Security Directory

W

WBV - Westfälischer Bibliographischer Verlag

kirchenrecht.shop

56

Kirchenrecht.shop is an e-commerce platform specializing in customized and preconfigured legal text collections related to the Evangelische Kirche von Westfalen. The business operates in a niche market serving church members and legal professionals interested in church law. The website is professionally designed with clear navigation and offers a Rechtstexte-Konfigurator tool for personalized document creation. The platform is built on a Shopware Saltation theme, leveraging modern web technologies and Google reCAPTCHA for form protection. Hosting and domain registration are consistent with the business location and operations, supporting legitimacy. Security posture is good with HTTPS enforced and clientTransferProhibited domain status, though improvements are possible by enabling DNSSEC and adding security headers. Privacy compliance is adequate with a comprehensive privacy policy linked externally, but no cookie consent mechanism is present. Overall, the website is safe, trustworthy, and well-positioned within its market niche.

O

OEMUS MEDIA AG

oemus.com

51

OEMUS MEDIA AG is a well-established German media company specializing in dental medicine publications and professional education. The company offers a broad portfolio including specialist journals, seminars, and congresses targeting dental professionals. Their website reflects a mature business with a strong market position in the healthcare media sector, supported by 30 years of experience. Technically, the site uses standard web technologies such as jQuery and hosts media assets on Amazon S3, delivering moderate performance with good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and HTTP security headers. Privacy compliance is supported by a comprehensive privacy policy, though no cookie consent mechanism was detected. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively.

Windy Scandinavia AB is a well-established Swedish manufacturer of premium sport boats and yacht tenders, with a heritage dating back to 1966. The company operates in the transportation sector, targeting boating enthusiasts and yacht owners with a range of high-quality, technically advanced vessels. Their market position is that of a niche premium brand with a strong Scandinavian craftsmanship identity. The website reflects a professional digital presence with good content quality, clear navigation, and mobile optimization. Technically, the site uses modern web technologies including Google Analytics and cookie consent mechanisms, and is likely powered by the Umbraco CMS. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. The absence of WHOIS data raises questions about domain registration legitimacy, but the website content and contact information support business credibility. Overall, the site is trustworthy and professionally maintained.

M

MedicVision Optikk AS

medicvision.no

10

MedicVision Optikk AS is a Norwegian company specializing in customized optical solutions for medical practice and microscopy. Their offerings include magnifying glasses, microscopes (notably ZEISS Research Microscopy Solutions), medical lighting, and diagnostic instruments tailored for healthcare professionals and researchers. The company operates a physical showroom in Arendal, Norway, providing hands-on product trials and service capabilities including adjustments and repairs. The website reflects a professional and focused business model targeting healthcare and research sectors with a clear B2B and B2C sales approach. Technically, the website is built on modern web standards with responsive design, CSS grid, and flexbox layouts, likely powered by the Umbraco CMS. It uses privacy-conscious analytics (Plausible Analytics) and lazy loading for images, enhancing performance and user experience. The site is mobile-optimized and SEO-friendly but lacks some advanced accessibility features. No forms are present on the main page, reducing potential security risks. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and does not provide privacy or cookie policies, which are compliance gaps. Incident response and vulnerability disclosure information are also absent. The domain is newly registered in April 2024, consistent with the company's recent founding, and WHOIS data shows no privacy protection, supporting legitimacy. Overall, MedicVision's website is professional, trustworthy, and well-aligned with its business goals but would benefit from enhanced privacy compliance and security hardening to improve its security posture and regulatory adherence.

S

SCHWING Stetter

schwing.de

49

SCHWING Stetter is a well-established German manufacturer specializing in concrete machinery and equipment, including truck-mounted concrete pumps, mixers, stationary pumps, and mixing plants. The company serves the construction industry globally with a broad product portfolio and after-sales services. Their website reflects a professional and consistent brand presence, targeting construction professionals and equipment buyers. The site is built on TYPO3 CMS and employs modern web technologies with a focus on privacy, as evidenced by the use of Matomo analytics and a comprehensive cookie consent mechanism. Security posture is solid with HTTPS enforced and domain registration consistent with the business history. However, there is room for improvement in security headers and published security policies. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

W

Web Best Practice LTD

webbestpractice.co.uk

47

Web Best Practice LTD is a UK-based web development company with over 20 years of experience, specializing in web design, digital marketing, and branding services. The company targets businesses primarily in Manchester and across the UK, offering a full in-house team and a portfolio of over 1000 websites. The website is professionally designed, mobile optimized, and includes comprehensive customer reviews and contact options. Technically, the site uses modern web technologies and tracking tools such as Google Tag Manager, Facebook Pixel, and Mouseflow, with appropriate privacy and cookie consent mechanisms in place. Security posture is good with HTTPS and reCAPTCHA implemented, though explicit security headers are not detected and could be improved. WHOIS data is unavailable due to domain naming rules violation, which raises some legitimacy concerns, but the website content and business information appear consistent and trustworthy. Overall, the site demonstrates a mature digital presence with room for security enhancements.

