Security Directory

S

Setra Buses

setra.de

61

Setra Buses is a premium bus manufacturer affiliated with Daimler Buses, offering a range of bus models and comprehensive services including leasing, used bus sales, and after-sales support. The website is professionally designed, multilingual, and targets transportation companies and bus operators primarily in German-speaking and European markets. The technical infrastructure includes modern web technologies, a consent management platform, and Matomo analytics, indicating a mature digital presence. Security posture is generally good with HTTPS and privacy compliance, though explicit security headers and incident response information are lacking. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy despite the professional website content. Overall, the site is trustworthy but would benefit from improved transparency in domain registration and enhanced security headers.

N

National Heritage Institute

vltava2025.cz

45

The website vltava2025.cz is an official cultural project site managed by the Czech National Heritage Institute, commemorating the 150th anniversary of Bedřich Smetana’s symphonic poem Vltava. It serves as a platform to promote exhibitions, events, and educational content related to the Vltava River as a national symbol. The site is well-positioned within the government and cultural heritage sector, supported by reputable partners and media sponsors. The target audience includes the general public interested in Czech culture and heritage. Technically, the website employs modern web technologies including Google Tag Manager, jQuery, Leaflet.js for mapping, and integrates external APIs such as Mapy.cz. The site is hosted by Webglobe, with a clean and professional design optimized for mobile and accessibility. SEO and content quality are excellent, with clear navigation and rich multimedia content. From a security perspective, the site uses HTTPS and cookie consent mechanisms with granular user control. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy compliance is strong, with clear privacy and cookie policies linked from the site. No incident response or security policy pages were found. Overall, the website presents a low-risk profile with strong business credibility and compliance. Recommendations include enhancing security headers and publishing a formal security policy. The domain is newly registered but consistent with the project timeline and legitimate in nature.

M

mas.to

mas.to

69

mas.to is an independent Mastodon server providing a federated social networking platform within the fediverse. It offers users a fast, up-to-date, and engaging environment to participate in decentralized social media. The website demonstrates a consistent brand and clear focus on Mastodon-based social networking services, targeting a general audience interested in privacy-respecting social platforms. Technically, the site employs modern web technologies including Mastodon 4.4.8, React, and ES modules, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforcement, script integrity checks, and nonce usage, although explicit security headers and incident response policies are not published. Privacy compliance is adequate with accessible privacy and terms pages, but lacks a cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency and security documentation.

N

NRK and Meteorologisk institutt

yr.no

67

Yr is a reputable weather forecasting website operated as a collaboration between NRK, the Norwegian Broadcasting Corporation, and the Norwegian Meteorological Institute. It provides comprehensive weather forecasts including hourly updates, long-term forecasts, precipitation maps, and weather warnings for over 10 million locations worldwide. The site targets a broad audience including the general public and outdoor enthusiasts, positioning itself as a leading weather information provider in Norway with global reach. The business model is public service oriented, offering free access to weather data and related content.

M

Manger Bouger

mangerbouger.fr

55

MangerBouger.fr is an official French public health website dedicated to promoting healthier eating habits and increased physical activity among the general population. It offers a wide range of resources including recipes, activity ideas, personalized content via quizzes, and educational materials for both the public and professionals. The site is clearly positioned as a government-backed platform, supported by Santé publique France, and targets all age groups from children to seniors. Technically, the site is built on the eZ Platform CMS, uses modern JavaScript and SVG icons, and integrates advanced tag management and analytics tools such as TagCommander and Piano Analytics. The website is mobile-optimized with good SEO and accessibility features, although accessibility compliance is noted as non-conformant. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies. The WHOIS data is not publicly available, which is typical for French government domains, but the domain and website content strongly indicate legitimacy and trustworthiness. Overall, the site scores highly on content quality, technical implementation, privacy compliance, and business credibility, making it a reliable and professional resource for public health information.

S

SCM Hänssler

scm-haenssler.de

67

SCM Hänssler operates as a Christian-focused e-commerce retailer specializing in books, music, and related products. The website serves a German-speaking audience with a broad catalog of Christian literature and media, positioning itself as a trusted provider within this niche. The business model centers on online retail with a strong emphasis on customer service and compliance with European data protection regulations. Technically, the site is built on the Magento platform, leveraging modern web technologies and analytics tools such as Google Analytics and Matomo. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

E

Electric Ireland

electricireland.ie

72

Electric Ireland is a leading energy supplier in Ireland providing electricity and gas services to residential and business customers. Their website offers comprehensive information on price plans, smart meters, solar PV solutions, and customer support, reflecting a mature and customer-focused business model. The company targets Irish energy consumers with a broad portfolio of energy products and services. Technically, the website is built on the Sitefinity CMS platform, uses modern web technologies including Google Tag Manager and OneTrust for cookie consent, and demonstrates good mobile optimization and accessibility. Security-wise, the site enforces HTTPS, implements key security headers, and manages cookie consent effectively, though explicit security policies and incident response information are not prominently published. The absence of WHOIS data limits domain trust verification, but the website's professional presentation and comprehensive content suggest legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, and privacy compliance, with room for improvement in business credibility transparency and security disclosures.

