Security Directory

M

Münchener Hypothekenbank eG

muenchenerhyp-karriere.de

56

Münchener Hypothekenbank eG operates a professional career portal showcasing a wide range of job opportunities primarily in banking, IT, real estate valuation, compliance, and risk management. The company holds a solid market position as a regional mortgage bank in Germany, supported by its subsidiary M-Wert GmbH specializing in real estate valuation. The website demonstrates a moderate level of digital maturity, utilizing AngularJS and a specialized job widget for dynamic content delivery. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the domain and website appear legitimate and trustworthy, with clear business credibility and professional presentation.

IPConcept is a specialized financial services company focused on fund administration and management solutions, operating primarily in Germany, Luxembourg, and Switzerland. It is a 100% subsidiary of DZ PRIVATBANK, providing services such as private label funds, alternative investment funds, risk management, order management, performance analysis, and reporting. The company targets asset managers, institutional clients, and banks, positioning itself as a reliable partner with a strong backing from a major bank. The website content is professional, well-structured, and GDPR compliant, reflecting a mature digital presence.

S

Stiftung Niedersachsen

stnds.de

54

Stiftung Niedersachsen is a regional cultural foundation dedicated to promoting and funding cultural projects throughout the German state of Niedersachsen. The foundation operates as a non-profit entity, supporting a wide range of cultural sectors including music, theater, museums, literature, and social culture. Their website reflects a professional and well-structured digital presence, targeting cultural institutions, artists, and non-profit projects within the region. The foundation's market position is that of a key regional cultural supporter with a clear focus on fostering cultural diversity and sustainability.

S

Südwestrundfunk

swr.de

59

Südwestrundfunk (SWR) is a large regional public broadcasting organization serving the German states of Baden-Württemberg and Rheinland-Pfalz. The website www.swr.de serves as a comprehensive portal for news, radio, television, and online media content including live streams and event calendars. The site targets a general audience interested in regional and national news, culture, sports, and lifestyle content. Technically, the website employs modern web technologies such as ES6 JavaScript modules, lazy loading, and integrates analytics tools like Chartbeat and Piano Analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are not evident. Privacy compliance is limited in the visible content, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, consistent with a public media entity.

A

Antares Project GmbH

antares.net

55

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

M

Medienberatung NRW

bildungsmediathek-nrw.de

59

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

T

Just a moment...

thepeopleevents.com

56

The website thepeopleevents.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which prevents direct content analysis. The domain is registered with GoDaddy.com, LLC since 2020 and uses Cloudflare DNS servers, indicating a legitimate setup. However, no business information, privacy policies, contact details, or content are publicly visible. The technical infrastructure relies on Cloudflare for security and DNS, but the lack of accessible content and metadata limits the ability to assess the website's business model, services, or compliance posture. Security posture is minimal from the public perspective, with no visible security headers or policies. Overall, the site appears to be protected by a WAF but lacks publicly accessible content for further evaluation.

E

Ethos Media Group srl

secsolution.com

76

Secsolution.com is a professional Italian B2B online magazine and information portal focused on security, cybersecurity, privacy, and related technologies. Operated by Ethos Media Group srl, it serves security professionals in Italy by providing news, articles, podcasts, training opportunities, and event promotion such as the Secsolution Forum. The website demonstrates a solid market position as a leading security information source in Italy with a consistent brand and quality content. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with responsive design and good SEO practices. However, some security best practices such as HTTP security headers are missing, and the WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy. Privacy compliance is well addressed with GDPR-compliant cookie consent and a privacy policy. Overall, the site is professional and trustworthy but would benefit from enhanced security configurations and domain registration transparency.

E

Elie Kupsc

eliekupsc.com

63

Elie Kupsc is a Swiss-based graphic designer and illustrator specializing in branding, digital UI/UX, and artistic direction. The website serves as a professional portfolio showcasing over 15 years of experience, notable distinctions, and international exhibitions. The business targets institutional and cultural sectors, offering visual identity creation, logo design, and digital services. Technically, the site is built on Squarespace, leveraging modern web technologies with good mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and security policies are absent. Overall, the site reflects a credible, professional creative business with room for improvement in privacy compliance and security transparency.

L

LamaPoll

lamapoll.com

62

LamaPoll is a German-based company providing a professional online survey tool designed for businesses, research institutes, public sector entities, as well as students and educators. The platform emphasizes ease of use, versatility, and strong data protection compliance, including GDPR adherence. With over 10,000 companies using their service, LamaPoll holds a strong market position in Germany, supported by multiple certifications such as ISO 27001, TISAX AL2, and BSI security validations. Their business model is SaaS-based, offering both paid licenses and free access for students, focusing on secure, customizable, and responsive survey solutions. Technically, the website uses a mature technology stack including jQuery and Matomo analytics configured for privacy (no cookies). The site is well-optimized for mobile devices, accessible, and SEO-friendly. Hosting is supported by Google Domains DNS infrastructure, with all servers located in Germany, ensuring compliance with local data protection laws. Security posture is strong, with full HTTPS enforcement, end-to-end encryption, one-way encryption for sensitive data, and regular penetration testing. However, some improvements could be made by adding explicit security headers and publishing a security.txt file. Privacy compliance is excellent, with clear privacy and cookie policies, no third-party trackers, and GDPR-aligned data handling. Overall, LamaPoll presents a trustworthy, professional, and secure online survey platform with a strong focus on data protection and user privacy. The website quality and business credibility are high, making it a reliable choice for organizations needing compliant survey solutions.

