Security Directory

M

Medienanstalt Hessen

mediathek-hessen.de

58

Mediathek Hessen is a regional media platform operated by the Medienanstalt Hessen in cooperation with GMM AG, providing a diverse range of video and audio content from non-commercial, open, and private broadcasters in the Hessen region. The platform targets media consumers, creators, and educational institutions within Hessen, emphasizing media education and democratic participation. The website is well-branded, professionally designed, and offers good content relevance with clear navigation and mobile optimization. Technically, it employs modern web technologies including Bootstrap, jQuery, Video.js, and integrates Matomo analytics and Usercentrics for GDPR-compliant consent management. Security posture is moderate with HTTPS usage and consent mechanisms but lacks explicit security headers and published security policies. Overall, the site is trustworthy, safe, and compliant with privacy regulations, though it could improve transparency by publishing terms of service, security policies, and incident response contacts.

R

Rocket.Chat

rocket.chat

68

Rocket.Chat is a technology company specializing in secure, mission-critical communication solutions designed for government, defense, critical infrastructure, and enterprise sectors. Their platform centralizes real-time messaging, voice, video, AI, and app integrations to provide a unified communication experience with a strong emphasis on data sovereignty, compliance, and operational resilience. The company positions itself as a trusted provider for high-security environments, including classified networks and federal agencies. Technically, the website is built on a modern stack leveraging Webflow CMS, multiple analytics and marketing tools, and supports multilingual content through Weglot. The site is well-optimized for mobile and desktop, with professional design and clear navigation. Embedded third-party scripts and tracking pixels indicate extensive user behavior analysis and marketing efforts. From a security perspective, the platform enforces HTTPS and promotes a zero-trust security model, though the website lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. Privacy policies and terms of service are comprehensive and GDPR compliant. The WHOIS data is privacy protected, which aligns with the company's security focus. Overall, the website and business present a high level of trustworthiness and professionalism. The risk assessment is low, with no critical vulnerabilities detected in the website content. Strategic recommendations include enhancing security header implementation, publishing explicit security and incident response policies, and increasing transparency around certifications. These steps would further strengthen the company's security posture and trust with its audience.

S

Staatskanzlei Rheinland-Pfalz

rlp-tag.de

61

The Rheinland-Pfalz-Tag website serves as the official digital presence for the annual state festival in Rhineland-Palatinate, Germany. It provides comprehensive event information, news updates, partner and sponsor details, and service resources primarily targeting residents and visitors interested in the cultural event. The site is managed by the Staatskanzlei Rheinland-Pfalz, reflecting a government-backed initiative with a clear focus on public engagement and regional promotion. Technically, the website is built on TYPO3 CMS with Bootstrap framework, offering a responsive and accessible user experience. The infrastructure appears stable and moderately performant, hosted likely on regional government or partner infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers are missing and no cookie consent mechanism is present, which could be improved for compliance. The site maintains a strong social media presence across major platforms, enhancing outreach and engagement. Overall, the website is trustworthy, professional, and well-aligned with its government event purpose.

The website freiwilligendienste-kultur-bildung.de serves as an informational and engagement platform for cultural and educational volunteer services in Germany, including FSJ Kultur, FSJ Schule, FSJ Politik, FJ Beteiligung, and BFD Kultur und Bildung. It targets individuals of all ages interested in volunteering within cultural and educational institutions. The platform is supported by the Bundeskonferenz der Kommunalen Jugendbildungsstätten (BKJ) and funded by the German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth (BMFSFJ), positioning it as a reputable non-profit entity in this sector. Technically, the site is built on TYPO3 CMS, hosted via Schlundtech, and employs modern web technologies including Google Fonts and Matomo analytics for user tracking. The website is mobile-optimized with good navigation and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but could be enhanced with additional security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site maintains GDPR compliance with a comprehensive privacy policy and cookie consent mechanism. Contact is primarily via a contact form, with no direct emails or phone numbers publicly listed. Social media presence on Facebook, Twitter, and Instagram supports community engagement. Overall, the website demonstrates a strong alignment between its domain registration, hosting, and business purpose, reflecting a trustworthy and professional online presence for a non-profit cultural volunteer service. Strategic improvements in security policy transparency and accessibility could further enhance its digital maturity and user trust.

