Security Directory

The website med-alumni.de currently serves as a domain parking and sales landing page, offering a selection of generic categories such as products, home & garden, sports, and information guides. The domain is explicitly marked as 'for sale' and lacks any substantive business content or contact information. The technical infrastructure is basic but includes modern HTML, CSS, and JavaScript with a captcha challenge to mitigate bot access. However, there is no evidence of HTTPS enforcement or advanced security headers, which limits the security posture. The absence of WHOIS data and registrant information further reduces trust and legitimacy. Overall, the site is functional as a domain sale landing page but lacks business credibility and comprehensive privacy or security compliance.

U

Universitäres Herz- und Gefäßzentrum Frankfurt

herz-frankfurt.de

49

The Universitäres Herz- und Gefäßzentrum Frankfurt is a specialized heart and vascular center integrated within the Universitätsklinikum Frankfurt. It offers interdisciplinary cardiology, angiologie, heart and vascular surgery services, focusing on personalized patient care and advanced therapies. The center holds multiple certifications and maintains partnerships with reputable organizations, positioning itself as a leading healthcare provider in the region. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to patients, visitors, and medical professionals. Technically, the site is built on Craft CMS with modern web standards and includes privacy-conscious analytics implementations. Security posture is good with HTTPS and consent management, though explicit security policies and incident response details are absent. Overall, the site is trustworthy, compliant with GDPR, and well-optimized for user experience.

T

Trackonomics

trackonomics.net

66

Trackonomics is a technology company offering a SaaS platform focused on affiliate data aggregation, analytics, and link automation. Their services target content publishers, brands, and agencies seeking to optimize affiliate marketing efforts at scale. The company appears to be a small-sized business founded in 2014, with a professional and consistent web presence. The website is built on WordPress, leveraging Yoast SEO and Google reCAPTCHA for security and SEO enhancements. Hosting and domain registration are managed through Amazon Registrar, Inc., indicating a reliable infrastructure. Security posture is moderate with HTTPS enabled but lacking advanced security headers and DNSSEC. Privacy and cookie policies are not found, indicating compliance gaps. No explicit contact information or incident response details are provided, which may impact user trust and regulatory compliance. Overall, the website is professional, safe, and functional but would benefit from enhanced privacy disclosures and security practices.

D

Das Telefonbuch-Servicegesellschaft mbH

dastelefonbuch.de

62

Das Telefonbuch-Servicegesellschaft mbH operates a leading German online telephone directory service offering phone numbers, addresses, company information, and person search. The website serves a broad German audience with additional services such as appointment booking and advertising platforms. The company maintains a strong market position in the media sector with a large-scale operation. Technically, the website is built on a custom CMS with modern JavaScript and CSS technologies, supported by Cloudflare CDN and advanced consent management tools. The site is performant, mobile-optimized, and accessible, providing a professional user experience. Security posture is solid with HTTPS enforced and consent-based tracking, though explicit security headers could be improved. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. Overall, the domain registration data aligns well with the business identity, indicating legitimacy and trustworthiness.

H

Helmholtz Munich

helmholtz-munich.de

60

Helmholtz Munich is a leading German research center specializing in health and environmental sciences. The organization focuses on biomedical research, including diabetes, obesity, environmental health, and personalized medicine. It serves researchers, healthcare professionals, and scientific communities, offering advanced research, technology transfer, and scientific career development programs. The website reflects a strong market position as a reputable non-profit research institution with a clear mission to improve future health. Technically, the website is built on TYPO3 CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. However, some improvements could be made in security headers and cookie consent mechanisms to enhance privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data. No critical vulnerabilities were detected, but the absence of explicit incident response contacts and vulnerability disclosure policies suggests room for improvement in security transparency and readiness. Overall, the website is trustworthy, professional, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic enhancements in these areas would further strengthen its security posture and user trust.

E

EURAXESS Croatia

euraxess.hr

70

EURAXESS Croatia is a national portal affiliated with the European Commission, providing comprehensive information and personalized support services to researchers and their families to facilitate mobility and career development within Croatia and Europe. The platform offers job listings, funding opportunities, and practical guidance on visas, healthcare, accommodation, and other essential topics. The website targets researchers, entrepreneurs, research organizations, and businesses, positioning itself as a key facilitator in the European research ecosystem. Technically, the website is built on Drupal 10, leveraging modern web technologies and adhering to good practices in mobile optimization, accessibility, and SEO. Hosting appears to be managed by CARNET, a Croatian academic and research network, which aligns with the domain registration data. The site performs moderately well with a clean, professional design and clear navigation. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, reflecting compliance with GDPR and privacy standards. However, there is room for improvement in security headers and publishing explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, EURAXESS Croatia presents a trustworthy, professional, and well-maintained online presence that effectively serves its target audience. Strategic recommendations include enhancing security headers, publishing a security policy, and expanding contact information to improve transparency and user trust.

The website at cartagiovani.eu currently serves as a security CAPTCHA challenge page powered by BitNinja, designed to block automated or suspicious traffic. It does not provide any business or marketing content, and visitors must complete a CAPTCHA to proceed. The page uses Google reCAPTCHA v2 and Google Analytics for bot mitigation and tracking. The technical infrastructure indicates use of outdated CMS versions (Joomla 1.5 and WordPress 2.5) as per meta tags, which may pose security risks if these platforms are actively used elsewhere on the site. Hosting is provided by Serverplan Srl Unipersonale, a known hosting provider. The security posture includes basic bot mitigation but lacks visible security headers and privacy policies, limiting compliance and trustworthiness. Overall, the site is primarily a security gate rather than a business-facing website.