E

edlekarnapilulky.cz

edlekarnapilulky.cz

49

edlekarnapilulky.cz is a small Czech language informational website focused on health, wellness, and herbal medicine topics. The site provides blog articles about massage services, herbal products like Persen, and optician services, targeting a general audience interested in wellness. The business model appears to be content publishing monetized primarily through Google Adsense advertising. Technically, the site uses standard HTML5, CSS3, and JavaScript with Cloudflare DNS and CDN services. The site is basic in design and mobile optimization, with moderate performance and SEO. Security posture is adequate with HTTPS enabled but lacks security headers and formal privacy or cookie policies. No contact or business registration information is provided, limiting trust and compliance maturity. The domain registration is consistent with a new small website started in 2023, with no suspicious WHOIS patterns. Overall, the site is safe for general audiences and does not contain adult or explicit content.

E

Elmo

elmobot.eu

65

Elmo is a technology company providing a SaaS tool focused on GDPR, ePrivacy, and CCPA compliance, primarily targeting website and app owners who need to manage cookie consent and privacy policies. The company positions itself as a compliance enabler with automated scanning, geo-targeting, and user control features. The website is professionally designed, mobile-optimized, and integrates with popular platforms like Shopify and WordPress. Technically, the site uses modern web technologies including Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and visible privacy policies. The domain WHOIS data is privacy protected, which is common for privacy-centric services, and no suspicious patterns were detected. Overall, the website is credible and functional but could improve transparency and security best practices.

P

Plan International Deutschland e.V.

plan.de

67

Plan International Deutschland e.V. is a well-established non-profit child rights organization operating globally with a focus on improving the lives of children, especially girls, through sponsorship and humanitarian aid. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to donors and supporters. Technically, the site uses TYPO3 CMS with modern JavaScript frameworks and includes privacy and cookie consent mechanisms, indicating compliance with GDPR and user privacy standards. Security posture is strong with HTTPS and secure forms, though some security headers could be improved. Overall, the domain registration and WHOIS data align well with the organization's claims, supporting legitimacy and trustworthiness.

G

Gemeinde Fisibach

fisibach.ch

10

Gemeinde Fisibach operates as the official municipal government website for the community of Fisibach in Switzerland. It provides residents and visitors with comprehensive information and services including political updates, administrative details, educational resources, safety information, and local events. The site targets local citizens and stakeholders, offering an accessible online portal for municipal services such as the online counter and e-move registration. The business model is that of a public sector entity focused on community service and information dissemination. Technically, the website is built on a modern CMS platform (i-web.ch) with responsive design and accessibility considerations. It uses standard web technologies including HTML5, CSS3, JavaScript, and SVG icons, with Bootstrap framework elements evident. The site demonstrates good SEO and mobile optimization, though hosting provider details are not explicit. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data aligns with the municipal nature of the site, confirming legitimacy. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and user experience. Strategic improvements could include enhanced security headers, explicit security policies, and publishing a vulnerability disclosure policy to strengthen security posture and trust.

werk.ARCHITEKTEN is a Swiss architecture cooperative specializing in architecture, urban planning, and sustainable building projects. The firm emphasizes responsible resource use and high architectural quality tailored to client needs. Their collaborative approach includes partnerships with experts in related fields and engagement in academic teaching and quality assurance processes. The website reflects a professional and regionally focused architecture practice with clear contact information and a cookie consent mechanism ensuring GDPR compliance. Technically, the website employs modern web technologies including Bootstrap, jQuery, and Google Analytics, with responsive design and basic accessibility features. The site is served over HTTPS with no detected blocking or WAF interference, indicating good digital maturity. However, security headers are not explicitly present, and no formal security or incident response policies are published. From a security perspective, the site benefits from HTTPS and cookie consent but lacks advanced security headers and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found. The WHOIS data aligns well with the website content, supporting legitimacy and trustworthiness. Overall, the website presents a secure, professional, and compliant digital presence suitable for a small architecture cooperative. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and user trust.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the actual website content is inaccessible or blocked. No meaningful business or contact information is present, and the page serves as a placeholder or error notification within the browser. The technical infrastructure is limited to Chromium's embedded scripts and styles for error display, with no external hosting or CMS detected. Security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site lacks privacy, cookie, and terms policies, as well as contact or incident response information, resulting in a low trust and compliance profile.

