Security Directory

T

Tobit.Labs

smartel.com

63

smartel.com presents a modern, digitally-driven hotel concept targeting tech-savvy and mobile customers who prefer self-service and automation in hospitality. The business leverages the chayns software platform to enable guests to manage bookings, check-in, room control, and payments independently, minimizing traditional hotelier roles. The website is well-structured, uses modern web technologies including React and chayns APIs, and is hosted under a long-established domain registered since 1999. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is limited, with no explicit cookie consent or comprehensive privacy policy detected. Contact information and incident response details are not publicly available, which may impact trust. Overall, the site is professional and functional but could improve in privacy and security transparency.

N

next

next-ahaus.de

57

The website next-ahaus.de represents a local nightclub business named 'next' located in Ahaus, Germany. It offers nightlife entertainment with multiple floors and bars, hosting various themed music events and parties. The site targets a mature audience interested in nightlife and music events. Technically, the site is built on modern web technologies including React and the Chayns platform, hosted on Gandi nameservers, and uses HTTPS with video backgrounds and structured event data for ticket sales. Security posture is moderate with HTTPS enabled but lacks visible security headers and explicit privacy or cookie policies. No direct contact emails or phone numbers are found, which may impact user trust and compliance. Overall, the site is functional and professional but could improve in privacy compliance and security best practices.

A

ahaus.bike

ahaus.bike

64

ahaus.bike is a small, technology-driven eBike rental service operating in Ahaus, Germany, leveraging the Tobit.Labs chayns platform to provide a fully digital bike sharing experience. The business focuses on environmentally friendly transportation solutions using modern VanMoof eBikes, targeting local residents and visitors who seek flexible, app-based bike rentals. The platform supports group bookings and offers maintenance services for VanMoof bikes, positioning itself as a local showcase for digital bike rental technology. Technically, the website is built on modern web technologies including React and the chayns framework, with good mobile optimization and moderate performance. Security posture is solid with HTTPS enforced, but lacks some security headers and formal privacy or cookie policies, which impacts compliance. The WHOIS data is privacy-protected due to TLD restrictions, but the domain appears legitimate and consistent with the business profile. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

S

Sherlock's

sherlocks.app

56

Sherlock's is a small, themed steakhouse located in Ahaus, Germany, operating within the pub 'The Unbrexit'. The business leverages digital innovation by offering smartphone-based table reservations, ordering, and payment, creating a modern dining experience. The website reflects this digital maturity by using the Chayns platform and React framework, providing a responsive and well-structured user interface. The business hosts special event dinners, enhancing customer engagement and market differentiation. Technically, the website is hosted on reputable infrastructure with HTTPS enabled, but lacks some security headers and formal privacy and cookie policies, which are areas for improvement. Overall, the security posture is solid with no visible vulnerabilities, but compliance gaps exist regarding privacy and cookie consent. The domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

T

The Unbrexit

unbrexit.pub

61

The Unbrexit is a small hospitality business operating a British-style pub located in Ahaus, Germany. It offers authentic British pub culture, including original beers, food, and various events such as Pub Quiz, live music, and themed dinners. The business also collaborates with nearby venues like Sherlock’s Steakhouse and smartel hotel, enhancing its service offerings. The website is built on the chayns platform, leveraging modern web technologies and providing a good user experience with mobile optimization and event management features. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is generally good with HTTPS enforced, but security headers are missing. WHOIS data is privacy protected, which slightly reduces transparency but does not strongly impact legitimacy given the business type. Overall, the website and business appear legitimate and professionally managed, serving a mature audience interested in nightlife and hospitality in the local region.

T

TKWY

tkwy.de

56

TKWY is a small hospitality business based in Germany, specializing in fresh, high-quality regional food products with an emphasis on digital ordering and customer engagement. The company operates a modern website built on the chayns platform, integrating various digital services such as online ordering, voucher sales, and package delivery. The website reflects a digital-first approach, positioning TKWY as an innovative showcase business within the hospitality sector, supported by Tobit.Software's technology ecosystem. Technically, the site employs modern web technologies including React and Stripe.js for payment processing, hosted via Gandi.net with secure HTTPS configuration. However, the site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are provided, which may impact user trust and compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but the absence of security headers and incident response information suggests room for improvement. Overall, TKWY presents a professional and user-friendly digital presence with moderate risk, primarily due to incomplete privacy compliance and limited contact transparency.