E

Erasmus+ ja Euroopa Solidaarsuskorpuse agentuur

noored.ee

47

Erasmus+ ja Euroopa Solidaarsuskorpuse agentuur is a national agency in Estonia dedicated to supporting youth programs under the Erasmus+ and European Solidarity Corps initiatives. The agency provides comprehensive information, project opportunities, training, and resources to youth, youth sector specialists, and organizations. The website is professionally designed, well-structured, and optimized for mobile and SEO, reflecting a mature digital presence. Technically, it is built on WordPress with modern performance enhancements such as WP Rocket and Google Site Kit integration. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not evident. Overall, the site is trustworthy, compliant with GDPR, and serves as a key government/non-profit resource for youth programs in Estonia.

G

Gelbe Seiten

gelbeseiten.de

51

Gelbe Seiten is a prominent German business directory offering comprehensive listings of companies, telephone numbers, and addresses across various industries in Germany. The website serves both consumers seeking service providers and businesses aiming to increase visibility through advertising and premium listings. It holds a strong market position supported by multiple awards and a consistent brand presence. Technically, the site employs modern web technologies, including JavaScript frameworks, consent management platforms, and performance optimizations, hosted on reliable infrastructure with Cloudflare DNS. Security posture is robust with HTTPS enforcement and GDPR compliance mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, user-friendly, and trustworthy, with moderate tracking balanced by user consent.

CommanderZero.com is a personal blog established in 2003, focusing on preparedness, survivalism, firearms, and related logistics topics. The site serves a niche audience of survival enthusiasts and firearm owners, providing detailed articles, reviews, and observations. The business model appears to be content publishing supported by community engagement and Patreon donations. Technically, the site runs on WordPress hosted by Bluehost, utilizing modern web technologies and Google Analytics for visitor tracking. The site is moderately optimized for mobile and accessibility but lacks comprehensive privacy and cookie policies, which are compliance gaps. Security posture is adequate with HTTPS enabled and domain transfer protections, but missing advanced security headers and vulnerability disclosures. Overall, the domain age and registration data support the site's legitimacy and stable presence. Strategic improvements in privacy compliance and security practices would enhance trust and reduce risk.

D

Dell Deutschland

dell.de

68

Dell Deutschland operates as a regional branch of Dell Technologies, providing a comprehensive portfolio of technology products and services including notebooks, desktops, servers, storage, monitors, gaming equipment, and accessories. The website targets both business and consumer segments in Germany, reflecting Dell's strong market position as a global technology leader. The digital infrastructure is robust, leveraging advanced marketing and analytics tools such as Adobe Target and OneTrust for consent management, ensuring GDPR compliance. The site is well-optimized for performance, mobile responsiveness, and accessibility, with a professional design and clear navigation. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, though explicit security policy and incident response information are not publicly detailed. Overall, the site demonstrates high trustworthiness and professionalism consistent with an enterprise-grade technology provider.

L

Leipziger Messe GmbH

medlogistica.de

67

med.Logistica is a specialized event platform organized by Leipziger Messe GmbH, focusing on hospital logistics and process management in the German-speaking healthcare sector. It serves as a leading congress and trade fair, targeting hospital management professionals, exhibitors, and visitors interested in optimizing hospital processes. The platform offers exhibitor registration, visitor information, ticketing, and an official mobile app to enhance user engagement. The website reflects a professional and consistent brand image aligned with its parent company, Leipziger Messe GmbH, based in Germany. Technically, the website employs modern web technologies including JavaScript, Google Tag Manager for analytics, and a comprehensive cookie consent mechanism powered by consentmanager.net. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely under Leipziger Messe's infrastructure. Performance is moderate with good technical implementation but lacks explicit CMS identification. From a security perspective, the site enforces HTTPS and uses cookie consent for GDPR compliance. However, it lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The domain registration data aligns well with the website content, indicating a trustworthy and legitimate online presence. Overall, med.Logistica's website is a well-structured, professional platform with good privacy compliance and moderate security posture. Strategic improvements in security policy transparency and incident response readiness would enhance trust and resilience.

A

Agentur Zentral GmbH

theme-ultimate.de

54

Agentur Zentral GmbH operates a professional website offering a proprietary Contao 5 theme called Theme Ultimate, targeting medium-sized businesses and Contao CMS users. The company provides theme development, installation, maintenance, and support services, positioning itself as a niche provider with a focus on quality and performance. The website demonstrates a high level of digital maturity with modern technologies, responsive design, and strong SEO practices. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some advanced security headers and policies are absent. Overall, the site is trustworthy, professional, and compliant with GDPR requirements, though it lacks explicit incident response and terms of service documentation.