F

Freiwilliges Ökologisches Jahr Rheinland-Pfalz

foej-rlp.de

43

The website www.foej-rlp.de serves as the official portal for the Freiwilliges Ökologisches Jahr (Voluntary Ecological Year) in Rheinland-Pfalz, Germany. It provides comprehensive information and resources for young people interested in ecological and environmental volunteering opportunities within the region and neighboring France. The site features placement listings, news updates, and application guidance, positioning itself as a key regional non-profit platform for ecological volunteer coordination. Technically, the website is built on the TYPO3 CMS platform, leveraging modern frontend technologies such as Bootstrap, FontAwesome, Leaflet, and TinyMCE. The hosting is managed via kasserver.com, a German hosting provider, ensuring regional alignment. The site demonstrates good mobile optimization, clear navigation, and adequate SEO practices, although accessibility features are basic. From a security perspective, the site enforces HTTPS and includes a cookie consent banner, indicating GDPR compliance awareness. However, it lacks explicit security headers and incident response contact information. No vulnerabilities or exposed sensitive data were detected, and no tracking or advertising scripts are present, reflecting a privacy-conscious approach. Overall, the website is trustworthy, professionally maintained, and well-suited for its target audience. Strategic improvements in security headers and incident response transparency could further enhance its security posture and compliance.

The domain combus.org is currently a parked domain page managed by GoDaddy.com LLC, a leading domain registrar and hosting provider. The page primarily serves as a placeholder with promotional content encouraging visitors to acquire the domain or explore GoDaddy's hosting and domain auction services. There is no active business or service operating on this domain, and no direct contact or company information is provided. The target audience is primarily domain buyers and website owners looking for domain acquisition or hosting solutions. Technically, the site uses modern JavaScript frameworks likely React, integrates third-party widgets such as Trustpilot for trust signals, and employs Google Adsense for advertising revenue. The hosting and domain management are handled by GoDaddy, ensuring a stable platform but with minimal custom content or CMS usage. Mobile optimization is adequate, but overall content and navigation are basic, reflecting the nature of a parked domain. From a security perspective, the domain benefits from registrar-level domain status locks but lacks advanced security headers or explicit security policies. DNSSEC is not enabled, which is a recommended improvement. Privacy and cookie policies link to GoDaddy's main privacy documentation, indicating basic compliance but no domain-specific policies. No forms or data collection mechanisms are present, reducing attack surface but also limiting user engagement. Overall, the domain is low risk but also low value in terms of active business presence. Strategic recommendations include enabling DNSSEC, adding security headers, and providing clearer business or contact information if the domain is to be developed further. The site is safe for general audiences with no adult or explicit content detected.

L

Landesverband Offene Kanäle Rheinland-Pfalz e. V.

ok-rlp.de

42

The Landesverband Offene Kanäle Rheinland-Pfalz e. V. is a non-profit association representing and supporting open channels (community media) in the Rheinland-Pfalz region of Germany. The website serves as an information hub for members and interested parties, providing news, event information, and resources related to citizen media and volunteer engagement. The organization positions itself as a regional advocate for media participation and community broadcasting. Technically, the website is built on WordPress 6.7.2 with common plugins such as Download Manager and Bootstrap for styling. It uses modern web technologies including jQuery and Font Awesome, hosted on Manitu servers. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content updates. From a security perspective, the site uses HTTPS with a presumably good SSL configuration. However, it lacks visible security headers and does not implement a cookie consent mechanism, which is important for GDPR compliance. There is no published security policy or incident response contact, which could be improved to enhance trust and readiness. Overall, the website is trustworthy and professional, with a clear focus on its community media mission. The absence of cookie consent and security headers slightly lowers its compliance and security posture scores. Strategic improvements in these areas would strengthen the site's privacy compliance and security maturity.

OIE AG is a regional energy provider based in Germany, specializing in sustainable and renewable energy solutions including 100% green electricity, gas, and heat electricity tariffs. The company emphasizes regional engagement through initiatives like 'OIE Heimatliebe' and supports local projects in sports, culture, and climate protection. The website is professionally designed using Adobe Experience Manager and modern web technologies, with a focus on customer service and digital accessibility. Security posture is solid with HTTPS and consent management implemented, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a trustworthy and credible regional energy business with moderate technical sophistication and good privacy compliance.