B

BamBoo!

bamboo-ahaus.de

66

BamBoo! is a hospitality business operating an urban beach and restaurant in Ahaus, Germany, offering a unique dining and event experience with a subtropical theme. The website showcases their offerings including organic food, cocktails, event hosting, and family-friendly amenities. The business leverages the chayns platform for digital reservations, ordering, and content management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and domain protections, but lacks some security headers and formal privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

O

offsite Ahaus

offsite-ahaus.de

70

offsite Ahaus is a modern sports bar and lounge located in Ahaus, Germany, offering a unique blend of hospitality services including live sports broadcasting on multiple OLED screens, digital ordering of drinks and food, and entertainment options such as gaming and cinema experiences. The business leverages digital technologies and is integrated within the Tobit software ecosystem, indicating a strong digital maturity. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and the Chayns framework. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though there is room for improvement in security headers and privacy compliance. Overall, the site is trustworthy and well-positioned in its local hospitality market, targeting a mature audience interested in nightlife and sports entertainment.

The website tsimg.cloud currently serves a minimal placeholder or restricted access page indicating that the content is not available or the user lacks permissions. The domain is registered with Gandi SAS since 2018 and uses Cloudflare DNS services. The website lacks any visible privacy, cookie, or terms of service policies, and no contact information or forms are present. The technical infrastructure is minimal, with only a Roboto font loaded and no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS enforcement and missing security headers. Overall, the site appears to be either under development, restricted, or a placeholder with no active business presence visible.

E

Evang.-Luth. Dekanat Coburg

coburg-evangelisch.de

44

The website www.coburg-evangelisch.de represents the Evangelical Lutheran Deanery of Coburg, a significant religious and community organization in Bavaria, Germany. It serves approximately 58,000 members across 51 congregations, offering religious services, social programs, and cultural activities. The site is well-structured, professionally designed, and targets church members and the local community. Technically, it is built on Drupal 10 with modern web technologies and includes a GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. The WHOIS data is minimal but does not raise concerns, and the domain aligns with the organization's identity. Overall, the site is trustworthy, safe, and fulfills its informational and community engagement purposes effectively.

H

Hitsteps

cdnhst.xyz

56

Hitsteps is a small technology company offering a SaaS platform focused on real-time web analytics, live chat, page analysis, and uptime monitoring. Their service targets website owners and digital marketers seeking detailed visitor insights and engagement tools. The website is professionally designed with good content quality and clear navigation, supporting multiple languages and platform integrations. Technically, the site uses modern frameworks like Bootstrap and Reactflow, integrates with Google Analytics and other tracking services, and provides plugins for popular CMS and browsers. Security posture is moderate with HTTPS usage and secure login forms, but lacks visible security headers and cookie consent mechanisms. The absence of WHOIS registration data raises concerns about domain legitimacy, although the site appears operational and trustworthy from a content perspective. Privacy and terms policies are present and comprehensive, supporting GDPR compliance. Overall, the site scores well in content and business credibility but should improve security practices and domain registration transparency.

D

DAISEC

dih4aisec.eu

62

DAISEC is a European Digital Innovation Hub focused on AI and cybersecurity, supporting SMEs and public sector entities primarily in Lower Saxony, Germany. The hub offers free services funded by the EU, including training, networking, and technical assessments to facilitate digital technology adoption. The website is built on WordPress with professional design and integrates marketing tools like Sendinblue and Google reCAPTCHA for bot protection. Security posture is solid with HTTPS but lacks explicit security headers and published policies. No contact emails or phone numbers are directly visible, and no privacy or cookie policies are found, indicating room for compliance improvement. WHOIS data confirms domain legitimacy and consistency with the business profile.

K

Kultursommer Rheinland-Pfalz

kultursommer.de

63

Kultursommer Rheinland-Pfalz is a well-established non-profit cultural foundation affiliated with the Stiftung Rheinland-Pfalz für Kultur. Since 1992, it has been facilitating and promoting cultural projects across various art forms within the Rheinland-Pfalz region, targeting cultural practitioners, event organizers, and the general public interested in arts and culture. The website reflects a strong regional cultural focus with comprehensive information on events, funding, and community engagement. Technically, the site is built on WordPress with modern plugins and libraries, offering good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with GDPR regulations, serving as a reliable resource for cultural stakeholders in the region.

S

Stiftung Rheinland-Pfalz für Kultur

kulturstiftung-rlp.de

58

The Stiftung Rheinland-Pfalz für Kultur is a regional cultural foundation in Germany focused on supporting and promoting cultural activities within Rheinland-Pfalz. The website highlights key cultural projects such as the Kultursommer Rheinland-Pfalz and the Künstlerhaus Edenkoben, positioning itself as a non-profit organization dedicated to cultural enrichment. The site is built on TYPO3 CMS with Bootstrap framework, indicating a modern but straightforward technical infrastructure. The website is mobile optimized and provides a good user experience with clear navigation and relevant content for its target audience. However, it lacks visible contact information, privacy policy, and terms of service pages, which are important for transparency and compliance. Security posture is moderate with cookie consent implemented but missing security headers and no visible incident response or security policies. Overall, the website is functional and professional but could improve in privacy compliance and security best practices.

