Security Directory

GetSimpleCMS is an open source content management system focused on simplicity and efficiency, written in PHP and designed as a flatfile CMS. The project is community-supported and originally developed by Chris Cagle. The website serves as an informational and project hub hosted on GitHub Pages, providing documentation, credits, and links to the GitHub repository. The technical infrastructure is modern for a static site, leveraging Jekyll for site generation and GitHub for hosting. The CMS itself requires PHP and certain extensions, targeting developers and small to medium website owners seeking a lightweight CMS solution. Security posture is moderate; while the CMS recommends Apache for security and .htaccess usage, the website lacks HTTPS enforcement and security headers, which should be addressed. Privacy and cookie policies are absent, and no direct contact information is provided, limiting compliance and user trust. Overall, the site is legitimate and trustworthy as an open source project but would benefit from improved security and privacy practices.

N

Nxtbook Media

nxtbookmedia.com

62

Nxtbook Media is a digital content experience platform provider specializing in responsive and replica digital publishing solutions. Their platforms, PageRaft and nxtbook, enable publishers and marketers to create engaging digital publications such as magazines, brochures, catalogs, and more. The company serves a diverse audience including enterprises, educational institutions, associations, and content creators, positioning itself as a trusted partner with a strong client portfolio featuring major brands like Disney and Marriott. Technically, the website is built on WordPress with a modern tech stack including jQuery, Google Analytics, and multiple marketing and tracking tools, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and policies could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. The WHOIS data is unavailable, which limits domain trust verification, but the overall business credibility and website professionalism indicate a legitimate and established company.

Fine Sax is a small German-based live music service specializing in saxophone performances for corporate events, weddings, and private parties. The website presents a professional and consistent brand image with good quality content including testimonials, videos, and references to partner bands. The technical infrastructure uses common web technologies such as Bootstrap, jQuery, and Google Analytics, providing a moderate performance and good mobile optimization. Security posture is moderate with no visible security headers and no explicit cookie consent mechanism, indicating partial GDPR compliance. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, which impacts trustworthiness. Overall, the website is functional and professional but would benefit from improved security and privacy practices.

S

Sax & the DJ

sax-and-dj.com

41

Sax & the DJ is a small German-based event entertainment service specializing in live DJ and saxophone performances for private and corporate events. The website presents a professional and engaging user experience with clear descriptions of services, testimonials, and multimedia content to attract event organizers and private clients. Technically, the site uses modern front-end frameworks like Bootstrap and integrates Google Analytics and Tag Manager for tracking, indicating a moderate level of digital maturity. However, the absence of privacy and cookie policies and lack of visible security headers highlight compliance and security gaps. The WHOIS data is missing, which raises concerns about domain legitimacy and trustworthiness. Overall, while the business appears credible and professionally presented, the technical and security posture requires improvements to enhance trust and compliance.

E

Event-Band-buchen.de

event-band-buchen.de

41

Event-Band-buchen.de is a German-language website specializing in direct booking of live music bands and DJs for events across Germany and Austria. The platform offers a curated selection of bands in five main categories including jazz, party, mobile, DJ plus live musicians, and gala bands. The business model focuses on eliminating agency fees by enabling direct contact between clients and bands, targeting event organizers and private customers seeking professional live entertainment. The website features rich content including detailed band descriptions, embedded videos, and an interactive quiz to assist users in selecting the right band for their event. Technically, the website is built with standard HTML5, CSS3, and JavaScript, incorporating Google Analytics for visitor tracking and an embedded third-party quiz tool. The site is mobile-optimized with good navigation and SEO practices, though no CMS or advanced frameworks are detected. Hosting details are limited, with generic name servers noted. Performance is moderate, and accessibility is basic. From a security perspective, the site uses HTTPS as implied by canonical URLs but lacks visible security headers and explicit privacy or cookie policies. No incident response or vulnerability disclosure mechanisms are present. WHOIS data is minimal and generic, which slightly reduces trustworthiness, but the website content and business presentation are professional and consistent with a small, legitimate event music booking service. Overall, the website presents a trustworthy and functional platform for live band bookings with room for improvement in privacy compliance, security hardening, and transparency regarding data protection.

C

Circus Roncalli GmbH

roncalli-shop.com

63

Circus Roncalli GmbH operates an official online souvenir shop offering a variety of merchandise including souvenirs, posters, program booklets, and gift ideas. The website is built on the Shopify platform, leveraging modern e-commerce technologies and third-party integrations such as FastBundle for product bundling, Cookiebot for cookie consent management, and Google Tag Manager for analytics. The site demonstrates good design quality, mobile optimization, and user experience, targeting general consumers interested in Circus Roncalli memorabilia. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and visible privacy or terms of service documentation. Contact information is not readily available in the analyzed content, which may impact user trust and compliance. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