A

Asian Art and Antiques LTD

vegasswordshow.com

63

The Vegas Sword Show website represents a niche event organizer focused on Japanese sword collectors and antique arms enthusiasts, hosting an event in Las Vegas in conjunction with the Las Vegas Antique Arms Show. The business operates primarily as an event coordinator, providing table and pass sales, event information, and accommodation details. The website is built on a custom CMS platform and presents a professional, content-rich experience with good navigation and mobile optimization. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. Security posture is moderate with no visible security headers or published security policies, and privacy compliance is weak due to missing privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is functional and informative but would benefit from improved security and compliance transparency.

The website teknofest.app hosts a landing page titled 'NSosyal' which promotes a social networking mobile application targeted at young people, volunteers, and technology enthusiasts primarily in Turkey. The platform offers features such as following friends, sharing posts including photos and videos, and engaging through likes and comments. The business model revolves around mobile app distribution via Google Play and Apple App Store, with a desktop version accessible through a subdomain. The site content is primarily in Turkish with an English language option. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. It features a visually appealing design with animations and responsive layout optimized for mobile devices. However, there is no evidence of a content management system or advanced frameworks. Performance is moderate with good mobile optimization but basic accessibility and SEO features. From a security perspective, the site uses HTTPS but lacks visible security headers and formal security policies. No forms or sensitive data collection points are present, reducing immediate risk. The absence of privacy, cookie, and terms of service policies indicates compliance gaps, especially regarding GDPR. No contact information or incident response channels are provided, limiting transparency and trust. Overall, the website is functional and visually professional but lacks critical compliance and security documentation. Strategic improvements in privacy policies, security headers, and contact transparency are recommended to enhance trustworthiness and regulatory compliance.

R

RockSolid Themes

rocksolidthemes.com

55

RockSolid Themes is a specialized provider of premium Contao CMS themes and plugins, offering responsive, hand-coded designs with a strong emphasis on ease of customization and open source extensions. Established in 2012 and based in Germany, the company targets webmasters, agencies, freelancers, and developers seeking high-quality, flexible website themes. Their market position is reinforced by official Contao partnership and positive customer testimonials, positioning them as a niche leader in the Contao ecosystem. Technically, the website is well-constructed with modern HTML5 and CSS3 technologies, optimized for mobile devices and fast performance. The hosting is managed via NSHost2 name servers, and the domain is secured with HTTPS and a clientTransferProhibited status, though DNSSEC is not enabled. The site lacks some advanced security headers and explicit incident response or vulnerability disclosure policies. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and regular updates to themes and plugins. However, there is room for improvement in cookie consent implementation, security policy transparency, and DNS security enhancements. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, RockSolid Themes presents a trustworthy and professional online presence with strong business credibility and technical maturity. Strategic enhancements in privacy compliance and security documentation would further strengthen their posture and customer trust.

Z

ZEISS

zeiss.ro

68

ZEISS România is the Romanian branch of ZEISS, a globally recognized leader in optics and optoelectronics technology. The website presents a professional corporate presence with a focus on vision care and medical technology sectors. The site is built on Adobe Experience Manager, leveraging modern web technologies and includes a cookie consent mechanism compliant with GDPR standards. While the WHOIS data is privacy protected under ROTLD, the website content and branding strongly align with the ZEISS international brand, indicating legitimacy and trustworthiness. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response information are not published. Overall, the site demonstrates a mature digital infrastructure suitable for an enterprise-level technology company.

N

NHO Luftfart

nholuftfart.no

63

NHO Luftfart is a Norwegian employer association representing airlines and other aviation-related businesses in Norway. With over 50 member companies and more than 12,000 employees, it serves as a key industry organization working to develop a competitive aviation sector. The website reflects a professional organizational presence with clear business information, member services, and industry news. Technically, the site uses modern web technologies including Episerver CMS, Google reCAPTCHA Enterprise, and Microsoft Application Insights for analytics. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are lacking. Overall, the site is trustworthy and well-maintained, supporting the organization's mission and member engagement effectively.

L

livetipsportal.com

livetipsportal.com

57

Livetipsportal.com is a specialized media website providing detailed information and resources related to sports betting and football data. The site offers betting tips, tables, bookie tests, and app reviews targeted at sports bettors and football enthusiasts. The business operates primarily as a content and affiliate marketing platform within the sports betting niche. Technically, the website is built on WordPress with SEO optimizations via the Yoast plugin, delivering a professional and mobile-optimized user experience. However, the domain WHOIS data is missing or indicates the domain may not be registered, which raises concerns about the legitimacy of the domain registration. Security posture is moderate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. Overall, the site is functional and content-rich but would benefit from improved transparency and security practices.

C

C3 marketing agentur GmbH

myc3.com

55

C3 marketing agentur GmbH is a German marketing and advertising agency with offices in Tirschenreuth and Regensburg. The company offers a broad range of services including website development, e-commerce solutions, print and graphic design, photography, video, 3D media, and advertising campaigns. Their market position appears well-established with over two decades of presence and a strong regional footprint. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content in German, targeting businesses seeking marketing services in Germany. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as SVG graphics and JavaScript modules. Accessibility features and cookie consent mechanisms are implemented, reflecting a mature digital infrastructure. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS domain registration data is a notable concern, potentially indicating privacy protection or an unregistered domain, which slightly reduces trustworthiness. Overall, the website presents a professional and trustworthy front for a marketing agency, but domain registration transparency and enhanced security disclosures would improve credibility and compliance posture.