A

AGA Unternehmensverband

aga.de

59

AGA Unternehmensverband is a well-established German business association focused on providing legal, tariff, HR, and business consulting services to companies primarily in northern Germany. The website reflects a professional and consistent brand presence, offering a variety of member services including webinars, legal document generation, and events. The technical infrastructure is based on TYPO3 CMS with Bootstrap, ensuring a modern and responsive user experience. The site employs standard privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is solid with HTTPS enforced and secure login forms, though some security headers could be improved. Overall, the website is trustworthy and serves its target audience effectively.

V

Verband der Chemischen Industrie Landesverband Nord e. V.

vci-nord.de

54

VCI Nord is a regional industry association representing approximately 280 chemical industry companies in Northern Germany. The organization focuses on advocacy, sustainability, education, innovation, and reducing bureaucracy for its members. The website is professionally designed using TYPO3 CMS, featuring clear navigation, relevant content, and multiple partner affiliations. Technically, the site is modern and mobile-optimized, though some security best practices such as security headers and cookie consent mechanisms are missing. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but incident response and vulnerability disclosure information are absent. Overall, the site is trustworthy and serves its target audience effectively.

B

Bundesverband der Deutschen Gießerei-Industrie (BDG)

bdguss.de

45

The website www.guss.de represents the Bundesverband der Deutschen Gießerei-Industrie (BDG), a key German foundry industry association. It serves as a comprehensive portal for industry news, events, research, training, and sector-specific information targeting foundry professionals and stakeholders in Germany. The site is built on TYPO3 CMS and integrates modern tools such as Google Analytics and Usercentrics for consent management, reflecting a moderate level of digital maturity. Security posture is solid with HTTPS enforced and no visible sensitive data exposure, though the absence of security headers and explicit security policies suggests room for improvement. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy or terms of service pages detected. Overall, the site is professional, well-structured, and trustworthy, supporting the association's authoritative market position.

V

Verband der Unternehmerinnen in Deutschland e.V. (VdU)

vdu.de

56

Verband der Unternehmerinnen in Deutschland e.V. (VdU) is a well-established non-profit association founded in 1954, dedicated to representing and supporting women entrepreneurs across Germany. The organization advocates for increased female entrepreneurship, leadership roles for women, and improved economic conditions for women in business. Their services include advocacy, networking, mentoring, events such as the she succeeds award, and publications. The website reflects a mature digital presence built on TYPO3 CMS, with modern cookie consent management and a clear structure optimized for user experience and accessibility. Security posture is solid with HTTPS and cookie consent, though some security headers could be improved. The domain registration is consistent with the organization's profile, enhancing trustworthiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

The Verband der Nordwestdeutschen Textil- und Bekleidungsindustrie is a regional industry association representing the textile and clothing sector in North Rhine-Westphalia, Germany. The website serves as an information hub for members and interested parties, offering news, educational resources, training opportunities, and insights into research and innovation within the textile industry. The association positions itself as a key player supporting industry development and workforce education. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies such as jQuery, Bootstrap, and slick sliders for interactive content. The site is mobile-optimized and incorporates a consent management platform (Usercentrics) to ensure GDPR compliance. Hosting is managed via domaincontrol.com nameservers, indicating professional domain management. From a security perspective, the site enforces HTTPS and uses a consent management platform to control third-party tracking. However, it lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious content were detected, and the site maintains good privacy compliance. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. Strategic improvements in security headers and transparency around security policies could further enhance its posture.

The website www.vnop.de is a German-language site powered by TYPO3 CMS and integrates Usercentrics for cookie consent management. The site appears to be a small business or organization with limited publicly available business information or contact details. The content is minimal and lacks explicit privacy policies, terms of service, or detailed business descriptions, which limits the ability to fully assess the business model or market position. Technically, the site uses modern CMS technology and consent management tools, but lacks visible security headers and explicit security or privacy policies. The SSL configuration is implied but not explicitly detailed. Overall, the security posture is moderate but could be improved with better header implementation and transparency.

