, content quality, and privacy considerations, making it a reliable resource for its audience.

The website login.webspaceconfig.de serves as a customer login portal for managing hosting projects, targeting customers who use hosting services. The platform appears to be a small-scale technology service focused on project management within the hosting sector, primarily serving a German-speaking audience. The site uses modern web technologies including JavaScript ES modules, React framework, and Font Awesome icons, indicating a contemporary technical infrastructure. Hosting is provided by agenturserver as inferred from the nameservers. The website performance is moderate with basic mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and password fields properly masked; however, the absence of explicit security headers and privacy policies indicates room for improvement. Analytics are implemented via etracker, reflecting moderate user tracking but lacking clear privacy compliance mechanisms. Overall, the site is functional but lacks comprehensive privacy, security, and contact disclosures, which impacts trust and compliance. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance the security posture and user trust.

Dystopia digital is a small digital-first creative collective founded in 2020, specializing in technology-driven creative services including UI/UX design, ecommerce, marketplace development, 3D and motion design, and branding. The company serves a diverse client base across sectors such as real estate, finance, lighting design, movie production, and architecture, positioning itself as a niche provider of innovative digital solutions. The website showcases a portfolio of client projects, reflecting a professional and consistent brand image. Technically, the website is built using modern frameworks such as Nuxt.js and Tailwind CSS, hosted on DigitalOcean, and optimized for fast performance and mobile responsiveness. The site lacks a CMS and does not include analytics or tracking scripts, indicating a focus on privacy and simplicity. However, accessibility features are basic, and SEO optimization is minimal. From a security perspective, the site uses HTTPS with good SSL configuration but lacks important security headers and published security policies. There is no evidence of privacy, cookie, or terms of service policies, nor incident response or vulnerability disclosure information. Contact information is limited to email addresses without phone numbers or physical addresses. These gaps reduce the overall security and compliance posture. Overall, the website is professional and trustworthy with a moderate security posture but requires improvements in privacy compliance, security best practices, and transparency to enhance trust and regulatory adherence.

M

Messe München GmbH

bau-muenchen.com

63

BAU München is a globally recognized trade fair organizer specializing in architecture, building materials, and systems. The website serves as a comprehensive platform for event information, exhibitor registration, and industry insights, targeting architects, planners, investors, and craftsmen. The site is professionally designed, mobile-optimized, and uses modern web technologies including web components and elastic search for enhanced user experience. Privacy compliance is robust, leveraging Usercentrics CMP and providing a comprehensive privacy policy in German. Security posture is strong with HTTPS, security headers, and domain transfer protections, though DNSSEC is not enabled and no explicit security policy or incident response contacts are published. Overall, the website reflects a mature, trustworthy, and well-managed digital presence aligned with Messe München GmbH's brand and business objectives.

C

CURIA (formerly Femtec.Alumnae)

curia-netzwerk.de

47

CURIA is a well-established non-profit network dedicated to supporting women in STEM fields in Germany. With over 1,000 members and partnerships with reputable companies, it offers career development, networking, and annual conferences. The website is professionally designed, mobile-optimized, and content-rich, reflecting a mature digital presence. Technically, it runs on WordPress with modern front-end technologies and uses plugins for analytics and contact forms. Security posture is good with HTTPS enforced, but lacks some security headers and explicit incident response contacts. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and serves its target audience effectively.

B

Bonn.digital

nachhaltigezukunft.camp

67

The website nachhaltigezukunft.camp represents the Barcamp Nachhaltige Zukunft, an open conference focused on sustainability actors in the Bonn-Rhein-Sieg region. It serves as a platform for knowledge exchange, networking, and community engagement among local initiatives, NGOs, businesses, and interested individuals. The event is supported by local government entities and economic development agencies, positioning it as a reputable regional sustainability forum. Technically, the site is built on WordPress 6.8.3 with a modern, responsive design and uses Matomo for privacy-conscious analytics. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms. The WHOIS data is privacy-protected, which is typical for such event sites, and no suspicious patterns were detected. Overall, the site is professional, trustworthy, and well-aligned with its community-focused mission.