MarinaOffice, operated by Scribble Software Inc., offers a comprehensive suite of marina management software solutions targeting marina operators, yacht basins, port authorities, and marine retailers. Their product portfolio includes marina management, retail point-of-sale, fuel management, boat yard service, online bill pay, cloud services, and boat rental management. The company positions itself as a leading provider in the marina software industry with a focus on flexibility and integration, including QuickBooks accounting integration. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and popular UI libraries like Swiper.js and Owl Carousel, delivering a good user experience with mobile optimization and clear navigation. Security posture is moderate with HTTPS implied but lacks visible security headers and published security policies. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism or GDPR indicators. The WHOIS data is missing, which raises concerns about domain registration legitimacy, although the website content and contact information appear professional and consistent. Overall, the site demonstrates a solid business presence but would benefit from enhanced security and privacy transparency.

The website fs-world.org serves as an authoritative platform for consolidating and publishing world ranking lists for Formula SAE/Formula Student competitions globally. Operated by Formula Student Germany GmbH, it targets student teams participating in these competitions, providing a transparent and methodical ranking system based on recent event results. The platform is niche-focused and well-positioned within the educational motorsport community, offering valuable benchmarking services without commercial intent. Technically, the website is straightforward, built with standard HTML and CSS, hosted via Cloudflare, and secured with HTTPS. While the site performs adequately with basic mobile optimization and accessibility, it lacks advanced security headers and DNSSEC, which could enhance its security posture. No CMS or complex frameworks are detected, indicating a simple and maintainable infrastructure. From a security perspective, the site benefits from HTTPS and domain transfer protections but would improve by implementing DNSSEC, security headers, and publishing a formal security policy. No forms or user data collection mechanisms are present, reducing attack surface. Privacy compliance is partial, with a privacy policy available but no cookie consent or GDPR-specific indicators. No incident response or vulnerability disclosure information is provided. Overall, the website is trustworthy, safe, and professionally maintained, with a clear focus on educational content. Strategic improvements in security and privacy compliance would enhance its resilience and user trust.

D

Drexler

drxlr.com

56

Drexler is a Baltimore-based creative studio specializing in web design, development, ecommerce, and email marketing services. The company positions itself as a design-driven agency focused on expanding client reach and enhancing brand presence through digital experiences. The website reflects a small, professional agency with a clear market niche in technology and ecommerce sectors. Technically, the site is built on WordPress with modern SEO and analytics integrations, hosted behind Cloudflare DNS services, and employs HTTPS with a good SSL configuration. However, DNSSEC is not enabled, and security headers are absent, indicating room for security improvements. Privacy compliance is limited due to the absence of privacy and cookie policies, which could expose the business to regulatory risks. Contact information is clearly presented, enhancing business credibility. Overall, the site is well-designed, user-friendly, and trustworthy, but would benefit from enhanced security and privacy practices.

E

Epic Games, Inc.

epicgames.com

11

Epic Games Store is a leading digital distribution platform operated by Epic Games, Inc., a well-established company in the gaming industry since 1991. The platform offers a wide range of video games and software, targeting gamers and developers globally. It provides a developer-friendly revenue share model and a robust storefront experience. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses the Pug template engine. It is optimized for performance, accessibility, and SEO, with comprehensive localization support. Security posture is strong with HTTPS enforcement, security headers, and secure authentication mechanisms, although no explicit vulnerability disclosure or incident response contacts are publicly visible. Privacy and cookie policies are comprehensive and GDPR compliant. Overall, the site is professional, trustworthy, and well-maintained, reflecting the stature of Epic Games in the technology and entertainment sectors.

S

Samurai Saga

samuraisaga.com

48

Samurai Saga is a niche multimedia entertainment brand established in 2021, focusing on a futuristic samurai-themed universe. It offers a play-to-earn game, NFT collections, physical playing cards, food and beverage products, merchandise, an animated book series, and hosts events. The brand targets gamers, NFT collectors, and fans of Japanese culture and futuristic storytelling. The website is built on Webflow with modern front-end technologies and integrates multimedia content such as Vimeo and YouTube videos. The site is mobile optimized and provides a good user experience with clear navigation and consistent branding. Security posture is moderate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. The domain registration is consistent and transparent, indicating legitimate ownership. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

L

Landesregierung Mecklenburg-Vorpommern

mecklenburg-vorpommern.de

11

The website www.regierung-mv.de is the official government portal for the state of Mecklenburg-Vorpommern, Germany. It serves as a comprehensive information hub for the state's government activities, ministries, press releases, events, and public services. The portal targets citizens, media, businesses, and other stakeholders interested in regional governance and public affairs. It offers accessible content including videos with sign language and pages in simplified language, reflecting a strong commitment to inclusivity and public engagement. Technically, the site uses a custom UI framework with standard web technologies and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS enforcement and cookie consent mechanisms aligned with GDPR, though explicit security headers and incident response policies are not publicly detailed. The domain registration data aligns well with the official government entity, indicating high legitimacy and trustworthiness. Overall, the site is professional, trustworthy, and well-maintained, supporting the state's communication and transparency objectives.

