Security Directory

The Karl Landsteiner Gesellschaft is a well-established Austrian medical research society named after the Nobel laureate Karl Landsteiner. It operates as an independent scientific institution with 67 institutes covering nearly all medical disciplines. The organization focuses on scientific research, events, publications, and continuing education, targeting medical researchers and professionals. The website reflects a medium-sized, reputable healthcare entity with a strong presence in Austria and a history of over 20 years. Technically, the website uses standard web technologies such as HTML5, CSS3, JavaScript, and jQuery, with basic mobile optimization and accessibility. The site is moderately performant but lacks advanced CMS or modern frameworks. SEO and metadata are basic but sufficient for the target audience. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS but lacks visible security headers and cookie consent mechanisms, which are recommended for GDPR compliance. No vulnerabilities or exposed sensitive data were found. The WHOIS data is consistent with the website's claims, showing legitimacy and transparency. No WAF or blocking mechanisms interfere with content access. Overall, the website is professional, trustworthy, and content-rich, serving its niche audience well. However, improvements in privacy compliance, security headers, and contact information transparency would enhance its security posture and user trust.

A

apotheke.at

apotheke.at

62

apotheke.at is a prominent Austrian online pharmacy offering a wide range of medications and health products through an e-commerce platform. The website targets Austrian consumers seeking convenient and reliable pharmaceutical services online, positioning itself as a leading player in the Austrian online pharmacy market. Key services include online ordering, shipping pharmacy services, and competent pharmaceutical consultation. The site employs modern search and recommendation technologies such as Algolia and Dynamic Yield, enhancing user experience and product discovery. Cookie consent is managed via Usercentrics, reflecting attention to privacy compliance, although explicit privacy and terms of service documents were not found in the homepage HTML content. Security posture is strong with HTTPS enforced and secure login forms, but could be improved by adding security headers and publishing a vulnerability disclosure policy. Overall, the website demonstrates good professionalism, trustworthiness, and technical maturity suitable for its business domain.

NABU - Naturschutzbund Deutschland e.V. is a well-established German non-profit organization dedicated to nature conservation and environmental protection. The website focuses on public awareness campaigns such as the 'Bird of the Year 2026' featuring the Rebhuhn (partridge), highlighting endangered species and promoting biodiversity. NABU enjoys a strong market position in Germany with a large membership base and extensive volunteer network. The site offers rich content, educational resources, and engagement opportunities for the general public and conservation enthusiasts. Technically, the website is built on the IMPERIA CMS platform, utilizing modern web technologies including Bootstrap, jQuery, and privacy-respecting analytics tools like Matomo. The site is mobile-optimized, accessible, and SEO-friendly. Cookie consent is managed via Klaro, ensuring GDPR compliance. The infrastructure appears stable with European-based DNS and hosting. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security headers are not visible in the HTML source, and no public security policy or incident response contacts are provided. No vulnerabilities or suspicious content were detected. The site integrates tracking pixels from major platforms (Meta, TikTok, Google Ads) with user consent. Overall, NABU's website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations. It effectively serves its mission to educate and engage the public in environmental conservation. Strategic improvements could include publishing a dedicated security policy and enhancing security header implementation to further strengthen its security posture.

I

Integral

integralmusic.com

66

Integral is a music services division under the PIAS group, offering comprehensive global distribution, sales, promotion, sync licensing, and production services to independent record labels, managers, and artists. With over 30 years of experience, Integral positions itself as a trusted partner in the music industry, leveraging local expertise combined with global scale to deliver value to its partners. The website reflects a professional and consistent brand image aligned with its market positioning. Technically, the website is built on WordPress with a custom theme, utilizing modern web technologies such as CSS3 and JavaScript. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, some technical improvements could be made, such as implementing security headers and enhancing accessibility features. The site uses HTTPS with an excellent SSL configuration, ensuring secure communication. From a security perspective, the site demonstrates basic best practices including HTTPS enforcement and a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy and trustworthiness. No explicit security policies or incident response contacts are found, indicating room for improvement in transparency and security posture. No vulnerabilities or malicious content were detected. Overall, Integral's website is professional and trustworthy from a content and design perspective but would benefit from improved domain registration transparency and enhanced security headers. The risk level is moderate, primarily due to the missing WHOIS data. Strategic recommendations include verifying domain registration, implementing security headers, and publishing explicit security and incident response policies.

Clever2App is a small German technology service provider specializing in affordable and customized mobile app development for Android and iOS platforms. Their offerings include app concept, design, programming, push notifications, login functions, and ongoing marketing and support. The company also provides complementary digital services such as website flat rates, online shop integration, newsletters, and SEO services. The website is professionally designed, mobile-optimized, and uses a CMS platform (Contentserver24) with Bootstrap and FontAwesome technologies. Google Analytics is implemented with privacy-conscious IP anonymization and a cookie consent mechanism. Security posture is moderate with HTTPS enforced but lacks explicit security headers and documented security policies. WHOIS data is minimal but consistent with a legitimate small business. Overall, the website presents a trustworthy and professional digital presence suitable for its target audience of businesses seeking app development solutions.