I

Intelligent Transport Systems Ireland

itsireland.ie

56

Intelligent Transport Systems Ireland is a non-profit partnership focused on promoting the development and deployment of ITS technologies for safer and more sustainable transport in Ireland. The organization serves a diverse audience including government bodies, academic institutions, consultancies, and transport operators. Their business model centers on membership engagement and event organization, positioning them as a key national body in the ITS sector. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and providing a good user experience with mobile optimization and basic accessibility. Security posture is solid with HTTPS and HSTS enabled, though the absence of privacy and cookie policies and lack of visible contact information represent compliance and trust gaps. Overall, the website is professional and trustworthy but could improve in privacy compliance and transparency.

N

Nouvelle-Ligne

nlcontest.com

55

NL Contest is a well-established urban sports and arts festival based in Strasbourg, France, organized by Nouvelle-Ligne. The website showcases event information, results, media content, and partner affiliations, targeting urban sports enthusiasts and festival attendees. The business operates primarily as an event organizer and promoter with a strong community and partner network. Technically, the site is built on WordPress with integrations such as Google Maps API, Google Analytics, and Facebook Pixel, indicating a moderate level of digital maturity. The website is mobile-optimized and SEO-friendly with good content quality and navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and formal policies are absent. The WHOIS data is missing, raising concerns about domain registration legitimacy, but the professional content and social presence mitigate some risk. Overall, the site is trustworthy but would benefit from improved transparency and security documentation.

6

6. středisko Zlín

zlin6.cz

39

6. středisko Zlín is a local scouting organization in the Czech Republic focused on youth development through outdoor activities, skill-building, and community engagement. The website serves as an informational portal for children, parents, and scout leaders, providing details about groups, events, and support opportunities. Technically, the site is built on WordPress with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal privacy or cookie policies, which are areas for improvement. The domain is mature and registration data aligns well with the organization's profile, supporting legitimacy. Overall, the site is trustworthy and professionally presented but could enhance compliance and security practices.

C

Conseil supérieur du notariat

notaires.fr

66

The website www.notaires.fr is the official portal for Notaires de France, managed by the Conseil supérieur du notariat. It serves as a comprehensive resource for legal and notarial information, targeting the general public, businesses, and government entities in France. The site offers extensive content on donations, successions, real estate, family law, and business-related legal services, supported by interactive tools and online services such as apostille processing and mediation. The website is well-branded, professionally designed, and consistent with its official government affiliation. Technically, the site is built on the Drupal CMS platform, utilizing modern JavaScript libraries and SVG icons for a responsive and accessible user experience. Performance is moderate with good mobile optimization and SEO practices. Security posture is strong, with HTTPS enforced and multiple security headers implemented. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust, with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site demonstrates a mature digital infrastructure suitable for a government-affiliated entity, with strong trust indicators and a high level of professionalism. The lack of public WHOIS data is consistent with AFNIC privacy norms for French domains and does not detract from the site's legitimacy. Contact is primarily via secure forms rather than direct emails or phone numbers, aligning with best practices for public service websites.

KRZN – Kommunales Rechenzentrum Niederrhein is a large, well-established municipal IT service provider in Germany, founded in 1971. It serves 46 local government administrations with over 18,000 IT workstations supported by more than 500 employees across two main locations. The organization offers a broad portfolio of IT solutions tailored for public sector needs, including web conferencing systems with official certifications. Technically, the website is built on Drupal CMS, hosted likely by Deutsche Telekom, and uses eTracker for analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and no evident vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating high legitimacy and trustworthiness.

LinkedIn is a leading professional networking platform with over a billion members worldwide. It provides services including professional identity management, job search, online learning, and business advertising. The platform is positioned as a market leader in the technology sector, serving professionals, job seekers, and businesses globally. Technically, LinkedIn employs modern web technologies such as React, integrates Google Identity Services for authentication, and uses SVG icons and lazy loading for performance optimization. The website is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, secure forms, and cookie consent mechanisms, although explicit public security policies and incident response contacts are not found. The WHOIS data is unavailable, likely due to privacy protection, which is justified for a large enterprise. Overall, LinkedIn demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