L

LandReise.de

landreise.de

49

LandReise.de is a specialized online platform offering rural vacation accommodations primarily in German-speaking Europe. The company focuses on providing families, couples, and groups with access to unique farm stays, holiday homes, huts, and hideaways. Their market position is strong within the niche of rural hospitality, supported by a comprehensive and professionally designed website that facilitates booking and discovery of over 4,000 properties. Technically, the website employs modern web technologies including Statamic CMS, Tailwind CSS, and JavaScript modules, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent management, though it lacks explicit security policies and vulnerability disclosure mechanisms. Overall, the platform demonstrates a mature digital presence with clear contact channels and social media integration, but could improve privacy transparency and security documentation.

E

Ecomas

ecomas.cl

53

Ecomas is a Chilean company specializing in sustainable heating solutions, primarily offering certified pellets, stoves, and related accessories through an e-commerce platform. The company holds a unique European EN plus A1 certification for its pellets, positioning it as a market leader in Chile's energy sector focused on eco-friendly heating. The website targets consumers and businesses seeking high-quality, sustainable heating products. Technically, the site employs modern web technologies including Vue.js, Bulma CSS, and FontAwesome, with a WordPress backend indicated by sitemap and URL structures. The site is mobile-optimized and SEO-friendly, though content quality is basic with some loading placeholders visible. Security posture is moderate with HTTPS in use but lacks comprehensive security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. WHOIS data could not be retrieved, limiting domain legitimacy verification. Overall, the site is functional and professional but could improve in security and privacy transparency.

M

Vermittlerportal - gesetzlicheKrankenkassen.de Vermittlerportal

makleraktiv.de

45

Makleraktiv.de operates as a specialized distribution partner portal focused on statutory health insurance in Germany. It targets insurance brokers and professionals by providing tools such as comparison calculators, online application processing without signature requirements, and a pooling service for membership applications. The platform emphasizes its 25 years of experience and offers a registration system for brokers to access these services. Technically, the website uses modern web technologies including Bootstrap and JavaScript ES modules, hosted on infrastructure associated with DomainControl. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and secure form submission but lacks visible advanced security headers and CSRF protections, which are recommended for improvement. Privacy compliance is partially addressed via a privacy policy hosted on a related domain, but no cookie consent mechanism is present on the login page. Overall, the website is legitimate and functional with moderate trustworthiness, suitable for its business purpose.

Unilever Česká republika operates as a regional branch of the global consumer goods giant Unilever PLC, providing a wide range of well-known brands in food, home care, and personal care sectors. The website reflects a mature enterprise-level digital presence with a focus on user experience, accessibility, and compliance with privacy regulations such as GDPR. The site employs modern web technologies including the Astro framework and integrates cookie consent management via OneTrust, alongside Google Analytics and Tag Manager for analytics and marketing purposes. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and well-optimized for performance and SEO.

I

Initiative Chemie im Dialog (CID) / Verband der Chemischen Industrie e. V. (VCI)

ihre-chemie.de

56

The website 'Ihre Chemie' serves as an informational platform operated by the Initiative 'Chemie im Dialog' (CID) and supported by the Verband der Chemischen Industrie e. V. (VCI). It focuses on educating the public about the German chemical industry's transformation towards climate neutrality by 2045, emphasizing sustainable energy use, resource conservation, and alternative raw materials. The site targets a broad audience interested in sustainability and industrial innovation. Technically, the site employs modern JavaScript modules, CSS, and integrates eTracker analytics with a compliant cookie consent mechanism. The hosting is managed via plusline.de nameservers, indicating a stable infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the site demonstrates high professionalism, excellent design, and strong trust indicators including prestigious German design and brand awards.