A

atrego GmbH

atrego.de

51

atrego GmbH is a small, established German technology company specializing in professional web design, app development, software programming, and related digital services. Founded in 2001 and based in Halle (Saale), Germany, the company targets businesses seeking comprehensive online presence solutions including web hosting, SEO, and social media marketing. The website reflects a consistent and professional brand image with clear service offerings and customer engagement channels. Technically, the site uses a modern tech stack including Bootstrap, jQuery, FontAwesome Pro, and Google Analytics with a CMS platform named Contentserver24. The site is mobile optimized and SEO friendly, with structured data enhancing search visibility. Security posture is good with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

Ostprignitz-Ruppiner Personennahverkehrsgesellschaft mbH operates as a regional public transportation company in Germany, providing bus services, ticketing options, and mobility support primarily for residents and commuters within the Ostprignitz-Ruppin region. The website offers comprehensive timetable information, ticket purchase options, and details about special services such as Rufbus, bus rental, and advertising. The company targets local users seeking reliable and accessible public transport solutions. Technically, the website is built on a modern stack including Bootstrap 4.3.1, jQuery, Font Awesome, and Moment.js, ensuring responsive design and usability across devices. Forms on the site submit data securely to trusted external domains, indicating integration with regional transport information systems. While performance is moderate, the site is well-structured and navigable, with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security or incident response policies, which are recommended for enhanced protection and transparency. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is implemented. Overall, the site demonstrates a solid security posture but could improve in compliance and security best practices. The overall risk assessment is moderate with no critical issues detected. Strategic recommendations include implementing security headers, adding cookie consent, publishing incident response contacts, and auditing third-party libraries regularly. These steps will enhance trust, compliance, and security resilience for the company and its users.

K

Kagiso Media

kmradio.co.za

45

Kagiso Media Radio is a prominent South African media company specializing in radio broadcasting, audio content, and digital publishing. Established in 2024, it operates multiple well-known radio stations and offers services including research and analytics, publishing, digital development, and podcast production. The company targets South African audiences and advertisers, positioning itself as a leading media entity in the region. Technically, the website is built on WordPress with modern front-end technologies like Swiper.js and is optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by enabling DNSSEC and adding security headers. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website is professional, trustworthy, and content-rich, reflecting a medium-sized enterprise with a clear market presence.

L

L-Bank

l-bank.de

66

L-Bank is the official state bank of Baden-Württemberg, Germany, providing a range of financial services including funding programs for businesses, housing, families, and municipalities. It holds a leading position as a regional development bank, supporting economic growth and social welfare in the region. The website reflects a mature digital presence with modern technologies such as Vue.js and Hippo CMS, ensuring good performance and accessibility. Security measures are robust, with HTTPS and multiple security headers implemented, although explicit security policies and incident response contacts are not prominently published. Overall, the site demonstrates strong compliance with GDPR and accessibility standards, reinforcing trustworthiness and professionalism.

L

LAOLA1

laola1.at

61

LAOLA1 is Austria's leading sports media portal offering live streams, news, videos, and live score tickers primarily targeting sports fans in Austria and German-speaking regions. The platform covers a wide range of sports including football, motorsport, and winter sports, positioning itself as a comprehensive source for sports content. Technically, the website employs modern web technologies including JavaScript ES modules, CSS3, and integrates a consent management system (TruendoPay) for GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses standard security headers, and manages user consent effectively, though it lacks a publicly available security policy or incident response contact page. Overall, the domain registration data aligns well with the business claims, supporting the site's legitimacy. Strategic recommendations include publishing explicit security and incident response policies and enhancing accessibility features.

The website mpulse.net is currently a domain parking page operated via Sedo, offering the domain for sale at a price of 3799 USD. There is no active business or service provided on the site. The content is minimal, primarily consisting of advertising and related search links. The site uses standard HTML, CSS, and JavaScript technologies along with Google Adsense and Sedo's domain parking scripts. The technical infrastructure is basic and hosted through Sedo's parking platform. Security posture is weak with no visible security headers or explicit SSL confirmation, and no security or incident response policies are present. Privacy compliance is minimal, with a basic privacy policy linked externally from Sedo. Overall, the site lacks business credibility and trust signals, reflecting its status as a parked domain rather than an operational business website.