P

Podio

podio.com

70

Podio is a collaborative work platform owned by Citrix Systems, Inc., offering customizable workspaces and project management tools for business teams. The website is professionally designed using Drupal 10 and integrates modern monitoring and analytics tools such as Google Tag Manager and New Relic. The security posture is good with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not publicly available. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism implemented. The absence of WHOIS data for the domain is a notable anomaly that warrants further investigation to confirm domain legitimacy. Overall, the website presents a trustworthy and professional front for its SaaS business model.

B

Bonet Systems s.r.o.

bonet.systems

55

Bonet Systems s.r.o. is a Slovak-based IT services company specializing in the design, management, and integration of IT systems. Their offerings include cloud infrastructure (IaaS, PaaS), managed services covering network, servers, and security, as well as consulting services focused on architecture, network design, and system integration. The company targets businesses seeking reliable and professional IT infrastructure solutions and has established a solid market presence with notable clients and partnerships with industry leaders such as Cisco, Palo Alto, and Fortinet. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses popular plugins such as Gravity Forms for contact and Akismet for spam protection. The site is mobile-optimized and includes multilingual support via WPML. Performance is moderate with good SEO and accessibility basics in place. Analytics are implemented through Google Analytics and Jetpack Stats, indicating moderate user tracking. From a security perspective, the site enforces HTTPS and employs anti-spam measures in forms. However, it lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected. WHOIS data is privacy protected, which is common for small businesses, and does not raise immediate concerns. Overall, Bonet Systems presents a professional and trustworthy online presence with a solid business model and technical foundation. Enhancing privacy compliance and security transparency would further strengthen their security posture and user trust.

Public Health My Produkty operates a website focused on public health initiatives, particularly addressing the COVID-19 pandemic's impact in Slovakia through virtual hackathons, volunteer mobilization, and technological tools. The platform collaborates with notable partners including Microsoft and the European Commission, positioning itself as a niche player in healthcare and community support. The website is built on WordPress with WooCommerce and uses common plugins and themes, reflecting a moderate level of digital maturity. While the site is accessible and well-structured with good content quality, it lacks some privacy compliance features such as cookie consent mechanisms. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and enabling DNSSEC. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

slovensko.help is a Slovak community-driven initiative primarily composed of IT sector volunteers aiming to assist Slovakia in managing the COVID-19 pandemic. The website offers several projects including a chatbot for COVID-19 information, an improved official infoline, and downloadable posters to promote responsible behavior. The target audience is the general Slovak public seeking reliable pandemic-related information and support. The initiative operates as a non-profit with a small organizational size and has been active since at least 2016, as indicated by domain registration data. Technically, the website is built using the Jekyll static site generator and incorporates Google Analytics and Google Tag Manager for visitor tracking. Hosting appears to be provided by Websupport.sk, a Slovak hosting provider. The site is mobile optimized with good SEO practices and clear navigation. However, some accessibility features are basic, and performance is moderate. From a security perspective, the site uses HTTPS and has domain transfer protection enabled. However, it lacks DNSSEC and security headers such as Content Security Policy or HSTS, which are recommended to enhance security posture. No privacy or cookie policies are present, which is a compliance gap especially given the use of tracking technologies. No forms or input fields are present, reducing attack surface. WHOIS data is consistent with the website's Slovak focus and shows no privacy protection, enhancing transparency. Overall, slovensko.help is a trustworthy, well-intentioned community resource with good content quality and business credibility. Security and privacy compliance can be improved by adding policies, enabling DNSSEC, and implementing security headers. These improvements would enhance user trust and regulatory compliance.

N

Národné centrum zdravotníckych informácií

nczisk.sk

57

Národné centrum zdravotníckych informácií (NCZI) is the official Slovak government agency responsible for collecting, managing, and publishing healthcare data, statistics, and standards. The website serves healthcare professionals, government bodies, researchers, and the public by providing access to national health registries, statistical reports, and electronic healthcare applications. It holds a strong market position as the authoritative source of healthcare information in Slovakia. Technically, the site is built on Microsoft SharePoint with legacy JavaScript libraries and basic mobile optimization. Security posture is moderate with HTTPS usage but lacks modern security headers and up-to-date libraries. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional but would benefit from technical and security modernization.