W

Werbeagentur Göbler | Mediendesign + Beratung | Dinslaken - Wesel - NRW

agentur-goebler.de

50

Werbeagentur Göbler is a small, established advertising agency based in Dinslaken, Germany, serving the Wesel and NRW regions. The company specializes in media design, consulting, web and print design, and content marketing services including blogging, podcasting, and video production. With over 20 years of experience and more than 500 successful projects, the agency positions itself as a trusted local expert in creative advertising solutions. The website reflects a professional and consistent brand image, targeting businesses seeking to enhance their marketing presence both online and offline. Technically, the website is built on WordPress using the Avada theme, enhanced with modern JavaScript libraries such as jQuery and Lottie animations. SEO is well addressed through the Rank Math plugin, and privacy compliance is managed via the Complianz GDPR plugin. The site is mobile-optimized and performs moderately well, with good accessibility and SEO practices. From a security perspective, the website enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and detailed security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website content and business claims, indicating a trustworthy domain registration. Overall, Werbeagentur Göbler presents a secure, professional, and GDPR-compliant online presence suitable for its business model. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular plugin audits to sustain security posture.

V

Volkswagen AG

vw.de

69

Volkswagen AG is a leading automotive manufacturer headquartered in Germany, offering a broad portfolio of vehicles including electric and hybrid models, alongside financing, leasing, and mobility services. The company holds a strong market position in the transportation sector, targeting both consumer and business customers within Germany and internationally. The website reflects a mature digital infrastructure leveraging modern web technologies such as React and Adobe Experience Manager, ensuring a fast, accessible, and SEO-optimized user experience. Security posture is robust with HTTPS enforcement, comprehensive security headers, and privacy-compliant cookie consent mechanisms. No critical vulnerabilities or suspicious WHOIS data were detected, supporting a high trust level. Overall, the website and domain demonstrate strong business credibility and technical maturity.

T

Troester GmbH & Co. KG

troester.de

57

Troester GmbH & Co. KG is a well-established German manufacturing company specializing in extrusion technology for rubber and plastics processing. With a history dating back to 1892, the company holds a strong international market position, offering advanced machinery and comprehensive services including field and digital services, upgrades, and spare parts. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting industrial clients. Technically, the site is built on WordPress with modern web standards and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and no exposed sensitive data, though improvements could be made in cookie consent and security policy transparency. Overall, the site demonstrates high business credibility and trustworthiness, supporting Troester's reputation as a leader in its sector.

Petrella is a medium-sized, family-owned German company specializing in the production of cream cheese and plant-based alternatives, with a strong emphasis on freshness, regional sourcing, and sustainability. The company has a history dating back to 1991 and actively engages consumers through recipes, promotions, and a broad social media presence. The website is well-designed, mobile-optimized, and provides comprehensive product and company information. Technically, it is built on the Contao CMS platform using modern JavaScript libraries and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS and session protections, though additional security headers and explicit security policies could enhance trust. No blocking or WAF challenges were detected, allowing full content access and analysis.

E

ENERGY Media

energymedia.de

51

ENERGY Media is a well-established media marketing company specializing in radio and online audio advertising for the ENERGY and NOSTALGIE brands. With over 30 years of experience, they offer tailored advertising solutions including crossmedia campaigns, recruiting, promotions, and events. Their market position is strong within the German media advertising sector, targeting businesses and agencies seeking effective audio advertising. Technically, the website is built on Drupal 10, uses modern frameworks like Bootstrap 5, and integrates multiple analytics and marketing tools such as Google Analytics, Matomo, Facebook Pixel, Hotjar, and Usercentrics CMP for privacy compliance. The site is hosted behind Cloudflare, ensuring good performance and security. Security posture is solid with HTTPS, cookie consent, and opt-out mechanisms, though some security headers could be explicitly confirmed. Overall, the website is professional, user-friendly, and GDPR compliant, reflecting a mature digital presence.

H

Hannover United e. V.

hannover-united.de

58

Hannover United e. V. is a German non-profit sports club specializing in wheelchair basketball, competing in the 1. Bundesliga. The website serves as the official platform for news, team information, sponsorship opportunities, and community engagement. It targets sports enthusiasts, supporters of inclusive sports, and potential sponsors. The club maintains a strong market position within its niche, supported by multiple partnerships and memberships in recognized sports associations. Technically, the website is built on Amphi CMS and employs modern JavaScript libraries such as Owl Carousel and a consent management platform from Netzcocktail to ensure GDPR compliance. The site is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Performance is moderate, with no critical technical issues detected. From a security perspective, the site uses HTTPS with a good SSL configuration and includes some security headers, though additional headers could enhance protection. No vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and an active consent mechanism. Contact information is transparent and professionally presented. Overall, Hannover United's website reflects a professional, trustworthy, and community-focused organization with a solid digital presence. Strategic improvements in security headers and incident response transparency could further strengthen its security posture.