I

Investitionsbank des Landes Brandenburg (ILB)

ilb.de

61

The Investitionsbank des Landes Brandenburg (ILB) is a regional development bank focused on promoting and financing public and private investment projects within Brandenburg, Germany. The institution offers a broad portfolio of funding programs across sectors such as economy, infrastructure, labor, and housing. The website reflects a well-established public entity with a clear mission to support regional development through financial products and advisory services. The target audience includes private companies, public clients, individuals, associations, universities, and chambers, indicating a comprehensive service scope. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to deliver a responsive and accessible user experience. The presence of a consent management platform (Klaro) and integration with Google Analytics demonstrates a mature digital infrastructure with privacy compliance in mind. The site is mobile-optimized and features clear navigation and professional design, supporting excellent user experience. From a security perspective, the site enforces HTTPS and uses bot protection (Friendly Captcha) and session management via Apache Tomcat. While no explicit security headers were detected in the HTML content, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant. However, the site could improve by publishing a security.txt file and providing explicit incident response contacts. Overall, the ILB website is a trustworthy, professional platform representing a government-affiliated financial institution. It balances user experience, privacy, and security effectively, supporting its role as a key regional development bank. Strategic recommendations include enhancing HTTP security headers, formalizing vulnerability disclosure processes, and increasing transparency on data retention policies to further strengthen security and compliance.

W

Wazamba Casino

mporoumeedo.gr

48

Wazamba Casino Greece operates as an online gambling platform targeting Greek-speaking adult users. It offers a wide variety of casino games including slots, live dealer games, and table games, supported by major software providers. The platform supports multiple payment methods including cryptocurrencies and provides 24/7 customer support via email. Technically, the website employs modern web technologies such as lazy loading and custom fonts, and is optimized for mobile devices. Security is implemented with HTTPS and TLS 1.2, but lacks advanced HTTP security headers and explicit incident response information. Privacy compliance is partially addressed with privacy and cookie policies present, though no active consent mechanism is detected. Overall, the site presents a professional and trustworthy gambling service with room for improvement in security and privacy transparency.

O

ONLINEAUSTRIACASINO.AT

oesterreichonlinecasino.at

42

ONLINEAUSTRIACASINO.AT is a specialized online platform providing comprehensive reviews, rankings, and detailed information about legal online casinos in Austria for the year 2025. The website targets Austrian players seeking trustworthy and legally compliant gambling options, offering expert evaluations of casino bonuses, payment methods, game selections, and regulatory compliance. The platform is positioned as a reputable affiliate and informational resource with a consistent brand and a strong focus on user trust and transparency. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools such as Google Analytics, Google Tag Manager, and Microsoft Clarity for user behavior tracking and performance monitoring. The site is mobile-optimized with lazy loading for images and uses structured data (JSON-LD) to enhance SEO and search engine visibility. Performance is moderate with good mobile responsiveness and basic accessibility features. From a security perspective, the site enforces HTTPS with excellent SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and formal security or incident response policies. No vulnerability disclosure or security.txt files are present, indicating room for improvement in security transparency and incident readiness. Overall, the website presents a low-risk profile with a high degree of professionalism and trustworthiness. Strategic recommendations include implementing comprehensive privacy and security policies, enhancing accessibility, and publishing vulnerability disclosure information to further strengthen security posture and compliance.

O

OC24 LTD

bestcasinosincanada.net

41

BestCasinosInCanada.net is a specialized affiliate and review website focused on providing Canadian players with trusted information about online casinos, bonuses, payment methods, and casino games. The business operates under OC24 LTD, founded in 2022, and targets the Canadian gambling market with a professional and content-rich platform. The site demonstrates a moderate level of digital maturity with the use of modern web technologies, structured data, and tracking tools such as Google Analytics and Tag Manager. Security posture is adequate with HTTPS enforced, but lacks visible security headers and explicit privacy and incident response policies. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the site maintains trust signals such as affiliate disclosures and social media presence. Overall, the website is functional, well-branded, and serves its niche effectively but would benefit from enhanced transparency and security practices.

L

Landkreis Freyung-Grafenau

mehralsduerwartest.de

50

The website www.mehralsduerwartest.de serves as the official regional marketing campaign platform for Landkreis Freyung-Grafenau, Germany. It promotes the region's business landscape, quality of life, and community engagement through rich multimedia content, stories, and event information. The site targets residents, families, local businesses, and tourists, positioning itself as a trusted source for regional promotion backed by local government. Technically, the site is built on WordPress with modern plugins like Yoast SEO and Borlabs Cookie, ensuring good SEO and privacy compliance. The infrastructure is stable with HTTPS and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with GDPR regulations.

L

Landesregierung Schleswig-Holstein

schleswig-holstein.de

61

The website schleswig-holstein.de serves as the official Landesportal (state portal) for the government of Schleswig-Holstein, Germany. It provides comprehensive information about the state government, ministries, authorities, justice system, news, and public services. The portal targets citizens, businesses, government employees, and media representatives, offering a centralized access point for administrative services and governmental information. The site is professionally designed with clear navigation and multilingual support, including an English version.

V

VBB Verkehrsverbund Berlin-Brandenburg GmbH

vbb.de

50

VBB Verkehrsverbund Berlin-Brandenburg GmbH operates as the regional public transportation association for Berlin and Brandenburg, providing comprehensive services including transport planning, ticketing, quality management, and digital journey planning. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting a broad audience including daily commuters and travelers in the region. The company holds a leading market position in regional transportation with a large operational scale. Technically, the site is built on TYPO3 CMS, integrates Matomo analytics for privacy-conscious tracking, and employs Cookiebot for cookie consent management, demonstrating compliance with GDPR and modern web standards. Security posture is strong with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-maintained, and aligned with the business's public service mission.