S

Sousedé

sousede.cz

59

Sousedé.cz is a Czech Republic based digital platform specializing in the management and collaboration of residential communities, specifically SVJ (homeowners associations) and apartment buildings. The platform connects committees, property managers, management companies, and unit owners to streamline communication, legal compliance, and administrative tasks. It offers key services such as duty monitoring, online voting, document management, and integration with established property management systems like DOMUS. The website positions itself as a leading portal in its niche with over 2,000 buildings and 45,000 users, emphasizing ease of use and comprehensive features for all stakeholders. Technically, the website is built on modern web technologies including React and Next.js, ensuring fast performance and excellent mobile responsiveness. It integrates analytics and marketing tools such as Google Analytics and HubSpot, and employs security best practices including HTTPS and security headers. The site features a well-structured user interface with clear navigation and professional design, supporting a positive user experience. From a security perspective, the platform demonstrates good practices with encrypted connections and role-based access controls. However, there is no publicly visible incident response or vulnerability disclosure policy, and WHOIS data for the domain is unavailable, which slightly impacts trustworthiness. Privacy and cookie policies are comprehensive and GDPR compliant, with user consent mechanisms in place. Overall, Sousedé.cz presents a mature and professional digital service for residential community management in the Czech market. Strategic recommendations include improving transparency by publishing domain registration details, establishing a formal security incident response policy, and adding a security.txt file to facilitate vulnerability reporting.

V

VAMED Care Holding Deutschland GmbH

vamed-gesundheit.de

52

VAMED Gesundheit Deutschland is a large healthcare provider specializing in rehabilitation, acute clinics, outpatient medical centers, and senior care facilities across Germany. The company operates multiple clinics and centers, offering a broad range of specialized rehabilitation services including neurological, cardiological, oncological, and post-COVID-19 rehabilitation. The website reflects a professional and consistent brand presence with clear navigation and relevant content targeting patients, healthcare professionals, and potential employees. Technically, the website is built on the TYPO3 CMS platform, hosted via Akamai CDN infrastructure, and incorporates modern web technologies including JavaScript and SVG graphics. The site is mobile-optimized, accessible, and SEO-friendly. GDPR compliance is addressed through a cookie consent mechanism powered by Usercentrics, and privacy policies are clearly linked. From a security perspective, the site enforces HTTPS and uses cookie consent tools but lacks explicit security headers and publicly disclosed incident response contacts or vulnerability disclosure policies. No vulnerabilities or sensitive data exposures were detected. WHOIS data aligns well with the business profile, indicating a legitimate and trustworthy domain registration. Overall, the website demonstrates a strong business credibility and technical maturity with room for improvement in security transparency and incident response readiness.

Korbáčikovo Zázrivá is a small hospitality business located in Slovakia, offering accommodation, wellness, dining, golf, and recreational services focused on the Mala Fatra region. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. It integrates a booking engine and complies with GDPR and cookie regulations, providing transparent contact information and social media presence. Technically, the site uses modern JavaScript frameworks and libraries, with good performance and accessibility. Security posture is solid with HTTPS and cookie consent, though additional security headers and formal security policies could enhance protection. Overall, the website reflects a trustworthy and legitimate business with a strong regional market position.

M

MYJO, s.r.o. - REZEO

rezeo.cz

44

REZEO is a Czech Republic based SaaS company specializing in an online reservation system tailored for small accommodation providers. The platform aims to simplify online booking processes, enhance guest comfort, and improve rental efficiency. The company operates under MYJO, s.r.o., founded in 2021, positioning itself as a niche player in the hospitality sector. The website reflects a professional and consistent brand image with a clear focus on its target audience. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and consent management tools, hosted by Active24. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented; however, security headers and formal policies like privacy and terms of service are missing, representing areas for improvement. Overall, the website is trustworthy and functional, with moderate user tracking and marketing integration.

E

ExpiredDomains.com

mariestumpfova.com

71

ExpiredDomains.com operates as a specialized online platform aggregating expired and expiring domain listings from multiple TLDs, providing domain investors, SEOs, and marketers with comprehensive data and filtering tools. The platform does not directly sell domains but facilitates purchases through trusted partners like GoDaddy, positioning itself as a valuable resource in the domain aftermarket space. Technically, the website employs modern web standards with responsive design and integrates SVG icons and JavaScript for enhanced user experience. Hosting and DNS are managed via reputable providers including Cloudflare and GoDaddy, ensuring reliable uptime and performance. Security posture is adequate with HTTPS enforced and CSRF protections in place, though additional security headers and explicit policies could improve resilience. Privacy compliance is well addressed with clear privacy and cookie policies, including consent mechanisms. Business credibility is supported by consistent branding, user testimonials, and active social media engagement. Overall, the site is accessible, professional, and trustworthy with no indications of malicious or adult content.