V

VUN Vereins- und Unternehmernetzwerk

vereins-und-unternehmernetzwerk.de

38

VUN Vereins- und Unternehmernetzwerk is a small German business and association networking platform focused on organizing regular networking meetings, leisure activities, and providing presentation opportunities for its members. The website targets entrepreneurs and associations primarily in the Hannover region, positioning itself as a local B2B network with low membership fees and no obligations. Technically, the site is built on Joomla CMS using Bootstrap and jQuery, hosted on kasserver.com servers. It features a cookie consent mechanism and social media integration but lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing security headers and incident response contacts. Overall, the site is functional, professionally designed, and safe for general audiences but could improve privacy compliance and security best practices.

I

Institut der Norddeutschen Wirtschaft e.V.

inw-online.de

53

The Institut der Norddeutschen Wirtschaft e.V. (INW) is a prominent business network in northern Germany, representing over 700 member companies across various industries. It serves as a platform for networking, advocacy, and information dissemination on economic and societal developments. The organization also benefits from close ties with related entities such as the Unternehmerverbände Niedersachsen e.V. (UVN) and the Dienstleistungsgesellschaft der Norddeutschen Wirtschaft mbH (DNW), enhancing its service offerings and regional influence. The website reflects a professional and well-structured digital presence, supporting the organization's mission and outreach efforts. Technically, the website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is room for improvement in security practices, such as implementing security headers and cookie consent mechanisms to enhance GDPR compliance. From a security perspective, the site uses HTTPS with a strong SSL configuration, but lacks visible security headers and explicit incident response or security policy information. The WHOIS data is unavailable due to privacy or query issues, but the website content and external references indicate a legitimate and established organization. No signs of malicious activity or vulnerabilities were detected in the provided content. Overall, the INW website is a credible and professional platform for its business network, with moderate technical maturity and a solid foundation for further security and privacy enhancements.

A

AS-Superreisen

as-superreisen.de

61

AS-Superreisen is a small German travel agency operating both online and physically at Hannover Airport, offering a range of travel services including package holidays, accommodation bookings, holiday homes, and cruises. The company emphasizes personal consultation and convenience, such as free parking and seven-day availability. Their market position is local with a focus on customer service and trusted travel solutions. Technically, the website is built on WordPress with Elementor and React components, integrating modern SEO and user engagement tools like live chat and newsletter subscriptions. Security posture is solid with HTTPS, cookie consent, and no evident vulnerabilities, though additional security headers and policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR, providing a good user experience and clear business information.

H

Hannover Indians

hannover-indians.de

55

The Hannover Indians website serves as the official online presence for a German ice hockey team based in Hannover. The site provides basic information about the team, schedules, media content, and club activities, targeting local sports fans and the community. The business model is focused on sports team promotion and fan engagement, with a small-scale local market position. Technically, the site is built on WordPress with React and WooCommerce components, indicating a moderate level of digital maturity. Performance and mobile optimization are basic, with room for improvement in SEO and accessibility. Security posture is adequate with HTTPS enabled but lacks important security headers and publicly disclosed security policies. Privacy compliance is weak, with no visible privacy or cookie policies, and no GDPR indicators. Contact information is not explicitly provided, limiting business credibility. Overall, the site is functional but would benefit from enhanced privacy, security, and user experience improvements.

B

Block Musik

blockmusik.de

52

Block Musik is a small German entertainment company specializing in artist booking, event management, and concert organization with over 30 years of experience. The website presents a professional and consistent brand image targeting event organizers and music enthusiasts. Technically, the site is built on WordPress with common plugins and a commercial theme, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy page but no visible cookie banner or terms of service. Overall, the site is trustworthy and functional but could improve in security and compliance areas.

L

Landeshauptstadt Hannover

lust-auf-fahrrad.de

55

HANNOVER.DE is the official digital portal for the city and region of Hannover, Germany, providing comprehensive information and services for citizens, tourists, businesses, and researchers. The website offers multilingual support, event calendars, public services including an online office (Online-Amt), and extensive cultural and tourism content. It serves as a central hub for regional government communication and citizen engagement. Technically, the site employs modern web technologies including React components, a consent management platform (RND CMP), and Matomo analytics configured with GDPR-compliant consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search engine understanding. From a security perspective, the site uses HTTPS with strong SSL configuration and implements privacy and cookie policies with user consent. However, explicit security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or blocking mechanisms were detected, indicating a mature and stable security posture. Overall, the site is trustworthy, professionally maintained, and compliant with European privacy regulations. It effectively balances user experience, accessibility, and privacy, making it a reliable resource for its target audience.

C

City Gemeinschaft Hannover e.V.

citygemeinschaft-hannover.de

56

City Gemeinschaft Hannover e.V. is a small non-profit community organization based in Hannover, Germany, focused on supporting local community activities and businesses. The website serves as an information and engagement platform for local residents and stakeholders. The organization maintains a professional online presence with clear privacy and cookie policies, reflecting compliance with GDPR requirements. The site integrates multiple third-party services such as Google Analytics, social media embeds, and Google reCAPTCHA to enhance functionality and user experience. Technically, the website is built on WordPress using Elementor and several plugins including Real Cookie Banner Pro and GiveWP for donations. The infrastructure is modern and well-maintained, with HTTPS enabled and cookie consent mechanisms properly implemented. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and Google reCAPTCHA to protect forms from spam. However, security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and should be implemented to strengthen security posture. No vulnerabilities or exposed sensitive data were found. Incident response and security policies are not publicly documented, which is a potential area for improvement. Overall, the website is trustworthy and suitable for its community-oriented purpose. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular updates to plugins and WordPress core to mitigate risks.