D

DJK Sportjugend

djk-sportjugend.de

61

DJK Sportjugend is a German non-profit youth sports organization affiliated with the Catholic DJK-Sportverband. It focuses on inclusive youth work, social and cultural diversity, and prevention initiatives such as anti-racism and sexualized violence prevention. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content relevant to its target audience of young people and sports communities. Technically, the site uses modern web technologies and a consent management platform to ensure GDPR compliance. Security posture is solid with HTTPS and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the domain registration and website content are consistent and trustworthy, supporting a strong legitimacy score.

O

Oranto GmbH

studienplattform.ch

53

Oranto GmbH operates the Studienplattform.ch, a specialized software platform designed to facilitate clinical and non-clinical studies with integrated CMS, CRM, and LMS capabilities. The company positions itself as a niche provider with a decade of experience, offering tailored study design and management solutions primarily targeting research institutions and clinical study leaders. The platform emphasizes data protection and GDPR compliance, catering to a German-speaking audience with professional and clear content presentation. Technically, the website is built on TYPO3 CMS and employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Overall, the website demonstrates a mature digital presence with good usability and trustworthiness, though cookie consent and formal security policies could be enhanced for full compliance.

V

Vereinigte Industrieverbände von Düren, Jülich, Euskirchen und Umgebung e.V.

extraviv.de

38

The website extraviv.de serves as a members-only information portal for the Vereinigte Industrieverbände von Düren, Jülich, Euskirchen und Umgebung e.V., a regional industry association in Germany. It provides employers and association members with access to documents, newsletters, event information, and other resources relevant to their business operations and networking. The site is primarily in German and targets local employers within the manufacturing and non-profit sectors. Technically, the site uses a custom or unknown CMS with JavaScript libraries such as jQuery UI and Modernizr, hosted on servers associated with kasserver.com. The design is professional and consistent, though mobile optimization and accessibility are basic. Security posture is moderate with a login form secured by POST but lacks advanced security headers and cookie consent mechanisms. No WAF or blocking mechanisms were detected, and the domain registration data aligns well with the website's business purpose, indicating legitimacy. Overall, the site scores well on business credibility and content quality but could improve technical implementation and security practices.

The website www.mein-t-raum.de is currently inaccessible beyond a Cloudflare security challenge page that requires human verification via Turnstile CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) protecting the site from automated access or potential threats. Due to this blocking, no actual business content, contact information, or policies are accessible for analysis. The domain is hosted on the Jimdo platform as inferred from the nameservers, and Cloudflare provides security and performance services. The lack of visible content and business data limits the ability to assess the company's market position, services, or compliance posture. Security-wise, the use of Cloudflare WAF and CAPTCHA is a positive indicator, but the absence of security headers and policies reduces the overall security maturity score. Privacy compliance and business credibility cannot be evaluated due to missing information.

W

World4You Internet Services GmbH

j.berlin

71

Sedo.com operates as a domain marketplace platform specializing in domain sales and parking services. The analyzed page indicates that the domain j.berlin is available for purchase, targeting domain investors and businesses seeking premium domain names. The company behind the domain registration is World4You Internet Services GmbH, an established registrar founded in 1998, which aligns with the domain's age and legitimacy. The website employs modern web technologies including JavaScript ES modules and Cloudflare DNS services, ensuring a moderate level of performance and mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection in place, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. Privacy compliance is minimal on this page, with no explicit privacy policy or terms of service detected, but a cookie consent mechanism is implemented. Overall, the site presents a basic but functional domain sales landing page with moderate trustworthiness and business credibility.

J

Jugendverbände der Gemeinschaft Christlichen Lebens - Diözesanverband Berlin

j-gcl.berlin

42

J-GCL Berlin is a small non-profit youth organization focused on Christian community activities within the Berlin region. The website serves primarily as an informational portal presenting the organization's identity, social media presence, and contact email. The business model centers on community engagement and youth involvement in Christian life, positioning itself as a local entity without commercial operations. Technically, the website is built on a simple HTML5 and CSS stack with some JavaScript for UI enhancements, using the HTML5 UP design template and Font Awesome icons. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; while the domain is registered with a reputable German registrar and protected against unauthorized transfers, the site lacks DNSSEC, security headers, and visible HTTPS enforcement details. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the site is safe, with no adult or questionable content, but would benefit from enhanced security and compliance measures.

