Security Directory

The website extra-plus.de serves as a dedicated portal for supplementary health insurance products offered by Barmenia Versicherungen, a large independent insurance group in Germany. It targets BKK insured customers and provides detailed information on ambulant, dental, hospital, travel, and other supplementary insurance products. The site is well-branded, consistent with the parent company Barmenia, and offers clear contact channels including phone, email, and physical address. The presence of structured data and social media links further reinforces its legitimacy and market presence. Technically, the website employs modern JavaScript libraries such as Slick Slider and FontAwesome, and uses RichFaces indicating a Java Server Faces backend. Usercentrics is integrated for cookie consent management, ensuring GDPR compliance. Google Tag Manager is used for analytics and marketing tags. The site is mobile optimized, accessible, and SEO friendly, with good performance characteristics. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the website branding and domain registration, indicating a trustworthy and legitimate online presence. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with room for improvement in explicit security policy publication and security header implementation.

The website nachhaltige-beschaffung.com is operated by SDG media GmbH and serves as a niche media platform focused on sustainable public procurement in Germany. It offers news, podcasts, digital magazines, and video content aimed at public sector procurement professionals and sustainability advocates. The content is primarily in German and covers topics such as circular economy, sustainable purchasing, and environmental policies. The business model centers on content publishing and information dissemination within the government and non-profit sectors. The company is small-sized and founded in 2019. Technically, the website is built on the Contao Open Source CMS platform and uses common JavaScript libraries such as jQuery, slick slider, and mmenu for UI enhancements. Hosting is likely provided by netcup GmbH, inferred from the nameservers. The site demonstrates moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the site uses HTTPS but lacks DNSSEC and important security headers, which lowers its security posture. No cookie consent mechanism or comprehensive GDPR-compliant privacy policy is present, indicating gaps in privacy compliance. Contact information is clearly provided, enhancing business credibility. No WAF or blocking mechanisms are detected, and the domain registration is consistent and legitimate. Overall, the website is functional and professional but would benefit from improved security headers, privacy compliance, and cookie consent mechanisms to enhance trust and regulatory adherence.

B

backstage.li

backstage.li

50

Backstage.li is a youth-oriented media platform based in Liechtenstein, providing event listings, blog articles, podcasts, and community engagement content targeted at children and young people. The website is built on WordPress and leverages modern web technologies including jQuery, Slick Slider, and analytics tools such as Microsoft Clarity and Plausible Analytics. The platform demonstrates a good level of digital maturity with a professional design, mobile optimization, and structured data implementation. Security posture is solid with HTTPS enforced and standard security headers present, though the absence of visible privacy and cookie policies indicates room for improvement in compliance. Overall, the site is trustworthy and well-positioned within its niche, but should enhance privacy transparency and incident response readiness to strengthen user trust and regulatory compliance.

Universitätsklinikum Frankfurt operates as a leading university hospital in Germany, providing comprehensive patient care, medical research, and education. The website serves multiple audiences including patients, medical professionals, visitors, scientists, and press. It offers detailed information about clinical services, research initiatives, educational programs, and career opportunities. The institution is well-positioned in the healthcare sector with a strong reputation and ISO 9001:2015 certification as a trust indicator. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as jQuery and Slick Slider. The site is mobile-optimized and features good navigation and SEO practices. Performance is moderate, with room for improvement in accessibility and security headers. The hosting and domain registration align with the university's infrastructure, indicating legitimacy. From a security perspective, HTTPS is enforced, and no sensitive data is exposed in the HTML. However, the site lacks explicit security headers, incident response contacts, and vulnerability disclosure mechanisms. Privacy and cookie policies are not found, which may impact GDPR compliance. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and content-rich but would benefit from enhanced privacy compliance and security best practices to improve its security posture and user trust.

S

Sitex Textile Dienstleistungen

sitex.de

50

Sitex Textile Dienstleistungen is a large, family-run German company specializing in comprehensive textile services including rental clothing, laundry, and textile logistics primarily for healthcare, elder care, and industrial sectors. The company operates through a network of 24 locations with 5000 employees, positioning itself as a market leader in textile full supply solutions with a strong emphasis on sustainability and quality. The website reflects a mature digital presence built on WordPress with modern plugins and multimedia content, demonstrating good technical infrastructure and user experience. Security posture is solid with HTTPS, cookie consent, and anti-spam measures, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-aligned with the company's business model and market position.

D

DRF Luftrettung

drf-luftrettung.de

11

DRF Luftrettung is a prominent German non-profit organization specializing in emergency air rescue and patient transport using helicopters and ambulance aircraft. The organization operates a comprehensive digital presence with a well-structured website hosted on HubSpot CMS, featuring extensive information about their services, training academy, maintenance, and career opportunities. The website demonstrates strong digital maturity with modern technologies, consent management via Usercentrics, and integration of analytics and marketing tools such as Google Tag Manager, Facebook Pixel, and Hotjar. Security posture is robust with HTTPS enforcement and security headers, although explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website reflects a trustworthy and professional entity with a clear mission to save lives through air rescue services.