P

Paritätischer Wohlfahrtsverband Niedersachsen e.V.

paritaetischer.de

62

Paritätischer Wohlfahrtsverband Niedersachsen e.V. is a prominent non-profit welfare association in Lower Saxony, Germany, representing over 880 member organizations. The website serves as an informational and service portal for members and the public, offering insights into the organization's structure, services, and regional presence. The business model focuses on social welfare advocacy, support, and coordination of member organizations across various social sectors. The organization holds a strong market position as a leading welfare umbrella in the region.

A

Arbeitgeberverband der Unternehmen im Weserbergland e.V.

adu.de

51

Arbeitgeberverband der Unternehmen im Weserbergland e.V. is a regional employer association founded in 1949, serving as the voice and support network for companies in the Weserbergland region of Germany. The organization provides legal advice, process representation, interest representation, nominations for labor and social courts, and informational services to its members. The website reflects a well-established, professional association with a clear focus on regional business support and networking. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and maintainable infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact channels.

A

Arbeitgeberverband Oldenburg e.V.

agv-oldenburg.de

57

Arbeitgeberverband Oldenburg e.V. is the largest employer association in northwest Lower Saxony, Germany, representing over 750 companies and approximately 85,000 employees. The association offers a broad range of services including legal advice, process representation, cost avoidance, interest representation, seminars, and networking opportunities. The website reflects a professional and well-established organization with a history dating back to 1919. The target audience primarily consists of employers across various industries in the region. Technically, the website employs modern web technologies such as Matomo for analytics, StimulusJS for frontend interactivity, and Swiper.js for sliders. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS was detected. Hosting appears to be managed via your-server.de and related nameservers. From a security perspective, the site uses HTTPS with good SSL configuration and respects DoNotTrack settings in analytics. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is strong with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was found. Overall, the website is trustworthy, professional, and well-maintained, with minor areas for improvement in security headers and privacy consent mechanisms. There is no indication of blocking or WAF interference, and the content is safe for general audiences.

U

Unternehmerverbände Niedersachsen e.V.

uvn.digital

57

Unternehmerverbände Niedersachsen e.V. (UVN) is a prominent regional business association representing over 100 employer and economic associations in Niedersachsen, Germany, encompassing more than 200,000 companies and approximately 2.6 million employees. The organization acts as a key voice for the regional economy, engaging with political entities, unions, and societal stakeholders. Their website reflects a professional and well-structured digital presence, leveraging WordPress with modern plugins and SEO optimizations. The site offers comprehensive content in German, including news, events, publications, and member services, targeting business stakeholders and policymakers in the region. Technically, the website is built on WordPress 6.8.3, utilizing plugins such as WPBakery Page Builder, Yoast SEO, Events Manager, and Borlabs Cookie for GDPR-compliant cookie consent. The site is HTTPS secured with good SSL configuration and includes social media integrations and structured data for enhanced SEO. Mobile optimization and accessibility are adequately addressed, though some security headers could be improved. From a security perspective, the site enforces HTTPS and cookie consent mechanisms, but lacks explicit security headers like CSP and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is malformed and unavailable, limiting domain registration trust verification, but the professional site content and social presence suggest legitimacy. Overall, the website presents a trustworthy and professional digital front for a large non-profit business association. Strategic recommendations include enhancing security headers, verifying WHOIS data, and improving visible contact information to strengthen trust and compliance.

C

CHARLES KNIE GmbH

weihnachtscircus.com

52

The Heilbronner Weihnachtscircus website represents a well-established regional event celebrating its 25th anniversary. The business is operated by CHARLES KNIE GmbH and focuses on delivering a large-scale Christmas circus experience with international artists. The website provides comprehensive event information, ticket sales links, and multimedia content to engage visitors. Technically, the site is built on Joomla CMS with Bootstrap and jQuery, offering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and CSRF tokens but lacks advanced security headers and DNSSEC. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy with minor areas for improvement in security and privacy transparency.

J

JCMM, z. s. p. o.

startid.cz

54

StartID is a Czech Republic-based educational platform operated by JCMM, z. s. p. o., focused on empowering students through digital e-portfolios, career counseling, and networking opportunities with companies. The platform offers a comprehensive suite of services including portfolio creation, PDF exports, job and internship listings, and interactive career support. It targets primarily students and educational institutions in the South Moravian region, positioning itself as a key regional educational support tool. Technically, the website employs modern JavaScript libraries such as Swiper.js and Plyr.js, integrates Google Analytics and Smartsupp live chat, and demonstrates good mobile responsiveness and user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and no incident response contacts are published. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and active social presence support legitimacy. Overall, the platform is well-designed, content-rich, and serves an important educational niche.