The analyzed website is a German-language affiliate marketing and domain sales landing page hosted on a subdomain of 'forsaledomain.net', a known domain parking and sales service. It offers discounted product deals across multiple categories, primarily linking to Amazon affiliate offers. The site lacks any WHOIS registration data for its domain, indicating it is unregistered or parked, which significantly impacts its trustworthiness. Technically, the site uses modern fonts and responsive design but lacks advanced security features such as HTTPS enforcement and security headers. There are no privacy, cookie, or terms of service policies, nor any contact or company information, which further reduces its credibility and compliance posture.

G

Global Payments

globalpayments.sk

63

Global Payments Slovakia operates as a prominent payment solutions provider offering a range of services including payment terminals, mobile payment solutions, and an online payment gateway (GP webpay). The company targets both small and large businesses, providing innovative and reliable payment processing technologies tailored to various industries. Their market position is solid within Slovakia, supported by a comprehensive service portfolio and additional offerings such as dynamic currency conversion, financing, and EV charging stations. The website reflects a professional and consistent brand image with good content quality and user experience. Technically, the website leverages modern analytics and tracking tools such as Google Analytics, Microsoft Clarity, and Formstack, integrated with a cookie consent mechanism compliant with GDPR. The platform appears to be built on a Dataweavers CMS infrastructure, with good mobile optimization and SEO practices. Performance is moderate, with room for improvement in accessibility features. Security posture is strong with HTTPS enforced, PCI DSS certification indicated, and use of reCAPTCHA, although explicit security headers and incident response policies are not publicly disclosed. Overall, the site is trustworthy and professionally maintained, with no signs of blocking or WAF interference. The WHOIS data aligns with the business claims, reinforcing legitimacy. However, the absence of publicly available security policies and incident response contacts suggests areas for enhancement in transparency and compliance. Strategic recommendations include publishing detailed security and incident response policies, enhancing security header implementation, and improving accessibility compliance to further strengthen the site's security and user trust.

C

C.L.U. Club Italiano di Litiasi Urinaria

calcolosi-urinaria.it

38

The website www.calcolosi-urinaria.it represents the Club Italiano di Litiasi Urinaria (C.L.U.), an Italian non-profit medical association dedicated to the study, prevention, and treatment of urinary stone disease. The site provides information about the association, upcoming congresses, scientific articles, newsletters, and a reserved member area. The target audience primarily includes medical professionals and researchers interested in urology and urinary lithiasis. The business model is focused on education, event organization, and member services within the healthcare sector in Italy. Technically, the website is built on a custom ASP.NET platform with modern front-end technologies such as Bootstrap, Google Fonts, and Swiper.js for interactive sliders. The site is mobile-optimized and offers a good user experience with clear navigation and professional design. However, some technical aspects such as accessibility and SEO could be improved. No major performance issues were detected, but hosting details and SSL configuration specifics are not available. From a security perspective, the site uses HTTPS and has basic form validation but lacks important security headers like Content-Security-Policy and HSTS. There are no visible privacy or cookie policies, which is a compliance concern under GDPR. No incident response or vulnerability disclosure information is provided. The site does not appear to use tracking or analytics services, which reduces privacy risks but also limits marketing insights. Overall, the website is a credible and professional platform for a specialized medical association but requires improvements in privacy compliance and security best practices to enhance trust and regulatory adherence.

The website represents the Associazione Italiana Gastroenterologi e Endoscopisti Digestivi Ospedalieri (AIGO), a well-established Italian professional association founded in 1969. It serves as a platform for gastroenterology and digestive endoscopy experts, providing educational resources, publications, events, and member services. The site targets medical professionals in Italy and maintains a professional and consistent brand presence. Technically, the website uses modern web technologies including UIkit framework, JavaScript, and integrates third-party services such as Iubenda for cookie consent and Google Tag Manager for analytics. The site is mobile-optimized and offers a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms compliant with GDPR, though some security headers could be improved. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

H

Helmholtz Zentrum Berlin für Materialien und Energie

helmholtz-berlin.de

62

Helmholtz Zentrum Berlin für Materialien und Energie (HZB) is an internationally renowned German research center specializing in energy materials and technologies. The website serves as a comprehensive portal providing detailed information about their research programs, scientific infrastructure, industry cooperation, career opportunities, and user access to their facilities such as the BESSY II X-ray source. The content is primarily in German with English sections to accommodate international researchers and partners. The organization is positioned as a leading institution in energy research with a large staff and extensive collaborations.

