Security Directory

V

VGH Versicherungen

vgh.de

56

VGH Versicherungen is a well-established insurance provider based in Niedersachsen, Germany, with a history dating back to 1750. The company offers a broad range of insurance products for private individuals, businesses, and farmers, including vehicle, property, liability, health, and retirement insurances. Their market position is strong regionally, supported by a comprehensive digital presence and customer service infrastructure. The website reflects a professional and trustworthy brand with clear navigation and extensive product information. Technically, the website employs modern web technologies including JavaScript frameworks, Pimcore CMS, and integrates consent management via Usercentrics. It uses Google Tag Manager for analytics and marketing, and the site is mobile-optimized with good accessibility and SEO practices. The technical infrastructure appears robust, though hosting provider details are not explicitly identified. From a security perspective, the site enforces HTTPS, implements key security headers, and manages cookie consent properly. No critical vulnerabilities or exposed sensitive data were detected. However, explicit incident response contacts and vulnerability disclosure mechanisms are not publicly available, which could be improved to enhance security transparency. Overall, the site is secure, professional, and compliant with GDPR, making it a low-risk platform for users. Strategic recommendations include publishing incident response contacts, adding a security.txt file, and potentially showcasing security certifications to further build trust.

Z

Zentrum für ethische Fragen im 21. Jahrhundert (ZEF21)

zef21.de

51

ZEF21 is an academic and educational center focused on ethical questions relevant to the 21st century. It offers public events, an ethics academy for universities, and publishes materials to stimulate discourse. The organization targets students, academics, and ethics enthusiasts primarily in Germany, especially Baden-Württemberg. The website is professionally designed using TYPO3 CMS, hosted by Cloudpit, and optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security policies and incident response contacts are absent. Overall, the site presents a trustworthy and credible academic resource with clear contact details and social media presence.

The Federal Ministry of Food and Agriculture (BMLEH) operates an official government website providing comprehensive information and public services related to food, nutrition, consumer protection, farming, animals, rural regions, forests, fisheries, international affairs, and digitalisation. The site targets the general public, stakeholders in agriculture and food sectors, and international partners. It serves as a key communication platform for the ministry's activities and policies. Technically, the website is built on the Government Site Builder CMS, a content management system tailored for federal administration websites. It employs modern web standards including responsive design, SVG graphics, and Matomo analytics for privacy-respecting visitor statistics. The site is mobile-optimized and accessible, with a clear navigation structure and comprehensive metadata. From a security perspective, the website enforces HTTPS with strong SSL configuration and implements multiple security headers such as Content-Security-Policy and X-Frame-Options. A cookie consent banner provides granular control over necessary, statistical, social media, and third-party cookies, demonstrating good privacy compliance aligned with GDPR. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the website is trustworthy, professional, and safe for general audiences. It lacks direct contact emails or phone numbers in the HTML but provides a contact form. The domain WHOIS data is consistent with a government entity, supporting legitimacy. Strategic recommendations include publishing security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and security posture.

T

Tellpass

tellpass.ch

67

Tellpass.ch is a professionally designed website offering multi-day travel tickets for the Central Switzerland region, enabling flexible travel by bus, train, ship, and mountain railways. The site targets tourists and local travelers seeking convenient access to regional attractions and transportation. The business operates in the transportation and hospitality sectors, providing ticket sales and related services such as vouchers and hotel packages. Technically, the site uses modern JavaScript libraries, SVG graphics, and integrates Google Tag Manager and Cookiebot for analytics and cookie consent, respectively. The website is mobile-optimized with good navigation and content relevance. Security posture is adequate with HTTPS and cookie consent but lacks published privacy policies, terms of service, and incident response information, which are recommended for compliance and trust. WHOIS data aligns with the business's regional focus and shows no privacy protection, supporting legitimacy. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

P

PLAYMIT GmbH

playmit.com

60

PLAYMIT GmbH operates Austria's largest free learning and quiz portal aimed at career starters and students seeking apprenticeships and jobs. The platform offers gamified quizzes, rankings, certificates, and job listings, positioning itself as a leading educational resource certified by the Austrian Federal Ministry of Education. The website is professionally designed, mobile-optimized, and provides a seamless user experience with clear navigation and relevant content. Technically, the site uses modern frontend technologies including Alpine.js and Tailwind CSS, and employs Matomo analytics with user consent, reflecting a mature digital infrastructure. Security posture is good with HTTPS and CSRF protections, though explicit security headers and incident response information are absent, representing areas for improvement. Overall, the site is trustworthy, privacy compliant, and well-positioned in the Austrian education sector.

I

idealo internet GmbH

idealo.de

71

idealo.de is Germany's leading price comparison website, offering consumers access to over 350 million offers from more than 50,000 shops. Owned by Axel Springer SE, idealo has established itself as a market leader in the e-commerce price comparison sector since its founding in 2000. The platform provides expert product advice and comprehensive price comparisons, targeting general consumers primarily in Germany and other European countries. The website is professionally designed with excellent user experience, mobile optimization, and clear navigation, supporting its strong market position. Technically, idealo.de leverages modern web technologies including React and Next.js frameworks, hosted on Amazon AWS infrastructure. The site integrates Usercentrics for GDPR-compliant cookie consent management and uses Google Tag Manager for analytics. Performance is fast, and accessibility features are well implemented. The use of SVG logos and fonts enhances branding consistency and load efficiency. From a security perspective, idealo.de enforces HTTPS with strong SSL configuration and implements key security headers such as Content Security Policy and Strict-Transport-Security. No exposed sensitive data or vulnerable libraries were detected in the HTML content. However, the site lacks a dedicated security policy or incident response page, which could enhance transparency and preparedness. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no suspicious registration patterns. Overall, idealo.de presents a low-risk profile with strong business credibility, technical maturity, and privacy compliance. Strategic recommendations include publishing a formal security policy, providing incident response contact details, and considering a security.txt file to further improve security posture and trust.