A

Amnesty International

amnesty.org

71

Amnesty International is a globally recognized non-profit organization dedicated to human rights advocacy, with a presence in over 150 countries and a membership exceeding 10 million people. The website reflects this mission with comprehensive content on campaigns, education, and activism, supported by a professional and consistent brand presentation. The organization leverages modern web technologies including WordPress and WooCommerce to facilitate engagement and donations. Social media integration is robust, enhancing outreach and community building. Technically, the website is well-constructed with modern frameworks and libraries such as React and WooCommerce, ensuring a responsive and accessible user experience. Privacy and cookie policies are clearly presented with active consent mechanisms, demonstrating compliance with GDPR and related regulations. Performance is moderate, with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and includes standard security headers, though explicit security policies and incident response contacts are not publicly available. No vulnerabilities or suspicious elements were detected in the content or scripts. WHOIS data is unavailable due to privacy protection, which is justified for a large non-profit entity. Overall, the site exhibits a strong security posture and trustworthy digital presence. Strategically, the organization should consider publishing detailed security policies and vulnerability disclosure information to enhance transparency and trust. Regular audits of third-party scripts and continued adherence to privacy regulations will further strengthen their security and compliance stance.

Perpetuum.cz is a Czech educational media platform established in 2017, focusing on trends, news, and innovations in education. It targets students, educators, parents, and education professionals by providing articles, videos, and expert blogs. The website is operated under the Scio brand, a recognized entity in Czech education. Technically, the site runs on WordPress with a modern theme and uses common web technologies such as jQuery, Google Analytics, and YouTube embeds. It implements GDPR-compliant cookie consent mechanisms and uses structured data for SEO. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. Overall, the site is professional, trustworthy, and compliant with privacy regulations, serving as a reliable source of educational content in the Czech Republic.

S

Scio

sciobot.cz

53

ScioBot is an AI-powered assistant designed to support teachers in the Czech Republic by automating and enhancing lesson preparation. The platform offers a comprehensive suite of tools including lesson plan generation, personalized student evaluations, feedback surveys, and an AI chatbot named ScioChat tailored for educational needs. With a strong user base of over 80,000 active teachers and partnerships with recognized educational organizations, ScioBot holds a significant position in the Czech educational technology market. Technically, the website leverages modern web technologies such as React and Next.js, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The integration of Vercel Analytics and Speed Insights indicates a focus on performance monitoring and user experience. The site is well-structured with clear navigation and professional design, contributing to a high-quality user experience. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, the absence of explicit security headers and a formal security policy or incident response information suggests room for improvement. The lack of a cookie consent mechanism may also pose GDPR compliance challenges. The missing WHOIS data for the domain is a notable concern, slightly impacting trustworthiness, though the overall business credibility remains strong due to transparent contact information, certifications, and user testimonials. Overall, ScioBot presents a mature, professional educational service with robust technical infrastructure and a positive security posture. Strategic enhancements in privacy compliance and security transparency would further strengthen its market position and trustworthiness.

S

SCIO

ucimsai.cz

40

Učím s AI is an educational website operated under the SCIO brand, focusing on integrating artificial intelligence into teaching practices for primary and secondary schools. The site provides practical tips, tutorials, blog articles, and tools such as Sciobot to assist teachers in leveraging AI for lesson preparation and classroom activities. The platform targets educators and educational institutions seeking to modernize teaching with AI technologies. Technically, the website is built on WordPress with Elementor, uses modern web technologies, and includes essential privacy and cookie consent mechanisms, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced, though improvements in security headers and incident response transparency are recommended. Overall, the site presents a professional and trustworthy resource in the AI education niche, though the absence of WHOIS data introduces some uncertainty regarding domain registration legitimacy.

S

scio s.r.o.

scioskola.cz

66

ScioŠkoly is a Czech Republic-based network of innovative primary and secondary schools focused on preparing students for the challenges of the 21st century. The organization operates multiple schools across the country, emphasizing freedom, responsibility, and modern educational methods. The website reflects a mature and well-established educational institution with a strong market position supported by accreditations and positive community feedback. Technically, the site uses modern web technologies including Umbraco CMS, Bootstrap, and Google Tag Manager for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

SCIO

scioexams.com

51

SCIO is a well-established educational organization based in the Czech Republic, specializing in university admission exams, national comparative exams, and various educational projects including a network of schools and educational toys. The website reflects a professional and consistent brand with a clear focus on education and services for students, parents, and educational institutions. The technical infrastructure uses modern web technologies including Google Tag Manager and CookieHub for analytics and cookie consent management, ensuring GDPR compliance. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is generally strong with HTTPS enforced and no visible vulnerabilities, though the absence of a published security policy and incident response information is a gap. The lack of WHOIS data for the domain is a concern for transparency but does not currently undermine the legitimacy of the business based on website content and external references. Overall, SCIO presents a trustworthy and professional online presence in the education sector.