N

NOLIS GmbH

nol-is.de

59

NOLIS GmbH is a well-established German company specializing in digital transformation solutions for public sector entities, particularly municipalities. With over 25 years of experience and more than 400 municipal clients, NOLIS offers a comprehensive E-Government software suite, including a proprietary CMS, online citizen services, childcare placement software, recruiting tools, and GIS-based cartography solutions. Their business model focuses on providing integrated software and consulting services to streamline administrative processes and enhance citizen engagement. Technically, the website demonstrates a mature digital infrastructure with modern web technologies, responsive design, and accessibility considerations. The proprietary CMS and integration of various specialized platforms indicate a robust technical ecosystem. The site is fast-loading, well-structured, and optimized for SEO and mobile devices. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit published security policies, incident response contacts, and security.txt files, which are recommended for enhanced transparency and vulnerability management. No critical vulnerabilities or suspicious elements were detected. Overall, the website and business present a low-risk profile with strong credibility and professionalism. Strategic recommendations include formalizing security policies, enhancing HTTP security headers, and publishing vulnerability disclosure information to further strengthen trust and compliance.

Q

Qbet

qbets.de

54

Qbet is a German-focused online gambling platform offering casino games, live casino, and sports betting services. The website promotes a unique real-time cashback system without wagering requirements, targeting adult users interested in online gambling in Germany. The platform features a professional design with consistent branding and a good user experience, optimized for mobile devices. Technically, the site uses modern web technologies, including Cloudflare DNS and CDN services, custom fonts, and structured data for SEO. Security posture is moderate, with HTTPS implied and Cloudflare protection, but lacks visible security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Business credibility is supported by professional content and consistent domain usage, though contact information is missing. Overall, the site is functional and trustworthy for its niche but requires improvements in privacy and security transparency.

U

Uno Digital Media B.V.

portimaomotorsports.pt

10

The website portimaomotorsports.pt serves as a localized portal for the BetOnRed online casino brand targeting Portuguese players. Operated by Uno Digital Media B.V., the platform offers a comprehensive range of gambling services including casino games, live dealer experiences, and sports betting. The business is licensed under Curaçao eGaming, ensuring regulatory compliance for international operations. The site features a professional design, clear navigation, and extensive content covering bonuses, games, and responsible gaming policies. Technically, the site employs modern web standards with optimized mobile responsiveness and fast loading times. Security posture is solid with HTTPS enforced, though some security headers are missing and cookie consent mechanisms are not explicitly implemented. Contact information is primarily via email support, with no phone numbers provided. Overall, the platform presents a trustworthy and professional gambling service for the Portuguese market.

U

Uno Digital Media B.V.

cprating.pt

49

Nine Casino Portugal is an online gambling platform targeting Portuguese players, offering a wide range of casino games and sports betting options. Founded in 2020 by Uno Digital Media B.V., it operates under a Curaçao eGaming license, providing a trustworthy but not Portugal-licensed service. The platform features over 5000 casino games, including slots, table games, and live dealer options, alongside sports and e-sports betting. It supports multiple payment methods including traditional and cryptocurrency options. The website is well-designed, mobile-optimized, and provides detailed information about bonuses, games, and payment processes. However, it lacks explicit privacy and cookie consent mechanisms and does not provide phone support, relying on email and live chat for customer service.

A

Araxio Development N.V.

gransino-casino.de

60

Gransino Casino is a newly established online gambling platform founded in 2024, targeting primarily the German market. Operated by Araxio Development N.V. and licensed in Curaçao, it offers a broad range of casino games including slots, live dealer games, and sports betting. The platform emphasizes attractive bonuses, secure payment methods, and a user-friendly mobile experience. Its market position is that of an emerging competitor with a focus on quality gaming and customer engagement through social media and positive user reviews. Technically, the website employs modern web standards with HTML5, CSS3, and JavaScript, and leverages Cloudflare for DNS and CDN services, enhancing security and performance. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could benefit from additional security headers and a visible cookie consent mechanism to improve privacy compliance. Overall, the security maturity is moderate with no critical vulnerabilities detected. The site maintains GDPR compliance through its privacy policy and offers multiple contact channels, though direct phone support is absent. The domain registration aligns with the business timeline and ownership claims, supporting legitimacy. Strategic improvements in security headers and privacy transparency would enhance trust and compliance. The risk profile is moderate, typical for online gambling platforms, with recommendations focusing on strengthening security policies, enhancing privacy mechanisms, and maintaining transparent communication with users to foster trust and regulatory adherence.