R

Repronis s.r.o.

repronis.cz

43

Repronis s.r.o. is a Czech Republic based production agency specializing in printing services, large format printing, advertising items, and media campaigns including social media and special events. Established in 2000 and part of the Ovision Group, it serves local business clients primarily in Ostrava and surrounding regions. The website is built on Joomla CMS with modern UIkit framework and Yootheme templates, offering a professional and mobile-optimized user experience. Security posture is adequate with HTTPS and CSRF protections, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with GDPR policy documents but lacks cookie consent mechanisms. Overall, the business demonstrates strong credibility with clear contact information, client references, and consistent branding.

I

Infigy

infigy.cz

52

Infigy is a Czech-based company specializing in smart energy management solutions that integrate photovoltaic systems, batteries, heat pumps, boilers, and electric vehicle chargers. Their platform optimizes energy consumption and production to maximize self-consumption and cost savings, targeting residential and commercial customers as well as energy communities. The company is relatively young, founded in 2022, but presents a professional and mature digital presence with strong local partnerships and certifications. Technically, the website is built on modern frameworks like Next.js and React, with good performance and mobile optimization. Security posture is solid with HTTPS and secure form handling, though explicit security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and well-positioned in the Czech energy market.

O

OVISION CZ a.s.

ovision.cz

46

OVISION CZ a.s. is a Czech-based company specializing in comprehensive document services, including reprography, postal operations, digitalization, and outsourcing of printing environments. Established in 2014, the company has grown through multiple acquisitions and operates several subsidiaries under the OVISION GROUP brand. Their target audience primarily consists of businesses seeking efficient document management and outsourcing solutions. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on Joomla CMS with UIkit framework and uses modern JavaScript libraries, providing a moderate performance and good mobile optimization. However, there are gaps in privacy compliance and security best practices, such as the absence of privacy and cookie policies and missing security headers. No WAF or blocking mechanisms were detected, and the domain registration aligns well with the company's business claims, indicating legitimacy.

D

DigiLabs Software, s.r.o.

zsdidaktis.cz

55

ZŠ DidaSmart is a private primary school located in Brno, Czech Republic, specializing in education for gifted children with an individualized approach. The school emphasizes talent development and preparation for gymnasium entrance exams, boasting over 10 years of successful teaching experience and ranking in the top 10% of Czech primary schools based on SCIO test results. The website is professionally designed, mobile-optimized, and rich in relevant content targeting parents and prospective students. Technically, the site uses modern web technologies including Google Tag Manager and Facebook Pixel for analytics and marketing, and is built on a Nette-based CMS framework. Security posture is good with HTTPS enforced and secure forms, though some security headers are missing. Privacy and cookie policies are present, indicating GDPR compliance, but explicit cookie consent mechanisms could be improved. Contact information is comprehensive, including email, phone, physical address, and a contact form. WHOIS data is unavailable, which reduces domain trustworthiness despite the professional presentation. Overall, the website demonstrates a strong business presence with good technical and security practices, suitable for its educational mission.

B

Broadcast Jobs

broadcastjobs.com

57

Broadcast Jobs is a UK-focused online platform providing guidance and resources for job seekers in the TV, film, and media industries. It aggregates and directs users to job listings, professional recruiters, freelancing opportunities, and diversity initiatives. The site is positioned as a niche resource within the UK media job market, targeting professionals and freelancers seeking employment opportunities. Technically, the website is built on the Squarespace platform, leveraging its CMS and hosting infrastructure, with a moderate performance profile and good mobile optimization. Security-wise, the site enforces HTTPS with HSTS, indicating a strong SSL configuration, but lacks publicly available privacy, cookie, and security policies, which are areas for improvement. Overall, the website presents a professional and trustworthy front but would benefit from enhanced privacy compliance and explicit security disclosures.

W

willy.tel

willytel.de

55

willy.tel is a regional telecommunications company based in Hamburg, Germany, with a history dating back to 1960. The company operates its own independent fiber optic network serving over 160,000 households and businesses, offering internet, telephone, TV (IPTV), and mobile services. It targets private customers, business clients, and the housing industry, positioning itself as a regional leader with comprehensive service offerings and customer portals. Technically, the website is built on TYPO3 CMS with Bootstrap, providing a responsive and accessible user experience. Security posture is strong with HTTPS and security headers implemented, though there is room for improvement in cookie consent and explicit security policies. Overall, the website is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence.

J

Jamf

jamfnow.com

74

Jamf Now is a cloud-based mobile device management solution focused on Apple devices, providing easy and affordable device management for businesses without requiring IT support. The website analyzed is the official login portal for Jamf Now, featuring a professional design, modern Angular framework, and secure HTTPS connections. The site includes comprehensive privacy and terms of service documentation, reflecting a mature compliance posture. Security features such as secure password inputs and cookie consent mechanisms are implemented, though explicit security headers were not detected in the provided data. The absence of WHOIS data for the subdomain is typical and does not detract from the legitimacy of the service, as the main domain is well-known and trusted. Overall, the site demonstrates a strong technical and security posture suitable for enterprise SaaS services.