P

Plinko slot

denieuweschepenvandoeksen.nl

62

The website www.denieuweschepenvandoeksen.nl is a Dutch-language content platform focused on the Plinko online casino game. It provides comprehensive guides, reviews, and casino recommendations targeted at Dutch-speaking online gamblers interested in Plinko. The site positions itself as a niche media provider with a small-scale business model centered on affiliate marketing and content monetization. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript ES modules, and integrates Google Analytics via Google Tag Manager. The site is mobile optimized with good SEO practices and structured data implementation. Security-wise, the site enforces HTTPS, uses CSRF tokens, and implements a cookie consent banner, but lacks explicit published security policies or incident response information. No critical vulnerabilities or suspicious content were detected. Overall, the site is professional, trustworthy, and compliant with GDPR-related cookie and privacy policies, though it could improve transparency on security and incident response. The domain uses privacy protection in WHOIS, which is justified given the gambling-related content. The site is safe for adults and does not contain explicit or NSFW content beyond gambling-related material.

P

Plinko

plinko.co.za

63

Plinko.co.za is an online gaming platform specializing in the Plinko casino game, targeting primarily the South African market. The website offers real money gameplay, bonuses, and downloadable apps, with a focus on engaging and strategic gambling experiences. The business is relatively new, founded in 2024, and operates with a professional and consistent brand presence. The technical infrastructure leverages Cloudflare for DNS and CDN services, uses modern JavaScript modules, and integrates Google reCAPTCHA for form security. The site is well optimized for mobile and desktop users, providing a fast and accessible user experience. Security posture is solid with HTTPS and anti-bot measures, though explicit security policies and incident response contacts are absent. WHOIS data indicates a recent domain registration with some geographic mismatch between registrant country (Ukraine) and target market (South Africa), which is common in online gaming but should be monitored. Overall, the platform is trustworthy, compliant with basic privacy and cookie regulations, and provides a safe environment for adult users interested in online gambling.

S

staatsministerium.de is available for purchase - Sedo.com

staatsministerium.de

8

The website is a domain parking and sales landing page hosted by Sedo.com for the domain staatsministerium.de. It primarily serves domain buyers and investors interested in acquiring this domain. The platform operates as a domain marketplace and brokerage service, with a business model centered on domain sales and parking. The website content is minimal and focused on domain availability rather than providing organizational or business information related to the domain name itself. Technically, the site uses modern web technologies including JavaScript modules and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer restrictions in place, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service policies found, though a cookie consent mechanism is present. Overall, the domain registration is legitimate and consistent with the domain marketplace business model. The site is safe with no adult content or suspicious elements detected.

D

dm-drogerie markt GmbH + Co. KG

lust-an-zukunft.de

68

The website 'Lust an Zukunft' is a community engagement platform operated by dm-drogerie markt GmbH + Co. KG, a large retail company in Germany. The site focuses on supporting local initiatives for a livable and open society, aligning with the company's corporate social responsibility efforts. The platform is well-branded and consistent with dm's retail and community values, targeting a general audience interested in social initiatives and retail services. Technically, the site employs modern web technologies including JavaScript modules and CSS, with a self-hosted Matomo analytics solution integrated via Cookiebot for GDPR-compliant user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks explicit security headers and a published security policy. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the brand identity. Overall, the website demonstrates a mature digital presence with strong privacy compliance and a trustworthy business profile.

B

Bonn.digital

bonn.social

70

Bonn.social is a localized Mastodon social media instance serving the Bonn and Rhein-Sieg region, operated by Bonn.digital, a social media agency based in Bonn, Germany. The platform provides decentralized social networking services tailored to the local community and enthusiasts of the region. The website is well-structured, with clear information about administration, contact, and community guidelines, fostering trust and engagement among users. Technically, the site leverages modern web technologies including Mastodon, React, and ES modules, ensuring a responsive and user-friendly experience across devices. The platform is integrated into the Fediverse, promoting decentralized social media interaction. Security-wise, the site enforces HTTPS and avoids exposing sensitive data, but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. WHOIS data is privacy protected, which is common for such services, but limits transparency. Overall, the site demonstrates a solid security posture and business credibility appropriate for its scope and audience.