B

Bikes.de: E-Bike & Fahrrad online finden ▷ vor Ort reservieren

bikes.de

59

Bikes.de is a German e-commerce platform specializing in the sale and local reservation of bicycles and e-bikes. The website offers a broad range of bike categories including E-Bikes, traditional bicycles, and accessories, targeting consumers in Germany interested in cycling products. The platform integrates local dealer availability and provides additional content such as a magazine and bike advice, positioning itself as a comprehensive marketplace for bike enthusiasts. Technically, the website employs modern JavaScript frameworks, integrates Google Tag Manager and Doofinder for search, and uses CookieFirst for consent management. Hosting appears to be managed via Gandi.net DNS services. Security posture is moderate with HTTPS implied and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service documents. No blocking or WAF mechanisms were detected, allowing full content access. Overall, the site demonstrates good design, navigation, and content relevance but would benefit from enhanced transparency and security documentation.

S

SWH. Bäder Halle GmbH

baden-in-halle.de

54

SWH. Bäder Halle GmbH operates a network of public bathing and sauna facilities in Halle, Germany, including indoor pools, outdoor pools, and camping sites. The company is part of the larger SWH group, which encompasses various regional utility and service providers. The website serves local residents and visitors seeking leisure and wellness services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and SVG graphics, with a focus on accessibility and mobile responsiveness. Cookie consent is managed through Usercentrics, indicating GDPR awareness, though explicit privacy and terms of service pages were not found in the analyzed content. Security measures include HTTPS and bot protection via FriendlyCaptcha, but lack visible security headers and a published security policy. Overall, the site is professional and trustworthy, with room for improvement in privacy disclosures and security hardening.

H

Hallotta – deine Assistentin für Mikroabenteuer in Halle an der Saale!

hallotta.app

57

Hallotta.app is a German-language digital assistant platform focused on promoting and facilitating micro-adventures in the city of Halle an der Saale. The website presents a clean, modern Angular-based single-page application with localized content aimed at residents and visitors interested in local outdoor activities and small adventures. The business model appears to be service-oriented, providing guidance and assistance for local experiences. However, the website lacks critical compliance and trust elements such as privacy policies, cookie consent mechanisms, terms of service, and contact information, which limits its credibility and user trust. Technically, the site uses modern web technologies but does not demonstrate advanced SEO or accessibility features. Security posture is minimal with no visible security headers or incident response information.

R

RWU Hochschule Ravensburg-Weingarten University of Applied Sciences

hs-weingarten.de

58

RWU Hochschule Ravensburg-Weingarten University of Applied Sciences is a medium-sized public university located in Germany, offering over 30 Bachelor and Master degree programs in technology, economics, and social sciences. The institution targets prospective and current students, international students, and regional businesses, emphasizing practical education and career readiness. The website is professionally designed, mobile-optimized, and provides comprehensive content about study programs, events, and services. Technically, the site is built on Drupal 10 and uses Matomo analytics configured for privacy. Security posture is good with HTTPS and privacy-respecting analytics, though explicit security headers and cookie consent mechanisms are absent. WHOIS data confirms domain legitimacy and consistency with the university's identity. Overall, the website is trustworthy, well-maintained, and serves its educational mission effectively.

T

troet.cafe

troet.cafe

73

troet.cafe operates as the largest German-speaking Mastodon instance, providing a federated social networking platform for users to connect, share, and explore content within the Fediverse. The platform emphasizes community engagement and social interaction without advertising or algorithmic interference. Technically, the site is built on Mastodon version 4.3.8, leveraging modern web technologies including React and WebSockets for real-time communication. The site is mobile-optimized and presents a consistent, professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses script integrity attributes, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the domain is privacy protected in WHOIS, which is typical for such platforms, and the site shows no signs of blocking or WAF interference, indicating good accessibility and trustworthiness.

E

Elmo

elmobot.eu

65

Elmo is a technology company providing a SaaS tool focused on GDPR, ePrivacy, and CCPA compliance, primarily targeting website and app owners who need to manage cookie consent and privacy policies. The company positions itself as a compliance enabler with automated scanning, geo-targeting, and user control features. The website is professionally designed, mobile-optimized, and integrates with popular platforms like Shopify and WordPress. Technically, the site uses modern web technologies including Google Tag Manager for analytics and marketing. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security headers and visible privacy policies. The domain WHOIS data is privacy protected, which is common for privacy-centric services, and no suspicious patterns were detected. Overall, the website is credible and functional but could improve transparency and security best practices.

A

Atikon EDV & Marketing GmbH

atikon.at

67

Atikon EDV & Marketing GmbH is a specialized marketing and advertising company focused on serving tax consultants and accounting firms primarily in Austria. Established since 2000, the company offers a broad range of services including online marketing, SEO, social media advertising, graphic design, and consulting for firm founding and succession. Their market position is that of a trusted specialist in their niche, supported by a professional and well-structured website that clearly targets tax consultancy professionals. Technically, the website employs modern analytics and marketing tools such as Matomo, Hotjar, Google GTag, and Meta Pixel, indicating a mature digital infrastructure. The site is well optimized for mobile and accessibility, with good SEO practices and a comprehensive privacy and cookie consent mechanism, reflecting strong compliance with GDPR requirements. Security posture is generally good, though explicit security headers were not detected in the provided data, and no critical vulnerabilities were found. The WHOIS data for the domain www.atikon.com is unavailable, which raises some concerns about domain registration transparency; however, the website content and business information appear legitimate and consistent with the claimed business. Overall, the risk is moderate with recommendations to improve security headers and clarify domain registration details.