B

Bot.Media

bot.media

61

Bot.Media is a technology company specializing in AI-driven video avatar solutions and interactive video platforms. Their offerings include Real-Time Avatars, scena.ai for interactive AI video, and a service for creating professional AI video avatars without contracts or subscriptions. The company targets businesses and professionals seeking innovative communication and sales tools, with a client base including major brands such as Mercedes and Coca-Cola. The website is professionally designed, mobile-optimized, and uses modern technologies including GravCMS, Bootstrap, jQuery, Google Analytics, and Intercom for customer engagement. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers are missing and no public security policies or vulnerability disclosures are present. WHOIS data is privacy-protected, which is typical for tech companies, and no suspicious patterns were detected. Overall, the website is trustworthy and business credible, with room for improvement in transparency and security best practices.

I

Immanuel Albertinen Diakonie gGmbH

amalie-tumormedizin.de

59

The website represents the Evangelisches Amalie Sieveking Krankenhaus's tumor medicine center, operated under Immanuel Albertinen Diakonie gGmbH. It provides specialized oncological care with a focus on interdisciplinary collaboration, patient support, and comprehensive cancer treatment services. The site targets patients and healthcare professionals in the Hamburg region, positioning itself as a reputable regional healthcare provider with strong partnerships and a clear service offering. Technically, the website is built on TYPO3 CMS, employs modern web technologies, and demonstrates good mobile optimization and accessibility. The presence of a cookie consent banner and GDPR-compliant privacy policy indicates a mature approach to privacy compliance. Performance is moderate, with room for improvement in security headers and explicit incident response information. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security policies and vulnerability disclosure mechanisms suggests areas for enhancement. Overall, the site is professional, trustworthy, and compliant with relevant regulations, supporting its role as a healthcare information and service portal.

I

Immanuel Albertinen Diakonie gGmbH

amalie-pouch-zentrum-hamburg.de

59

The Amalie Pouch Zentrum Hamburg website represents a specialized healthcare center focused on plastic reconstructive surgeries of the gastrointestinal tract, particularly pouch surgeries. It operates under the umbrella of Immanuel Albertinen Diakonie gGmbH, a reputable healthcare group in Germany. The website targets patients and medical professionals seeking expert surgical solutions as alternatives to artificial bowel outlets. The site showcases detailed service offerings, a professional medical team, and multiple certifications, reinforcing its market position as a trusted specialist center. Technically, the website is built on TYPO3 CMS, employing modern web standards with good mobile optimization and accessibility features. It includes comprehensive metadata, Open Graph tags, and a cookie consent mechanism compliant with GDPR. The site uses Matomo for privacy-conscious analytics, avoiding third-party tracking services. Performance is moderate, with room for optimization. From a security perspective, HTTPS is enforced, and no sensitive data is exposed. However, security headers are not explicitly detected, and no public security policy or incident response contacts are provided. The domain WHOIS data is limited but consistent with the business claims. No WAF or blocking mechanisms are present, allowing full content access. Overall, the website demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy digital presence for the healthcare entity. Strategic improvements in security headers and incident response transparency could further enhance its security maturity.

The website kantinslot.us currently serves only a 404 Not Found error page, indicating that no active content or business presence is available at this domain. The WHOIS data shows the domain is registered to an entity named 'sukses bersama' based in Indonesia, but the domain creation date is suspiciously set in the future (June 2025), which raises concerns about the legitimacy and accuracy of the registration information. There is no visible business description, services, or contact information on the site, making it impossible to assess the company's market position or offerings. Technically, the site is hosted on LiteSpeed Web Server with DNS managed by Cloudflare, but no security headers or HTTPS details are available from the provided data. The absence of privacy, cookie, or terms of service policies further indicates a lack of compliance and professionalism. Overall, the site is non-functional and lacks any meaningful content or security posture.