1

10x Group

10x.group

44

10x Group is a venture capital firm focused on investing in founders across Europe and Silicon Valley, with a portfolio spanning growth, late-stage, and early-stage companies through its 10x Founders and FLEX Capital funds. The website presents a professional and consistent brand image, showcasing a broad portfolio of companies with successful IPOs and exits, indicating a strong market position. Technically, the site uses modern web technologies including jQuery, ScrollReveal, Google Analytics, and Hotjar, providing a moderate level of digital maturity with good mobile optimization and user experience. Security posture is adequate with HTTPS implied, but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. Overall, the site is safe, business-focused, and trustworthy, though the absence of WHOIS data due to TLD limitations slightly reduces transparency.

S

Servicestelle der Initiative Klischeefrei

klischee-frei.de

57

The website www.klischee-frei.de represents the Servicestelle der Initiative Klischeefrei, a German non-profit initiative dedicated to promoting gender-neutral career and study choices. It serves a broad audience including youth, parents, educators, and career counselors by providing educational resources, events, and a network of partner organizations. The initiative is supported by government entities and well-established partners, positioning it as a credible and trusted source in the education sector. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, with a professional design and clear navigation. Hosting details are not explicit, but the domain uses stable nameservers consistent with a legitimate German educational initiative. From a security perspective, the site enforces HTTPS and uses secure form submissions. However, it lacks visible security headers and explicit incident response or security policy disclosures. Privacy compliance is strong with a comprehensive privacy policy and cookie policy, though no explicit cookie consent mechanism is present. No contact emails or phone numbers are directly listed, relying instead on contact forms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for its educational and governmental audience. Strategic improvements in security headers, incident response transparency, and cookie consent would further enhance its security posture and privacy compliance.

B

BNL BNP Paribas

bnl.it

70

BNL BNP Paribas is a major Italian banking institution offering a wide range of financial services including current accounts, loans, mortgages, private banking, and digital banking portals for individuals, families, professionals, and enterprises. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its parent company BNP Paribas. Technically, the site uses modern frameworks such as Uikit and Adobe Experience Manager CMS, integrates Google Tag Manager and OneTrust for analytics and cookie consent, and is optimized for mobile devices. Security posture is strong with HTTPS enforced, DNSSEC enabled, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the site is professional, trustworthy, and well-aligned with the business's market position.

W

whistlebox.pro

whistlebox.pro

52

The website whistlebox.pro currently serves as a parked domain with minimal content and no active business presence. It primarily displays placeholder text and advertisements served via Google Adsense and Bodis, indicating monetization through domain parking rather than offering any substantive services or information. The lack of meaningful content, contact details, or company information suggests it is not an operational business site. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. There is no HTTPS detected, and no security headers are present, which significantly lowers the security posture. Privacy and legal pages exist but are basic and lack GDPR compliance indicators or cookie consent mechanisms. Overall, the site has a low trustworthiness score and is not suitable for professional or business use in its current state.

The website www.lorealboldventures.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks access to any meaningful content. No business information, contact details, or policies are available on the page. The domain WHOIS data is not found, indicating the domain may be unregistered, newly registered, or privacy protected. The technical infrastructure relies on Cloudflare for security and performance, but the lack of accessible content prevents a full assessment of digital maturity. Security posture is weakly assessable due to the WAF blocking, but the absence of visible security headers or policies is a concern. Overall, the site presents a high risk due to lack of transparency and accessibility, and strategic recommendations focus on enabling access, publishing essential policies, and establishing trust signals.

P

Pinsent Masons

pinsentmasons.com

78

Pinsent Masons is a large, purpose-led professional services law firm with a strong international presence and a broad portfolio of legal services across multiple sectors including energy, finance, infrastructure, and technology. The website reflects a mature digital presence with comprehensive content, multi-language support, and clear navigation tailored to corporate clients and legal professionals. The firm leverages modern web technologies and analytics tools to optimize user experience and marketing effectiveness. Security posture is robust with HTTPS enforcement, security headers, and privacy compliance mechanisms in place, though explicit security policies and incident response details are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness, supporting Pinsent Masons' market position as a leading law firm.

R

rapidmail

rapidmail.it

55

Rapidmail.it is a professional email marketing and newsletter service targeting businesses and professionals in Italy, emphasizing GDPR compliance. The website presents a clean, well-structured design with multilingual support indicating an international presence. The technical infrastructure uses modern web standards but lacks visible advanced frameworks or CMS indications. Security posture is limited in visible measures, with no explicit security headers or incident response information found. Privacy and cookie policies are not detected in the provided content, which may impact compliance perception. Overall, the site is functional and professional but could improve transparency and security disclosures.

R

rapidmail

rapidmail.es

53

rapidmail.es is a professional email marketing SaaS platform focused on newsletters, transactional emails, and marketing automation, targeting businesses and e-commerce operators primarily in Spain and other European markets. The website demonstrates a solid market position with over 80,000 customers and strong trust indicators such as certifications and customer testimonials. The technical infrastructure uses modern web technologies and analytics tools, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks some security headers and formal vulnerability disclosure mechanisms. Privacy compliance is limited by the absence of explicit privacy and cookie policies on the main page. Overall, the site is professional and trustworthy but could improve transparency and security practices.