E

EDF power solutions

edf-renouvelables.com

46

EDF power solutions is a large, professional renewable energy company operating primarily in France and internationally as part of the EDF group. The company focuses on developing and operating renewable energy projects including wind (onshore and offshore), solar, energy storage, and power purchase agreements. The website is well-designed, mobile-optimized, and uses modern technologies such as WordPress with Elementor and Yoast SEO. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are lacking. WHOIS data is unavailable, which reduces transparency but the website's branding and social media presence support legitimacy. Overall, the site is trustworthy and compliant with GDPR, serving a broad audience including landowners, farmers, enterprises, and local communities.

W

WindEnergy Hamburg

windenergyhamburg.com

54

WindEnergy Hamburg operates as a premier global event platform dedicated to the wind energy sector, facilitating networking, knowledge exchange, and business development for onshore and offshore wind industries. The website reflects a mature digital presence with comprehensive event information, exhibitor directories, and conference programs, positioning it as a key player in the renewable energy event market. Technically, the site leverages TYPO3 CMS and integrates modern tools such as Google Tag Manager and Usercentrics for analytics and consent management, indicating a commitment to user experience and privacy compliance. Security posture is solid with HTTPS and consent mechanisms, though some security headers could be enhanced. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional site and active social media channels. Strategic recommendations include improving explicit security headers, enhancing accessibility, and publishing clear security policies to bolster trust and compliance.

D

Deutscher Rat für Wiederbelebung – German Resuscitation Council (GRC) e.V.

grc-org.de

11

The Deutscher Rat für Wiederbelebung (German Resuscitation Council, GRC) is a reputable non-profit organization founded in 2007, dedicated to improving resuscitation awareness and training in Germany. The website serves as a comprehensive platform for public education, professional training, scientific publications, and event organization related to resuscitation. It targets both laypersons and medical professionals, emphasizing increasing lay resuscitation rates and public health impact. Technically, the website employs a modern but custom technology stack including jQuery, bxSlider, and Google Analytics with IP anonymization, hosted on rzone.de infrastructure. The site is mobile-optimized and well-structured, providing a good user experience and SEO presence. However, it lacks some advanced security headers and formal security policies. From a security perspective, the site uses HTTPS and basic privacy compliance mechanisms such as cookie consent and a detailed privacy policy. There is no visible incident response or vulnerability disclosure information, which could be improved. The WHOIS data aligns well with the organization's public information, indicating legitimacy and consistency. Overall, the website is professional, trustworthy, and well-maintained, with minor recommendations to enhance security posture and transparency. The risk level is low, but improvements in security headers and incident response disclosures would strengthen trust and compliance.

T

Thüringer Theaterverband e.V.

thueringer-theaterverband.de

50

Thüringer Theaterverband e.V. is a regional non-profit organization focused on supporting and promoting theater and cultural activities in the German state of Thuringia. The website serves as a portal for information about events, membership, festivals, and theater-related services. It targets theater enthusiasts, artists, and cultural institutions within the region. The organization maintains a moderate digital presence with integration of social media and a dedicated theater portal partner site. Technically, the website is built on the Contao Open Source CMS platform, utilizing several LMF modules for UI components and sliders. The site employs modern JavaScript libraries such as jQuery and Slick Slider, and it is served over HTTPS with a valid SSL certificate. The site includes a cookie consent mechanism compliant with GDPR, using Matomo for analytics with moderate user tracking. From a security perspective, the website demonstrates good practices including HTTPS enforcement and CSRF protection cookies. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected. Privacy compliance is supported by a DSGVO & Impressum page, but no dedicated privacy officer or vulnerability disclosure information is provided. Overall, the website is professionally designed with good content quality and user experience. It is trustworthy and safe for general audiences. Strategic improvements could focus on enhancing security headers, publishing clear security policies, and providing direct contact information for incident response and data protection inquiries.

D

diagnose:media

diagnose-media.org

9

diagnose:media is a German non-profit initiative focused on promoting competent and self-determined use of digital media by children and adolescents. The organization supports parents, schools, and affected individuals while networking experts and specialized institutions. Their core mission is to highlight the negative side effects of digital media and recommend measures to avoid or mitigate risks, especially concerning psychosocial aspects, communication behavior, addiction potential, privacy protection, and health impacts from mobile radiation. The website offers educational articles, publications, events, and expert lectures targeted primarily at families and educational institutions. Technically, the website employs a range of JavaScript libraries including jQuery, Slick Slider, Fancybox, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized with a responsive design and clear navigation. However, some technologies like jQuery are outdated, and no explicit CMS or hosting provider information is available. Performance is moderate, and SEO and accessibility are basic but functional. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks visible security headers and cookie consent mechanisms despite using tracking scripts. No vulnerabilities or exposed sensitive data were detected in the HTML content. WHOIS data is unavailable or protected, which limits domain trust verification and reduces the overall legitimacy score. The site does not publish security policies or incident response information. Overall, diagnose:media presents a professional and trustworthy educational resource with good content quality and user experience. The main risks relate to incomplete WHOIS transparency and minor security best practice gaps. Strategic improvements in security headers, updated libraries, and privacy compliance would enhance trust and resilience.