T

Techore Holding B. V.

magari-ristorante.pt

49

Fairspin Casino, operated by Techore Holding B.V., is an established online gambling platform launched in 2018, licensed in Curacao. It leverages blockchain technology to provide transparency and fairness in gaming, offering a wide range of casino games and sports betting options primarily targeting Portuguese-speaking players. The website is professionally designed with good content quality and mobile optimization, providing a user-friendly experience. Technically, it uses modern web standards and lazy loading for performance, though no major frameworks or CMS were detected. Security posture is solid with HTTPS and secure forms, but lacks some advanced security headers and published incident response policies. Contact information is comprehensive, including email, phone, and social media channels, enhancing business credibility. Overall, the site is trustworthy and well-positioned in the online gambling market, though improvements in privacy compliance and security transparency are recommended.

N

Nationale Dekade gegen Krebs

dekade-gegen-krebs.de

60

The website 'Die Nationale Dekade gegen Krebs' is a German government-backed initiative led by the Bundesministerium für Bildung und Forschung (BMBF) to advance cancer research and support affected individuals. It serves as a comprehensive platform providing information on research projects, patient involvement, partner organizations, and relevant events. The site is professionally designed with excellent content quality, clear navigation, and strong branding consistency. Technically, it uses the Government Site Builder CMS, modern JavaScript libraries like Slick Slider and MediaElement.js, and is hosted by ITZBund, ensuring reliable infrastructure and good performance. Security posture is solid with HTTPS enforced and a cookie consent mechanism that complies with GDPR, although some security headers could be improved. The site uses Matomo analytics with anonymized data collection and explicit user consent, reflecting good privacy practices. No contact emails or phone numbers are explicitly listed, and no terms of service page is found. Overall, the website is trustworthy, secure, and well-aligned with its mission as a national cancer research initiative.

The Literarisches Zentrum Göttingen is a regional non-profit cultural institution dedicated to promoting literature and literary events in Göttingen, Germany. It offers a variety of programs including evening readings, youth programs, workshops, and special projects supported by public and private sponsors. The website reflects a well-established cultural center with a clear focus on community engagement and literary education. Technically, the site is built on a Django-based platform with standard web technologies such as HTML5, CSS3, and jQuery. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security measures include CSRF protection on forms, but lack visible security headers and cookie consent mechanisms. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and professionally maintained, though improvements in security headers and privacy compliance could enhance its posture.

V

Verband Region Rhein-Neckar

vrrn.de

59

The Verband Region Rhein-Neckar is a public law corporation based in Mannheim, Germany, responsible for cross-border regional planning and development in the tri-state area of Baden-Württemberg, Hessen, and Rheinland-Pfalz. Established in 2006, it serves as a key regional planning authority coordinating transportation, energy, and regional development projects. The organization maintains a strong market position as a government entity with a medium-sized operational structure and multiple related institutions. The website reflects a professional and comprehensive digital presence with clear content and user-friendly navigation targeting residents, planners, and stakeholders in the region. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, integrates privacy-respecting Matomo analytics, and includes accessibility features such as the Eye-Able widget. Hosting is provided by Hetzner Online GmbH, a reputable provider. The site is mobile-optimized and SEO-friendly, though no explicit CMS or frameworks were detected. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS with a clientTransferProhibited domain status, indicating domain transfer protection. However, DNSSEC is not enabled, and no HTTP security headers were detected in the provided data. There is no published security policy or incident response contact, which could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. Overall, the website is trustworthy, professionally maintained, and suitable for its public service role. Strategic recommendations include enabling DNSSEC, publishing security policies, and enhancing HTTP security headers to strengthen the security posture further.

G

Gesundheitsregion Metropolregion Rhein-Neckar

mrn-gesundheit.de

55

Gesundheitsregion Metropolregion Rhein-Neckar is a cooperative regional health initiative focused on promoting health, prevention, and healthcare services within the Rhein-Neckar metropolitan area. The organization collaborates with over 80 experts and various partners to foster sustainable and innovative health solutions. The website reflects a strong regional presence with professional content and clear communication aimed at residents, healthcare professionals, and organizations in the region. Technically, the site uses modern web technologies including Matomo for privacy-respecting analytics and is built on the Kirby CMS platform. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie information, though no explicit consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness, supporting its role as a regional health network.

M

MDR (Mitteldeutscher Rundfunk)

mdrjump.de

62

MDR JUMP is a digital entertainment brand operated by Mitteldeutscher Rundfunk (MDR), a major public broadcaster in Germany. The website serves as a hub for radio streaming, podcasts, video content, event information, and traffic updates primarily targeting audiences in Eastern Germany and Mitteldeutschland. The platform is well-branded, professionally designed, and integrates social media and Alexa skill support to enhance user engagement. The content is diverse, catering to a broad general audience with a focus on entertainment and community.

B

Bichinger Software & Consulting

jobboersencheck.de

62

Jobboersencheck.de is a German-language online platform specializing in the comparison and evaluation of job boards. It provides independent employer and applicant reviews, enabling users to make informed decisions about where to post or search for jobs. The platform is developed by Bichinger Software & Consulting and features a modern, user-friendly interface with a focus on job market transparency in German-speaking regions. Technically, the site employs React components, Cookiebot for GDPR-compliant cookie management, and Google Tag Manager for analytics, reflecting a moderate level of digital maturity. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks visible advanced security headers and explicit security policies, indicating room for improvement. Overall, the website is professional, trustworthy, and safe for general audiences, with a moderate risk profile primarily due to missing explicit privacy and security documentation.