R

rapidmail

rapidmail.co.uk

64

rapidmail is a professional email marketing and transaction email software provider targeting businesses and agencies primarily in the UK and Europe. The company offers a SaaS platform with key services including newsletter creation, marketing automation, and transaction email management. The website demonstrates a strong market position with over 80,000 customers and high customer satisfaction. Technically, the site uses modern web technologies and integrates multiple analytics tools, indicating a mature digital infrastructure. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though some improvements in security headers and incident response transparency are recommended. Overall, the domain WHOIS data is unavailable or inconsistent, which slightly reduces trustworthiness for the exact domain analyzed but does not detract from the legitimacy of the business itself. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding vulnerability disclosure mechanisms.

R

rapidmail

rapidmail.com

57

rapidmail is a Germany-based email marketing SaaS platform focused on providing GDPR-compliant newsletter design, sending, and analytics services. The company targets businesses and marketers seeking a simple yet compliant email marketing solution, positioning itself strongly in the European market with localized websites for multiple countries. The website demonstrates good technical maturity with modern web standards, responsive design, and clear navigation, supporting a positive user experience. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response information are absent. The lack of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional web presence and compliance focus. Strategic recommendations include enhancing security transparency and publishing vulnerability disclosure information to strengthen trust further.

R

rapidmail

rapidmail.fr

55

Rapidmail.fr is a French SaaS provider specializing in GDPR-compliant newsletter software that enables businesses to create, send, and analyze email newsletters efficiently. The company targets French-speaking business users and marketers, offering a pay-per-send pricing model without long-term commitments. The website is professionally designed, mobile-optimized, and provides clear navigation and comprehensive content about its services. Technically, the site uses modern web standards with secure HTTPS and appropriate security headers, reflecting a mature digital infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data, although explicit security policies and incident response contacts could be improved. Overall, rapidmail.fr presents as a trustworthy and credible business with a solid market position in the European email marketing sector.

R

rapidmail

rapidmail.at

56

Rapidmail.at is a GDPR-compliant newsletter software platform targeting businesses and marketers primarily in the German-speaking and European markets. The website emphasizes ease of use for creating, sending, and analyzing newsletters, positioning itself as a trusted solution from Germany/Austria. The technical infrastructure is modern with responsive design and standard web technologies, though no CMS or hosting provider details are explicitly identified. Security posture is adequate with HTTPS enabled and Google site verification present, but lacks explicit security headers and formal security policies. Privacy compliance is weak due to absence of visible privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance documentation. Recommendations include adding comprehensive privacy and cookie policies, security headers, and clear contact information for incident response.

I

ISGroup SRL

isgroup.it

70

ISGroup SRL is an established Italian IT security company founded in 2005, specializing in high-quality cybersecurity services including penetration testing, vulnerability assessments, ethical hacking, code review, and training. The company targets ICT operators, security agencies, and enterprises requiring independent and customized IT security solutions. Their market position is that of a trusted independent specialist with national and international collaborations, supported by recognized certifications such as ISO 27001 and ISO 9001. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references.

H

Helmholtz-Zentrum Dresden-Rossendorf

hzdr.de

61

The Helmholtz-Zentrum Dresden-Rossendorf (HZDR) is a prominent German research center specializing in energy, health, and matter sciences. As a member of the Helmholtz Association, it operates multiple research sites and user facilities, serving both internal and external scientific communities. The website reflects a well-structured, professional institution with a strong emphasis on scientific collaboration and technology transfer. The target audience includes researchers, students, industry partners, and the general public interested in scientific advancements. Technically, the site employs modern web technologies such as React and Astro, ensuring good mobile optimization and accessibility. However, there is room for improvement in privacy compliance and security transparency, as explicit privacy and cookie policies are not found, and security headers are not evident. Overall, the site demonstrates high business credibility and content quality, supporting its position as a reputable research institution.

R

rapidmail

rapidmail.de

55

Rapidmail is a German-based technology company offering GDPR-compliant newsletter software designed for businesses and marketers primarily in Germany and other supported countries. The platform focuses on easy newsletter creation, sending, and analytics, positioning itself as a reliable and compliant email marketing solution. The website is professionally designed with good content relevance and navigation, supporting multiple localized versions for different countries. Technically, the site uses modern web standards and fonts, hosted on DNS Made Easy infrastructure, with moderate performance and good mobile optimization. However, the security posture is limited due to lack of visible security headers and documented security policies. Privacy compliance is weak as no explicit privacy or cookie policies were found. Business credibility is moderate with consistent branding but missing explicit contact and compliance information. Overall, the site is safe for general audiences with no adult or questionable content detected.