M

Max-Planck-Institut für Chemie

mpic.de

10

The Max-Planck-Institut für Chemie website serves as the digital presence of a reputable German research institute focused on atmospheric chemistry, climate science, and related fields. The site provides scientific content, information about research groups, publications, events, and career opportunities. It targets scientists, students, and the general public interested in environmental and chemical research. Technically, the website employs modern web technologies including RequireJS, Bootstrap, and Slick Carousel, hosted on GWDG infrastructure with a CMS from JustRelate CX Cloud. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS and CSRF protections, but lacks explicit security headers and published security policies. Privacy compliance is limited by the absence of visible privacy and cookie policies. Overall, the domain registration and hosting align with the Max-Planck-Gesellschaft, confirming legitimacy. Recommendations include publishing privacy and cookie policies, enhancing security headers, and providing incident response contacts to improve trust and compliance.

Future Ocean is a well-established marine science research network affiliated with Kiel University and several prominent research institutions in Germany. The website serves as an educational and outreach platform providing information on marine research, exhibitions, citizen science, and academic programs. The target audience includes researchers, students, educators, and the general public interested in ocean sustainability. Technically, the website uses standard web technologies with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration data supports the legitimacy and long-term presence of the organization.

G

GFZ Helmholtz-Zentrum für Geoforschung

gfz-potsdam.de

58

GFZ Helmholtz-Zentrum für Geoforschung is Germany's national center for solid earth research, focusing on geoscientific studies of the Earth's geosphere and related systems. The website serves a broad audience including researchers, students, policymakers, and the public, providing scientific publications, research data, and educational resources. It operates under the Helmholtz Association umbrella, indicating a strong institutional backing and national significance. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. It uses HTTPS with good SSL configuration and respects user privacy through cookie consent mechanisms. Security posture is solid with no detected vulnerabilities or exposed sensitive data, though explicit security policies and incident response contacts are not published. Privacy compliance is strong, with GDPR-aligned policies and consent banners. The domain WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is a trustworthy, professional platform for geoscientific research dissemination, with recommendations to enhance security transparency and incident response readiness.

The Universität Hamburg is a large, well-established public university in Germany, serving over 42,000 students and recognized as one of the leading research and education institutions in Northern Germany. The website reflects a comprehensive academic institution offering a wide range of study programs, research initiatives, and community engagement services. It targets students, researchers, faculty, and administrative staff, providing extensive information on academic offerings, research projects, career services, and events. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and multimedia content such as videos and image carousels. It uses analytics tools like eTracker and error monitoring via BetterWeb, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices and clear navigation. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit incident response or vulnerability disclosure information. Privacy compliance is partially addressed with a comprehensive privacy policy, but no explicit cookie consent mechanism was detected. Contact information is primarily via a feedback form, with no direct emails or phone numbers publicly listed. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for improvement in security headers, cookie consent, and incident response transparency. The domain and hosting are consistent with a reputable academic institution, with no signs of suspicious activity.

A

Acetex

acetex.cz

66

Acetex is a Czech Republic based company specializing in the installation and servicing of photovoltaic systems and heat pumps for residential, commercial, and municipal clients. Established in 2020, it has positioned itself as a leading supplier in the renewable energy sector within the Czech market, boasting over 8,000 installations and recognized certifications and insurance coverage. The company offers a comprehensive range of products including photovoltaic power plants, heat pumps, gas boilers, and related energy solutions, complemented by consulting services for subsidies and professional maintenance. Technically, the website employs modern web technologies and multiple analytics and tracking tools, with a clear cookie consent mechanism, indicating a moderate level of digital maturity. Security posture is good with HTTPS enforced and no visible critical vulnerabilities, though explicit security policies and headers could be improved. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO, though it lacks explicit privacy and terms of service documentation. The domain registration data aligns well with the business claims, supporting legitimacy.

E

Plesk Obsidian 18.0.73

eliteinsights.net

64

The website eliteinsights.net/login_up.php serves as a login portal for Plesk Obsidian 18.0.73, a widely used web hosting control panel software. It targets web hosting providers, server administrators, and developers who manage hosting environments. The site primarily facilitates access to server management tools rather than providing extensive business or marketing content. The domain registration is consistent and stable, supporting the legitimacy of the service. Technically, the site uses modern JavaScript libraries including Prototype.js and RequireJS, and is built on the Plesk UI framework. It is hosted behind Cloudflare DNS, indicating some level of infrastructure robustness. The site shows basic mobile optimization and accessibility features but lacks advanced SEO and comprehensive content quality. Performance is moderate with no evident blocking or WAF interference. From a security perspective, the site implements a cookie consent mechanism aligned with GDPR requirements but lacks visible HTTP security headers such as CSP or HSTS. SSL configuration details are not available from the provided data, and no explicit anti-CSRF tokens are visible in forms, though a meta forgery protection token exists. The absence of a privacy policy and contact information reduces transparency and compliance confidence. Overall, the site is functional and legitimate for its purpose but would benefit from enhanced security headers, explicit privacy documentation, and improved transparency to increase trust and compliance. The AI overall score reflects a basic but operational site with room for security and privacy improvements.