D

DJK Landesgemeinschaft Berlin e.V.

djk-berlin.de

58

DJK Landesgemeinschaft Berlin e.V. is a regional Catholic sports association in Berlin, Germany, serving approximately 500,000 members across more than 1,000 clubs nationally. The organization focuses on promoting sports activities, events, and community engagement within the Catholic sports community. Their website provides comprehensive information about the association, news, events, and member clubs, targeting members and interested parties in the sports and religious community. Technically, the website is built on AmphiCMS with standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, featuring responsive design and moderate performance. Security posture is solid with HTTPS enforced, but lacks advanced security headers and incident response disclosures. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, serving its non-profit mission effectively.

Z

Zentralverband Deutscher Schornsteinfeger e.V.

zds-schornsteinfeger.de

54

Zentralverband Deutscher Schornsteinfeger e.V. (ZDS) is a well-established German trade union and professional association serving the chimney sweep industry since 1907. The organization provides member services including advocacy, education, publishing, and employment support. The website reflects a mature digital presence with clear navigation, professional content, and active social media engagement. Technically, the site is built on Liferay CMS with modern frontend technologies and uses Matomo for privacy-conscious analytics. Security posture is adequate with HTTPS and secure login forms, but lacks visible security headers and explicit security policies. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy and well-suited for its target audience of industry professionals and members.

L

LAG Main4Eck

fabuly.de

9

Fabuly.de is a regional discovery platform focused on the Bavarian Untermain area, offering curated content and interactive maps for nature, history, technology enthusiasts, and sustainability advocates. The platform includes a related ecoKompass subsite dedicated to promoting sustainable projects and eco-friendly solutions. The website is professionally designed with consistent branding and good content relevance, targeting a general audience interested in regional exploration and sustainability. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) and is hosted on servers indicated by the nameservers your-server.de and second-ns domains. Mobile optimization and navigation clarity are good, though accessibility features are basic. Security posture is moderate with no visible security headers or advanced policies, and no cookie consent mechanism is present. WHOIS data is minimal but consistent with a small regional platform. Overall, the site is safe, trustworthy, and compliant with GDPR based on the presence of a privacy policy, but improvements in security headers and contact transparency are recommended.

A

Arte Bunkering OÜ

artebunkering.com

34

Arte Bunkering OÜ is a specialized marine fuel supply company founded in 2012, operating globally with offices in Europe, Asia, and the Americas. The company focuses on delivering marine fuel oil, gas oil, lube oil, and eco-friendly fuels such as LNG to over 3000 vessels annually across more than 650 ports. Their business model centers on providing personalized, efficient, and timely bunkering services with competitive pricing, targeting shipping companies and vessel operators worldwide. The website reflects a professional and consistent brand image with clear contact information and a global presence, supporting their market position as an experienced player in the marine energy sector. Technically, the website employs modern web standards including HTML5, CSS with LESS preprocessing, and JavaScript. It is hosted likely by Loginet, with responsive design elements and basic accessibility features. However, the site lacks advanced SEO optimization and does not appear to use a CMS or analytics tools based on the provided data. Performance is moderate, and mobile optimization is good. From a security perspective, the site uses HTTPS (implied by base href https URL), includes a CSRF token meta tag indicating some security awareness, but lacks DNSSEC and visible security headers. There is no privacy or cookie policy found, which is a compliance gap, especially under GDPR. Incident response and vulnerability disclosure information are absent. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the security posture is moderate but could be improved with better policy transparency and technical security controls. The overall risk assessment is moderate with no critical vulnerabilities or blocking detected. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and publishing incident response and vulnerability disclosure information to enhance trust and compliance.

I

IBT Bunkering & Trading

ibtbunker.com

44

IBT Bunkering & Trading is a well-established global bunker trader based in Hamburg, Germany, with over 45 years of market presence. The company specializes in marine fuel supply, offering services such as spot trading, formula-based contracts, and price hedging to shipping companies worldwide. Their business model focuses on building long-term, reliable relationships with clients and suppliers, supported by a strong network and industry memberships. Technically, the website employs modern web technologies including Bootstrap and JavaScript, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled and domain registration is stable, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security practices would strengthen its posture.

H

Hamburg Port Authority

hamburg-port-authority.de

47

Hamburg Port Authority (HPA) is a large public entity managing the port infrastructure of Hamburg since 2005. It provides comprehensive services including infrastructure planning, port safety, traffic management, and real estate management. The website reflects a mature digital presence with a structured navigation system, multilingual support, and integration of modern web technologies such as TYPO3 CMS and video content. The organization maintains active social media channels and uses consent management and analytics tools to monitor user engagement. Security posture is strong with HTTPS and security headers in place, though privacy policy documentation and incident response contacts could be improved. Overall, the site is professional, trustworthy, and serves a broad audience including port users, residents, and business partners.