Q

QR.io

qr.link

55

QR.io operates the qr.link domain as a service offering dynamic QR code generation and tracking solutions primarily targeted at businesses and marketers. The website content clearly explains the service and provides direct links to the parent company QR.io, which is the main brand behind the offering. The business model is SaaS-based, focusing on QR code creation and analytics. The domain is relatively young, created in 2018, which aligns with the modern technology service it provides. The site is professionally designed with good content quality and consistent branding. Technically, the website uses modern front-end libraries such as FontAwesome and PrismJS, and is hosted behind Cloudflare DNS, indicating a reliable infrastructure. The site is mobile optimized and SEO friendly, although accessibility features are basic. Performance is moderate with no major issues detected. However, some security best practices such as DNSSEC and security headers are not implemented, which could be improved. From a security perspective, the site enforces HTTPS and uses domain transfer protection, which are positive indicators. There is no evidence of exposed vulnerabilities or sensitive data leaks. Incident response contact is available via a support email. However, the absence of a formal security policy, vulnerability disclosure, and cookie consent mechanism are gaps in compliance and transparency. The site uses a tracking pixel from whos.amung.us but does not provide explicit cookie consent. Overall, the website presents a moderate risk profile with good business credibility and technical implementation but could improve privacy compliance and security posture. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing security policies to enhance trust and compliance.

D

Dopravný podnik Bratislava, a.s.

tapnisa.sk

44

TAPni sa is a digital ticketing platform operated by Dopravný podnik Bratislava, a.s., providing a convenient contactless payment solution for public transportation in Bratislava. The website offers detailed information about ticket types, pricing, and usage instructions, targeting local commuters and visitors using MHD services. The platform integrates modern web technologies including WordPress CMS, Google Analytics, and GDPR-compliant cookie management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, DNSSEC, and secure form handling, though formal security policies and incident response contacts are not publicly documented. Overall, the site demonstrates professionalism, compliance, and user-centric design, supporting Dopravný podnik Bratislava's position as a trusted public transport provider.

T

Total Avengers s.r.o.

idsbk.sk

52

The website www.idsbk.sk serves as the official portal for the Integrated Transport System in the Bratislava Region, Slovakia. It provides comprehensive public transportation information including schedules, ticketing options, news updates, and mobile application access. The site targets residents and visitors of the Bratislava region, positioning itself as a key regional transport information hub. The business behind the site is Total Avengers s.r.o., a Slovak company, which aligns with the domain registration and website content. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, and uses the Componentator SPA framework alongside Google Analytics and Facebook Pixel for tracking. The site is mobile optimized with good navigation and content structure, although accessibility features are basic. The CMS appears to be TotalJS, consistent with the author metadata. Security-wise, the site uses HTTPS and asynchronous script loading, but lacks visible security headers and a privacy or cookie policy, which are important for GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the content. The absence of a security.txt file and vulnerability disclosure policy indicates room for improvement in security transparency and incident response readiness. Overall, the website is professional, trustworthy, and functional with a moderate to good security posture. However, it should enhance privacy compliance and security best practices to reduce risk and improve user trust.

B

Bombardier Recreational Products Inc.

brp-world.com

64

The website represents Bombardier Recreational Products Inc. (BRP), a large multinational company specializing in manufacturing and distributing recreational vehicles such as Ski-Doo and Lynx snowmobiles, Can-Am off-road and on-road vehicles, and Sea-Doo watercraft. The site targets consumers in Germany and Europe interested in powersports and recreational vehicles. The digital infrastructure is modern, leveraging Adobe Experience Manager CMS, React components, and various JavaScript libraries for rich multimedia content and user experience. Privacy and cookie policies are comprehensive and GDPR compliant, with consent management implemented via Axeptio. Security posture is generally strong with HTTPS enforced and no exposed sensitive data, though explicit security headers and incident response information are absent. The domain WHOIS data is missing, which raises concerns about domain registration legitimacy, but the website content and branding strongly align with a reputable global company. Overall, the site is professional, well-branded, and user-friendly, with moderate tracking and analytics integration.

R

Rmoto Academy

rmoto.sk

10

Rmoto Academy is a specialized motorcycle training and riding experience provider based in Slovakia, officially partnered with BMW Motorrad. Founded by a professional rider with international experience, the academy offers tailored training programs for riders of all skill levels, including off-road, enduro, and on-road courses, as well as adventurous riding trips both domestically and abroad. The website is built on the Shopify platform, leveraging modern e-commerce and content management technologies, and integrates customer review systems and multi-language support. Security posture is solid with HTTPS and CAPTCHA protections, though improvements can be made in security headers and privacy compliance mechanisms. Overall, the site presents a professional and trustworthy image with strong business credibility and clear market positioning.