M

Markthalle Hannover

markthalle-in-hannover.de

54

Markthalle Hannover operates as a central marketplace and gastronomic hub in Hannover, Germany, offering a diverse range of fresh produce, international foods, and a social meeting place for locals and visitors. The website reflects a medium-sized retail and hospitality business with a strong local presence and cultural significance. Technically, the site is built on WordPress with modern plugins and uses Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and provides a good user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response policies are lacking. Privacy compliance is partial, with a clear privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving its community effectively.

D

Digitales Hannover e.V.

digitaleshannover.de

46

Digitales Hannover e.V. is a non-profit association focused on fostering digital transformation in the Hannover region by connecting stakeholders from business, science, media, culture, and administration. The organization hosts events, promotes projects, and provides a platform for networking and knowledge exchange. Their website reflects a professional and community-oriented approach with clear branding and consistent messaging. Technically, the site is built on WordPress with modern libraries and includes privacy-conscious analytics via Matomo. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is trustworthy and well-positioned as a regional digital innovation hub.

W

Werbeagentur Schulz-Design e. K.

schulzdesign.info

47

Werbeagentur Schulz-Design e. K. is a well-established full-service advertising agency based in Laatzen near Hannover, Germany. With over 15 years of experience, the agency specializes in advertising, web design, photography, and image film production, offering comprehensive services from concept to implementation. Their market position is strong within the Hannover region, serving a diverse client base across multiple industries. The website reflects a professional and modern digital presence, leveraging Joomla CMS and integrating advanced multimedia content and consent management tools. Security posture is robust with HTTPS, security headers, and privacy compliance mechanisms in place. No critical vulnerabilities or suspicious activities were detected. Overall, the agency demonstrates a mature digital infrastructure and a trustworthy business profile.

P

PHR Hannovers Wirtschaftsnetzwerk

p-h-r.de

61

PHR Hannovers Wirtschaftsnetzwerk is a well-established, non-profit business networking organization serving the Hannover region in Germany. It provides a platform for communication, interaction, and innovation among regional businesses and professionals, hosting events and offering member benefits. The website reflects a mature digital presence built on WordPress with a solid technical foundation including HTTPS, cookie consent, and SEO optimization. Security posture is good with HTTPS and security plugins in place, though some security headers and explicit policies could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting its role as a regional economic network.

R

Radioplayer Deutschland GmbH

radioplayer.de

50

Radioplayer Deutschland GmbH operates a comprehensive German radio streaming platform aggregating public and private radio content accessible via web, mobile apps, smart devices, and connected cars. The platform enjoys a strong market position as a leading aggregator with extensive integration across multiple platforms and automotive manufacturers. Technically, the website is built on TYPO3 CMS with legacy jQuery libraries, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements are recommended such as updating legacy libraries and implementing cookie consent mechanisms. Privacy compliance is adequate with a clear privacy policy but lacks explicit cookie consent. Business credibility is high with consistent branding, official app store links, and social media presence. Overall, the website is professional, trustworthy, and safe for general audiences.

E

EKG zvířat - dlouhodobé měření EKG bez stresu zvířete

ekgzvirat.cz

40

The website ekgzvirat.cz is a Czech veterinary service specializing in long-term EKG monitoring of animals, primarily dogs, for cardiac and neurological health diagnostics. The business operates in a niche healthcare segment, offering preventive and diagnostic cardiac monitoring services with a focus on stress-free measurement. The site is professionally designed using WordPress with Oxygen Builder and includes essential service descriptions, references, and contact information. Technically, the site uses modern web technologies including Google Tag Manager for analytics and Contact Form 7 for user inquiries. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and explicit privacy compliance mechanisms. The domain registration data is consistent with the business profile and location, indicating legitimacy. Overall, the website presents a trustworthy and professional service but could improve privacy compliance and security best practices.

B

bricks

neuroncentrum.cz

40

Neuron Medical Centrum operates as a network of specialized medical clinics in the Czech Republic, offering comprehensive healthcare services including cardiology, physiotherapy, sports medical examinations, neurorehabilitation, nutritional therapy, and psychological care. The website serves as a portal to these services, targeting patients seeking specialized ambulatory care. The business appears to be recently founded in 2023, consistent with the domain registration date, and operates primarily in the healthcare sector with a small organizational size. Technically, the website is built on WordPress using the Bricks theme and several plugins such as Rank Math SEO and Complianz GDPR for SEO and privacy compliance. The site is hosted by Webglobe, indicated by the nameserver data. The website demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Performance is moderate with modern web technologies employed. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is consistent and legitimate, with no privacy protection or suspicious registration patterns. Overall, the website is professional and trustworthy with moderate security posture and privacy compliance. Strategic improvements include adding explicit privacy and security policies, enhancing security headers, and publishing vulnerability disclosure information to strengthen trust and compliance.