S

SCIO

scio.sk

52

SCIO is a well-established educational organization based in Slovakia, specializing in the development and administration of national comparative exams for university entrance, educational projects for schools, and research-driven innovations in education since 1995. The website reflects a professional and consistent brand presence targeting students, teachers, and educational institutions. Technically, the site uses modern JavaScript frameworks, Google Tag Manager for analytics, and CookieHub for cookie consent management, ensuring compliance with privacy regulations. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR, supporting SCIO's credibility in the education sector.

S

Segmentify

segmentify.com

75

Segmentify is a technology company specializing in customer engagement platforms tailored for e-commerce and marketing professionals. Their platform offers a suite of solutions including personalized recommendations, dynamic bundles, real-time analytics, customer data management, and cross-channel marketing. The company is positioned as a medium-sized player in the technology sector, with a focus on enhancing customer lifetime value through data-driven personalization. The website is professionally designed, mobile-optimized, and uses modern web technologies such as WordPress, jQuery, and various marketing analytics tools. Security posture is solid with HTTPS enforced and domain protections in place, but lacks visible security headers and explicit privacy or cookie policies, which are critical for compliance and trust. No WAF or content blocking mechanisms were detected, allowing full content accessibility. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

O

OFFENE-TÜRE.de

offenetuere.de

57

OFFENE-TÜRE.de is a specialized small business based in Germany offering professional 360° virtual tours, Google Street View entries, and digital twin services primarily targeting companies seeking to enhance their online visibility and customer engagement. The website presents a clear business model focused on digital marketing enhancement through immersive virtual experiences. Technically, the site uses a modern but basic technology stack including Bootstrap and jQuery, hosted on German servers with no detected content blocking or WAF interference. The site is mobile optimized and SEO friendly with good content quality and clear navigation. Security posture is moderate with some concerns such as the use of GET method for login forms and lack of explicit security headers. Privacy compliance is good with a cookie consent banner and a dedicated DSGVO page, though no terms of service or security policy pages are found. Overall, the site is trustworthy but could improve security and compliance aspects.

F

Freiwillig24

freiwillig24.de

51

Freiwillig24 is a German-language platform focused on managing and searching free places for voluntary social services such as FSJ and BFD. The website targets individuals interested in engaging in voluntary social work and provides a niche service to facilitate placement opportunities. The platform appears to be small-scale and specialized within the German voluntary service sector. Technically, the website uses common JavaScript libraries like jQuery, Summernote, and Chart.js, but lacks modern frameworks or CMS indications. The site shows basic mobile optimization and accessibility features but could benefit from improvements in these areas. Security posture is moderate with HTTPS usage implied but lacks visible security headers and uses an outdated jQuery version, which may expose minor vulnerabilities. Privacy compliance is limited, with a privacy policy page present but no cookie consent mechanism or GDPR compliance indicators. Contact information and business details are minimal or absent, reducing business credibility. Overall, the website is functional and relevant to its niche but requires enhancements in security, privacy compliance, and user engagement to improve trust and professionalism.

S

staatsministerium.de is available for purchase - Sedo.com

staatsministerium.de

8

The website is a domain parking and sales landing page hosted by Sedo.com for the domain staatsministerium.de. It primarily serves domain buyers and investors interested in acquiring this domain. The platform operates as a domain marketplace and brokerage service, with a business model centered on domain sales and parking. The website content is minimal and focused on domain availability rather than providing organizational or business information related to the domain name itself. Technically, the site uses modern web technologies including JavaScript modules and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer restrictions in place, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service policies found, though a cookie consent mechanism is present. Overall, the domain registration is legitimate and consistent with the domain marketplace business model. The site is safe with no adult content or suspicious elements detected.

V

Verwaltungs-Verlag GmbH & Co. Betriebs OHG

verwaltungsverlag.de

56

Verwaltungs-Verlag GmbH & Co. Betriebs OHG operates as a leading provider of high-quality, advertising-financed cartographic products primarily serving governmental and municipal clients in Germany. The website reflects a professional business presence with clear branding and a focus on cartography services. The company leverages a WordPress-based digital infrastructure enhanced with popular plugins such as LayerSlider, WPBakery Page Builder, and Cookiebot for cookie consent management. Google Analytics and Google Tag Manager are used for analytics and tracking purposes, indicating a moderate level of digital maturity. From a security perspective, the website enforces HTTPS, ensuring encrypted communications. However, the absence of explicit security headers such as Content-Security-Policy and X-Frame-Options suggests room for improvement in hardening the site against common web threats. The presence of multiple third-party scripts and plugins increases the attack surface, necessitating regular updates and security audits. Privacy compliance is partially addressed through Cookiebot's consent mechanism, but the lack of a visible privacy policy or terms of service page is a notable gap. Overall, the website is accessible without WAF or security challenges, and no adult or questionable content is present, making it suitable for a general audience. The domain WHOIS data shows standard name servers without privacy protection, consistent with a transparent business operation. The site scores well on business credibility and technical implementation but should enhance privacy and security policies to improve compliance and trustworthiness.