P

Pierer Industrie AG

gasgas.com

66

GASGAS, operated by Pierer Industrie AG, is a well-established brand specializing in offroad motorcycles and e-bikes. The company targets enthusiasts seeking adrenaline and high-performance vehicles, positioning itself strongly in the transportation sector with a focus on quality and adventure. The website reflects a professional digital presence with clear branding and comprehensive product information. Technically, the site is built on Adobe Experience Manager, leveraging modern JavaScript libraries and cookie consent tools to ensure compliance and user tracking. Security posture is moderate with room for improvement in security headers and vulnerability management. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism. Overall, the site is trustworthy and professionally maintained, though the absence of WHOIS data is a notable anomaly requiring monitoring.

M

MSC Suzuki Slovensko

suzuki.sk

55

MSC Suzuki Slovensko operates as the exclusive importer and dealer of Suzuki automobiles and motorcycles in Slovakia. The website serves as a corporate portal providing information about Suzuki vehicles and related services targeted primarily at Slovak customers. The business holds a stable market position as the official Suzuki representative in the country, founded in 2014, with a medium-sized operational scale. The website content is professionally presented in Slovak language with consistent branding and clear navigation.

V

vibration.sk

sellio.net

10

Vibration.sk is a Slovak technology company specializing in custom development of e-commerce platforms, web applications, and websites, with a flagship product called Sellio. The company has over 12 years of experience and offers scalable, cloud-based B2B and B2C e-commerce solutions, including product configurators, CRM, and ERP modules. Their market position is that of a trusted regional provider with a focus on tailored solutions and modern technology stacks. Technically, the website and platform leverage modern frontend frameworks like Vue.js and Nuxt, backend technologies including Symfony and PHP, and cloud hosting on DigitalOcean. The site is well-optimized for performance, mobile responsiveness, and SEO, with structured data and social media integration. Security-wise, the site enforces HTTPS, uses Google reCaptcha, and implements cookie consent mechanisms, but lacks explicit privacy policy and security incident response documentation. Overall, the security posture is good but could be improved with additional policies and headers. The domain WHOIS data is consistent with the business claims, supporting legitimacy. Strategic recommendations include publishing privacy and security policies, enhancing security headers, and maintaining compliance with GDPR and other regulations.

V

Vibration

vibration.sk

50

Vibration is a Slovak software studio specializing in custom web and e-commerce solutions, with a proprietary cloud platform called Sellio. Established in 2010, the company serves a medium-sized client base with a focus on B2B and B2C e-commerce, web applications, and mobile apps. Their market position is supported by multiple client references and case studies, indicating a strong presence in the regional technology and e-commerce sectors. Technically, the website is built on WordPress with modern SEO and performance optimizations, including Google Tag Manager, Analytics, and CookieHub for privacy compliance. Security posture is solid with HTTPS, reCaptcha, and cookie consent, though lacking explicit security policies or incident response information. Overall, the site is professional, well-structured, and trustworthy, with room for improvement in privacy and security transparency.

M

McDonald's

mcdonalds.com

72

McDonald's Deutschland operates as the German branch of the global McDonald's fast food chain, providing localized content, promotions, and services to its customers. The website is professionally designed and optimized for mobile and desktop users, leveraging Adobe Experience Manager and Akamai CDN technologies to deliver fast and reliable content. The site includes a cookie consent mechanism, indicating awareness of privacy regulations, although explicit privacy policy and terms of service links were not found in the provided content. Security posture is strong with HTTPS enforcement and modern security headers, but lacks visible incident response or vulnerability disclosure information. Overall, the website presents a trustworthy and professional digital presence for McDonald's in Germany.

Yext operates as a leading digital presence platform focused on empowering multi-location brands to manage and optimize their brand visibility across traditional and AI-powered search channels. The company offers a comprehensive SaaS platform that includes AI search intelligence, listings management, knowledge graph content management, review and social media management, and compliant messaging solutions. Their market position is strong, supported by a broad publisher network and high-profile clients such as FedEx, Samsung, and McDonald's. Technically, the website is built on modern frameworks like React and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, well-structured, and optimized for SEO and accessibility, with no signs of blocking or WAF interference. The absence of WHOIS data is a notable anomaly but does not detract significantly from the site's legitimacy given the strong branding and client trust indicators.