I

Industrieverband Steine und Erden Baden-Württemberg e.V.

azubiste.de

51

The website www.bockaufsteine.de serves as an educational and promotional platform for vocational training in the stones and earths industry in Baden-Württemberg, Germany. It is operated by the Industrieverband Steine und Erden Baden-Württemberg e.V., an industry association. The site provides detailed information about various professions, training paths, and career opportunities, targeting young people interested in apprenticeships. The business model focuses on industry promotion and education rather than direct commercial services. Technically, the website is built on a simple CMS (cumodis simple cms) and uses standard web technologies such as HTML5, CSS3, and JavaScript. It is hosted on German UI-DNS nameservers and employs HTTPS with good SSL configuration. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. However, it lacks advanced SEO features, accessibility enhancements, and modern frameworks. From a security perspective, the site enforces HTTPS and provides a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers, incident response policies, vulnerability disclosure mechanisms, and contact information for security issues. No tracking or analytics scripts were detected, indicating minimal user tracking. Overall, the website is safe, professional, and trustworthy for its intended audience. It demonstrates good privacy compliance and business credibility but could improve its technical and security posture by adding security headers, explicit policies, and contact details. The domain WHOIS data is minimal but consistent with the business purpose, supporting legitimacy.

U

Universität Duisburg-Essen

uni-due.de

57

The Universität Duisburg-Essen is a prominent German university offering a wide range of educational and research services. The website reflects a well-established institution with a clear focus on serving students, researchers, alumni, and staff. It provides comprehensive information about study programs, research activities, campus life, and international cooperation. The university maintains a strong digital presence with official social media channels and updated news content. Technically, the website is built on the IMPERIA CMS platform and uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It incorporates MathJax for mathematical content rendering. The site is mobile-optimized and accessible, with good SEO practices evident. However, some modern security headers and explicit security policies are not visible, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS (implied by domain and standard practice, though SSL details are not explicit in the data). No WAF or blocking mechanisms were detected, and no critical vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is supported by a comprehensive GDPR privacy policy, but cookie consent mechanisms are lacking. Contact information is clearly provided, enhancing trust and credibility. Overall, the website is professional, trustworthy, and well-maintained, suitable for its educational mission. Strategic improvements in security headers, cookie consent, and incident response disclosures would further strengthen its security posture and compliance.

G

Gute Botschafter GmbH

gute-botschafter.de

47

Gute Botschafter GmbH is a German-based medium-sized company specializing in brand positioning and marketing communication services. Their website presents a professional and comprehensive overview of their offerings, targeting primarily medium-sized enterprises and non-profit organizations. The company emphasizes authentic and sustainable brand communication, supported by a multidisciplinary team. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and Lottie animations, with Google Tag Manager integrated for analytics and marketing purposes. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Security-wise, the site uses HTTPS and includes a consent mechanism for tracking but lacks explicit privacy and terms of service pages, as well as some security headers, which are areas for improvement. WHOIS data aligns well with the business claims, indicating a legitimate and consistent domain registration. Overall, the website scores well on content quality, business credibility, and technical implementation, with moderate scores on security posture and privacy compliance.

U

Uniper

uniper-digital.de

60

Uniper Digital operates a secure customer login portal leveraging Microsoft Azure B2C identity services. The website serves as an authentication gateway for Uniper's digital energy services, targeting customers and partners in the energy sector. The platform uses modern OAuth2 and OpenID Connect protocols to ensure secure access. The technical infrastructure is robust, hosted on Azure cloud, and employs contemporary JavaScript frameworks and libraries. Security posture is strong with HTTPS enforced and secure token handling, although explicit security headers could be improved. Privacy compliance is limited on the login page, lacking visible privacy and cookie policies. Overall, the site reflects a mature digital presence aligned with corporate branding and security best practices.

S

Schwing Stetter (UK) Ltd

schwing-stetter.co.uk

51

Schwing Stetter (UK) Ltd is a well-established manufacturer and supplier specializing in concrete production and placement equipment, including concrete pumps, batching plants, truck mixers, and concrete recyclers. The company positions itself as a global leader in the concrete equipment industry, serving primarily construction professionals and contractors in the UK. Their business model focuses on manufacturing, distribution, and after-sales services, supported by a professional and content-rich website that reflects their market position. Technically, the website employs modern web technologies such as Google Tag Manager, reCAPTCHA, and service workers, ensuring a secure and user-friendly experience. The site is mobile-optimized with good SEO practices and clear navigation, although some improvements in accessibility and security headers could enhance the overall technical posture. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact forms, indicating a baseline security awareness. However, the absence of explicit security policies, incident response contacts, and security headers suggests room for improvement in security maturity. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, but this does not detract from the legitimacy of the business as evidenced by the professional website and consistent branding. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen the security posture.