L

Landesinitiative n-21 Schulen in Niedersachsen online e.V.

n-21.de

57

Landesinitiative n-21 Schulen in Niedersachsen online e.V. is a well-established non-profit organization focused on advancing digital education in Lower Saxony, Germany. The initiative offers a variety of projects and services such as the Niedersächsische Bildungscloud, moin.schule, and Schul-Internetradio, targeting schools, educators, and students. It maintains strong partnerships with regional government bodies and educational institutions, reinforcing its credibility and market position. Technically, the website is built on a modern stack including JavaScript, jQuery, Swiper.js, and the NOLIS CMS platform. It is hosted with Cloudflare DNS services and demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS with excellent SSL configuration and includes a cookie consent mechanism, reflecting a good level of digital maturity. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the website's educational and regional focus, indicating legitimacy. Overall, the website presents a low risk profile with strong business credibility and good technical implementation. Strategic improvements in security headers and incident response transparency would further enhance its security posture.

N

Niedersächsisches Landesinstitut für schulische Qualitätsentwicklung

nlq.de

52

The Niedersächsisches Landesinstitut für schulische Qualitätsentwicklung (NLQ) is a governmental educational institution in Niedersachsen, Germany, focused on supporting schools and educational quality development. Established in 2011 as a successor to previous educational bodies, it provides services including teacher education, curriculum development, leadership qualification, and digitalization support. The website serves as an official portal for information dissemination and contact with the institute. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Bootstrap and Font Awesome, ensuring responsive design and accessibility. It uses Cloudflare for DNS and likely CDN services, and integrates Matomo for analytics and ReadSpeaker for accessibility. The site is well-structured, with good SEO and mobile optimization, though some improvements in cookie consent and security headers could be made. From a security perspective, the site enforces HTTPS and uses Cloudflare nameservers, indicating a solid baseline security posture. However, the absence of explicit security headers and published security policies or incident response contacts suggests room for enhancement. No vulnerabilities or suspicious patterns were detected in the content or WHOIS data. Overall, the website is trustworthy, professional, and serves its educational mission effectively. Strategic improvements in privacy compliance and security transparency would further strengthen its posture.

S

Statistisches Bundesamt (Destatis)

dashboard-deutschland.de

51

The website www.dashboard-deutschland.de is an official economic dashboard operated by the German Federal Statistical Office (Statistisches Bundesamt, Destatis). It provides up-to-date economic indicators and data visualizations related to health, economy, mobility, and finance, targeting policymakers, researchers, and the general public. The platform leverages modern web technologies such as React and Next.js to deliver a responsive and accessible user experience. However, the site lacks explicit privacy and cookie policies, as well as published security or incident response policies, which are important for compliance and user trust. The WHOIS data confirms the domain's legitimacy, with nameservers linked to official Destatis infrastructure.

S

Svět Dam - magazín pre ženy

svetdam.sk

37

Svět Dam is an online women's magazine based in Slovakia, providing content focused on women, family, health, and advice. The website operates on a WordPress platform using the Newspaper theme and several plugins for newsletter and content management. It targets a regional audience with a niche focus on female readers. The site is relatively new, established in 2021, and hosts advertising content to support its business model. Technically, the site uses modern web technologies including HTTPS, DNSSEC, and Google Analytics for tracking. However, it lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is moderate with HTTPS and DNSSEC enabled but missing security headers and vulnerability disclosure mechanisms. Overall, the site is functional and professionally designed but would benefit from enhanced privacy compliance and security best practices.

M

Moravská vysoká škola Olomouc

edulam.cz

52

The website edulam.cz serves as an educational platform affiliated with Moravská vysoká škola Olomouc, focusing on providing academic resources and content across various disciplines such as management, economics, social sciences, mathematics, ICT, marketing, finance, and English language studies. The platform targets students and academic learners interested in labor market education and related fields. The business model revolves around content provision and academic support, positioning itself as a niche educational resource within the Czech Republic. Technically, the site is built on WordPress CMS using the Astra theme and Elementor page builder, with SEO optimization via Yoast and analytics through Google Analytics with IP anonymization enabled. The site demonstrates moderate performance and good mobile optimization but lacks advanced accessibility features. Security posture is adequate with HTTPS enabled but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Contact information is limited to a physical address with no explicit emails or phone numbers provided. Overall, the site is professional and trustworthy but requires improvements in privacy compliance and security best practices.