W

Webhelp s.r.o.

webhelp.sk

41

Webhelp s.r.o. is a Slovak-based small technology service provider specializing in web design and development. Their website showcases a range of services including logo creation, website development, PSD to HTML conversion, WordPress theme creation, e-commerce solutions, and mobile optimization. The company targets businesses and individuals seeking professional and modern web presence solutions. The website is built on WordPress with modern frameworks like Bootstrap and includes integrations such as Google Analytics and GDPR compliance tools. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks explicit security policies and headers. Privacy compliance is partial with cookie consent but missing privacy and terms policies. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.

V

VDL Groep

vdlgroep.com

71

VDL Groep is a large, well-established international industrial family business headquartered in the Netherlands, active in multiple sectors including hightech, mobility, energy, infratech, and foodtech. The company emphasizes innovation, sustainability, and collaboration, with over 14,000 employees across 20 countries. Their website reflects a professional and comprehensive digital presence with rich multimedia content and clear corporate messaging. Technically, the site uses modern technologies such as Wenetic CMS, Google Tag Manager, Usercentrics for consent management, and YouTube embeds, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. The WHOIS data for the domain is missing or unavailable, which slightly reduces trust but may be due to privacy protection. Overall, the website is professional, trustworthy, and well-maintained, supporting the company's market position as a leading industrial group.

M

Medienanstalt Hessen

lpr-hessen.de

47

Medienanstalt Hessen is a regional public authority responsible for licensing and oversight of radio and television broadcasters, as well as media education and promotion within the German state of Hessen. The organization serves a broad audience including media companies, educational institutions, parents, children, and the general public. The website is professionally designed using TYPO3 CMS and modern web technologies, providing comprehensive information about regulatory functions, media education projects, and public services. Security posture is strong with HTTPS enforced and cookie consent implemented, though some advanced security headers and explicit incident response policies are not evident. Overall, the site demonstrates a mature digital presence appropriate for a government-related entity.

Ostbelgien Medien serves as the official media portal for the German-speaking Community of Belgium, providing comprehensive information and services related to media, culture, and public administration. The website is government-affiliated, operated under the registrar Demetec Sprl, and targets residents and stakeholders within the German-speaking region. It offers a variety of media-related services including media lending, film and television information, and public service announcements. The portal is well-positioned as a trusted source of regional media and governmental information.

M

Medienanstalt Hessen

medienanstalt-hessen.de

48

Medienanstalt Hessen is a regional public institution responsible for licensing radio and television broadcasters, supervising broadcasting and telemedia services, and promoting media education in the German state of Hessen. The website reflects a well-established organization with a clear focus on media regulation, education, and public service. It targets media professionals, educators, children, parents, and the general public interested in media literacy and regulation. The institution offers a broad range of services including licensing, oversight, media education projects, and public information dissemination. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries, providing a responsive and accessible user experience. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and policies could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

D

Die Medienanstalten

die-medienanstalten.de

52

Die Medienanstalten is a German regulatory authority responsible for licensing and supervising private radio and television broadcasters, ensuring media diversity and freedom. The website is professionally designed using TYPO3 CMS and employs Matomo analytics with privacy-conscious settings. The organization maintains a strong market position as a central coordinator for media regulation in Germany, serving private broadcasters and the public. The technical infrastructure is modern and well-implemented, with good mobile optimization and accessibility. Security posture is solid with HTTPS and some security best practices, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is trustworthy, content-rich, and serves its regulatory mission effectively.

N

Netzwerk für Senior-Internet-Initiativen Baden-Württemberg e.V.

netzwerk-sii-bw.de

39

Netzwerk für Senior-Internet-Initiativen Baden-Württemberg e.V. is a regional non-profit organization dedicated to promoting digital literacy and inclusion among senior citizens in Baden-Württemberg, Germany. The website serves as a platform to provide educational seminars, newsletters, community events, and digital resources tailored to seniors and community initiatives. The organization positions itself as a key regional player in senior digital inclusion with a focus on community engagement and support. Technically, the website is built on WordPress 6.8.3 with a variety of plugins including The Events Calendar and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and uses HTTPS, ensuring secure access. However, some modern security headers are not explicitly detected, and there is no cookie consent mechanism, which could be improved for compliance. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-respecting analytics via Matomo. There are no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact limits transparency in security management. WHOIS data is minimal but does not raise suspicion, supporting the legitimacy of the domain. Overall, the website is professional, trustworthy, and well-suited for its target audience. Strategic improvements in security headers, privacy compliance, and incident response transparency would enhance its security posture and regulatory adherence.