S

SCHWING Stetter Algérie

schwing-stetter-algerie.com

48

SCHWING Stetter Algérie is a medium-sized subsidiary of the German SCHWING group specializing in the marketing and distribution of concrete production, transport, and pumping machinery. The company targets construction and industrial clients primarily in Algeria, leveraging the global reputation and product range of its parent group. The website presents a professional and consistent brand image with detailed product offerings and event participation announcements, supporting its market position as a leading supplier in the concrete machinery sector. Technically, the website is built on a standard modern stack including Bootstrap and jQuery, hosted by OVH sas. It offers moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The absence of a CMS suggests a custom or static site approach. Security posture is basic, with no DNSSEC, no visible security headers, and no published privacy or cookie policies, indicating room for improvement in compliance and protection. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks critical security best practices such as HTTPS enforcement details, security headers, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. However, the lack of direct contact emails or phone numbers and absence of privacy-related policies reduce trust and compliance scores. Overall, the website is functional and professional but requires enhancements in privacy compliance, security hardening, and contact transparency to improve trustworthiness and regulatory adherence.

T

TC-Innovations GmbH

leader-shops.de

49

Leader Shops, operated by TC-Innovations GmbH, is a specialized e-commerce coaching platform focused on helping online shop owners achieve market leadership through proven strategies, sales psychology, and expert mentoring. The website is professionally designed, well-structured, and optimized for SEO and mobile devices. It leverages modern web technologies and the Shopware platform to deliver a seamless user experience. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site demonstrates a mature digital presence with strong trust signals such as customer testimonials and industry awards.

R

Religionspädagogisches Institut Loccum

rpi-loccum.de

61

The Religionspädagogisches Institut Loccum (RPI Loccum) is a well-established non-profit educational institution affiliated with the Evangelisch-Lutherische Landeskirche Hannovers in Germany. It specializes in religious pedagogy and theological education, offering a broad range of professional development courses, events, and educational materials primarily targeting religious educators, schools, and church communities. The website reflects a mature organization with a 75-year history, providing comprehensive content and services in German. The business model focuses on education, training, and community engagement within the religious sector.

H

HoldMyTicket

holdmyticket.com

66

HoldMyTicket operates as an online ticketing platform specializing in selling tickets and promoting events for venues and festivals. The website targets event organizers, venues, and ticket buyers, offering a digital solution for event management and ticket sales. The platform positions itself as a niche player in the event ticketing industry with a focus on festivals and live entertainment. Technically, the website employs modern web technologies including JavaScript, Google Analytics, Facebook SDK, and reCAPTCHA for security and analytics. Hosting assets on Amazon S3 and using CDNs indicates a scalable infrastructure. Security posture is generally good with HTTPS enforced and bot management via Queue-it; however, the absence of explicit security headers and published privacy or terms of service pages suggests room for improvement. The WHOIS data for the subdomain is unavailable, indicating it is part of a larger domain, which slightly reduces trust but does not negate legitimacy. Overall, the website is professional, functional, and safe for general audiences.

S

SAASOA

saasoa.com

46

SAASOA is a regional socio-economic consultative council focused on facilitating and coordinating development programs and policies for socio-economic growth in the Eastern Cape, South Africa. The organization operates on a membership model serving government agencies and socio-economic stakeholders. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its target audience. Technically, the website employs standard web technologies such as HTML5, CSS3, JavaScript, jQuery, and Bootstrap. It demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features and SEO enhancements. The cookie consent mechanism is implemented with an opt-in model, reflecting a commitment to privacy compliance. From a security perspective, the site lacks visible HTTP security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected, but the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. Overall, the security posture is moderate but could benefit from improvements in headers, policies, and domain registration clarity. The overall risk assessment indicates a functional and professional website with moderate trustworthiness. Strategic recommendations include enhancing security headers, publishing security policies, improving accessibility and SEO, and resolving domain registration transparency issues to strengthen trust and compliance.

I

Inovativní Plzeň

plzeninovativni.eu

60

Inovativní Plzeň operates as a regional innovation ecosystem focused on supporting and developing innovative entrepreneurship in the Plzeň region. The platform targets a broad audience including children, students, investors, and companies, providing services such as incubation, acceleration, educational programs, and community events. The website reflects a well-structured and professionally designed digital presence with multimedia content and active social media engagement. Technically, the site uses modern web technologies including HTML5, CSS3, JavaScript, and integrates Google Analytics for visitor insights. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements are recommended in security headers and explicit privacy policy documentation. Overall, the domain and website present a trustworthy and credible digital front for a government or public-sector affiliated innovation initiative.

Hübener Versicherung is a Europe-wide specialist insurance provider, operating primarily in the finance sector. The website presents a professional appearance with multilingual support, targeting European insurance clients. The technical infrastructure is based on WordPress CMS with performance optimizations such as WP Rocket and preconnect hints. The site uses Fathom Analytics for minimal user tracking, indicating a moderate level of digital maturity. Security posture is basic, with no advanced security headers or incident response information visible. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance features.