ZF Friedrichshafen AG is a global technology leader specializing in advanced mobility products and systems for passenger cars, commercial vehicles, and industrial technology. The company serves vehicle manufacturers, mobility providers, and startups, focusing on electrification and sustainable mobility solutions. Their extensive product portfolio and global presence position them strongly in the transportation and technology sectors. The website reflects a mature digital presence with comprehensive corporate, sustainability, and investor information, supporting their market leadership. Technically, the website employs modern web technologies including JavaScript frameworks, Piwik PRO analytics, and responsive design optimized for mobile devices. The site demonstrates good SEO and accessibility practices, with structured data enhancing search engine understanding. Performance is moderate, with opportunities for further optimization. From a security perspective, the site enforces HTTPS and includes a Content Security Policy header, though additional security headers could enhance protection. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR adherence. Contact and compliance information is readily available, supporting transparency. Overall, the website presents a low-risk profile with strong business credibility and professional digital infrastructure. The absence of WHOIS data reduces transparency but does not detract from the site's legitimacy given the extensive corporate content and recent press activity.

E

Enerkom Šumavsko

enerkomsumavsko.cz

57

Enerkom Šumavsko is a small local business operating in the energy sector, serving the Malenice region in the Czech Republic. The company appears to provide energy-related services or products, targeting local customers. The website is built on the Wix platform, indicating a moderate level of digital maturity with good mobile optimization and basic SEO. The technical infrastructure relies on Wix hosting and standard web technologies such as JavaScript, CSS, and HTML5. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and formal privacy or cookie policies. The absence of WHOIS data limits the ability to fully verify domain legitimacy, though the website content and structure suggest a legitimate local business. Overall, the site is functional but could benefit from enhanced privacy compliance and security best practices.

3

3M

3maustria.at

10

3M Austria operates as a regional branch of the global 3M Company, providing innovative technology and product solutions across multiple industrial sectors including energy, transport, healthcare, and manufacturing. The website demonstrates a mature digital presence with a professional design, clear navigation, and comprehensive product information tailored for business customers and end consumers in Austria. The technical infrastructure leverages IBM WebSphere Portal and integrates modern analytics and consent management tools, reflecting a commitment to digital maturity and privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, the domain and website exhibit high trustworthiness and business credibility, despite the absence of public WHOIS data typical for NIC.AT domains.

B

BOHEMIAKOMBI spol. s r. o.

bohemiakombi.cz

58

BOHEMIAKOMBI spol. s r. o. is a Czech transportation company specializing in combined rail-road freight transport, particularly the transport of road trailers by rail across Europe. The company is positioned as a key operator in the Czech Republic's continental combined transport sector and is part of the ČD group. Their services provide an alternative to traditional road transport, targeting businesses involved in export logistics. The website reflects a professional business presence with clear contact information, partner affiliations, and relevant content. Technically, the site uses modern web technologies including Google Analytics and is mobile optimized, though some security headers and explicit security policies are absent. The absence of WHOIS data limits domain trust assessment, but the business information and website content indicate legitimacy. Privacy compliance is basic but includes cookie consent mechanisms.

R

Robert Koch-Institut

rki.de

65

The Robert Koch-Institut (RKI) is the central federal institution in Germany responsible for disease surveillance and prevention. The website serves as an authoritative public health portal providing comprehensive information, research data, and guidance on infectious and non-infectious diseases. It targets public health professionals, government agencies, researchers, and the general public. The RKI holds a strong market position as Germany's leading public health authority. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It is hosted by ITZBund, a government IT service provider, and demonstrates good mobile optimization, accessibility, and SEO practices. The site employs Matomo analytics with anonymized data collection and a robust cookie consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses secure forms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or suspicious activities were detected. Privacy compliance is strong, with GDPR-aligned policies and transparent cookie management. Overall, the RKI website is a professional, trustworthy, and well-maintained government resource with excellent content quality and privacy practices. Strategic improvements could include adding security headers and publishing a formal security policy to enhance trust and compliance further.

L

Limeleaf Worker Collective, LLC

blueskydirectory.com

59

Bluesky Directory is a niche online platform providing a curated directory of tools, applications, and resources related to the Bluesky social media platform. Operated by Limeleaf Worker Collective, LLC, the website targets Bluesky users and developers seeking to discover and explore ecosystem offerings. The business model centers on content curation and community engagement through featured listings, profiles, and news aggregation. Technically, the site employs modern web technologies including Laravel Livewire, Alpine.js, and Cloudflare hosting, delivering a fast and mobile-optimized user experience. Security posture is adequate with HTTPS and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Pinellas Suncoast Transit Authority operates RidePSTA.net, a website providing real-time bus tracking and departure information for public transit users in Pinellas County, Florida. The service leverages GPS technology to offer accurate vehicle locations and estimated arrival times, enhancing passenger experience. The website targets local commuters and transit riders, positioning itself as a reliable regional transportation information source. Technically, the website uses basic web technologies including JavaScript, HTML, and CSS, hosted via GoDaddy. The site design is functional but basic, with moderate performance and limited mobile optimization. There is no evidence of advanced frameworks or CMS platforms. SEO and accessibility features are minimal but adequate for the site's purpose. From a security perspective, the site lacks visible HTTPS confirmation and security headers in the provided data, which lowers its security posture. The domain is well-registered with a reputable registrar and includes EPP locks, indicating domain ownership protection. However, the absence of privacy and cookie policies, as well as incident response information, suggests gaps in compliance and security transparency. Overall, the website is a legitimate, functional public transit information portal with moderate technical maturity and business credibility. Security and privacy compliance improvements are recommended to enhance trust and protect user data.