V

Verbraucherzentrale Baden-Württemberg

verbraucherzentrale-bawue.de

63

The Verbraucherzentrale Baden-Württemberg is a well-established non-profit consumer protection organization serving the Baden-Württemberg region in Germany. It provides comprehensive consumer advice, information, and advocacy services across multiple sectors including energy, health, digital world, and contracts. The website is professionally designed using Drupal 10, featuring rich content, educational resources, and multiple user engagement channels such as newsletters and social media. The organization targets a broad audience including vulnerable groups such as seniors, refugees, and caregivers. Technically, the website employs modern web technologies and analytics tools like Matomo, ensuring good performance and accessibility. The site is mobile-optimized and SEO-friendly, with clear navigation and consistent branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit policies could be improved. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or malicious content. The organization maintains a moderate level of privacy compliance with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is available primarily via phone and contact forms, with no direct email addresses published. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing cookie consent to improve privacy compliance and user trust.

O

OK54 Bürgerrundfunk

ok54.de

44

OK54 Bürgerrundfunk operates as a non-commercial community television broadcaster serving Trier and the Greater Region in Germany. The website offers TV programming, a video archive (Mediathek), WebTV, and information for viewers, producers, and supporters. The organization has a strong local presence and is supported by the Medienanstalt Rheinland-Pfalz. The business model focuses on community engagement and education, with a history dating back to 1989. Technically, the website is built on WordPress with a modern theme (OceanWP) and several plugins for SEO, video playback, and social media integration. The site is mobile-optimized and uses HTTPS with a reputable hosting provider (manitu.net). SEO practices are good, with proper metadata and structured data enhancing search visibility. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance. No incident response or security policy information is provided. The site does not appear to use extensive tracking or advertising technologies, which reduces privacy risks. Overall, the website is trustworthy, professionally maintained, and focused on community media services. Strategic improvements in privacy compliance and security policies would enhance its posture and user trust.

O

OKTV Mainz

ok-mainz.de

43

OKTV Mainz is a community-focused media organization based in Mainz, Germany, providing local TV programming, media education, and citizen journalism opportunities. The website serves as a platform for community engagement and media creation, targeting residents interested in local culture and media literacy. Technically, the site is built on WordPress with modern plugins such as Videojs and uses Matomo for privacy-conscious analytics. The site is mobile-optimized and well-structured, offering a good user experience. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the site is trustworthy and professionally maintained.

O

OK Kaiserslautern

ok-kl.de

43

OK Kaiserslautern operates as a local community media platform providing a space for citizens to create and broadcast television content in Kaiserslautern, Germany. The website serves as an information hub for programming, production resources, educational seminars, and community engagement. It positions itself as a public access channel empowering local creatives and residents to participate in media production. The business model centers on community involvement and media education rather than commercial broadcasting. Technically, the website is built on WordPress with common plugins such as Visual Composer and LayerSlider, utilizing Google Fonts and jQuery. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Performance is moderate, and SEO practices are adequately implemented. However, some technical improvements could enhance accessibility and security. From a security perspective, the site enforces HTTPS but lacks visible security headers and explicit security policies. No vulnerability disclosures or incident response contacts are published. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and serves its community media purpose well. Strategic improvements in security headers, cookie consent, and incident response transparency would strengthen its security posture and compliance. The domain appears legitimate with consistent content and partner relationships, supporting a positive risk assessment.

O

Offener Kanal Idar-Oberstein/Herrstein e.V.

ok-nahetv.de

41

Offener Kanal Idar-Oberstein/Herrstein e.V. operates naheTV, a regional community media broadcaster in Rheinland-Pfalz, Germany. The website provides livestreams, program previews, and background information focused on local cultural and social events. It targets local community members interested in media production and participation. The business model is non-profit, emphasizing volunteer engagement, media education, and local content creation. The site is positioned as a trusted regional media outlet with partnerships with local media authorities and organizations.