T

Thüringen

thueringen.de

52

The website thueringen.de is the official online presence of the German federal state of Thuringia, providing governmental information and services. However, the current content is inaccessible due to an HTTP 403 Forbidden error, indicating that access is blocked, likely by security configurations. The site is protected by Link11, a cybersecurity provider, which suggests active web application firewall (WAF) measures are in place. The lack of accessible content, privacy policies, contact information, or terms of service on the error page limits the ability to fully assess the website's compliance and user engagement features. The domain registration data aligns with the governmental nature of the site, hosted by reputable providers, confirming legitimacy.

The Ökumenisches Heiligenlexikon is a well-established German-language informational website dedicated to providing comprehensive biographies, historical data, and religious context about saints from various Christian denominations. Founded in 1988 and online since 1998, it holds a strong market position as the most visited German site on this topic. The site offers rich content including calendars, patron saints, glossaries, and multimedia resources, targeting a general audience interested in religious and historical education. Technically, the website employs a custom-built infrastructure using standard web technologies such as HTML5, CSS3, JavaScript, Google Fonts, and jQuery. It integrates Google Analytics and Adsense for tracking and monetization. The hosting appears to be with 1&1 IONOS, providing moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though some accessibility features could be enhanced. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. While some security headers are not explicitly detected, no critical vulnerabilities or exposed sensitive data were found. Privacy policies are comprehensive and clearly presented, supporting GDPR compliance. Contact information is limited to email addresses, with no phone or physical address provided. Overall, the website demonstrates a solid security posture and high content quality, with no signs of blocking or WAF interference. It is safe for general audiences with no adult or NSFW content. Strategic recommendations include enhancing security headers, adding incident response contacts, and improving accessibility to further strengthen trust and compliance.

J

Javni štipendijski, razvojni, invalidski in preživninski sklad Republike Slovenije

sklad-kadri.si

54

The website www.srips-rs.si represents the official online presence of the Javni štipendijski, razvojni, invalidski in preživninski sklad Republike Slovenije, a Slovenian government institution dedicated to scholarships, workforce development, social rights, and child maintenance compensation. It serves a broad audience including students, workers, employers, and educational institutions. The site provides comprehensive information on various scholarship programs, development initiatives, worker rights, and support for disabled persons. Technically, the website is built using modern web standards and likely runs on OctoberCMS, hosted by a Slovenian registrar. It employs HTTPS and cookie consent mechanisms, with Google Tag Manager used for analytics, respecting user consent. Security posture is solid but could be improved by adding explicit security headers and publishing security policies. The domain registration data is consistent with the institution's profile, indicating legitimacy. Overall, the website is professional, trustworthy, and well-structured, though it lacks explicit privacy and terms of service pages.

C

Center RS za poklicno izobraževanje

cpi.si

43

Center RS za poklicno izobraževanje (CPI) is a central Slovenian public institution focused on the development, research, and consultancy in vocational and professional education. Established in 1997, CPI serves educational institutions, policymakers, and stakeholders by providing qualification development, educational programs, project management, and international cooperation. The website reflects a mature digital presence with comprehensive content, clear navigation, and multilingual support, targeting primarily Slovenian audiences involved in vocational education. Technically, the website is built on WordPress with a custom theme, leveraging modern web standards including HTTPS, responsive design, and accessibility features. The use of jQuery and Google Fonts is noted, with moderate performance and good SEO practices. Hosting appears to be managed by Arnes, consistent with the domain registrar and institutional nature. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, it lacks explicit security policy documentation and vulnerability disclosure mechanisms. Cookie consent is implemented, supporting GDPR compliance. No critical vulnerabilities or suspicious activities were detected in the content or technical setup. Overall, CPI's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. Strategic improvements could include publishing a dedicated security policy, enhancing HTTP security headers, and establishing a vulnerability disclosure process to further strengthen security posture.

E

Esselunga S.p.A.

esselunga.it

70

Esselunga S.p.A. is a well-established Italian supermarket chain founded in 1957, offering a wide range of retail services including physical supermarkets, online grocery shopping, loyalty programs, and specialized subsidiaries such as parafarmacia and enoteca. The website reflects a mature digital presence with professional design, clear navigation, and rich content tailored to general consumers in Italy. Technically, the site uses modern web technologies and Adobe Experience Manager CMS, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and no exposed sensitive data, though some security headers could be improved. Privacy compliance is basic with no explicit privacy or cookie policies detected in the provided content. Overall, the site is trustworthy and professionally managed, with strong business credibility and a comprehensive service offering.