S

SL One s.r.o.

sl-one.cz

63

SL One s.r.o. operates as an investment special purpose vehicle (SPV) founded by colleagues from the legal firm SEDLAKOVA LEGAL. The company provides a unique employee benefit allowing its staff to invest alongside each other in promising startups, sharing both risks and profits. The business model focuses on supporting startups with capital and legal backing, targeting employees of the parent legal firm and innovative startups seeking investment. The website is professionally designed, well-structured, and optimized for mobile devices, reflecting a small but focused enterprise in the Czech Republic. Technically, the website leverages modern JavaScript frameworks, Google Tag Manager, Google Analytics, and Facebook Pixel for marketing and analytics purposes. It is built on the Solidpixels CMS platform and employs HTTPS with good SSL configuration. However, explicit security headers such as CSP and HSTS are not detected, indicating room for improvement in security hardening. Privacy and cookie policies are present and GDPR compliant, with a functional cookie consent mechanism. From a security perspective, the site demonstrates a moderate security posture with secure forms and no visible vulnerabilities. The absence of WHOIS data limits domain legitimacy verification, which slightly impacts trust scores. No direct contact emails or phone numbers are published, with communication facilitated solely through a contact form. No social media presence is linked from the site. Overall, SL One presents a credible and professional investment vehicle with a niche market focus. Enhancing domain transparency and security headers would strengthen trust and security posture. The site is safe for general audiences with no adult or questionable content detected.

S

Start Guide, s.r.o.

startguide.cz

56

Start Guide, s.r.o. is a Czech-based investment fund focused on supporting digital startups in the Central and Eastern European region. The company provides financial investments, practical mentoring, and strategic consulting to early-stage technology startups, emphasizing added value beyond capital. Their approach includes close collaboration with founders on vision, strategy, and scaling to market leadership. The website reflects a professional and consistent brand image, showcasing a dedicated team with relevant expertise and testimonials from portfolio founders. Technically, the website is built using modern JavaScript frameworks (Nuxt.js) and leverages Cloudflare for DNS and likely CDN services. The site is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. No analytics or tracking scripts were detected, indicating a privacy-conscious approach, but no formal privacy or cookie policies are published. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks explicit security headers and published security or incident response policies. The absence of privacy and cookie policies is a compliance gap given the GDPR relevance. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's founding year and no privacy protection masking. Overall, the website presents a trustworthy and professional image with strong business credibility but would benefit from enhanced privacy compliance and security best practices to improve its security posture and regulatory adherence.

T

TaxCounting, s.r.o.

taxcounting.cz

66

TaxCounting, s.r.o. is a Czech-based small business specializing in accounting, payroll, and tax advisory services. The company positions itself as a modern, digitally enabled service provider with a personal approach, serving over 100 clients and operating for approximately 5 years. It is part of the larger SEDLAKOVA LEGAL group, enhancing its market credibility. The website reflects a professional and consistent brand image with clear service offerings targeted at small and medium enterprises in the Czech Republic. Technically, the site uses a modern CMS (Solidpixels), integrates standard marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs responsive design and lazy loading for performance optimization. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit policies could be improved. WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is mitigated by the professional web presence and business transparency. Overall, the website is well-structured, user-friendly, and compliant with GDPR requirements.

G

Gorkana

gorkana.com

65

Gorkana is a UK-based leader in media intelligence, offering a comprehensive suite of services including media databases, monitoring, social media services, analysis, surveys, and media distribution. The company operates under the parent company Cision and targets communications professionals and journalists. The website is professionally designed, mobile-optimized, and integrates modern analytics and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS registration data is a notable concern but does not detract from the professional presentation and market position. Overall, Gorkana presents as a credible and established media intelligence provider with room for improvement in transparency and security disclosures.

T

Tikiti.cz s.r.o.

tikiti.cz

49

Tikiti.cz s.r.o. is a small creative and technology studio based in Brno, Czech Republic, specializing in web application development, creative design, event organization, chatbot solutions, and ticketing and parking systems. The company has an established market presence with municipal and commercial clients, demonstrated by their portfolio and long domain registration since 2015. The website is professionally designed with good content quality and clear navigation, targeting businesses and municipalities seeking digital and creative services. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and FontAwesome, providing a good mobile experience and moderate performance. However, there is no detected CMS or hosting provider information. Security posture is moderate with HTTPS implied but lacking visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy and security practices.

I

Incident Prevention

incidentprevention.com

62

Incident Prevention is a well-established digital platform founded in 2003, dedicated to providing comprehensive safety resources for utility professionals. The website offers expert articles, podcasts, training materials, and hosts a major industry conference, positioning itself as a premier resource in the energy sector. The business model revolves around content publishing, professional education, event hosting, and advertising services targeting utility safety and operations professionals. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, Google Analytics, Google Tag Manager, and UIkit for UI components. It leverages Cloudflare for DNS and CDN services, ensuring good performance and security. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, the site employs HTTPS with good SSL configuration and domain registrar locks to prevent unauthorized changes. While DNSSEC is not enabled, other security best practices are observed. No critical vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. Overall, the website demonstrates a strong security posture, high content quality, and solid business credibility. It effectively serves its target audience with professional, relevant content and maintains trust through consistent branding and transparent domain registration. Strategic recommendations include enabling DNSSEC, publishing explicit security and incident response policies, and continuous monitoring of third-party scripts to maintain security integrity.