M

Ministerium für Kultus, Jugend und Sport Baden-Württemberg

km-bw.de

67

The website km.baden-wuerttemberg.de is the official portal for the Ministry of Education, Youth and Sports of Baden-Württemberg, Germany. It serves as a comprehensive information hub for education policies, youth programs, sports initiatives, cultural affairs, and public services related to schooling and early childhood education in the region. The site targets citizens, students, parents, and educators within Baden-Württemberg, providing official government content and resources. The business model is public service and information dissemination as part of the regional government infrastructure. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, and employs Matomo analytics with a user consent mechanism, reflecting a privacy-conscious approach. The site uses modern web technologies including responsive design, SVG icons, and asynchronous JavaScript loading. Hosting appears to be managed by Baden-Württemberg state infrastructure, ensuring reliability and compliance with government standards. From a security perspective, the site enforces HTTPS and uses cookie consent for analytics. While some standard security headers are present, there is room for improvement by adding additional headers like Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the official nature of the site, showing consistent domain registration and name servers. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It provides a safe and accessible user experience with clear navigation and relevant content. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

R

Recisio

karafun.es

72

KaraFun, operated by Recisio, is a well-established online karaoke platform offering a vast catalog of karaoke songs and interactive music quizzes. The service targets a broad audience with multilingual support and multiple subscription plans, including free, premium, and professional tiers. The company also provides karaoke hardware and business solutions, positioning itself as a comprehensive karaoke entertainment provider in the media sector. The website demonstrates strong branding consistency and professional content quality, supported by a modern technical infrastructure leveraging JavaScript, SVG, and privacy-conscious analytics tools like Umami. Technically, the site is well-optimized for performance and mobile responsiveness, with good SEO and accessibility practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly disclosed. The domain registration aligns well with the business claims, indicating legitimacy and trustworthiness. Social media presence and partner domains further reinforce the company's market position. Overall, the website is professional, secure, and compliant with privacy regulations, offering a trustworthy user experience. However, improvements could be made by publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance transparency and security readiness.

R

Recisio

karafun.nl

70

KaraFun, operated by Recisio, is a well-established online karaoke platform offering a broad catalog of karaoke songs and music quizzes. The company targets karaoke enthusiasts and businesses with subscription-based services and specialized solutions like karaoke bars and business management tools. The website is professionally designed, mobile-optimized, and provides multilingual support, reflecting a mature digital presence. Technically, the site uses modern web technologies, including SVG icons, Google Fonts, and Umami analytics, hosted likely on a CDN associated with Recisio. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the domain registration aligns well with the business claims, indicating legitimacy and trustworthiness.

R

Recisio

karafun.fr

63

KaraFun, operated by Recisio, is a well-established online karaoke platform offering a broad catalog of karaoke songs and music quizzes accessible via multiple apps across devices. The business targets a broad audience including casual users and professional karaoke venues, with subscription-based revenue models and additional commercial offerings. The website is professionally designed, multilingual, and provides clear subscription plans and business solutions. Technically, the site uses modern web technologies, including SVG icons, Google Fonts, and privacy-focused Umami analytics, hosted likely on Recisio's infrastructure with CDN support. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response contacts could be improved. Privacy compliance is good with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the domain is privacy-protected but consistent with a legitimate, professional business presence.

C

Care for Innovation e. V.

careforinnovation.com

58

Care for Innovation e. V. is a German-based association focused on shaping the future of the healthcare and nursing sector through digital innovation. The organization acts as a network alliance connecting startups, scale-ups, and established partners across Europe to foster collaboration, pilot projects, and knowledge exchange. Their key services include organizing events such as CFI-Talks and the CESB Rütteltest, providing visibility for innovations, and representing members' interests politically. The website is professionally designed, primarily in German, and targets healthcare innovators and stakeholders in the European market. Technically, the site is built on Webflow CMS, uses modern web fonts, and is hosted on AWS Cloudfront CDN, ensuring good performance and mobile responsiveness. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is trustworthy and professional but would benefit from improved transparency in domain registration and enhanced privacy compliance features.