18Tickets is an Italian cloud-based ticketing platform specializing in cinema and theater venues, offering an integrated pay-per-use service that combines eTicketing, cash register, bar, and e-commerce management. The platform emphasizes social engagement through integration with social networks, particularly Facebook, enhancing the user experience for both venue owners and customers. The business is positioned as an innovative solution targeting small and multiscreen cinemas in Italy, supported by its parent company 18Months. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google reCAPTCHA for security, and Typekit fonts for branding consistency. The site is mobile-optimized and provides a demo to encourage user adoption. Security posture is adequate with HTTPS enforced and reCAPTCHA implemented, but lacks security headers and explicit incident response or security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is professional and trustworthy but could improve in compliance and security transparency.

H

Helmholtz Association

hifis.net

67

HIFIS (Helmholtz Federated IT Services) is a specialized IT service provider focused on delivering digital infrastructure and software services to the Helmholtz Association, a major German research organization. The website presents a professional and comprehensive overview of their offerings including cloud services, identity management, software consulting, and training. The target audience primarily includes scientists, software engineers, cloud service providers, and IT support experts within the Helmholtz ecosystem. The organization is well positioned as a key facilitator of research IT services within Germany's scientific community. Technically, the website is built with modern web standards including HTML5, CSS3, and JavaScript, leveraging libraries such as FontAwesome and Modernizr for enhanced UI/UX. Hosting is provided by DESY, a reputable Helmholtz research center, ensuring reliable infrastructure. The site is mobile optimized, fast loading, and accessible, with good SEO practices. Analytics are implemented via Matomo with cookies disabled, reflecting a privacy-conscious approach. From a security perspective, the site uses HTTPS and shows no signs of exposed sensitive data or vulnerabilities. However, it lacks visible security headers and a cookie consent mechanism, which are recommended for GDPR compliance and enhanced security. There is no published security policy or incident response information, which could be improved to strengthen trust and preparedness. Overall, the website is trustworthy, professional, and well-aligned with its institutional backing. The domain registration data corroborates the legitimacy and consistency of the service. Strategic improvements in privacy compliance and security transparency would further enhance the site's security posture and user trust.

S

Sandstein Kultur

sandstein-kultur.de

51

Sandstein Kultur is a specialized agency and publishing house based in Dresden, Germany, focusing on cultural and art-related publications such as exhibition catalogs and museum catalogs. The company targets cultural institutions, museums, and art enthusiasts, offering both publishing and agency services including campaigns and promotional materials. The website reflects a niche market position within the German cultural media sector, supported by a professional and consistent brand presentation. Technically, the website is built on Craft CMS and uses modern web technologies including SVG graphics and Matomo analytics with cookies disabled, indicating a moderate level of digital maturity and privacy awareness. Hosting is provided by SchlundTech, a reputable German hosting provider. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site enforces HTTPS and uses CSRF tokens for form submissions, but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is supported by a clear privacy policy and terms of service, though a cookie consent mechanism is missing. Overall, the website is safe, professional, and trustworthy with a good balance of content quality and technical implementation. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security posture and compliance further.

E

European XFEL GmbH

xfel.eu

66

European XFEL GmbH operates a leading European research facility specializing in X-ray free-electron laser technology. The 3.4 km long facility generates intense X-ray flashes used globally by researchers to study atomic and molecular processes. The website serves a diverse audience including scientists, users, visitors, and educational groups, providing comprehensive information about the facility, instruments, user policies, and events. The business model is non-profit, focused on enabling cutting-edge scientific research. Technically, the website is built on modern web standards with a CMS likely based on Zope/ZMS, featuring responsive design and good accessibility. Security posture is solid with HTTPS and no exposed sensitive data, though improvements are recommended in security headers and incident response transparency. Privacy compliance is partially addressed with a detailed privacy policy but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its niche, with room for enhanced security and privacy practices.

G

Global Payments Europe s.r.o.

gpnmerchant.com

64

Global Payments Europe s.r.o. is a medium-sized financial services company specializing in payment processing solutions for premium card brands such as American Express and UnionPay. Operating primarily in the Czech Republic and Hungary, it is part of the larger Global Payments Inc. group, a NYSE-listed entity. The company offers comprehensive merchant services including card acceptance, terminal installation, mobile payments, and an online portal for transaction management. The website reflects a professional and consistent brand presence with clear business information and client references. Technically, the website uses a modern but basic tech stack including HTML5, CSS3, JavaScript, jQuery, and Bootstrap 3. The site is mobile optimized with good navigation and user experience, though accessibility and SEO optimizations are basic. No CMS or advanced platforms were detected. Performance is moderate with no critical errors. From a security perspective, the site uses HTTPS and secure login forms but lacks DNSSEC and important security headers such as CSP or HSTS. No explicit security or incident response policies are published. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. WHOIS data is consistent and trustworthy, showing a domain registered since 2013 under a Czech registrar, matching the business location. Overall, the website is professional and trustworthy with room for improvement in security hardening and privacy compliance. No critical vulnerabilities or blocking mechanisms were detected, enabling full content access and analysis.