Zu gut für die Tonne is a German government initiative aimed at reducing food waste through public education, tips, and campaigns. The website is professionally designed, content-rich, and targets the general public with a focus on sustainability and food preservation. Technically, it uses TYPO3 CMS with modern JavaScript libraries and implements a privacy-respecting Matomo analytics solution. Security posture is strong with HTTPS and cookie consent mechanisms, though some advanced security headers and explicit incident response policies are absent. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements.

B

Bundeszentrum Kita- und Schulverpflegung (NQZ)

gemeinsamgutessen.de

67

The website gemeinsamgutessen.de serves as the official platform for the Bundeszentrum Kita- und Schulverpflegung (NQZ), a government-affiliated initiative focused on improving the quality of nutrition in kindergartens and schools across Germany. It provides comprehensive information, resources, and networking opportunities for stakeholders involved in childcare and school meal provision. The site targets educators, parents, policymakers, and nutrition professionals, positioning itself as a trusted authority in this niche. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Slick Carousel for enhanced user experience. It employs Matomo analytics hosted on a controlled server, ensuring privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements a robust cookie consent mechanism aligned with GDPR requirements. While security headers are not explicitly detected, no vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its public service mission with clear navigation, quality content, and user-centric features. Strategic recommendations include enhancing security headers, publishing a security policy, and establishing a vulnerability disclosure channel to further strengthen its security posture and stakeholder trust.

O

Ocean Biodiversity Information System (OBIS)

obis.org

46

Ocean Biodiversity Information System (OBIS) is a well-established global initiative founded in 2006 that provides trusted marine biodiversity data to support conservation, research, and policy making. The platform offers extensive datasets, mapping tools, and community engagement resources targeting scientists, data managers, and conservationists worldwide. The website demonstrates a high level of professionalism with excellent content quality, clear navigation, and strong branding consistency. Technically, the site leverages modern web technologies including Bootstrap, MapLibre GL JS, and Font Awesome, hosted on DigitalOcean infrastructure. It is mobile-optimized and performs well with fast loading times. However, there is room for improvement in security practices, such as enabling DNSSEC and implementing security headers. Privacy compliance is currently weak due to the absence of privacy and cookie policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but the lack of explicit security policies and incident response contacts limits transparency. The WHOIS data confirms domain legitimacy with a long registration history and consistent registration details. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy and security disclosures. Strategic recommendations include adding comprehensive privacy and cookie policies, implementing security headers, publishing a security policy and incident response contacts, and enabling DNSSEC to strengthen domain security.

B

biodiversityDS

biodiversitydatascience.com

56

Biodiversity Data Science is a specialized research and educational platform focused on leveraging data science tools to support biodiversity conservation and the United Nations 2030 Agenda for Sustainable Development. The website offers research publications, project descriptions, data science courses, code resources, and a podcast to engage researchers, policymakers, and environmental stakeholders. The platform positions itself as a niche player in the environmental data science domain with a strong emphasis on marine biodiversity and climate change impacts. Technically, the website is built using the Jekyll static site generator and incorporates modern front-end libraries such as Bootstrap, jQuery, and Font Awesome. It demonstrates good mobile optimization, clear navigation, and SEO best practices. Google Analytics is used for user tracking, indicating moderate data collection practices. However, no privacy or cookie policies are present, which is a compliance gap. From a security perspective, the site lacks visible security headers and formal security policies. The WHOIS data is missing or indicates the domain may not be registered, which raises concerns about domain legitimacy and trustworthiness. No forms or sensitive data inputs are present, reducing immediate risk exposure. Overall, the security posture is moderate but could be improved with better policy disclosures and technical hardening. The overall risk assessment suggests the website is a credible source of biodiversity data science content but requires improvements in domain registration transparency, privacy compliance, and security best practices to enhance trust and reduce potential vulnerabilities.