R

Recisio

karaoke-version.com

68

Karaoke-Version.com is an established e-commerce platform specializing in downloadable instrumental and karaoke tracks, offering over 84,000 songs with customization features. The site targets karaoke enthusiasts and musicians globally, providing various product types including custom backing tracks, vocal backing tracks, video karaoke, and instrument-specific versions. The business is operated by Recisio, a company with a history dating back to 2004, positioning itself as a leading source in the karaoke music niche. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, hosted on a dedicated CDN infrastructure for optimal performance. The site is mobile-optimized with excellent design quality and user experience, supporting multiple languages and regional versions. SEO and accessibility practices are well implemented, contributing to strong digital maturity. From a security perspective, the site enforces HTTPS and displays secure payment logos indicating PCI compliance. However, it lacks visible security headers and a cookie consent mechanism, which are important for enhanced security and privacy compliance. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and branding suggest legitimacy. Overall, Karaoke-Version.com presents a professional and trustworthy platform with a solid business model and technical foundation. Strategic improvements in security headers, privacy consent, and domain registration transparency would further strengthen its security posture and compliance standing.

S

Servus am Marktplatz, Ihr Shop für handgefertigte Produkte aus dem Alpenraum

servusmarktplatz.com

68

Servus am Marktplatz is an e-commerce platform specializing in handcrafted products from the Alpine region, targeting customers interested in artisanal goods. The website presents a professional and consistent brand image with a clear focus on retail and online shopping. The technical infrastructure leverages AngularJS, SAP Commerce (Hybris), and integrates monitoring tools such as New Relic and Google Tag Manager, indicating a moderate level of digital maturity. Performance and mobile optimization are adequate, supporting a good user experience. Security posture is solid with HTTPS enforced and monitoring in place, though some security headers could be improved. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. The domain WHOIS data is missing, which raises concerns about registration legitimacy and requires further investigation. Overall, the site is functional and trustworthy but would benefit from enhanced privacy disclosures and security headers.

Z

Zalando SE

zalando.ch

52

Zalando.ch is a leading Swiss e-commerce platform specializing in fashion, shoes, and accessories for women, men, and children. It operates as part of the larger Zalando SE group, a major European online fashion retailer. The website offers a broad assortment of products with a focus on user experience, fast and free shipping, and easy returns. The platform targets general consumers in the German-speaking market, providing a comprehensive and professional shopping experience.

D

Diffuse

diffuse.tools

64

Diffuse Tools is a technology-focused SaaS provider offering easy-to-implement customizable widgets and code snippets to enhance websites. Their product suite includes Cookie Notice, Store Locator, Donations, and Contact Button widgets, targeting web developers and businesses seeking to improve their web presence without coding. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive policy documentation, reflecting a mature digital presence. Technically, the site is built on modern frameworks such as Next.js and React, leveraging Google Tag Manager for analytics and tracking. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though the absence of security headers and explicit incident response policies suggests room for improvement. WHOIS data is unavailable due to TLD restrictions and privacy, but the website's branding and content support legitimacy. Overall, the site scores well on content quality, technical implementation, privacy compliance, and business credibility, making it a trustworthy and professional offering in its niche.

Z

Zalando SE

zalando.at

47

Zalando SE operates a leading European online fashion retail platform, targeting consumers primarily in Austria and German-speaking countries. The website offers a broad assortment of shoes, clothing, accessories, and beauty products with a strong focus on user experience, free shipping, and returns. The brand is well-established with a significant market presence and a comprehensive e-commerce business model. Technically, the site leverages modern web technologies including React and RequireJS, with a strong emphasis on performance, mobile optimization, and accessibility. Security posture is robust with HTTPS enforcement, security headers, and consent management via Usercentrics. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site demonstrates a mature digital infrastructure and trustworthy business operations.

B

Body Attack Sports Nutrition

body-attack.at

59

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness nutrition products such as protein powders, creatine, amino acids, and workout boosters. The company targets fitness enthusiasts and athletes primarily in German-speaking countries, emphasizing quality with a 'Made in Germany' label and 30 years of experience. The website is well-branded, consistent, and provides a good user experience with clear navigation and mobile optimization. Technically, the site leverages Shopware CMS, Google Tag Manager, and other modern web technologies with lazy loading to enhance performance. Security posture is solid with HTTPS and consent management, though some security headers and explicit policies are missing. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is trustworthy and professionally maintained but would benefit from publishing comprehensive privacy, terms, and security policies to improve compliance and user trust.

G

Gutenberg-Shop

gutenberg-shop.de

49

The Gutenberg-Shop is an e-commerce platform associated with the Gutenberg Museum in Mainz, Germany, specializing in exclusive gifts related to the art of printing and book painting. The website targets a general audience interested in cultural and artistic merchandise, offering products crafted using traditional techniques. The business operates in the retail sector with a niche focus on cultural and museum-related products. Technically, the site is built on a modern e-commerce platform (likely Shopware), uses HTTPS, and integrates Matomo analytics for privacy-conscious tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security practices include CSRF protection and cookie consent mechanisms, though explicit privacy and terms of service pages are missing. Overall, the site demonstrates a moderate to good security posture with room for improvement in policy transparency and security headers. The domain registration data is minimal but consistent with the business profile, and no suspicious patterns were detected. The site is safe for general audiences with no adult or questionable content.