A

AMCS

amcsgroup.de

69

AMCS is a large international technology company specializing in performance sustainability software and intelligence solutions primarily for sectors such as waste management, recycling, transport, chemical, manufacturing, and utilities. The company offers B2B software solutions aimed at improving operational efficiency, compliance, and sustainability. The website demonstrates a mature digital presence with multiple regional contact points and active social media channels, indicating a well-established market position. Technically, the website uses modern web technologies including JavaScript, Google Tag Manager, Cookiebot for consent management, and Pardot for marketing automation. The CMS detected is Umbraco, a professional content management system. The site is mobile optimized and SEO friendly with appropriate meta tags and structured data, although some accessibility features are basic. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected in the analyzed content. The absence of WHOIS registration data is a concern but may be due to privacy protection or data source limitations. Overall, AMCS presents a professional and trustworthy online presence with good privacy compliance and security posture, though improvements in transparency around privacy policies, terms of service, and security disclosures are recommended to enhance trust and compliance.

Z

ZER-QMS Zertifizierungsstelle GmbH

zer-qms.de

44

ZER-QMS Zertifizierungsstelle GmbH is a German certification body specializing in quality, environmental, energy, and occupational safety management certifications. Their services include auditing and certification for standards such as ISO 9001, ISO 14001, OHSAS 18001, and DIN Spec 91436, targeting businesses seeking compliance and sustainability certifications. The company positions itself as a reliable partner with a focus on environmental and quality standards, supported by customer testimonials and recognized certifications. Technically, the website uses modern web technologies including HTML5, CSS3, and JavaScript libraries like Siema and SimpleBar for UI enhancements. The site is mobile-optimized and well-structured, though it lacks some advanced accessibility features and security headers. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks security headers and a formal vulnerability disclosure policy, which are recommended for improved security posture. The absence of a cookie consent mechanism is a minor compliance gap under GDPR. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers, incident response transparency, and cookie consent would enhance compliance and security maturity.

E

Evangelisches Medienhaus GmbH

medienkompass.de

57

Medienkompass is a German non-profit educational platform operated by Evangelisches Medienhaus GmbH, focused on providing accessible knowledge about digital media to empower responsible and creative use. The website offers articles, seminars, newsletters, and media tips primarily targeting church communities and educators. Technically, it is built on TYPO3 CMS with a modern, accessible design and uses privacy-conscious analytics (Matomo). Security posture is good with HTTPS and consent management, though security headers and incident response policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a niche educational market effectively.

S

SyWaTeC Logistic GmbH

sywatec.de

60

SyWaTeC Logistic GmbH operates as a logistics and transportation service provider, targeting primarily German-speaking clients. The company uses a Wix-hosted website with a free subdomain, indicating a small or medium-sized business with a basic digital presence. The website content is primarily in German and focuses on logistics services, but lacks detailed business or contact information. Technically, the site is built on the Wix platform using standard web technologies and includes a cookie consent mechanism, reflecting some privacy awareness. Security-wise, the site uses HTTPS and includes Sentry for error monitoring but lacks visible security headers and explicit security or privacy policies. The WHOIS data is unavailable for the subdomain, which is typical for Wix free subdomains but limits domain trustworthiness. Overall, the site presents a basic but functional online presence with room for improvement in security, privacy, and business transparency.

U

URID

urid.de

44

URID is a small German-based internet services and web design studio established in 2008. The company offers a range of services focused on creating and improving internet presence for clients, primarily targeting small and medium businesses or individuals. Their market position is that of a niche provider with personalized service, supported by a portfolio of projects and customer testimonials. Technically, the website is built on WordPress with a modern but moderate performance infrastructure hosted by netcup. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Overall, the website is professional and trustworthy with no signs of malicious content or vulnerabilities.

Z

ZERA - Zemědělská a ekologická regionální agentura, z.s.

zeraagency.eu

54

ZERA - Zemědělská a ekologická regionální agentura, z.s. is a Czech regional non-profit agency focused on agricultural and ecological initiatives, particularly compost certification, education, and sustainable farming practices. The organization targets farmers, compost operators, and environmental stakeholders, providing workshops, seminars, and consulting services. The website reflects a well-established presence with content spanning from 2016 to 2025 and partnerships with reputable governmental and European bodies. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as jQuery and Slick Carousel, and integrates Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. The site is mobile-optimized with good navigation and content quality, though some SEO and accessibility features could be improved. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism, but lacks visible security headers and a published privacy policy or terms of service. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy-protected, which is justified for this type of organization, though it limits external verification of domain legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy documentation, security headers, and WHOIS transparency could enhance compliance and trust further.

Anstand digital is a German non-profit educational project focused on promoting respectful and ethical behavior on the internet, particularly addressing issues like hatespeech and digital civility. It is a collaboration between the Katholische Akademie in Berlin and the Evangelische Kirche Deutschlands, funded by the German Federal Government's cultural office. The project provides educational materials, podcasts, and public discussions aimed primarily at youth and educators. Technically, the website is built on Akira CMS with modern frontend technologies including jQuery, Bootstrap, and Fancybox, delivering a responsive and accessible user experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. The site is free of advertising and tracking, reflecting a privacy-conscious approach. Overall, the domain and WHOIS data align with the project's legitimacy and non-profit nature.