B

Bayerische Architektenkammer

bayerische-architektenkammer.de

51

The Bayerische Architektenkammer website serves as the official online presence of the Bavarian Chamber of Architects, providing extensive resources and services for architects, planners, and the public in Bavaria, Germany. The site offers comprehensive information on membership, professional development, events, publications, and architectural projects, positioning itself as a key regional authority in the architecture and planning sector. The website is built on TYPO3 CMS, leveraging modern web technologies and accessibility tools such as ReadSpeaker and text zoom features, ensuring a user-friendly and inclusive experience. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance including GDPR-aligned policies and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature and well-maintained digital infrastructure. Overall, the site reflects a professional, trustworthy, and authoritative organization with a clear focus on serving its professional community and stakeholders.

D

Delta Reisen

luxusni-lyzovani.cz

56

The website www.luxusni-lyzovani.cz operates as an online travel agency specializing in luxury ski vacations primarily in the European Alps, targeting Czech-speaking customers. It offers hotel bookings and ski packages in Austria, Italy, France, and other destinations, supported by clear contact information and customer support via phone. The business appears to be a small-sized entity named Delta Reisen, with a professional and consistent brand presentation. Technically, the site uses modern JavaScript libraries such as jQuery and OpenLayers, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and is built on the CeSYS travel agency platform. The website is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and published privacy or terms of service policies. The absence of WHOIS data reduces domain trustworthiness, though no malicious or suspicious content is detected. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security transparency.

D

dbx

dbxpro.com

68

dbx is a well-established professional audio brand specializing in modular processors, loudspeaker management, and audio accessories. The company operates under the Harman Professional Solutions umbrella, leveraging a strong market position and a legacy dating back to 1995. Their website reflects a mature business with a clear focus on audio professionals and businesses requiring high-quality audio equipment. The product range includes the 500 Series modular processors and DriveRack loudspeaker management systems, supported by comprehensive multimedia content and customer engagement channels. Technically, the website employs a modern technology stack including jQuery, Google Analytics, and HubSpot marketing tools, hosted on AWS infrastructure. The site is mobile-optimized with good SEO and accessibility features, providing a positive user experience. Security practices include HTTPS enforcement, CSRF protection, and domain transfer restrictions, although there is room for improvement in DNSSEC and HTTP security headers. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact limits transparency. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. The domain WHOIS data aligns with the brand's history and legitimacy, reinforcing trustworthiness. Overall, dbx.com represents a professional, secure, and compliant online presence for a reputable audio technology company. Strategic enhancements in security transparency and DNS security could further strengthen their posture.

R

Revel

revelspeakers.com

67

Revel is a premium loudspeaker brand specializing in high-fidelity audio products designed for audiophiles and luxury consumers. The website showcases a well-structured e-commerce platform built on Salesforce Commerce Cloud, featuring rich multimedia content and a dealer network. The technical infrastructure includes modern web technologies and compliance tools such as OneTrust for cookie consent and Google Tag Manager for analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, suggesting privacy protection or registration issues, but the brand's association with Harman International supports legitimacy. Overall, the site is professional, secure, and privacy-conscious, serving a niche market effectively.

P

Plastic-51

plastic-51.com

47

Plastic-51 is a small local business based in Murmansk, Russia, specializing in the production of plastic cards, printing, and design services. The company has been operating for over 5 years and offers a broad range of products including plastic cards with barcodes and magnetic stripes, business cards, banners, calendars, and website development through a partner entity. The website is built on OctoberCMS and uses common web technologies such as jQuery and Bootstrap, with Yandex Metrika for analytics. The site is well-structured, mobile-optimized, and provides multiple contact channels including phone, email, and contact forms. However, it lacks explicit privacy and cookie policies, which impacts its compliance posture.

T

Talentech

hr-manager.dk

63

Talentech is a well-established Danish technology company specializing in providing a comprehensive SaaS HR platform tailored for the Nordic market. With over 20 years of experience and a user base exceeding 600,000, Talentech positions itself as a leading provider of recruitment, onboarding, and HR management solutions enhanced by AI capabilities. The website reflects a mature digital presence with multi-language support, customer testimonials, and a clear focus on GDPR compliance and data-driven HR processes. Technically, the site is built on WordPress with modern SEO and performance optimizations, leveraging tools like Google Tag Manager and Google Optimize for analytics and marketing. Security posture is solid with HTTPS and domain protection measures, though DNSSEC is not enabled and some security headers are missing. Overall, the company demonstrates strong business credibility and digital maturity.

N

north.io

north.io

64

north.io is a specialized technology company focused on transforming geospatial and ocean big data into actionable insights. Their market position is that of a niche specialist serving organizations requiring detailed geodata clarity for large-scale projects, particularly in the energy sector. The website demonstrates a professional digital presence built on HubSpot CMS with moderate performance and good mobile optimization. However, the absence of explicit privacy and cookie policies, as well as contact information, indicates gaps in privacy compliance and user trust facilitation. Security posture is adequate with HTTPS enabled but could be improved by enabling DNSSEC and adding security headers. Overall, the domain registration is privacy protected but consistent with a legitimate business given its age and country alignment.