A

Atikon EDV & Marketing GmbH

atikon.com

66

Atikon EDV & Marketing GmbH is a specialized marketing and advertising company focused on serving tax consultants and accounting firms primarily in Austria. Established since 2000, the company offers a broad range of marketing services including online marketing, SEO, social media advertising, and consulting for firm founding and succession. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to its target audience. Technically, the site employs reputable analytics and marketing tools such as Matomo, Hotjar, Google GTag, and Meta Pixel, indicating a modern approach to data-driven marketing. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy and registration status, which is inconsistent with the company's claimed history and professional image. Security posture is adequate with HTTPS and consent management but lacks visible security headers and incident response information. Overall, the website is professional and trustworthy in content and design but requires verification of domain registration and enhancement of security best practices.

A

Atikon EDV & Marketing GmbH

atikon.de

67

Atikon EDV & Marketing GmbH is a specialized marketing and advertising agency serving tax consultants primarily in Austria. Established since 2000, the company offers a comprehensive suite of marketing services including online marketing, SEO, social media advertising, and graphic design tailored to the needs of tax consultancy firms. The website reflects a mature digital presence with professional design, clear navigation, and strong branding consistency. Technically, the site employs modern analytics tools such as Matomo, Hotjar, and Google GTag, alongside a GDPR-compliant cookie consent mechanism, indicating a good level of digital maturity and privacy awareness. Security posture is solid with HTTPS enforced and no obvious vulnerabilities, though some security headers could be improved. The absence of WHOIS registration data is a notable concern, suggesting either privacy protection or a domain registration issue, which slightly impacts the trustworthiness assessment. Overall, the site is professional, secure, and compliant, serving a niche market effectively.

R

RMA Gesundheit GmbH

gesund.at

62

Gesund.at is a specialized healthcare portal operated by RMA Gesundheit GmbH, a subsidiary of RegionalMedien Austria. The website provides comprehensive medical knowledge, continuing education courses (DFP and BdA), event calendars, newsletters, and multimedia content targeted at medical professionals in Austria. The portal holds a strong niche position in the Austrian healthcare media market, leveraging its parent company's media expertise and regional reach. Technically, the site employs modern web technologies including Google Tag Manager, OneTrust for cookie consent, and advanced analytics tools such as Piano Analytics and INFOnline Measurement Manager. The site is well-structured, mobile-optimized, and uses structured data to enhance SEO and business transparency. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but could improve by implementing additional security headers and ensuring all forms have robust protections. No critical vulnerabilities or suspicious activities were detected. Overall, Gesund.at presents a professional, trustworthy, and content-rich platform for its target audience.

R

RegionalMedien Gesundheit

meinmed.at

61

MeinMed.at is a reputable Austrian medical information portal operated by RegionalMedien Gesundheit GmbH, a subsidiary of RegionalMedien Austria. Founded in 2014, the company provides expert-reviewed health content, including articles, symptoms, therapies, and free health lectures and webinars across Austria. The portal targets patients and health-interested individuals, aiming to improve health literacy and empower users to make informed decisions. The website demonstrates a strong market position as a trusted source of medical knowledge in Austria, supported by collaborations with local medical experts and a consistent brand presence across social media platforms. Technically, the site employs modern tracking and consent management tools such as Google Tag Manager, OneTrust, and Piano Analytics, ensuring compliance with GDPR and providing a good user experience with responsive design and accessibility features. Security posture is solid with HTTPS enforcement and security headers, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for its audience and business goals.

U

Uno Digital Media B.V.

portimaomotorsports.pt

10

The website portimaomotorsports.pt serves as a localized portal for the BetOnRed online casino brand targeting Portuguese players. Operated by Uno Digital Media B.V., the platform offers a comprehensive range of gambling services including casino games, live dealer experiences, and sports betting. The business is licensed under Curaçao eGaming, ensuring regulatory compliance for international operations. The site features a professional design, clear navigation, and extensive content covering bonuses, games, and responsible gaming policies. Technically, the site employs modern web standards with optimized mobile responsiveness and fast loading times. Security posture is solid with HTTPS enforced, though some security headers are missing and cookie consent mechanisms are not explicitly implemented. Contact information is primarily via email support, with no phone numbers provided. Overall, the platform presents a trustworthy and professional gambling service for the Portuguese market.

T

Techore Holding B. V.

magari-ristorante.pt

49

Fairspin Casino, operated by Techore Holding B.V., is an established online gambling platform launched in 2018, licensed in Curacao. It leverages blockchain technology to provide transparency and fairness in gaming, offering a wide range of casino games and sports betting options primarily targeting Portuguese-speaking players. The website is professionally designed with good content quality and mobile optimization, providing a user-friendly experience. Technically, it uses modern web standards and lazy loading for performance, though no major frameworks or CMS were detected. Security posture is solid with HTTPS and secure forms, but lacks some advanced security headers and published incident response policies. Contact information is comprehensive, including email, phone, and social media channels, enhancing business credibility. Overall, the site is trustworthy and well-positioned in the online gambling market, though improvements in privacy compliance and security transparency are recommended.