I

ImmoGarten GmbH

immogarten.de

63

ImmoGarten GmbH operates as a specialized garden nursery and plant provider based in Frankfurt am Main, Germany. The company offers a broad range of plants including garden trees, shrubs, hedges, and garden accessories, complemented by services such as garden consultation, delivery, and planting. Their market position is that of a regional specialist with a strong presence in the Rhein-Main area, supported by partnerships with related brands and an online shop for magnolias. The website is built on Silverstripe CMS and employs modern web technologies, providing a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of a privacy policy and terms of service pages indicates compliance gaps. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-structured, serving its target audience effectively.

C

CORTEX media GmbH

cortex-media.de

60

CORTEX media GmbH is a small technology company based in Ulm, Germany, specializing in professional internet applications including cloud software, web development, AI integration, mobile apps, and server hosting. The company positions itself as an innovation hub offering tailored digital solutions for businesses, ranging from small mobile apps to large internet portals and cloud infrastructures. Their website reflects a high level of professionalism with consistent branding and comprehensive service offerings. Technically, the site is built on WordPress with modern web technologies, optimized for mobile devices, and includes structured data for SEO benefits. Security posture is solid with HTTPS and no visible vulnerabilities, though there is room for improvement in security policy transparency and cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting the company's market position as a competent digital solutions provider.

A

Autoline Deutschland

autoline.de

56

Autoline Deutschland operates a leading online marketplace specializing in commercial vehicles, including trucks, buses, trailers, and spare parts. With a strong market presence in Germany and international reach across 80 countries, the platform serves over 6,700 business customers and millions of monthly buyers. The website offers extensive listings, dealer directories, and marketing services, supporting both buyers and sellers with a user-friendly interface and advanced search capabilities. Technically, the site employs modern web technologies, integrates multiple analytics and advertising tools, and maintains good mobile optimization and SEO practices. Security posture is solid with HTTPS and basic security headers, though improvements in cookie consent and security policy transparency are recommended. Overall, Autoline presents a professional, trustworthy, and mature digital presence in the transportation sector.

InduRec is a German-based company specializing in industrial dismantling, demolition, hazardous substance remediation, site recycling, and waste disposal services. The company targets industrial clients requiring environmentally conscious and resource-efficient deconstruction and recycling solutions. Their website highlights references from major industrial clients, indicating a solid regional market presence. Technically, the website uses legacy JavaScript libraries such as jQuery 1.4.2 and Spry Accordion, with basic mobile optimization and SEO. Security posture is moderate but could be improved by updating libraries, implementing security headers, and enforcing HTTPS. Privacy compliance is good with a clear cookie consent mechanism and a privacy policy in German. No terms of service or incident response policies are publicly available. Overall, the website is functional and trustworthy but would benefit from modernization and enhanced security practices.

Hochschule für Gestaltung Offenbach am Main is a German university specializing in art and design education. The website serves as an information portal for students, faculty, and the public, offering news, event calendars, study counseling, job offers, and cooperation opportunities. The institution positions itself as a contemporary and future-oriented academic entity with a regional focus and active cultural engagement. Technically, the website employs standard web technologies including JavaScript and CSS, with internationalization support and autocomplete search features. The hosting appears to be managed via German academic network DNS servers, indicating institutional legitimacy. Security posture is moderate with HTTPS usage and CSRF tokens but lacks visible advanced security headers or published security policies. Privacy compliance is basic, with an accessibility declaration present but no explicit cookie or privacy policies. Overall, the site is professional, trustworthy, and safe for general audiences.

S

Studio StillSoft

studiostillsoft.com

45

Studio StillSoft is a small creative or digital studio established around 2020, focusing on showcasing selected projects through a minimalistic website design. The business appears to target a general audience interested in creative digital services, positioning itself as a niche player in the creative industry. The website is simple and visually oriented, with limited textual content and no explicit business or contact details visible on the homepage. Technically, the website uses modern JavaScript modules and CSS with a probable Vue.js framework, hosted on Websupport infrastructure. The site is mobile optimized and moderately performant but lacks advanced SEO and accessibility features. No CMS or third-party marketing/analytics tools are detected, indicating a lightweight and straightforward technical setup. From a security perspective, the site lacks critical security headers and privacy compliance mechanisms such as privacy or cookie policies. The domain registration is legitimate and consistent with the business profile, but the absence of security best practices and contact information reduces trustworthiness. No WAF or blocking mechanisms are detected, and the site content is safe for general audiences. Overall, the website scores moderately on content and business credibility but scores low on security and privacy compliance. Strategic improvements in security headers, privacy policies, and contact transparency are recommended to enhance trust and compliance.