M

m|events

conference2web.com

70

m|events is a specialized provider of advanced digital meeting services worldwide, focusing on onsite and online medical conference technology. The company offers unique tools and features designed to elevate event experiences, targeting event organizers and medical conference planners. Their business model is B2B, leveraging digital platforms to deliver comprehensive event solutions. The website is professionally designed, consistent in branding, and demonstrates good content quality and user experience. Technically, the site is built on the HubSpot CMS platform, utilizing modern web technologies and marketing automation tools, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. Privacy compliance is well addressed with cookie consent mechanisms and GDPR-aligned policies. However, WHOIS data is unavailable, which raises some concerns about domain registration transparency. Overall, the website is trustworthy and professional, but domain registration details should be verified for full legitimacy assurance.

D

Deutsches Institut für Medizinische Dokumentation und Information (DIMDI) / Robert Koch-Institut (RKI) / DIVI

intensivregister.de

48

The DIVI-Intensivregister website serves as an authoritative German government-backed platform that collects and disseminates daily data on intensive care capacities and COVID-19 patient statistics across approximately 1,100 acute hospitals. It plays a critical role in monitoring healthcare capacity and supporting pandemic response efforts. The site is technically built on a modern Angular framework with Material Design, offering a responsive and user-friendly interface with comprehensive content including data visualizations, downloadable reports, and regular blog updates. Security posture is moderate with HTTPS presumably enabled but lacking explicit security headers and formal privacy or cookie policies, which are areas for improvement. The domain registration and hosting align well with the official nature of the site, reinforcing its legitimacy. Overall, the site is a trusted resource for healthcare professionals, government officials, and the public, though enhancements in privacy compliance and security best practices are recommended.

D

Deutscher Rat für Wiederbelebung – German Resuscitation Council (GRC) e.V.

grc-org.de

11

The Deutscher Rat für Wiederbelebung (German Resuscitation Council, GRC) is a reputable non-profit organization founded in 2007, dedicated to improving resuscitation awareness and training in Germany. The website serves as a comprehensive platform for public education, professional training, scientific publications, and event organization related to resuscitation. It targets both laypersons and medical professionals, emphasizing increasing lay resuscitation rates and public health impact. Technically, the website employs a modern but custom technology stack including jQuery, bxSlider, and Google Analytics with IP anonymization, hosted on rzone.de infrastructure. The site is mobile-optimized and well-structured, providing a good user experience and SEO presence. However, it lacks some advanced security headers and formal security policies. From a security perspective, the site uses HTTPS and basic privacy compliance mechanisms such as cookie consent and a detailed privacy policy. There is no visible incident response or vulnerability disclosure information, which could be improved. The WHOIS data aligns well with the organization's public information, indicating legitimacy and consistency. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations to enhance security posture and transparency. The risk level is low, but improvements in security headers and incident response disclosures would strengthen trust and compliance.

E

Envision Saint John: The Regional Growth Agency

envisionsaintjohn.com

10

Envision Saint John: The Regional Growth Agency is a government-affiliated organization focused on promoting economic growth, investment, and quality of life in the Saint John region of Canada. The website serves as a comprehensive portal for investors, residents, visitors, and businesses, offering detailed information on regional advantages, services, and community highlights. The agency positions itself as a key regional player facilitating growth through strategic initiatives in real estate, workforce development, and destination marketing. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, Slick Carousel, and various tracking pixels for analytics and marketing. The site is mobile-optimized, accessible, and well-structured with clear navigation and professional design. However, some security best practices such as security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and user trust. From a security perspective, the site uses HTTPS and integrates secure forms with CAPTCHA, but lacks visible security headers and explicit incident response or vulnerability disclosure information. The absence of WHOIS data for the domain reduces transparency and trustworthiness, although the website content and branding suggest legitimacy. Overall, the website is a well-executed regional growth platform with strong business credibility and user experience. Strategic improvements in privacy compliance, security headers, and domain transparency would further strengthen its security posture and trust signals.

V

Východoslovenské múzeum v Košiciach

vsmuzeum.sk

56

Východoslovenské múzeum v Košiciach is a regional cultural institution dedicated to preserving and showcasing Eastern Slovakia's heritage through exhibitions, events, and educational programs. The museum targets a broad audience including local residents, tourists, and cultural enthusiasts. It operates as a government-funded non-profit entity with a medium organizational size and a stable market position in the Slovak cultural sector. The website reflects this mission with clear information about exhibitions, volunteer opportunities, and visitor information. Technically, the site is built on the Webnode CMS platform, hosted on AWS Cloudfront, and employs modern web technologies such as responsive design and cookie consent mechanisms. While the site is generally well-structured and user-friendly, it lacks advanced security headers and explicit security or incident response policies. The security posture is adequate with HTTPS and cookie consent but could be improved by implementing additional security best practices. Overall, the website is trustworthy, professionally maintained, and compliant with GDPR at a basic level, making it a reliable digital presence for the museum.