U

Union Internationale de la Marionnette Deutschland

unima.de

56

Union Internationale de la Marionnette Deutschland (UNIMA Deutschland) is a cultural non-profit organization dedicated to networking and supporting the puppetry theater community in Germany and internationally. The website serves as an information hub for events, projects, educational offerings, and publications related to puppetry. It holds a strong position within its niche cultural sector, providing valuable services such as event organization, conferences, and a dedicated magazine. The target audience includes puppetry artists, enthusiasts, and cultural institutions. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries for interactive features and a cookie consent mechanism that complies with GDPR standards. Hosting is managed via kasserver.com, with proper DNS and HTTPS configurations ensuring secure access. Security posture is solid with HTTPS enforced and session management in place, though explicit security headers and formal security policies are absent. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and well-maintained, with no critical vulnerabilities or suspicious indicators detected.

D

Deutsche Manufakturenstraße Meisterrat Berlin-Brandenburg e.V.

deutsche-manufakturenstrasse.de

46

Deutsche Manufakturenstrasse is a German cultural and manufacturing promotion platform operated by Deutsche Manufakturenstraße Meisterrat Berlin-Brandenburg e.V. The website showcases artisanal manufactories, cultural routes, news, and interviews, targeting consumers interested in German craftsmanship and cultural tourism. It maintains a niche market position focused on promoting traditional and contemporary German manufacturing excellence. Technically, the site is built on WordPress with Bootstrap and WPBakery, employing modern security plugins such as Wordfence and CleanTalk, and a comprehensive cookie consent mechanism ensuring GDPR compliance. The security posture is strong with HTTPS, security headers, and anti-spam measures, though no explicit security policy or incident response page is published. Overall, the website is professional, trustworthy, and well-structured, with good SEO and mobile optimization.

Verein KunstForm Marionette e.V. is a small non-profit organization based in Germany dedicated to the promotion and preservation of marionette theater as an art form and cultural heritage. The organization offers amateur play courses, organizes biennial festivals, and fosters networking among member theaters primarily in Germany and Switzerland. The website is built on the Jimdo CMS platform, featuring embedded multimedia content and basic interactive widgets. It demonstrates a moderate level of digital maturity with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with a clear privacy policy and cookie management consistent with GDPR requirements. Business credibility is supported by transparent contact information, legal registration details, and trust signals such as membership in UNIMA. Overall, the website provides a professional and trustworthy online presence for the organization.

I

IJAB – Fachstelle für Internationale Jugendarbeit der Bundesrepublik Deutschland e.V.

ijab.de

47

IJAB – Fachstelle für Internationale Jugendarbeit der Bundesrepublik Deutschland e.V. is a German non-profit organization dedicated to strengthening and shaping international youth work and youth policy cooperation both in Europe and worldwide. The organization focuses on promoting international exchange, education, participation, and combating xenophobia, racism, and violence. The website is professionally designed, content-rich, and well-structured, targeting youth workers, policymakers, and organizations involved in international youth work. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and is optimized for mobile devices with good accessibility and SEO practices. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. The domain WHOIS data aligns with the organization's identity, indicating legitimacy and transparency.

G

Gemius

gemius.hu

61

Gemius is a well-established international research and technology company specializing in digital and cross-media audience measurement and marketing analytics. With over 20 years of experience, it holds a leading market position providing single-source data solutions for online, TV, and radio media consumption. The company targets marketers, agencies, and publishers with a comprehensive portfolio of products and services designed to support marketing and sales strategies. Technically, the website uses modern frameworks such as Bootstrap and jQuery, with proprietary tracking scripts, and is mobile-optimized with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in DNSSEC and security headers. Privacy compliance is partially met with a comprehensive privacy policy but lacks a visible cookie consent mechanism. Overall, the website is professional, trustworthy, and content-rich, supporting a high business credibility score.

G

GoDaddy Operating Company, LLC

devserver.me

71

The website is a domain sales landing page hosted by GoDaddy, offering the domain devserver.me for purchase or lease. It targets individuals and businesses interested in acquiring premium domains, leveraging GoDaddy's trusted platform and brokerage services. The site is professionally designed with clear calls to action, multiple payment options, and customer support contact information, reflecting a mature e-commerce business model within the domain aftermarket industry. Technically, the site employs modern web technologies including React with Next.js, secure HTTPS, and integrates third-party services such as Google reCAPTCHA and Tealium for analytics and consent management. The performance and mobile optimization are good, ensuring a positive user experience. Security best practices are observed with appropriate headers and secure payment processing. From a security perspective, the site demonstrates a strong posture with no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are comprehensive and GDPR compliant, though explicit incident response and vulnerability disclosure information are not present. The WHOIS data for the subdomain is unavailable, which is consistent with it being a GoDaddy-managed landing page rather than a separately registered domain. Overall, the site presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include publishing explicit security and incident response policies to enhance transparency and trust further.