D

Diagnose-Funk e.V.

diagnose-funk.org

47

Diagnose-Funk e.V. is a well-established German non-profit environmental and consumer protection organization focused on educating the public about the risks of electromagnetic fields, including mobile communications and WLAN radiation. The organization provides comprehensive information, advocacy, and publications aimed at promoting health-conscious telecommunications technologies. Their target audience includes affected individuals, environmental advocates, municipalities, and scientific communities. The website is professionally designed with good navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses a variety of JavaScript libraries and privacy-respecting Matomo analytics, hosted on Hostpoint AG servers. Security posture is solid with HTTPS enabled, but lacks some security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. WHOIS data confirms the domain's legitimacy and long-term establishment. Overall, the site is trustworthy and serves as a valuable resource in its niche.

E

Erziehungskunst Waldorf Education

artofeducating.org

52

The website www.artofeducating.org is a professionally structured platform dedicated to Waldorf education, providing news, articles, and educational resources primarily targeting educators, parents, and the Waldorf school community. It operates on TYPO3 CMS and employs modern frontend technologies such as Slick Slider and FontAwesome, ensuring a good user experience with mobile optimization and clear navigation. However, the absence of WHOIS data limits the ability to verify domain legitimacy and ownership, which impacts trustworthiness from a security perspective. The site lacks explicit privacy, cookie, and terms of service policies, which are critical for compliance with data protection regulations such as GDPR. No direct contact emails or phone numbers are found, with contact facilitated via a form. Security headers and incident response information are also missing, indicating room for improvement in security posture.

L

LAG Soziokultur Thüringen e.V.

soziokultur-thueringen.de

71

LAG Soziokultur Thüringen e.V. is a regional non-profit association dedicated to representing and supporting socio-cultural initiatives in the German state of Thüringen. The organization provides key services including cultural consulting, education, funding support, public relations, and lobbying to strengthen the socio-cultural landscape. Their market position is that of a leading regional advocate and service provider for socio-cultural actors. The website is professionally designed, content-rich, and well-structured, targeting cultural stakeholders and the general public interested in socio-cultural projects. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery, Slick Slider, and Google Maps API for enhanced user experience. The site is mobile-optimized and includes accessibility features, though some improvements could be made. Performance is moderate, with no major technical issues detected. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and includes CAPTCHA to prevent spam. Cookie consent is implemented with detailed categories, reflecting GDPR compliance. However, there is no publicly available formal security policy or incident response information, which could be improved to enhance trust and preparedness. Overall, the website is trustworthy, safe, and compliant with privacy regulations. It effectively serves its target audience with relevant content and services. Strategic recommendations include publishing a formal security policy, adding a security.txt file, enhancing security headers, and improving accessibility to further strengthen the site's security posture and user experience.

N

Nakladatelství Fraus, s.r.o.

skolasnadhladom.sk

54

Škola s nadhľadom is an educational online platform operated by Nakladatelství Fraus, s.r.o., targeting Slovak primary and secondary school students and their parents. The website offers interactive exercises linked with printed workbooks, aiming to support learning in various subjects such as mathematics, physics, chemistry, biology, geography, and Slovak language. The platform is positioned as a trusted educational resource with a professional design and consistent branding, supported by partnerships with recognized educational entities. Technically, the site employs modern JavaScript libraries and Google Tag Manager for analytics, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. Overall, the site demonstrates a mature digital presence suitable for its educational mission.

B

Bund der Freien Waldorfschulen e.V.

erziehungskunst.de

48

Erziehungskunst waldorf.leben is a German magazine dedicated to Waldorf pedagogy, published by the Bund der Freien Waldorfschulen e.V. The website serves educators, parents, and the Waldorf community by providing news, articles, and educational resources related to Waldorf education. It maintains a consistent brand presence with social media integration and structured content navigation. Technically, the site is built on TYPO3 CMS, using modern frontend libraries such as Slick Slider and FontAwesome, hosted on DomainControl nameservers. The site is mobile-optimized and SEO-friendly but lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security headers are not evident, and no incident response or vulnerability disclosure information is provided, indicating room for improvement in security posture. Overall, the website is professional, content-rich, and trustworthy, with a moderate technical and security maturity level.

H

Hearst Networks Germany GmbH & Co. KG

hearstnetworks.de

50

Hearst Networks Germany GmbH & Co. KG operates prominent Pay-TV channels and streaming services in the German-speaking market, including The HISTORY Channel and Crime + Investigation. As part of Hearst Networks EMEA, the company leverages content from A+E Global Media and local productions to serve a broad audience interested in factual entertainment. The website reflects a professional media business with consistent branding and clear business information. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates a comprehensive consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the site is well-structured, user-friendly, and trustworthy, supporting the company's market position as a regional media operator.