D

DZ BANK AG

dzbank.de

64

DZ BANK AG is a major German cooperative central bank serving over 700 cooperative banks in Germany. It offers a broad range of financial services including corporate banking, institutional client services, capital markets, and sustainability consulting. The website is professionally designed, well-structured, and targets financial institutions and corporate clients. Technically, the site uses Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Matomo and Google Tag Manager for analytics with user consent management via Usercentrics. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is robust with clear cookie and privacy policies. Overall, the domain and website present a trustworthy and professional digital presence for DZ BANK AG.

U

Union Investment Service Bank AG

fondssparen-mit-plan.de

53

The website fondssparen-mit-plan.de is associated with Union Investment Service Bank AG, a reputable financial institution in Germany specializing in investment products such as Fondssparpläne (fund savings plans). The site currently serves a 404 error page, indicating the requested content is not available. The business focus is on long-term wealth accumulation through personalized investment strategies. The branding is consistent with Union Investment, but the content is minimal and lacks essential pages such as privacy policy, cookie policy, terms of service, and contact information. From a technical perspective, the site uses Cloudflare DNS services and standard web technologies including CSS, JavaScript, and SVG graphics. However, there is no evidence of advanced frameworks or CMS usage. The site shows basic mobile optimization and accessibility but poor SEO due to the 404 status and meta robots directives preventing indexing. Security posture is limited based on the provided data. No explicit security headers or HTTPS details were found, and no incident response or security policies are disclosed. The absence of privacy and cookie policies indicates non-compliance with GDPR best practices. No forms or data collection mechanisms are present on the analyzed page, reducing immediate data protection risks but also limiting user engagement. Overall, the website appears legitimate and aligned with a known financial entity but is currently non-functional for end users due to the 404 error. Strategic improvements should focus on restoring content, implementing privacy and cookie policies, enhancing security headers, and providing clear contact and incident response information to improve trust and compliance.

G

Gesundheitsregion Metropolregion Rhein-Neckar

mrn-gesundheit.de

55

Gesundheitsregion Metropolregion Rhein-Neckar is a cooperative regional health initiative focused on promoting health, prevention, and healthcare services within the Rhein-Neckar metropolitan area. The organization collaborates with over 80 experts and various partners to foster sustainable and innovative health solutions. The website reflects a strong regional presence with professional content and clear communication aimed at residents, healthcare professionals, and organizations in the region. Technically, the site uses modern web technologies including Matomo for privacy-respecting analytics and is built on the Kirby CMS platform. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie information, though no explicit consent mechanism is present. Overall, the site demonstrates high professionalism and trustworthiness, supporting its role as a regional health network.

C

C&A

c-and-a.com

71

C&A is a well-established European fashion retailer offering affordable clothing for men, women, children, and babies. The company operates a comprehensive e-commerce platform with a broad product range including seasonal collections, plus sizes, and special bargains. The website is professionally designed with clear navigation and targets a general audience seeking quality fashion at fair prices. Technically, the site uses modern web technologies such as React and Cloudinary for image hosting, and implements cookie consent via OneTrust. Security posture is strong with HTTPS enforced and standard security headers present, though no public vulnerability disclosure or security.txt file is found. The WHOIS data is unavailable, which slightly reduces domain trust but the overall business credibility remains high based on website content and contact information.

C

Cartloom

cartloom.com

66

Cartloom is a specialized ecommerce platform founded in 2007, offering easy-to-integrate shopping cart solutions and hosted storefronts for selling physical and digital products. The company targets website owners and online sellers seeking quick ecommerce enablement with minimal technical overhead. Cartloom maintains a niche market position with a focus on simplicity, digital goods delivery, and integration with major payment processors such as PayPal, Stripe, and AuthorizeNet. The website demonstrates strong branding consistency, professional design, and clear navigation, supporting a positive user experience. Technically, Cartloom employs modern frontend technologies including AlpineJS and uses privacy-conscious analytics via Fathom. The site is mobile-optimized and performs well, with good SEO and accessibility features. However, there is no detected CMS or explicit hosting provider information. The domain is well aged and consistent with the business history, registered since 2007 with no privacy protection, indicating transparency. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Privacy compliance is basic; a privacy policy and terms of service exist but lack explicit GDPR compliance statements and no cookie consent mechanism is present. Contact information is not explicitly provided on the site, which may impact user trust. Overall, Cartloom presents a professional and trustworthy ecommerce platform with solid technical foundations and a clear business model. To enhance security posture and privacy compliance, the company should implement security headers, cookie consent, GDPR statements, and publish incident response and vulnerability disclosure policies. Adding clear contact information would further improve business credibility and user trust.

B

Beyond Growth Conference Italia

beyondgrowth.it

64

Beyond Growth Conference Italia is a newly established non-profit organization focused on hosting a major sustainability conference in Italy in 2024. The event aims to foster dialogue on sustainable prosperity, post-growth, and degrowth models, targeting activists, academics, politicians, and engaged citizens. The website is professionally designed with excellent content quality, clear navigation, and mobile optimization. Technically, it uses modern frameworks such as Laravel Livewire and Alpine.js, ensuring a responsive and performant user experience. Security posture is solid with HTTPS and secure form handling, though improvements like DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear privacy and cookie policies, though no explicit incident response or vulnerability disclosure policies are published. Overall, the website presents a trustworthy and credible digital presence for the conference.