Z

Zbornica za razvoj slovenskega zasebnega varovanja

zrszv.si

55

Zbornica za razvoj slovenskega zasebnega varovanja is a Slovenian chamber focused on the development of private security services. Established in 2000, it provides professional training, membership services, and information for private security companies and their clients. The website serves as an information hub and a platform for education and membership management. Technically, the site uses a custom CMS with ASP backend, Bootstrap framework, and integrates Google Analytics and Facebook SDK for tracking. The site is mobile optimized and presents a professional design with clear navigation. Security posture is moderate with HTTPS assumed but lacks explicit security headers and a published vulnerability disclosure policy. Privacy compliance is basic with cookie consent mechanisms and terms of service available. Contact information is clearly provided, enhancing business credibility. Overall, the website is trustworthy and serves its niche audience effectively.

A

AES - Associação de Empresas de Segurança

aes-empresasdeseguranca.com

67

AES - Associação de Empresas de Segurança is a Portuguese association representing private security companies. The website serves as an institutional platform providing information about the sector, legislation, and association activities. It targets security companies and professionals within Portugal, positioning itself as a recognized entity in the private security domain. The site offers key services such as advocacy, sector information dissemination, and communication with stakeholders. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, jQuery, and Google Analytics, with good mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, though explicit security headers are not detected. The absence of WHOIS data for the domain is a notable anomaly, reducing trust slightly despite the professional presentation and official contact information. Overall, the website is well-structured, compliant with GDPR, and trustworthy for its intended audience.

M

Mairie de Versoix

versoix.ch

41

The website www.versoix.ch is the official digital presence of the City of Versoix, Switzerland, serving as a municipal government portal. It provides residents and visitors with comprehensive information on local news, events, administrative services, public projects, and community resources. The site targets local citizens and stakeholders, positioning itself as a trusted source for municipal information and services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript libraries such as jQuery and Flickity, and integrates third-party services like Google Tag Manager, Google reCAPTCHA, and social media SDKs. The site is mobile-optimized and features good navigation and content structure, although accessibility features are basic. From a security perspective, the site enforces HTTPS and uses reCAPTCHA for form protection, but lacks some recommended security headers such as Content-Security-Policy and X-Frame-Options. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of explicit privacy and cookie policies. Overall, the website is professionally designed and trustworthy, with a strong business credibility score. However, improvements in privacy compliance and security headers are recommended to enhance user trust and regulatory adherence.

L

LamaPoll

lamapoll.de

62

LamaPoll is a German-based technology company specializing in providing a comprehensive online survey tool designed for businesses, research institutes, public sector entities, as well as students and educational users. The platform emphasizes ease of use, versatility, and strong data protection compliance, including GDPR adherence and certifications such as ISO 27001 and TISAX. With over 10,000 companies using their services, LamaPoll holds a strong market position in Germany's survey software sector. Technically, the website employs a modern yet stable technology stack including jQuery and Matomo analytics configured for privacy. The site is well-optimized for mobile devices and accessibility, with a clean, professional design and clear navigation. Hosting is supported by German-based providers with DNS managed via Google Domains, ensuring reliability and compliance with data residency requirements. From a security perspective, LamaPoll demonstrates a mature security posture with multiple certifications, regular penetration testing, full encryption of data in transit and at rest, and strict hosting policies. The website itself respects user privacy by avoiding tracking cookies and third-party trackers. However, some improvements could be made by adding explicit security headers and a public vulnerability disclosure policy. Overall, LamaPoll presents a trustworthy, professional, and secure online survey platform with strong compliance and privacy practices. The risk level is low, and the company is well-positioned to serve privacy-conscious clients in regulated industries. Strategic recommendations include enhancing transparency around incident response and security disclosures to further build trust.

The analyzed content corresponds to an internal Chrome browser error page (chrome-error://chromewebdata/) which is displayed when a website is inaccessible or offline. This page includes embedded scripts and styles for the Chrome offline dinosaur game, but contains no actual website content, business information, or user-facing policies. Consequently, no meaningful business or security posture can be assessed from this content. The page lacks privacy, cookie, or terms of service policies, and no contact or incident response information is present. The WHOIS data is not applicable as the domain is internal to the browser and not publicly registered. Overall, this page serves as a placeholder error interface rather than a functional website.