C

Crime + Investigation

crimeandinvestigation.de

52

Crime + Investigation is a specialized True Crime TV channel serving Germany, Austria, and Switzerland, offering pay-TV and streaming services including partnerships with providers like Sky and Amazon Prime Video Channels. The website reflects a professional media outlet with a focus on True Crime documentaries, podcasts, and related content, targeting German-speaking audiences interested in crime investigation media. The business operates within the media sector and is supported by partnerships with AE Networks and related entities. Technically, the site is built on TYPO3 CMS with modern web technologies and includes a comprehensive cookie consent mechanism, social media integration, and advertising via Google AdSense and Facebook Pixel. Security posture is good with HTTPS, security headers, and reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-branded, and compliant with GDPR requirements.

H

Hearst Networks Germany GmbH & Co. KG

aenetworks.de

50

Hearst Networks Germany GmbH & Co. KG operates Pay-TV channels and streaming services focused on factual entertainment in the German-speaking market. As part of Hearst Networks EMEA, it leverages content from A+E Global Media and local productions to serve a niche audience interested in documentary and factual programming. The website is built on TYPO3 CMS and integrates modern web technologies including jQuery, Slick Slider, and consent management platforms, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site presents a professional and trustworthy front with good compliance to GDPR and privacy standards.

T

The HISTORY Channel

history.de

56

The HISTORY Channel (www.history.de) is a German-language pay-TV broadcaster specializing in history documentaries and related educational content. It offers traditional TV programming alongside streaming services such as HISTORY Play via Amazon Prime Video Channels. The website demonstrates a professional media presence with consistent branding, a clear target audience of general viewers interested in history, and a business model focused on content distribution through multiple platforms. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates third-party services for analytics, advertising, and consent management. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and use of Google reCAPTCHA, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the German media market.

MESNAC CO., LTD. is a large, established international high-tech enterprise group founded in 2000 and developed by Qingdao University of Science and Technology. The company specializes in smart rubber machinery, new materials, and emerging business sectors such as industrial IoT and environmental protection, serving a global industrial audience. Their market position is strong within the rubber machinery smart manufacturing industry, supported by multiple global R&D centers and a broad patent portfolio. Technically, the website employs a modern JavaScript and CSS stack including Bootstrap, jQuery, and various UI libraries, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS usage but lacks explicit security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is professional and trustworthy but could improve transparency and security practices.

T

The HISTORY Channel

history.com

56

The HISTORY Channel website (www.history.de) serves as the German-language digital presence for a pay-TV channel specializing in history documentaries and related content. It offers TV programming schedules, streaming options via HISTORY Play, educational materials, and a blog. The site targets a general audience interested in history and documentary content, positioning itself as a reputable media provider in the German market. The business model revolves around pay-TV subscriptions and digital streaming partnerships, notably with Amazon Prime Video Channels. The website is professionally designed, with consistent branding and comprehensive content that supports its market position.

PEAR s.r.o. is a Czech software company specializing in reservation and economic systems for the travel industry, with over 25 years of experience. Their website presents a professional image targeting travel agencies, tour operators, and related sectors. The company offers a range of software products and services including reservation systems, economic systems, custom software development, training, and support. The website is built on TYPO3 CMS and uses common web technologies such as jQuery and Google Analytics. While the site is content-rich and well-structured, it lacks visible privacy and cookie policies, which is a compliance concern. The absence of WHOIS data limits domain trust verification, but the presence of ISO certifications and client references supports business credibility.

E

EPFIF

epfif.fr

57

EPF Ile-de-France (EPFIF) is a public land operator dedicated to supporting the development of housing and economic projects in the Ile-de-France region. It plays a key role in mobilizing land, combating substandard housing, and requalifying degraded properties. The organization is positioned as a major public entity with a medium-sized operational scale, serving local authorities and the public sector. The website reflects a professional and comprehensive digital presence, leveraging WordPress CMS with modern plugins and SEO tools to provide rich content and user-friendly navigation. Social media integration and official publications enhance its credibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. The absence of WHOIS data limits domain trust verification but does not detract significantly from the overall legitimacy given the official nature of the content and presence. Overall, the site is well-structured, compliant with privacy regulations, and serves its public sector mission effectively.

E

Energy Well - small modular nuclear reactor

energywell.cz

57

The website www.energywell.cz presents a business focused on the development of a fourth generation small modular nuclear reactor characterized by high passive safety and innovative technologies. The site content is professionally designed and targeted at a general audience interested in advanced energy technologies. However, the absence of WHOIS registration data and lack of contact or policy information limits the ability to fully verify the business legitimacy and compliance. Technically, the site uses modern web fonts and standard web technologies but lacks visible security headers and privacy compliance mechanisms. The security posture is weak due to missing security best practices and absence of HTTPS verification in the provided data. Overall, the site is accessible and content-rich but requires improvements in transparency, security, and compliance to enhance trust and reduce risk.