A

Aurinkomatkat Oy

aurinkomatkat.fi

66

Aurinkomatkat Oy is a prominent Finnish travel agency specializing in package holidays, last-minute deals, city breaks, and family vacations. The company offers a comprehensive range of travel services including flights, hotels, car rentals, and travel insurance, targeting Finnish travelers seeking reliable and convenient holiday solutions. The website reflects a mature business with a strong market position in Finland, supported by clear branding and trust indicators such as the Avainlippu certification and partnerships with Finnair and CarTrawler. Technically, the website is built using modern web technologies including React and integrates Google Tag Manager and Salesforce Chat for analytics and customer support. The site is well-optimized for mobile devices, accessible, and SEO-friendly, providing a smooth user experience. The content is rich, professionally designed, and structured for easy navigation. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides cookie consent mechanisms aligned with GDPR requirements. However, explicit security policies and incident response information are not published, and there is no visible vulnerability disclosure or security.txt file. No vulnerabilities or exposed sensitive data were detected. Overall, Aurinkomatkat.fi demonstrates a high level of professionalism, security, and compliance suitable for its business domain. Strategic recommendations include publishing detailed security policies, establishing a vulnerability disclosure program, and enhancing transparency on data retention to further strengthen trust and security posture.

S

Sparmedo GmbH

sparmedo.de

51

Sparmedo GmbH operates a German-language online platform specializing in price comparison for pharmaceutical and pharmacy products. The website offers consumers access to pricing from over 85 certified online pharmacies, targeting cost-conscious customers in Germany seeking medicines and health products at competitive prices. The business model centers on e-commerce facilitation through comparison services, positioning Sparmedo as a niche player in the healthcare e-commerce sector. Technically, the website employs legacy jQuery 1.4.4 and standard CSS with SVG graphics, hosted on servers associated with internet1.de. The site is mobile optimized and SEO friendly, though some technical modernization is advisable. Security posture is moderate with HTTPS usage but lacks modern security headers and uses outdated JavaScript libraries, which could expose vulnerabilities. Privacy compliance is weak due to absence of explicit privacy and cookie policies, and no visible contact or incident response information is provided. Overall, the website is functional and professional but would benefit from enhanced security and compliance measures to improve trust and regulatory adherence.

The Bundesamt für Naturschutz (BfN) is a German federal government authority responsible for nature conservation, providing scientific, administrative, and informational services. The website serves a broad audience including policymakers, researchers, and the general public interested in environmental protection. It offers comprehensive content in German with English support, focusing on biodiversity, habitat protection, and environmental data. Technically, the site is built on Drupal CMS with modern web technologies and is hosted within the German research network infrastructure, ensuring reliability and performance. The site demonstrates strong privacy compliance with explicit cookie consent mechanisms and respects user privacy via etracker analytics configured to honor Do Not Track settings. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, explicit security headers could be enhanced, and a formal security policy or incident response contact is not evident. Overall, the site is trustworthy, professionally maintained, and aligns well with its governmental role.

The HFD EdTech-Kompass website serves as a specialized platform showcasing educational technology products from various companies, primarily targeting educational institutions and stakeholders in Germany. It provides categorized listings for different education sectors such as school education, vocational training, higher education, and lifelong learning. The platform encourages EdTech companies to participate and offers contact channels for feedback and inquiries. Technically, the site is built on WordPress 6.8.3, employs modern JavaScript libraries like jQuery 3.7.1, and integrates a robust cookie consent mechanism via Borlabs Cookie, ensuring GDPR compliance. Hosting is managed through netcup, a reputable provider, and the site uses HTTPS with a good SSL configuration. Security posture is solid with no evident vulnerabilities or exposed sensitive data, although some security headers could be enhanced. Analytics are implemented using Google Analytics and Matomo, with transparent cookie management. Overall, the website is professional, well-structured, and trustworthy, with a clear focus on the EdTech sector in Germany.

M

Metropolregion Rhein-Neckar GmbH

m-r-n.com

55

Metropolregion Rhein-Neckar GmbH operates as a regional alliance and development organization focused on enhancing the Rhein-Neckar metropolitan area in Germany. The website serves as a platform for collaboration among regional institutions, promoting economic, cultural, and social initiatives. With a 20-year history, the organization is well-established and positioned as a key regional player. The site targets residents, businesses, and stakeholders interested in regional development and community engagement. Technically, the website employs modern web technologies including Matomo for privacy-conscious analytics, an accessibility widget (Eye-Able), and cookie consent management. Hosting is provided by Hetzner Online GmbH, a reputable German provider. The site is mobile-optimized, accessible, and SEO-friendly, with good performance and structured navigation. From a security perspective, the site uses HTTPS and enforces domain transfer restrictions. However, it lacks DNSSEC and advanced HTTP security headers. Privacy compliance is strong with clear cookie consent and a comprehensive privacy policy. No direct contact emails or phone numbers are visible, and no explicit security or incident response policies are published. Overall, the website is professional, trustworthy, and well-maintained, with minor areas for security enhancement. It poses low risk and aligns well with its stated mission and audience.

H

Helmholtz-Gemeinschaft Deutscher Forschungszentren

helmholtz.de

61

The Helmholtz-Gemeinschaft Deutscher Forschungszentren is a leading German non-profit research organization comprising 18 research centers focused on addressing major societal, scientific, and economic challenges. The website serves as a comprehensive portal for information about their research areas, centers, news, and career opportunities, targeting researchers, industry partners, and the general public interested in scientific advancements. The organization holds a strong market position in the German and international research landscape, supported by a substantial annual budget and a large workforce.