B

BITE GmbH

b-ite.de

66

BITE GmbH is a German-based technology company specializing in innovative E-Recruiting and applicant management software solutions. The company serves a broad range of clients, including over 4,500 businesses and public organizations, positioning itself as a trusted provider in the recruitment software market. Their offerings include a fully customizable, web-based applicant management system with advanced features such as AI-assisted recruiting, WhatsApp application integration, and automated work certificate analysis. The company emphasizes data security and compliance, holding ISO 27001 and ISO 9001 certifications, and hosting all data exclusively in Germany. Technically, the website is built on modern web technologies, likely React-based, hosted on AWS infrastructure, and optimized for mobile and accessibility. The site demonstrates good SEO practices and fast performance. However, some security best practices such as explicit security headers and visible cookie consent mechanisms are not evident in the provided data. From a security perspective, BITE GmbH shows a mature posture with certifications and secure data handling, but lacks visible incident response contacts and vulnerability disclosure mechanisms. No critical vulnerabilities or exposures were detected in the content. Overall, the website and business present a professional and trustworthy image with minor areas for improvement in privacy compliance and security transparency. The overall risk is low, but strategic enhancements in cookie consent, security headers, and incident response visibility would strengthen compliance and trust further.

H

Hagmann Umzüge GmbH

hagmann-umzug.com

37

Hagmann Umzüge GmbH is a well-established moving and logistics company based in Ulm, Germany, founded in 2000. The company offers a broad range of services including private and corporate relocations, transport, storage solutions, and specialized moving services such as high-tech and international moves. Their market position is regional with a focus on quality service for both private individuals and businesses. The website reflects a professional business model with clear service offerings and a consistent brand presence. Technically, the website employs modern tracking and consent management technologies such as Cookiebot, Google Tag Manager, Google Analytics, and Facebook Pixel, indicating a mature digital infrastructure. The site is hosted by IONOS SE, a reputable provider, and uses HTTPS with a clientTransferProhibited domain status, enhancing security. Mobile optimization and SEO practices are good, though accessibility could be improved. From a security perspective, the site demonstrates good practices including HTTPS enforcement and cookie consent compliance. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious patterns were detected, and the domain registration is consistent with the business history, supporting legitimacy. Overall, the website is secure, compliant with GDPR, and professionally maintained, with minor recommendations to enhance DNS security and publish explicit security policies. The risk profile is low, and the company appears trustworthy and credible in its sector.

A

astradirect Schließfächer GmbH

astradirect.de

51

astradirect Schließfächer GmbH is a German company specializing in providing locker rental services primarily for schools and students. They position themselves as the largest locker provider in Germany with over 6,300 satisfied schools. Their offerings include locker rentals, insurance packages for lockers and valuables, and innovative modular locker designs with digital locking systems using RFID technology. The company targets educational institutions and students, providing convenient online rental and service portals. Technically, the website is built using modern Angular framework (version 19.2.14) with good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, includes anti-clickjacking measures, and provides cookie consent mechanisms, although explicit security headers like CSP are not clearly visible. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business information, indicating legitimacy and consistency. Overall, the website demonstrates a mature digital presence with good security posture and compliance, supporting a trustworthy business operation.

W

Würzburg-Dresden Cluster of Excellence ct.qmat

ctqmat.de

43

The Würzburg-Dresden Cluster of Excellence ct.qmat is a prominent academic research center specializing in topological and complex quantum matter. Established in 2019, it unites leading research hubs from Universität Würzburg and Technische Universität Dresden, focusing on advancing quantum materials research, education, and public outreach. The website reflects a professional and well-maintained digital presence with comprehensive content targeted at researchers, students, and the interested public. Technically, the site employs modern web standards, responsive design, and uses Matomo analytics for privacy-conscious tracking. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Privacy compliance is good with a clear privacy policy but lacks a cookie consent mechanism. Overall, the site is trustworthy and authoritative within its academic domain.

L

Landesregierung Brandenburg

brandenburg.de

10

The website is the official online portal of the Landesregierung Brandenburg, the state government of Brandenburg, Germany. It serves as a comprehensive information hub for citizens and stakeholders, providing access to government news, services, and thematic content related to the state's administration and public affairs. The site is well-branded, consistent, and targets a broad audience including residents, businesses, and government officials. The business model is that of a government information and service portal, with no commercial intent. Technically, the site uses a custom CMS with a modern tech stack including HTML5, CSS3, JavaScript, jQuery, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with good SEO practices. Hosting details are not explicit but the domain uses a nameserver consistent with the Brandenburg region. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, no explicit security headers were detected in the HTML content, and no published security policies or incident response contacts were found. The site does not expose sensitive data or use vulnerable libraries visibly. Overall, the security posture is good but could be improved by adding security headers and formal vulnerability disclosure information. Overall, the website is trustworthy, professional, and compliant with privacy regulations. It poses low risk and serves its purpose effectively as a government portal. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact transparency for incident response.