D

Dormitio Abtei

dormitio.net

52

Dormitio Abtei is a German-speaking Benedictine Abbey located in Israel, serving religious, cultural, and academic communities. The website reflects a well-established non-profit religious institution with a focus on pilgrimage, worship services, cultural engagement, and theological studies. The domain has been active since 2005, supporting the institution's long-standing presence. Technically, the website uses modern web technologies including UIkit framework and Matomo analytics, ensuring good performance and mobile optimization. However, the site lacks visible privacy and cookie policies, which is a compliance gap under GDPR. Security posture is moderate with HTTPS enabled and domain registrar protections in place, but missing DNSSEC and security headers reduce the overall security score. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the website is professional, trustworthy, and safe for general audiences.

P

PDCS, o.z.

pdcs.sk

41

PDCS is a Slovak non-governmental organization specializing in conflict resolution, civic participation, and social dialogue. The organization offers educational courses, facilitation, consulting, and project support primarily targeting individuals, groups, and organizations interested in societal development and democratic processes. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the site uses modern web technologies including Vue.js and Bootstrap, and integrates privacy-respecting analytics via Plausible. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in privacy compliance with the absence of a cookie consent mechanism and a dedicated privacy policy page. Overall, PDCS demonstrates a credible and trustworthy online presence aligned with its non-profit mission.

T

TC-Innovations GmbH

tc-innovations.de

53

TC-Innovations GmbH is a specialized Shopware agency based in Germany, recognized as a market leader in Shopware themes, particularly through their flagship product ThemeWare®, which is deployed in over 15,000 shops. Their core services include grand design, sales promotion, and individualization of Shopware shops, complemented by installation and support services. The company targets e-commerce businesses and agencies seeking professional Shopware solutions. Technically, the website employs modern web technologies such as jQuery, Slick Carousel, and LazyLoad, and is optimized for mobile devices with good SEO and accessibility practices. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit security headers and published security policies. Overall, the domain registration data aligns well with the business claims, indicating a trustworthy and legitimate operation.

I

Industrieverband Steine und Erden Baden-Württemberg e.V.

iste.de

51

The Industrieverband Steine und Erden Baden-Württemberg e.V. operates as a regional industry association representing the stones and earths sector in Baden-Württemberg, Germany. The website serves as an information hub providing news, events, educational initiatives, and service offerings to its members and the broader public interested in the industry. It maintains a professional and consistent brand presence with clear communication channels and social media engagement. Technically, the site is built on the 'cumodis simple cms' platform, uses modern web standards, and integrates Matomo analytics with privacy-conscious configurations. Security posture is adequate with HTTPS enforced and secure login forms, though the absence of explicit security headers suggests room for improvement. Privacy compliance is strong, evidenced by a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its target audience effectively.

M

MSE Camsoft GmbH

camsoft.de

52

MSE Camsoft GmbH is a German-based small technology company specializing in custom software development with a focus on mobile software and dispatch systems for industrial and commercial sectors such as construction, airport services, and vehicle rental. Their business model is B2B, providing tailored software solutions integrated into existing IT environments. The website is professionally designed with clear navigation and relevant content targeting business clients. Technically, the site uses a modern front-end stack including Bootstrap and jQuery, but relies on an outdated Google Analytics script and lacks visible security headers, indicating room for modernization and security improvements. Security posture is moderate with no critical vulnerabilities detected but missing best practices such as security headers and cookie consent mechanisms. WHOIS data aligns well with the website's German business identity, supporting legitimacy. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

E

Evangelische Kirche von Westfalen, Landeskirchenamt

ekvw.de

49

The Evangelische Kirche von Westfalen is a major regional Protestant church organization in Germany, providing religious, educational, and social services. The website serves as an information and engagement platform for members and the public, featuring news, events, and resources. The organization holds a strong market position as the fourth largest evangelical church in Germany, targeting a broad general audience interested in faith and community activities. Technically, the website is built on TYPO3 CMS, with modern web standards, responsive design, and accessibility features. It integrates third-party services for analytics and media content while maintaining GDPR compliance through a comprehensive cookie consent mechanism. Security posture is solid with HTTPS and privacy-respecting analytics, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to transparency.

A

Alma und Lovis

almalovis.de

49

Alma & Lovis is a German sustainable fashion brand specializing in eco-friendly and fair women's clothing. The company emphasizes timeless design, high-quality natural materials, and responsible production practices. Their market position is that of a niche retailer focused on slow fashion, targeting environmentally conscious female consumers. The website is built on the Shopware CMS platform and hosted behind Cloudflare, indicating a modern technical infrastructure with CDN and security benefits. The site is well-optimized for mobile devices and SEO, providing a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. No contact emails or phone numbers are directly visible, which may affect user trust and compliance. Overall, the website is safe, professional, and credible, with room to enhance privacy compliance and security best practices.