C

Clarip Inc.

clarip.com

63

Clarip Inc. operates a sophisticated SaaS platform specializing in enterprise privacy governance and data protection solutions. Their offerings include data risk intelligence, consent management, vendor risk monitoring, and automated fulfillment of data subject access requests, targeting large enterprises and Fortune 500 clients. The website demonstrates a high level of professionalism with comprehensive product information and clear navigation, reflecting a mature digital presence. Technically, the site leverages modern web technologies such as Bootstrap and jQuery, integrates Google Analytics and Tag Manager for tracking, and employs SVG graphics for visual appeal. The site is mobile-optimized and accessible, though performance is moderate with room for improvement. Security practices are adequate with HTTPS usage and secure form handling, but lack explicit security headers and published security policies. The security posture is solid but could be enhanced by adding security headers, incident response contacts, and vulnerability disclosure mechanisms. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data source issues, which impacts the domain's trustworthiness. Overall, the site is safe, business-focused, and compliant with privacy regulations, but further verification of domain legitimacy is recommended.

Alb-Werbung GmbH is a small, family-owned business established in 1999 and located in Westerheim, Germany. The company specializes in lettershop services, printing (digital and offset), graphic design, manual packaging, and full-service advertising solutions. The website reflects a well-established regional player with a clear focus on quality and customer service. The target audience primarily consists of businesses and organizations seeking comprehensive printing and advertising services. The company emphasizes flexibility, quality, and reliability, supported by over 26 years of experience.

S

Slobodna domena Zadruga za otvoreni kod i dizajn

slobodnadomena.hr

10

Slobodna domena Zadruga za otvoreni kod i dizajn is a Croatian cooperative founded in 2017, specializing in open source software and design services. The cooperative brings together designers, programmers, creatives, and engineers to provide comprehensive expert services, targeting non-profit organizations, socially responsible entities, institutions, and commercial companies. Their business model emphasizes collaboration and social responsibility, positioning them as a niche player in the Croatian technology sector. Technically, the website employs modern web technologies including Matomo analytics with cookies disabled, Google Fonts, SVG graphics, and Turbolinks for navigation. The site is mobile-optimized and includes accessibility features such as dyslexia-friendly typography and contrast adjustments. Performance is moderate with good SEO and accessibility practices, although some improvements in security headers and privacy policies are needed. From a security perspective, the site uses HTTPS with a good SSL configuration and disables cookies in analytics to enhance privacy. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. No forms or sensitive data exposure were detected, and no suspicious or malicious content was found. Overall, the website is professional, trustworthy, and well-aligned with the cooperative's mission. The main risks relate to compliance gaps in privacy and cookie policies and the absence of security headers. Addressing these would improve the security posture and regulatory compliance, enhancing user trust and legal standing.

H

Hochschule Hannover

hs-hannover.de

67

Hochschule Hannover is a public university of applied sciences and arts located in Germany, offering a variety of Bachelor and Master degree programs focused on practical education and research. The institution targets students and academic professionals seeking career-oriented education and research opportunities. The website is built on TYPO3 CMS with modern frontend technologies and includes a comprehensive cookie consent mechanism via Cookiebot, ensuring GDPR compliance. Social media integration and structured navigation enhance user engagement and accessibility. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security and incident response policies are not publicly available. Overall, the website reflects a mature digital presence suitable for an educational institution with good content quality and technical implementation.

FernUniversität in Hagen is Germany's only state distance university, offering a wide range of Bachelor and Master degree programs, continuing education, and academy studies. It serves a broad audience including prospective students, current students, alumni, researchers, and academic staff. The university maintains multiple campus locations across Germany and abroad, emphasizing accessibility and flexibility in education. The website reflects a professional and comprehensive digital presence aligned with its educational mission. Technically, the website employs modern web technologies such as Bootstrap 5 for responsive design, Matomo for privacy-conscious analytics, and SVG graphics for scalable visuals. Hosting appears to be managed via the German Research Network (DFN), supporting reliability and security. The site is well-optimized for mobile devices and accessibility, with clear navigation and rich content. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced HTTP security headers and a cookie consent mechanism, which are recommended for enhanced protection and compliance. No vulnerabilities or suspicious content were detected. Privacy compliance is strong, with a comprehensive privacy policy and a designated data protection officer contact. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity, suitable for a large public educational institution. Strategic improvements in security headers and cookie consent would further strengthen its posture.

S

Società nazionale di mutuo soccorso Cesare Pozzo ETS

cesarepozzoperte.it

60

The website secure.cesarepozzoperte.it serves as a secure login portal for the Società nazionale di mutuo soccorso Cesare Pozzo ETS, a non-profit mutual aid society based in Italy. The organization provides membership services to individuals and groups, particularly those under collective agreements. The site facilitates member access with a user code and password system, supported by clear instructions and assistance contact information. The business is positioned as an established mutual aid entity with a focus on social support and membership management. Technically, the website employs modern web technologies including Alpine.js for interactivity, SVG for branding graphics, and standard CSS and JavaScript assets. The site is mobile-optimized with a responsive design and includes accessibility considerations. Performance is moderate, with deferred script loading and structured content. SEO and metadata are basic but sufficient for the site's purpose. From a security perspective, the site enforces HTTPS with a valid SSL configuration and includes CSRF tokens in forms, indicating good security hygiene. However, security headers are not explicitly detected, and no incident response or vulnerability disclosure policies are published. No vulnerabilities or exposed sensitive data were found. Privacy compliance is strong with a clear privacy policy and cookie consent mechanism. Overall, the website presents a trustworthy and professional front for the mutual aid society, with a solid security posture and good privacy practices. Recommendations include enhancing security headers, publishing incident response contacts, and adding terms of service to improve compliance and user trust.