A

Awwwards

awwwards.com

64

Awwwards is a recognized platform that awards and promotes the best developers, designers, and web agencies worldwide. It serves as a hub for web design inspiration and trends, targeting professionals in the web development and design industry. The website demonstrates a high level of digital maturity with modern technologies and a professional design, providing an excellent user experience and clear navigation. However, the absence of WHOIS data and lack of visible privacy and security policies indicate gaps in transparency and compliance. Security posture is moderate due to missing security headers and unclear SSL configuration. Overall, the site is trustworthy and professional but would benefit from enhanced security and privacy disclosures to improve compliance and user trust.

T

The Twelve

todaythe12.com

45

The Twelve is a small content publishing platform established in 2023, focusing on business, marketing, technology, and creative sectors. The website provides articles and insights targeted at business professionals and creatives primarily in Thailand. The technical infrastructure is based on WordPress with modern frameworks like Bootstrap and SEO optimization via Yoast. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the site is legitimate and professionally maintained but could improve security and privacy practices.

U

UZIK

uzik.com

54

UZIK is a creative agency specializing in shaping iconic brands through services such as brand content, branding, digital marketing, influence, social media, and strategy. The agency targets luxury and lifestyle brands primarily in fashion, beauty, design, and retail sectors. With over two decades of experience, UZIK has established a strong market position supported by a portfolio of high-profile clients and international awards. The website reflects a professional and consistent brand image, showcasing their expertise and client work effectively. Technically, the website is built on a modern stack including Next.js and Sanity CMS, hosted on Vercel, ensuring fast performance and excellent mobile optimization. The site uses Vercel Analytics for minimal user tracking. Accessibility and SEO optimizations are good, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and privacy compliance. The absence of WHOIS domain registration data is a concern, as it conflicts with the active and professional nature of the website, slightly reducing trustworthiness. Overall, UZIK presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements in privacy compliance and security headers would further strengthen their security posture and trust with users.

Studio JADES.cz is a small Czech technology company specializing in custom digital solutions including website development, mobile applications, and internal business systems. The company positions itself as a client-focused digital agency offering tailored services to businesses seeking functional, reliable, and scalable online presence and tools. Their website reflects a professional and modern design with clear service offerings and strong client testimonials, indicating a positive market reputation within their niche. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and slick carousel libraries, integrated with multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, Hotjar, and ManyChat. The site is mobile optimized and SEO friendly, though some accessibility features could be improved. The absence of a CMS suggests a custom or static site approach. Performance is moderate with asynchronous loading of scripts. From a security perspective, the site uses HTTPS with good SSL configuration but lacks visible security headers and explicit cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No explicit security policies or incident response contacts are published, limiting the security posture visibility. Overall, the website is professional and trustworthy from a business and content perspective but would benefit from enhanced security practices and privacy compliance measures. The missing WHOIS data is a notable gap that should be addressed to improve domain legitimacy and trustworthiness.

2

20 talentů za 20 let JCMM

20za20.cz

44

The website 20za20.cz represents a non-profit initiative celebrating 20 years of JCMM's support for talented students and researchers in the South Moravian Region of the Czech Republic. It highlights key talents and programs aimed at fostering scientific and technical education. The site is well-structured, professionally designed, and compliant with GDPR and cookie regulations, featuring a cookie consent mechanism and detailed privacy policy. Technically, it is built on WordPress with Elementor and uses modern web technologies, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and no evident vulnerabilities, though some security headers could be improved. The domain registration date is inconsistent with the claimed 20-year history, which slightly impacts trust but does not undermine the site's legitimacy. Overall, the site is a credible, professional platform for educational outreach and talent promotion.

Q

Quorum (fka Cision GR)

vocusgr.com

70

Quorum, formerly known as Cision Government Relations, operates a customer login portal for its government relations software and political action committee management services. The company targets government relations professionals and political organizations, positioning itself as an established player in this niche sector. The website content is minimal, focusing on user authentication for existing customers rather than marketing or informational content. Technically, the site uses basic web technologies including JavaScript and CSS, with Adobe Typekit for fonts. Hosting appears to be on Amazon AWS infrastructure based on DNS nameservers. The site lacks advanced SEO, accessibility, and mobile optimization features, indicating a moderate level of digital maturity. No CMS or modern frameworks are detected. From a security perspective, the site uses POST forms with password fields that disable autocomplete, but lacks visible security headers and CSRF protections. DNSSEC is not enabled on the domain. The domain is well-established with a long registration history and no privacy protection, supporting legitimacy. However, the absence of privacy and cookie policies and GDPR compliance indicators suggests compliance gaps. Overall, the website is functional for its purpose but could improve in security posture, privacy compliance, and technical modernization to enhance trust and user experience.