O

openPetition gGmbH

openpetition.eu

10

openPetition gGmbH operates a politically neutral, non-profit online platform that enables citizens to start, sign, and promote petitions across the European Union and other countries. With a user base of approximately 15 million people, the platform facilitates grassroots democracy and political participation by providing tools and guidelines for effective petitioning. The website is professionally designed, multilingual, and offers a clear user experience focused on civic engagement and transparency.

O

openPetition

openpetition.de

62

openPetition is a reputable German-based online platform that empowers citizens to create, support, and promote petitions and initiatives. It serves as a bridge between the public and political institutions by forwarding petitions that reach quorum to relevant parliaments. The platform targets a broad audience of citizens interested in civic engagement and political participation, offering multilingual support and a user-friendly interface. Technically, the website employs modern web standards, uses self-hosted analytics for privacy, and maintains good performance and accessibility standards. Security-wise, the site enforces HTTPS and follows several best practices but could enhance its posture by implementing additional security headers and providing explicit incident response contacts. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

R

Rechtsanwaltskanzlei Nolte › ‹ Pustejovsky

np-recht.de

44

Rechtsanwaltskanzlei Nolte › ‹ Pustejovsky is a specialized law firm based in Freiburg, Germany, offering expert legal services in areas such as corporate law, labor law, inheritance law including business succession, family law, data protection, IT law, and intellectual property law. The firm targets both companies and private individuals, positioning itself as a boutique legal service provider with a strong focus on specialized legal fields. Their website reflects a professional and consistent brand image with comprehensive service descriptions and regular legal updates via their blog and social media channels. Technically, the website is built on WordPress with modern SEO and caching plugins, ensuring moderate performance and good mobile optimization. The hosting is managed via kasserver.com, and the site uses HTTPS with a good SSL configuration. However, some security best practices such as security headers and incident response disclosures are missing, which could be improved to enhance the security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of a cookie consent mechanism and security headers are minor gaps in GDPR compliance and security hardening. The WHOIS data aligns well with the website content, showing consistent domain registration and no privacy protection, which supports the legitimacy of the business. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic improvements in privacy compliance and security policies would further strengthen its position and user trust.

M

MINT-Campus Alte Schmelz e.V.

mintcampus.de

55

MINT-Campus Alte Schmelz e.V. is a small, regional non-profit organization based in Germany focused on engaging youth in STEM education and sustainable development. The organization operates a student research and technology center and an open youth workshop, offering educational courses, workshops, and projects such as the EU-funded CERTEB_OPT energy management initiative. The website reflects a professional and consistent brand presence with clear contact information and partnership acknowledgments. Technically, the site is built on the cm4all CMS platform, hosted by Strato, and uses older JavaScript libraries which may pose security risks. The site implements GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security or incident response policies are published. Overall, the website is accessible, content-rich, and trustworthy, but could improve its security posture by updating libraries and adding security headers.

G

Gymnasium Lüchow

gymnasium-luechow.de

46

Gymnasium Lüchow is a medium-sized educational institution in Germany, recognized as an open all-day school and a UNESCO project school. The website provides comprehensive information about the school’s educational offerings, projects, international partnerships (notably Erasmus+), and community engagement. The school targets students, parents, and educators, emphasizing sustainability, cultural education, and social responsibility. Technically, the site is built on TYPO3 CMS, hosted by SchlundTech, and employs modern web technologies with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website reflects a professional and trustworthy educational institution with strong community ties.

FernUniversität in Hagen is Germany's only state distance university, offering a wide range of Bachelor and Master degree programs, continuing education, and academy studies. It serves a broad audience including prospective students, current students, alumni, researchers, and academic staff. The university maintains multiple campus locations across Germany and abroad, emphasizing accessibility and flexibility in education. The website reflects a professional and comprehensive digital presence aligned with its educational mission. Technically, the website employs modern web technologies such as Bootstrap 5 for responsive design, Matomo for privacy-conscious analytics, and SVG graphics for scalable visuals. Hosting appears to be managed via the German Research Network (DFN), supporting reliability and security. The site is well-optimized for mobile devices and accessibility, with clear navigation and rich content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and a designated data protection officer contact. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for a large public educational institution. Strategic improvements in security headers and cookie consent would further strengthen its posture.

C

O Tempo

climadobrasil.com.br

67

Climadobrasil.com.br is a Portuguese-language weather forecasting website primarily serving Brazil and offering meteorological information for over 200,000 cities worldwide. The site provides daily and extended weather forecasts, targeting a general audience interested in climate and weather updates. The business model appears to be advertising-supported, leveraging multiple ad networks and tracking technologies to monetize traffic. The website is hosted on Amazon AWS infrastructure, indicating a reliable hosting environment. Technically, the site uses modern web technologies including JavaScript frameworks, CSS3, and integrates consent management via Didomi SDK, alongside Google Analytics and Google Tag Manager for analytics and marketing purposes. Security posture is adequate with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is basic, with cookie consent mechanisms present but no visible privacy policy or terms of service pages. No contact or business registration information is publicly available on the site, limiting business credibility verification. Overall, the site is professional and functional but could improve transparency and security documentation.