U

Unoenergy S.p.a.

unoenergy.it

73

Unoenergy S.p.a. is a well-established Italian energy provider with over 20 years of experience, offering electricity, gas, photovoltaic systems, and electric mobility solutions primarily targeting residential customers, condominiums, and businesses in Italy. The company positions itself as a leading private operator in the Italian energy market, emphasizing professionalism, customer proximity, and environmental commitment. The website reflects a mature digital presence with comprehensive product offerings and clear branding. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, and Cookiebot for consent management, and is optimized for mobile and SEO. Security posture is good with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security policies and incident response information is noted. Overall, the site is professional, trustworthy, and compliant with basic privacy requirements, though improvements in transparency and security documentation are recommended.

I

ITV.SH

itvsh.de

65

ITV.SH is a regional government partner focused on the digital transformation of municipal administrations in Schleswig-Holstein, Germany. The website presents a comprehensive portfolio of digital services including citizen portals, digital archiving, and cloud solutions tailored for public sector needs. The organization positions itself as a key enabler of end-to-end digitalization in local government processes. Technically, the site is built on TYPO3 CMS, leveraging privacy-conscious Matomo analytics with cookies disabled, indicating a mature approach to user privacy. The site is well-structured, mobile-optimized, and uses modern web technologies, although some security best practices such as explicit security headers and cookie consent mechanisms are missing. The WHOIS data aligns with the hosting provider and regional focus, supporting legitimacy. Overall, ITV.SH demonstrates a solid digital presence with room for improvement in security and privacy compliance to enhance trust and regulatory adherence.

I

ImmoWire

immowire.de

43

ImmoWire is a specialized digital marketing and web development agency focused on the real estate sector in Germany. They provide tailored websites, online marketing, and integration services for real estate agents, associations, and portals. The company leverages WordPress with modern plugins and technologies to deliver professional, SEO-optimized, and mobile-friendly websites. Their market position is supported by premium partnerships and strong customer testimonials. Technically, the website is well-structured, performant, and secure with HTTPS and cookie consent mechanisms. However, there is room for improvement in security headers and formal security policies. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

P

Production Paradise

productionparadise.com

70

Production Paradise operates as a leading online directory and showcase platform dedicated to commercial creatives in the film, photography, and post-production industries. The website offers curated resources including member directories, spotlight and showcase magazines, image search, and location finder tools, targeting commercial creatives and service providers globally. The business model is subscription-based, providing visibility and marketing opportunities to its members. The company is established since 2003 and appears to be headquartered in Spain, with a medium-sized market presence and a strong brand identity. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates multiple marketing and analytics tools such as Google Analytics, Facebook Pixel, LinkedIn Insight Tag, and Twitter Ads. The site is mobile-optimized with good accessibility and SEO practices. Security measures include HTTPS enforcement and use of Google reCAPTCHA Enterprise, though some security headers are not explicitly present, suggesting room for improvement. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, including GDPR considerations. However, the absence of WHOIS domain registration data raises concerns about domain legitimacy verification, which should be addressed to enhance trust. Overall, Production Paradise presents a professional, trustworthy, and well-maintained digital presence with comprehensive content and strong business credibility. Strategic recommendations include improving security headers, verifying domain registration details, and enhancing incident response transparency to further strengthen security and compliance.

D

DatoCMS

datocms.com

69

DatoCMS is a technology company offering a headless CMS platform designed to be user-friendly and performant, targeting web developers, digital marketers, content creators, and enterprises. Their platform supports GraphQL APIs, structured text editing, localization, and modular content management, positioning them as a competitive SaaS provider in the content management space. The website reflects a professional and modern digital presence with excellent design and user experience, optimized for mobile and SEO. However, the absence of WHOIS domain registration data and lack of visible privacy, cookie, and terms of service policies indicate areas for improvement in transparency and compliance. Security posture is moderate due to missing security headers and unclear SSL configuration. Overall, the site is trustworthy and well-branded but would benefit from enhanced privacy and security disclosures.

P

Proges Plus

proges.com

61

Proges Plus is a French technology company specializing in software publishing and IT services, with a focus on ERP solutions for SMEs, HR management software, IT infrastructure management, and environmental monitoring IoT systems. With over 35 years of experience and presence in more than 70 countries, the company serves diverse sectors including industry, health, research, agro-food, and local authorities. Their business model centers on providing modular, customizable software and expert IT services to empower businesses with data-driven solutions. Technically, the website is built on WordPress with modern tools such as Elementor and Yoast SEO, and integrates Google Tag Manager and Mailjet for analytics and marketing. The site is mobile-optimized and well-structured, reflecting a mature digital presence. Security-wise, HTTPS is enforced and cookie consent is implemented, though explicit security headers are not detected, and no dedicated security or incident response policies are published on the site. The absence of WHOIS data for the domain www.proges.com is a notable concern, as it prevents verification of domain registration legitimacy. Despite this, the website content and business information appear professional and trustworthy. Overall, the site demonstrates good content quality, technical implementation, and privacy compliance, but would benefit from enhanced security practices and transparency regarding domain registration.