B

Body Attack Sports Nutrition

body-attack.de

66

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness and sports nutrition products, targeting German-speaking fitness enthusiasts and athletes. The company leverages a mature digital infrastructure based on the Shopware platform, enhanced with modern performance optimizations such as lazy loading and integration with Google Tag Manager and Mollie payment services. The website demonstrates consistent branding and a clear market position as a trusted German fitness nutrition provider with over 30 years of experience. Security posture is solid with HTTPS and Cloudflare DNS/CDN usage, though explicit security headers and policies are not fully visible. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

LOTTO Rheinland-Pfalz operates as the official state lottery provider for the Rheinland-Pfalz region in Germany, offering a variety of lottery games including LOTTO 6aus49, Eurojackpot, Rubbellose, GlücksSpirale, BINGO!, KENO, and TOTO. The website facilitates online ticket purchases, account registration, and subscription services such as Dauerschein and Jackpot-Jäger. The business is positioned as a trusted regional government entity with a focus on secure and regulated gambling services for adults. The website content is professionally presented, consistent with the brand, and targets adult users interested in lottery gaming. Technically, the website employs modern web technologies including jQuery, SVG icons, and a custom JavaScript framework by MULTA MEDIO AG. It supports progressive web app features and is mobile optimized with responsive design. Analytics are implemented via etracker, and a chat widget from moin.ai is integrated for user support. While the site uses HTTPS and secure login forms, it lacks some security headers and explicit cookie consent mechanisms, which are areas for improvement. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and responsible disclosure availability, but could enhance its posture by adding security headers and publishing incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data is limited but does not raise concerns, and the overall legitimacy is supported by consistent branding and government affiliation. Overall, the website is a reliable and professional platform for online lottery services with moderate technical maturity and a solid security baseline. Enhancements in privacy compliance and security headers would further strengthen trust and regulatory adherence.

I

IHK Hessen innovativ GbR

ihk-hessen-innovativ.de

52

IHK Hessen innovativ GbR is a regional service organization affiliated with the Industrie- und Handelskammern (IHK) in Hessen, Germany. The company provides free and paid consulting services, webinars, seminars, and networking opportunities to support innovation and business development for founders, professionals, and executives in Hessen. Their market position is that of a trusted regional innovation partner with a strong focus on digital transformation and business growth. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Matomo analytics for privacy-conscious tracking, and a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, the website is trustworthy, professional, and well-aligned with its business purpose.

AKSD Kft. is a Hungarian waste management company based in Debrecen, providing services such as waste collection, bulk waste removal, cemetery maintenance, public area upkeep, hazardous waste transportation, and container rental. The website targets local residents and businesses, positioning itself as a regional essential service provider in transportation and energy sectors. The business model focuses on municipal and commercial waste management and related public services. The website content is professionally presented with consistent branding and relevant service descriptions, although it lacks comprehensive privacy and security disclosures.

D

dm drogerie markt

dm.cz

64

dm drogerie markt operates a comprehensive online retail platform focused on personal care, beauty, health, and household products in the Czech Republic. The website demonstrates a mature digital presence with a strong brand identity, extensive product offerings, and customer loyalty programs. Technically, the site employs modern web technologies, including a custom design system, responsive design, and consent management, ensuring a good user experience across devices. Security posture is robust with HTTPS enforcement and security headers, although no explicit incident response or vulnerability disclosure information is publicly available. Privacy compliance is well addressed with cookie consent mechanisms and privacy policies in place. Overall, the site reflects a professional and trustworthy e-commerce operation with minor gaps in publicly available WHOIS data.

The website represents the Sportamt Stadt Graz, a municipal government entity providing an online platform for booking district sports fields in Graz, Austria. It offers a structured multi-step booking process including service selection, appointment scheduling, user data input, and payment options. The platform is designed primarily for local residents and sports teams, facilitating fair and organized access to public sports facilities. The business model is a public service, leveraging a third-party SaaS platform (eTermin) for appointment management. Technically, the website employs standard web technologies such as jQuery and SVG for UI elements, with a responsive design suitable for mobile devices. The site includes privacy and cookie policies linked to official city resources, indicating compliance with GDPR. However, no advanced security headers or explicit SSL configuration details were found in the provided data, suggesting room for security enhancements. From a security perspective, the platform shows good practices like encrypted data transmission and user authentication mechanisms. The absence of WHOIS data for the domain www.etermin.net raises questions about domain registration legitimacy, though the website content and contact details align with a legitimate municipal service. No critical vulnerabilities or adult content were detected. Overall, the website is a functional, government-backed service with moderate technical maturity and good privacy compliance. Strategic improvements in security headers, domain registration transparency, and enhanced security audits are recommended to strengthen trust and resilience.