C

CICRR Czech International Centre of Research Reactors

cicrr.cz

58

The Czech International Centre of Research Reactors (CICRR) operates as a significant national research infrastructure focusing on nuclear research reactors and supporting scientific facilities. The website presents detailed information about its reactors LVR-15, LR-0, and JHR-CZ, along with associated laboratories and analytical facilities, targeting the scientific and energy research community. The organization appears to hold an important position within the Czech Republic's energy and research sectors. Technically, the website employs modern web standards including HTML5, CSS3, and JavaScript, with fonts served via Bunny Fonts and content delivered through Bunny CDN. The site is mobile-optimized with good SEO practices but lacks advanced frameworks or CMS indications. Performance is moderate, and accessibility is basic. From a security perspective, the site lacks visible security headers and does not provide privacy, cookie, or incident response policies, which are critical for compliance and trust. No WHOIS data is available, suggesting privacy protection or domain registration issues, but the website content aligns with a legitimate research entity. No WAF or blocking mechanisms were detected, and no tracking or advertising scripts are present, indicating minimal user tracking. Overall, the site is professional and content-rich but would benefit from enhanced security practices, clear privacy and contact information, and WHOIS transparency to improve trust and compliance.

M

Moveo AS

moveo.no

60

Moveo AS is a Norwegian IT service provider specializing in effective and secure IT solutions with over two decades of experience. Their offerings include Microsoft cloud services, IT hardware, network infrastructure, security, consulting, and training, targeting businesses primarily in maritime, aquaculture, industry, and commercial sectors. The company positions itself as a reliable partner focused on flexibility, efficiency, and security. Technically, the website is built on WordPress with modern plugins and frameworks, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements in security headers and privacy compliance are recommended. Overall, the website reflects a professional and trustworthy business presence, though the lack of WHOIS transparency and cookie consent mechanisms slightly reduce compliance and trust scores.

L

LWSA

lwsa.tech

59

LWSA is a Brazilian technology ecosystem company founded in 2023, focused on providing integrated solutions to help businesses start and prosper through technology. Their portfolio covers commerce, management, logistics, financial services, and digital presence, supported by a suite of subsidiary brands such as Locaweb, Bling, Tray, and others. The company positions itself as a large enterprise with a comprehensive service offering targeting businesses seeking digital transformation and operational efficiency. Technically, the website is built on WordPress with modern plugins for SEO and performance optimization. Hosting is provided by Locaweb, consistent with the parent company affiliation. The site is mobile-optimized and uses Google Analytics and Tag Manager for tracking. While performance is moderate, the technical infrastructure is solid and professionally implemented. From a security perspective, the site uses HTTPS with domain locks to prevent unauthorized transfers or updates. However, DNSSEC is not enabled, and security headers are not explicitly present, indicating room for improvement. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism or explicit GDPR compliance indicators. No incident response or vulnerability disclosure information is available. Overall, LWSA presents a trustworthy and professional digital presence with strong business credibility. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust. The domain registration is consistent with the business profile, supporting legitimacy.

D

Defendable

defendable.no

72

Defendable is a prominent Norwegian cybersecurity company founded in 2021, offering a broad range of services including security monitoring, advisory, incident response, and security testing. Positioned as one of Norway's largest cybersecurity firms, it targets businesses seeking comprehensive cyber defense solutions. The website is professionally designed using HubSpot CMS, featuring multilingual support and a clear service structure. Technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager and reCAPTCHA Enterprise, indicating a mature digital presence. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and use of security best practices, though explicit security policies and vulnerability disclosures are absent. Overall, the site reflects a trustworthy and professional business with room for enhanced transparency in security and compliance documentation.

Primatour s.r.o. is a Slovak travel agency based in Trnava, offering a wide range of holiday packages including last minute deals, exotic vacations, family and adult-only hotels, and cruises. The company emphasizes 20 years of experience and positions itself as a trusted provider in the Slovak travel market. Their website is well-structured, professionally designed, and targets Slovak-speaking travelers seeking vacation options. The business model revolves around travel package sales and customer service with a strong digital presence including social media and newsletter marketing. Technically, the website leverages modern web technologies such as jQuery, Bootstrap, and Slick Slider, integrated with a specialized travel agency system (CeSYS). It uses CDN-hosted assets and includes marketing and analytics tools like Google Tag Manager, Facebook Pixel, and Mailchimp. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms compliant with GDPR. However, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the business claims, supporting legitimacy and trustworthiness. Overall, Primatour's website demonstrates a solid digital maturity level with good privacy compliance and business credibility. Strategic improvements could focus on enhancing security headers, incident response transparency, and accessibility features to further strengthen their security posture and user trust.

K

Karl Kahane Foundation

karlkahanefoundation.org

45

The Karl Kahane Foundation is a Swiss-based charitable organization established in 1991, focusing on social inclusion, accessibility, and migration-related projects primarily in Europe, Turkey, the Middle East, and North Africa. The foundation operates as a non-political, non-religious entity supporting vulnerable communities through funding and partnerships with reputable NGOs. The website reflects a professional and consistent brand presence, with clear information about its founder, board members, and partners. Technically, the site is built on WordPress with standard SEO and analytics tools, offering good mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable or malformed, likely due to privacy protection, which is common for non-profits but slightly reduces trust. Overall, the site is trustworthy and well-positioned within its niche, though improvements in privacy compliance and security best practices are recommended.