W

wohnfonds_wien

hauskunft-wien.at

47

Hauskunft is a municipal service operated by wohnfonds_wien, providing free and subsidized consulting for building renovations and energy efficiency upgrades in Vienna. The website offers comprehensive information about their services, including orientation consultations, future checks, and support for creating renovation concepts. The target audience includes homeowners, property managers, architects, and planners in Vienna. The service is well integrated with city initiatives like 'Raus aus Gas' and collaborates with partners such as the City of Vienna and klimaaktiv-gebaut.at. Technically, the website uses modern web technologies, including Matomo for privacy-friendly analytics and Swiper.js for interactive content. It is well optimized for mobile and accessibility, with good SEO practices. Security posture is strong with HTTPS, security headers, and secure forms, though incident response and vulnerability disclosure information could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR, reflecting a mature digital presence for a government service.

V

VRT

stubru.be

76

VRT MAX is the official online streaming platform of VRT, Belgium's public broadcaster. It offers a wide range of media content including live radio streams, on-demand radio programs, podcasts, TV shows, news, and sports. The platform targets Dutch-speaking audiences in Belgium and maintains a strong market position as a leading public media service. The website is professionally designed with excellent content quality and consistent branding, supported by mobile applications for iOS and Android devices. Technically, the site leverages modern web technologies such as React and progressive web app features, ensuring good performance, accessibility, and SEO optimization. Security-wise, the platform enforces HTTPS, publishes a responsible disclosure policy, and avoids exposing sensitive data, although it could improve by adding explicit security headers and a security.txt file. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR requirements. Overall, the site demonstrates high trustworthiness and professionalism, with no indications of suspicious or adult content.

J

Jochims Transport GmbH

jochims-transporte.de

36

Jochims Transport GmbH is a medium-sized German transport company specializing in the transportation and disposal of construction materials and waste. Established in 2000, it operates a large fleet of over 70 semi-trailers and holds transport permits for hazardous and non-hazardous waste across Germany. The company targets construction firms, industrial clients, and municipalities primarily in the Niederrhein and Ruhrgebiet regions. Technically, the website is built using modern web technologies including Livewire and Alpine.js, hosted on rzone.de infrastructure, and offers a responsive, well-structured user experience. Security posture is solid with HTTPS and CSRF protections, though some security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit incident response and vulnerability disclosure policies.

F

Fondation Restena

dns.lu

61

The website dns.lu is the official registry for the .lu national domain extension, managed by Fondation Restena. It provides domain registration infrastructure, accreditation for registrars, and DNS services including DNSSEC support. The site is professionally designed using Drupal 10, with good mobile optimization and accessibility. Security posture is strong, evidenced by ISO 27001 certification and secure DNS practices, although some security headers and explicit policies could be improved. The WHOIS data confirms the legitimacy of the domain ownership with consistent registrant information. Overall, the site serves a critical national infrastructure role with a trustworthy and professional online presence.

C

Cap Digital

capdigital.com

59

Cap Digital is a prominent European innovation cluster focused on the digital and ecological transition sectors. It supports a broad range of stakeholders including startups, SMEs, large organizations, public entities, and research institutions by providing access to funding, partnerships, training, and events. The organization is well-positioned in the market with strong government and regional backing, reflecting its importance in the innovation ecosystem in France and Europe. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO, Google Analytics, HubSpot, and Hotjar, indicating a mature digital infrastructure. The site is mobile-optimized and features rich multimedia content, contributing to a positive user experience and good performance. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and a public security policy or incident response page. No vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data is a notable anomaly that slightly reduces trust but does not undermine the overall legitimacy given the professional presentation and government affiliations. Overall, Cap Digital's website demonstrates a strong digital presence with good content quality, technical implementation, and privacy compliance. Strategic improvements in security transparency and WHOIS data availability would further enhance trust and credibility.

B

Brixen Tourism / Brixen.org

brixen.org

46

The website www.brixen.org is a regional tourism portal dedicated to promoting holidays in Brixen, Italy, located in South Tyrol. It provides comprehensive information about local attractions, outdoor activities, cultural events, and accommodation options. The site targets tourists and holidaymakers interested in exploring the region's natural and cultural offerings. The business model focuses on tourism promotion and facilitating holiday planning through rich content and booking links. The website is positioned as an important regional player in the hospitality sector, leveraging official regional tourism branding and consistent design. Technically, the site is built on the TYPO3 CMS platform, integrating modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Usercentrics for cookie consent management. The site demonstrates good mobile optimization and SEO practices, although performance is moderate. The technical infrastructure is solid but could benefit from enhanced security headers and clearer privacy documentation. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, which are positive indicators. However, the absence of explicit privacy policy and terms of service pages, lack of security.txt or vulnerability disclosure information, and missing WHOIS transparency reduce the overall security posture. No WAF or blocking mechanisms were detected, and no vulnerabilities were apparent in the provided content. The domain WHOIS data is incomplete or malformed, limiting trust verification. Overall, the website is a professional and trustworthy tourism information portal with good content quality and user experience. Strategic improvements in privacy compliance, security headers, and WHOIS transparency would enhance trust and security posture. The risk level is moderate with no critical issues detected.

O

URL Shortener, Branded Short Links & Analytics | TinyURL

otolink.pl

50

The website otolink.pl serves as a branded URL shortening domain under the TinyURL platform, offering users the ability to create branded short links with analytics. The site content is minimal, primarily acting as a landing page directing users to TinyURL's main services and registration pages. Technically, the site uses standard web technologies including Bootstrap 4.6.2, jQuery, and SVG graphics, providing a basic but mobile-optimized user experience. Security posture is weak due to lack of visible security headers, privacy policies, and cookie consent mechanisms. The domain is relatively new (created in 2021) and registered by a domain reseller, which aligns with its purpose as a branded domain for TinyURL. Overall, the site is functional but lacks comprehensive compliance and security features.