S

Schleswig-Holstein Netz

sh-netz-shop.com

67

Schleswig-Holstein Netz operates an e-commerce platform focused on energy-related products such as building introductions, smart home devices, and electric vehicle charging stations. The website targets consumers, businesses, and installers primarily in Germany. The platform is built on modern web technologies, likely using Shopware CMS, and features responsive design with clear navigation and user account management. Analytics are implemented via Google Tag Manager, and cookie consent mechanisms are in place. However, the absence of publicly available WHOIS data for the domain raises concerns about domain legitimacy and transparency. Additionally, the website lacks explicit privacy policy and terms of service pages, which are critical for compliance and user trust. Security posture is generally good with HTTPS and secure login forms, but could be improved by adding security headers and incident response contact information.

H

Hochschule für nachhaltige Entwicklung Eberswalde

hnee.de

54

The website www.hnee.de represents the Hochschule für nachhaltige Entwicklung Eberswalde, a German higher education institution specializing in sustainable development. It offers over 20 degree programs and hosts numerous research projects, targeting students, researchers, and sustainability professionals. The site is well-structured, professionally designed, and provides comprehensive academic and event information, reflecting a strong market position in sustainability education. Technically, the site is built on TYPO3 CMS, employs modern web technologies including responsive design, WebP images, and Matomo analytics for user tracking. Hosting is managed via telta.de nameservers, indicating a stable infrastructure. Performance and accessibility are good, with SEO best practices observed. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and WHOIS data confirms legitimate domain registration consistent with the institution's identity. Overall, the website demonstrates a solid digital presence with good security posture and business credibility, though improvements in privacy policy visibility and security disclosures are recommended.

R

Recisio

karaoke-version.de

63

Karaoke-Version.de is a German-based e-commerce platform specializing in downloadable karaoke and instrumental music tracks, including custom backing tracks and karaoke videos. The site is operated by Recisio, an established company since 2004, offering a large catalog of over 84,000 instrumental playbacks. The platform targets karaoke enthusiasts and musicians seeking personalized music tracks. Technically, the website employs modern web technologies such as jQuery, Google Analytics, and Google Tag Manager, hosted on Recisio's CDN infrastructure, delivering fast and mobile-optimized user experiences. Security posture is solid with HTTPS enforced and no exposed sensitive data, though improvements could be made by adding explicit security headers and cookie consent mechanisms. Privacy and terms policies are comprehensive and GDPR compliant, but direct contact emails and phone numbers are not publicly listed, relying on contact forms instead. Overall, the site demonstrates a mature digital presence with good business credibility and trustworthy domain registration.

B

betaITS GmbH

beta-its.de

62

betaITS GmbH is a small German managed IT services provider specializing in modern, simple, and customer-friendly IT solutions. Their offerings include managed endpoint services, infrastructure management, Microsoft 365 management, security, backup, and hardware procurement. The company targets businesses seeking comprehensive IT management with a focus on proactive service and operational continuity. The website is professionally designed using modern technologies like Astro, with excellent mobile optimization and clear navigation. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Contact is primarily via Calendly and social media, with no direct emails or phone numbers visible. Overall, the site is trustworthy, well-branded, and content-rich, supporting betaITS GmbH's market position as a reliable managed IT service provider.

Weidmüller is a well-established German company specializing in connection technology, automation, and digitalization solutions for industrial customers. The website reflects a mature digital presence with comprehensive product and solution offerings targeting B2B industrial sectors. The company maintains a strong market position with a focus on innovation and customer support. Technically, the website uses modern technologies including Google Tag Manager and OneTrust for consent management, hosted likely on infrastructure provided by Deutsche Telekom. Security posture is strong with HTTPS enforced and security headers present, although explicit security policies and incident response contacts are not published. Privacy compliance is robust with GDPR-aligned cookie consent mechanisms and a detailed privacy policy. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

K

KabelScheune

kabelscheune.de

63

KabelScheune operates a professional e-commerce platform specializing in network technology, electrical materials, multimedia, and cable management products primarily targeting both private and business customers in Germany. The website demonstrates a solid market position as a specialized retailer with a comprehensive product catalog and clear navigation structure. Technically, the site is built on the OXID eShop CMS platform, employs modern web technologies including responsive design and SVG icons, and integrates analytics and consent management tools to comply with GDPR requirements. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the site is trustworthy and professionally maintained, with no signs of malicious activity or adult content.