D

DJK Landesverband NRW e.V.

djk-vernetzt.de

46

DJK Landesverband NRW e.V. is a non-profit sports association based in Germany, focused on promoting values in sports through seminars, community projects, and educational initiatives. The organization targets sports clubs, childcare facilities, and sports enthusiasts primarily in the North Rhine-Westphalia region. Their offerings include projects like #WERTEkeeper, KiTa aktiv, and vollWERTsport, emphasizing respect, fair play, and human dignity in sports. The website reflects a consistent and professional brand image with clear navigation and relevant content for its audience. Technically, the website is built on TYPO3 CMS with a Bootstrap package, incorporating modern frontend technologies such as Slick Slider for interactive content. The site is mobile-optimized, accessible, and performs moderately well. It employs HTTPS with a good SSL configuration and includes a cookie consent mechanism compliant with GDPR. However, no advanced security headers or incident response information are published. From a security perspective, the site demonstrates good practices like HTTPS enforcement and cookie consent but lacks explicit security policies and vulnerability disclosure mechanisms. No vulnerabilities or exposed sensitive data were detected. The domain registration data is consistent and trustworthy, supporting the legitimacy of the organization. Overall, the website presents a low-risk profile with a solid business credibility and privacy compliance posture. Strategic improvements could focus on enhancing security transparency and incident response readiness to further strengthen trust and compliance.

F

FREUDENBERG Gesellschaft Natur & Kunst gemeinnütziger e.V.

schlossfreudenberg.de

50

Schloss Freudenberg is a well-established non-profit cultural and educational institution located in Wiesbaden, Germany. It offers a unique experiential field for senses and thinking, hosting concerts, theater performances, seminars, and special exhibitions. The organization also provides gastronomy services including a café and dark gastronomy experiences. The website reflects a strong community and educational focus, targeting families, schools, seniors, and cultural visitors. The business model centers on cultural enrichment and experiential learning, supported by event hosting and ticket sales. Technically, the website is built on the TYPO3 CMS platform, utilizing modern frontend libraries such as Leaflet.js and Mapbox for interactive maps, and is hosted via domaincontrol.com nameservers. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security-wise, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR, but lacks explicit security policy and incident response information. No critical vulnerabilities or suspicious elements were detected, indicating a solid security posture for a non-profit cultural website. Overall, the website is professional, trustworthy, and well-aligned with its mission and audience.

G

Garpa Garten & Park Einrichtungen GmbH

garpa.de

11

Garpa Garten & Park Einrichtungen GmbH is a German-based premium retailer specializing in exclusive garden and luxury outdoor furniture. The company offers a wide range of weatherproof and high-quality terrace furniture, targeting consumers and professionals seeking premium outdoor living solutions. Their business model combines e-commerce with physical showrooms located in attractive European locations, emphasizing personalized consultation, delivery, and assembly services. The website reflects a strong market position in the niche of luxury garden furniture with trust signals such as long warranties and certified materials. Technically, the website employs modern web technologies including Google Tag Manager, Matomo analytics, and lazy loading for images, ensuring good performance and mobile optimization. The site is well-structured with comprehensive metadata and SEO optimization. Privacy compliance is robust, featuring a detailed cookie consent mechanism and a comprehensive privacy policy in German. However, no explicit security policy or incident response information is published. From a security perspective, the site uses HTTPS with no visible critical vulnerabilities or exposed sensitive data. The cookie consent mechanism is granular and GDPR compliant. The absence of security headers and a vulnerability disclosure policy are areas for improvement. WHOIS data is consistent and trustworthy, with no privacy protection masking registrant details, supporting the legitimacy of the domain. Overall, Garpa.de presents a professional, secure, and privacy-conscious online presence suitable for its premium retail market. Strategic improvements in security policy transparency and header implementation could further enhance trust and security posture.

H

Haldenslebener Recycling- und Umweltdienst GmbH

umweltdienst-erxleben.de

42

Haldenslebener Recycling- und Umweltdienst GmbH is a medium-sized environmental services company based in Germany, specializing in recycling, container services, machinery rental, and related activities. As part of the STORK Unternehmensgruppe since 2016, it benefits from group synergies and holds ISO 14001 certification, underscoring its commitment to environmental management. The company targets construction firms, private builders, and industrial clients with a broad service portfolio including waste management and raw material supply. Technically, the website is built on TYPO3 CMS with modern frontend technologies, offering a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and advanced security headers. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, with no signs of suspicious or adult content.

R

Recycling OWL GmbH

recycling-owl.de

44

Recycling OWL GmbH is a medium-sized company specializing in the recycling, treatment, and recovery of mineral materials with a focus on metal recovery. As part of the STORK Unternehmensgruppe since 2018, it operates a strategically located facility in Hille with trimodal transport connections (road, rail, and waterway), enabling efficient and environmentally friendly logistics. The website reflects a professional business presence with clear service offerings and a focus on sustainability and logistics efficiency. Technically, the site is built on TYPO3 CMS with modern frontend technologies and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies or incident response information. Overall, the domain registration aligns with the business claims, and no suspicious patterns were detected. The site is free from adult or questionable content and maintains a high trustworthiness level.