J

JOBST

jobst.de

61

JOBST is a well-established brand specializing in compression therapy products for lymphatic and venous diseases. The company operates under the parent company Essity and targets patients and healthcare professionals seeking effective medical compression solutions. The website reflects a professional and consistent brand image with a focus on product comfort and therapeutic efficacy. Technically, the site employs modern JavaScript libraries, Google Tag Manager, and OneTrust for consent management, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and Content Security Policy headers, but lacks some advanced security headers and a dedicated security policy page. Privacy compliance is strong with GDPR-aligned policies and cookie consent mechanisms. Overall, the website is trustworthy, well-maintained, and suitable for its healthcare audience.

M

medi GmbH

medi.de

71

medi GmbH operates a professional website focused on medical compression stockings, orthopedic aids, and related sports and fashion products. The company is positioned as an established player in the healthcare sector in Germany, targeting patients, healthcare professionals, and consumers interested in medical and sportswear products. The website is built on TYPO3 CMS and leverages modern web technologies including jQuery UI and Bootstrap, with performance and mobile optimization rated as good. Security is robust with HTTPS enforced, strong security headers, and use of Cloudflare services. The site implements a comprehensive cookie consent mechanism compliant with GDPR, reflecting a mature privacy posture. However, explicit contact information and security policies are not prominently found, suggesting room for improvement in transparency and incident response readiness.

S

SMINA GmbH

smina.de

43

SMINA GmbH operates a modern online Sanitätshaus (medical supply store) focused on providing mobility aids, care products, and health-related equipment primarily to the German market. With over 200 partner physical stores nationwide, SMINA combines e-commerce with local presence to serve customers effectively. The website is built on a modern tech stack including Next.js, Shopify, and Contentful, ensuring a responsive and user-friendly experience. Security is well implemented with HTTPS, security headers, and privacy compliance via Usercentrics. Contact information and social media presence enhance trust and customer engagement. Overall, SMINA presents a professional, trustworthy, and well-structured digital platform for healthcare products.

S

Sozialverband Deutschland e.V. Landesverband Nordrhein-Westfalen

sovd-nrw.de

45

The Sozialverband Deutschland e.V. Landesverband Nordrhein-Westfalen is a regional branch of a well-established German non-profit social welfare association. The organization provides social law advice, advocacy, and support services primarily targeting residents of Nordrhein-Westfalen. Their website is professionally designed, content-rich, and offers multiple channels for engagement including social media, newsletters, and podcasts. The business model focuses on membership and social support services, positioning the organization as a trusted regional social advocate. Technically, the website is built on TYPO3 CMS with modern frameworks like Bootstrap and integrates analytics tools such as Matomo and Google Tag Manager. The site is mobile-optimized, accessible, and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a strong commitment to privacy compliance with comprehensive privacy and cookie policies. However, explicit security policies and incident response contacts are not published, which could be enhanced. The domain registration data is limited but consistent with a legitimate non-profit entity. The website is safe for general audiences with no adult or questionable content. Strategically, the organization should focus on enhancing security transparency, publishing incident response information, and maintaining strong privacy practices to further build trust and compliance.

S

Sozialverband Deutschland e.V.

sovd-gemeinsam.de

46

SoVD Gemeinsam gegen Einsam is a campaign website operated by Sozialverband Deutschland e.V., a large non-profit social welfare organization in Germany. The campaign addresses the issue of loneliness affecting various vulnerable groups including seniors, disabled persons, caregivers, and youth. The website offers information on counseling, neighborhood help, and political engagement to combat social isolation. Technically, the site is built on WordPress using the Elementor page builder and employs privacy-conscious tools such as Matomo analytics and Borlabs Cookie for GDPR-compliant cookie consent. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact is primarily via regional volunteer email addresses, with no phone numbers or physical addresses explicitly listed in the content provided. Overall, the site is professional, well-branded, and trustworthy with a clear social mission.

T

TUI

tui.com

72

TUI.com is the official website of TUI, a leading European travel and tourism company offering a wide range of services including package holidays, hotel bookings, flights, cruises, car rentals, and additional travel-related services. The website is professionally designed, mobile-optimized, and provides a comprehensive user experience targeting a general audience interested in travel. Technically, the site employs modern web technologies such as Web Components, asynchronous JavaScript loading, and integrates third-party services like Tealium for tag management and Gigya for customer identity management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not fully confirmed in the provided data. Privacy compliance is moderate due to the absence of clearly identified privacy and cookie policies in the analyzed content. WHOIS data is unavailable, which limits domain registration verification, but the website's professional presentation and branding strongly indicate legitimacy. Overall, TUI.com represents a mature, enterprise-level digital platform in the hospitality sector with good security and technical implementation but could improve transparency around privacy and security policies.