S

SAD Prešov SK, s.r.o.

sad-po.sk

40

SAD Prešov SK, s.r.o. is a regional transportation company based in Slovakia, providing regular bus services including suburban, long-distance, and international routes, as well as contracted charter and special transport. The company emphasizes modernity, high quality, and safety in its operations. The website serves as an information portal offering schedules, ticket sales, and service details targeted at the general public and commuters in the region. The company appears to have a solid market position within the Prešov region and surrounding areas. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and Font Awesome icons. It integrates Google Analytics for visitor tracking with a cookie consent mechanism that respects user privacy preferences. The site is mobile-optimized and provides a good user experience with clear navigation and regularly updated content. However, no major CMS or hosting provider information is evident, suggesting a custom or proprietary platform. From a security perspective, the site enforces HTTPS and implements cookie consent for analytics tracking, indicating a good baseline security posture. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of explicit security policies, incident response contacts, or vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. It effectively supports the company's business goals but could enhance its security and compliance posture by publishing more detailed policies and contact information for security incidents.

W

WiseOx

wiseox.ai

61

WiseOx is a technology startup founded in 2023, offering AI-powered personalized assistants called "mascots" to automate tasks and improve information access for businesses. The website serves primarily as a login portal for existing users and provides a signup call to action for new users. The business model appears to be SaaS-based, targeting companies seeking AI automation solutions. The market position is emerging with a focus on AI assistant technology. Technically, the website uses modern JavaScript modules and CSS for its frontend but lacks advanced SEO metadata and accessibility features. The site is moderately optimized for mobile and performance but does not implement common security headers or DNSSEC, which are areas for improvement. Hosting and domain registration are managed via NameCheap with privacy protection enabled. From a security perspective, the site uses HTTPS (implied by domain and modern web standards) but lacks visible security headers and privacy/cookie policies, which reduces compliance and trustworthiness. No contact or incident response information is provided, limiting transparency. The domain is new but consistent with a startup profile, and privacy protection is justified. No WAF or blocking mechanisms were detected, allowing full content access. Overall, WiseOx presents a basic but functional online presence for a new AI SaaS business. Strategic improvements in security policies, privacy compliance, and contact transparency would enhance trust and compliance posture significantly.

A

Armanet

armanet.us

63

Armanet is a specialized advertising platform focused on the firearms and Second Amendment (2A) industry, providing programmatic advertising solutions to brands, retailers, publishers, and creators within this niche. The company positions itself as a modern alternative to mainstream ad platforms that restrict 2A content, offering targeted ad campaigns with features such as retargeting, geo-targeting, and audience interest targeting. The business is relatively new, founded in 2023, and operates primarily in the US market. Its website reflects a professional and consistent brand image with clear messaging and partner endorsements from well-known firearms-related websites. Technically, the website leverages modern web technologies including Bootstrap for responsive design, Swiper.js for interactive carousels, and HubSpot for analytics, chat, and form management. Hosting and DNS services are provided by Cloudflare, ensuring good performance and security at the infrastructure level. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and domain transfer protections in place, but lacks DNSSEC and explicit security headers. From a security and compliance perspective, the site does not display explicit privacy or cookie consent mechanisms, which may impact GDPR compliance. No direct contact emails or phone numbers are published, with contact primarily facilitated through a HubSpot chat widget and call-to-action pages. There are no published security policies, incident response contacts, or vulnerability disclosure programs. The WHOIS data is consistent with the business claims, showing a US-based registrant and a domain age appropriate for a startup. Overall, Armanet presents as a credible and professional niche advertising platform with a good technical foundation and moderate security posture. To enhance trust and compliance, the company should implement explicit privacy and cookie policies, improve security headers, and provide clearer contact information and security policies.

Georg Thieme Verlag operates Thieme Connect, a comprehensive online platform offering electronic medical and scientific products including e-books, e-journals, and e-learning solutions. The website targets healthcare professionals, researchers, and librarians, positioning itself as a trusted provider of specialized medical knowledge and educational resources. The platform is well-branded and professionally maintained, reflecting a mature digital presence in the healthcare publishing sector. Technically, the site employs modern web technologies including JavaScript frameworks, Google Tag Manager for analytics, and OneTrust for cookie consent, ensuring compliance with privacy regulations. Security posture is strong with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response information are absent. Overall, the site is safe, professional, and trustworthy with no adult or questionable content detected.

B

Beach House

beachhouse-regensburg.de

9

Beach House Regensburg is a small hospitality business operating a restaurant specializing in Californian Riviera cuisine and offering event location services in Regensburg, Germany. The website is built on the Wix platform, indicating a moderate level of digital maturity with standard Wix technologies and moderate performance. The site is mobile optimized and provides a good user experience with clear content relevant to its target audience. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No contact or incident response information is provided, which limits trust and compliance. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security practices.

The website rancholosalamitoslegacy.org is currently inaccessible beyond a Cloudflare Turnstile CAPTCHA challenge page, which prevents access to any substantive content. The domain is very recently registered (December 13, 2024) with GoDaddy and uses Cloudflare for security and performance. Due to the lack of accessible content, no business information, contact details, or policies are available for review. The technical infrastructure includes Cloudflare's WAF and CAPTCHA service, but no other technologies or CMS are detectable. Security posture cannot be fully assessed due to the blocked content, but the absence of DNSSEC and security headers is noted. Overall, the site appears to be in an initial or pre-launch state with minimal public presence.