S

STORK Umwelt GmbH

stork-leipzig.de

46

STORK Umwelt GmbH is a medium-sized German company specializing in recycling, waste management, and resource recovery, primarily serving the Leipzig/Halle region. The company operates under the umbrella of the STORK Unternehmensgruppe and offers a range of services including container services, mobile processing technology, and civil engineering. The website reflects a professional and consistent brand image with clear communication of services and certifications such as ISO 14001:2015. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes a cookie consent mechanism, indicating a reasonable level of digital maturity. Security posture is adequate with HTTPS and cookie consent but lacks explicit security policies and advanced security headers. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

B

BBW Recycling Mittelelbe GmbH

bbw-recycling.de

46

BBW Recycling Mittelelbe GmbH is a medium-sized German company specializing in the recycling of construction waste and supply of recycled building materials. The company operates a large facility with advanced processing capabilities, serving construction and waste management sectors. Their website is professionally designed using TYPO3 CMS, featuring multilingual support and clear navigation. The technical infrastructure is modern with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, though lacking some advanced security headers and explicit security policies. Overall, the website reflects a trustworthy and compliant business presence with room for security and legal documentation improvements.

S

STORK Unternehmensgruppe

stork-gruppe.de

44

STORK Unternehmensgruppe is a medium-sized, well-established European service company specializing in waste disposal and recycling, with over 30 years of operational history. The group comprises 23 companies across 13 locations, employing more than 460 staff. Their core competencies include mineral waste processing, mobile and stationary recycling technologies, and specialized services such as industrial cleaning, demolition, and hazardous material remediation. The company targets B2B clients across Europe, positioning itself as a leader in efficient metal recovery and sustainable environmental solutions. Technically, the website is built on TYPO3 CMS, featuring modern web technologies and a responsive design, though some performance and accessibility improvements are possible. Security posture is adequate with HTTPS and cookie consent implemented, but lacks explicit security headers and published incident response policies. Overall, the domain and website content align well, supporting legitimacy and trustworthiness.

S

STORK Umweltdienste GmbH

stork-umwelt.de

46

STORK Umweltdienste GmbH is a medium-sized German company specializing in recycling, waste disposal, and raw material recovery with over 30 years of experience. The company operates from Magdeburg with a strong focus on environmental sustainability, supported by ISO 14001 certification. Their services include recycling, container services, mobile processing technology, and logistics leveraging trimodal transport connections. The website is professionally designed using TYPO3 CMS, providing clear navigation and multilingual support. Contact information and social media presence enhance business credibility. Security posture is good with HTTPS and cookie consent mechanisms, though no explicit security policy or incident response contacts are published. Overall, the website reflects a trustworthy and established business with a solid digital presence.

K

Kulturkirche St. Stephani

kulturkirche-bremen.de

49

Kulturkirche St. Stephani is a small non-profit cultural organization based in Bremen, Germany, focused on providing a diverse program of cultural events including art exhibitions, concerts, and community activities. The website reflects a well-structured and professionally designed platform that serves its target audience effectively. The organization is affiliated with the Evangelische Studierenden Gemeindschaft and Kirche Bremen, enhancing its credibility and community reach. Technically, the website is built on TYPO3 CMS and utilizes modern JavaScript libraries such as jQuery, Slick Slider, and Masonry for interactive and responsive user experience. The site includes a cookie consent mechanism and integrates Matomo analytics for user behavior tracking, demonstrating a commitment to privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site enforces HTTPS and employs cookie consent but lacks explicit security headers and incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's claims, showing legitimate domain registration without privacy protection, appropriate for a public cultural entity. Overall, the website presents a trustworthy and professional digital presence with room for improvement in security policies and accessibility. Strategic recommendations include enhancing security headers, publishing incident response information, and improving accessibility compliance to strengthen trust and resilience.

S

Schwing Stetter (UK) Ltd

schwing-stetter.co.uk

51

Schwing Stetter (UK) Ltd is a well-established manufacturer and supplier specializing in concrete production and placement equipment, including concrete pumps, batching plants, truck mixers, and concrete recyclers. The company positions itself as a global leader in the concrete equipment industry, serving primarily construction professionals and contractors in the UK. Their business model focuses on manufacturing, distribution, and after-sales services, supported by a professional and content-rich website that reflects their market position. Technically, the website employs modern web technologies such as Google Tag Manager, reCAPTCHA, and service workers, ensuring a secure and user-friendly experience. The site is mobile-optimized with good SEO practices and clear navigation, although some improvements in accessibility and security headers could enhance the overall technical posture. From a security perspective, the site uses HTTPS and implements reCAPTCHA on its contact forms, indicating a baseline security awareness. However, the absence of explicit security policies, incident response contacts, and security headers suggests room for improvement in security maturity. The WHOIS lookup failed due to querying a subdomain rather than the registered domain, but this does not detract from the legitimacy of the business as evidenced by the professional website and consistent branding. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to further strengthen the security posture.