The website perlenflasche.de represents the Genossenschaft Deutscher Brunnen eG, a cooperative of German mineral water producers, celebrating the 50th anniversary of the Perlenflasche bottle design. The site provides rich historical context, brand information, sustainability messaging, and showcases a broad portfolio of mineral water brands using this iconic bottle. The cooperative holds a strong market position in the German beverage packaging sector, emphasizing sustainability and standardization. Technically, the website employs modern JavaScript libraries such as jQuery, fullpage.js, and Owl Carousel, with video backgrounds and responsive design elements, delivering a good user experience. Security-wise, the site uses HTTPS, cookie consent with GDPR compliance, and anonymized Google Analytics tracking, but lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

werk.ARCHITEKTEN Genossenschaft is a Swiss architectural cooperative specializing in architecture, urban planning, and sustainable building practices. With over two decades of experience, the firm offers comprehensive services ranging from new constructions to renovations, emphasizing resource responsibility and ecological sustainability. Their collaborative approach involves qualified partners across architecture, landscape architecture, engineering, and construction management, positioning them as a reputable regional player in the real estate and architectural sector. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, FontAwesome, and Google Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, some technical improvements such as updating JavaScript libraries and implementing security headers could enhance security posture. From a security perspective, the site uses HTTPS and has implemented a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies or incident response information suggests room for improvement in transparency and preparedness. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the legitimacy of the business. Strategic recommendations include enhancing security headers, updating dependencies, and publishing security and incident response policies to strengthen trust and compliance.

I

Innovative Web AG

i-web.ch

62

Innovative Web AG is a Swiss-based company specializing in innovative eGovernment solutions tailored for cantons, municipalities, schools, institutions, and energy providers. The company positions itself as a leading provider in Switzerland, offering a comprehensive suite of online services, software modules, and web design tailored to public sector needs. Their business model focuses on B2G and B2B engagements, delivering integrated digital solutions that streamline government and institutional processes. The website reflects a mature and professional organization with multiple physical locations across Switzerland.

A

Albertine

albertine.ch

47

Albertine.ch is the official website of the artist and illustrator Albertine, presenting a comprehensive portfolio of drawings, paintings, publications, prints, artist books, objects, posters, exhibitions, and films. The site targets art enthusiasts, collectors, galleries, and cultural institutions, serving primarily as a digital showcase for the artist's work. The business model is focused on portfolio presentation and promotion rather than direct e-commerce. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and good navigation clarity. However, it lacks advanced frameworks or CMS indications and does not include analytics or tracking technologies. Security posture is basic, with no evident security headers or published policies, and the site uses obfuscated JavaScript to protect the contact email from scraping. No forms or data collection mechanisms are present, reducing privacy risks but also limiting user interaction. Overall, the site is professional and trustworthy but would benefit from enhanced security and privacy compliance measures.

C

Commune d'Aire-la-Ville

aire-la-ville.ch

47

The website www.aire-la-ville.ch serves as the official online presence for the Commune d'Aire-la-Ville, a local government entity in the Canton of Geneva, Switzerland. It provides residents and visitors with information about municipal administration, political bodies, administrative procedures, territorial planning, communication, foundations, regulations, job offers, and election information. The site is primarily targeted at local citizens and government stakeholders. Technically, the site is built on WordPress 6.8.3, incorporating standard web technologies such as HTML5, CSS3, Google Maps API, and Swiper.js for interactive elements. The site demonstrates moderate performance and good mobile optimization, with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS with a good SSL configuration but lacks visible security headers and published security policies. Privacy compliance is weak, with no privacy or cookie policies detected, and no consent mechanisms in place. Contact information is not clearly visible in the provided HTML content. Overall, the site is legitimate and trustworthy as a government portal but would benefit from enhanced privacy and security disclosures.

Metallwerkstatt is a small Swiss artisanal metal fabrication and design workshop specializing in the development and manufacturing of steel constructions, furniture, and custom design elements. The website serves as a professional portfolio showcasing a wide range of projects, including collaborations with architects and design agencies. The business targets clients seeking bespoke metalwork solutions and operates primarily in the manufacturing sector with a local or regional focus. Technically, the site is built on the Adobe Portfolio platform, utilizing modern web standards and Typekit fonts, delivering a good user experience with clear navigation and mobile optimization. Security posture is moderate; while HTTPS is presumably enabled (not explicitly confirmed), no advanced security headers or policies are detected, and no privacy policy or terms of service are published. The site includes a cookie consent banner, indicating some awareness of privacy compliance. No direct contact information such as emails or phone numbers is provided, which may impact user trust and business credibility. Overall, the website is professional and trustworthy but would benefit from enhanced security practices and clearer privacy and contact disclosures.

The website www.iagoofficial.com serves as a digital portfolio and promotional platform for the artist iagö, who blends music with visual arts to create a unique artistic experience. The site features embedded music content via Spotify, video content, and descriptive text about the artist's vision and collaborations. The business model centers on artist promotion and music distribution, targeting music and art enthusiasts. Technically, the site uses modern web technologies including Three.js for 3D graphics, jQuery, and YouTube's iframe API, providing a visually engaging user experience with moderate performance and good mobile optimization. However, the site lacks critical privacy and cookie policies, security headers, and WHOIS domain registration data, which raises concerns about compliance and legitimacy. The security posture is moderate with no forms or sensitive data exposure but could be improved with standard security best practices. Overall, the site is professionally designed and functional but requires enhancements in privacy compliance and domain legitimacy to improve trust and security.