Security Directory

M

MULTA MEDIO AG

lotto-sh.de

66

LOTTO Schleswig-Holstein operates as the official regional lottery provider for Schleswig-Holstein, Germany, offering a comprehensive portfolio of lottery games including LOTTO 6aus49, Eurojackpot, GlücksSpirale, BINGO!, KENO, Rubbellose, and TOTO. The website facilitates online ticket purchases, subscription services, and jackpot tracking, targeting adult lottery players within the region. The platform is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, the site employs modern JavaScript frameworks, consent management via Usercentrics, and analytics through Etracker, hosted likely on Telekom infrastructure, ensuring reliable performance and compliance with data protection regulations. Security posture is solid with HTTPS enforcement, CAPTCHA integration, and ISO 27001 certification, though some security headers could be enhanced. Overall, the site demonstrates a mature digital presence aligned with legal and regulatory requirements for gambling services in Germany.

DFL Digital Sports GmbH is a subsidiary of Deutsche Fußball Liga GmbH, focused on digital content creation and media production for the Bundesliga, Germany's premier football league. The company operates from Cologne with a medium-sized team and freelancers, delivering innovative digital experiences to football fans and partners. The LinkedIn profile reflects a professional and active organization with strong branding and consistent content updates. Technically, the company leverages the LinkedIn platform for its online presence, utilizing modern web technologies and video streaming capabilities. The website is well-optimized for performance, mobile, and accessibility, with good SEO practices. Security posture is strong, with HTTPS enforced and standard security headers implied. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are managed by LinkedIn, ensuring GDPR compliance and user consent mechanisms. Overall, the risk profile is low given the use of a reputable platform and professional content. Recommendations include maintaining security best practices and monitoring third-party scripts. The domain linkedin.com is a trusted platform, though WHOIS data for linkedin.com is not publicly available here, the legitimacy of the company page is unquestioned.

T

Team PAPREC ARKÉA

teampaprecarkea.com

39

Team PAPREC ARKÉA is a French offshore sailing team prominently preparing for the Vendée Globe 2024-2025 race, sponsored by Paprec and Arkéa. The website serves as an official platform to share news, media, and team information, targeting sailing enthusiasts and sports fans. The business model revolves around sponsorship and promotion within competitive sailing circuits. Technically, the site employs modern web standards, including responsive design, accessibility features, and structured data, ensuring a good user experience across devices. Security posture is solid with HTTPS and consent management, though improvements in security headers and explicit incident response information are recommended. The absence of WHOIS data introduces some uncertainty regarding domain legitimacy, but the professional presentation and active social media presence support the site's credibility. Overall, the site is well-maintained, compliant with privacy regulations, and effectively supports the team's branding and communication objectives.

M

modmore development

modmore.com

68

modmore is a specialized technology company focused on developing premium and open source extras for the MODX Revolution CMS platform. Established in 2012 and based in the Netherlands, modmore serves a professional audience of web developers and agencies with high-quality software products, support services, and a remote site management platform called SiteDash. The company maintains a strong market position within the MODX ecosystem, supported by a loyal user base and active community engagement. Technically, the website is built on modern web standards with a robust tech stack including jQuery, Google Analytics, Disqus, and Cloudflare DNS, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforcement and domain transfer protections, though DNSSEC is not enabled and explicit security policies are not published. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, modmore demonstrates a mature digital presence with professional branding, comprehensive content, and trustworthy business information.

L

Landesprogramm SPORTLAND HESSEN bewegt

sportlandhessenbewegt.de

65

The website sportlandhessenbewegt.de represents the Landesprogramm SPORTLAND HESSEN bewegt, a government-backed initiative promoting sport, health, and physical activity across all life phases in the German state of Hessen. It serves as an informational and coordination platform for citizens, municipalities, and sports organizations, offering resources such as funding opportunities, projects, events, and networks. The site is well-branded with official Hessen government symbols and provides a professional user experience with clear navigation and accessibility features. Technically, the site is built on Drupal 10, leveraging modern web technologies including lazy loading images and accessible multimedia players. It is hosted within the Hessen state infrastructure, as indicated by the domain's nameservers. The website demonstrates good mobile optimization, SEO practices, and accessibility compliance, though performance is moderate. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a vulnerability disclosure policy. Privacy compliance is strong with a comprehensive privacy policy in German, but no explicit cookie consent mechanism was detected. Contact information is primarily via a contact form, with no direct emails or phone numbers found. Overall, the website is a credible, secure, and professional government platform with minor areas for improvement in security headers and cookie consent. It poses low risk and effectively serves its public health promotion mission.

M

mediacampus-frankfurt

mediacampus-frankfurt.de

66

Mediacampus Frankfurt is an established educational institution specializing in seminars, training, and educational programs for the book trade and media industry in Germany. The website presents a professional and well-structured platform offering a variety of courses, webinars, and training sessions targeting professionals, newcomers, and specialists in publishing and media sectors. The institution maintains a strong social media presence and provides detailed event information, enhancing its market position as a key player in media education. Technically, the website employs modern web technologies including JavaScript, Algolia Search for site search functionality, and Google Tag Manager for analytics, which is loaded conditionally upon cookie consent. The site is hosted on Anexia servers, uses HTTPS with good SSL configuration, and is optimized for mobile devices with good accessibility and SEO practices. However, some security headers are not explicitly detected, and no explicit security or incident response policies are published. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and privacy-aware analytics loading. No vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns with the business claims, showing consistent domain registration and hosting. Privacy and cookie policies are not explicitly found in the provided content, which is a compliance gap. Overall, the site is safe, professional, and trustworthy with room for improvement in privacy disclosures and security policy transparency.

B

Bundesstadt Bonn

bonn.de

58

The website www.bonn.de serves as the official digital portal for the Bundesstadt Bonn, providing extensive information and services related to the city administration. It targets residents, visitors, and businesses, offering multilingual content and access to municipal services such as event calendars, service portals, and contact forms. The site is well-branded with consistent city imagery and logos, reflecting its authoritative position as a government entity. Technically, the site employs a modern CMS platform (Information Enterprise Server by Sitepark GmbH) and uses standard web technologies including JavaScript, CSS, and SVG icons. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are observed with HTTPS enforcement, security headers, and cookie consent mechanisms. From a security perspective, the site demonstrates a solid posture with no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not published, which could be improved to enhance transparency and trust. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent aligned with GDPR requirements. Overall, www.bonn.de is a professional, trustworthy, and well-maintained government website. It effectively balances user experience, privacy, and security, serving as a reliable resource for its audience. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure information, and providing data protection officer contact details to further strengthen compliance and user trust.

H

Hessische Arbeitsgemeinschaft für Gesundheitsförderung e.V.

hage.de

43

HAGE e.V. (Hessische Arbeitsgemeinschaft für Gesundheitsförderung e.V.) is a non-profit organization dedicated to health promotion and prevention in the Hessen region of Germany. The website serves as an information hub for stakeholders including scientific, political, municipal, and association actors, offering news, events, newsletters, and resources related to health promotion. The organization positions itself as a regional leader in health promotion initiatives, supporting a network of around 60 members from diverse sectors. Technically, the website employs modern front-end technologies such as UIkit and Plyr for UI components and video playback, respectively. It features a cookie consent manager compliant with GDPR, uses HTTPS, and includes accessibility and SEO best practices. The site is mobile-optimized and provides a professional user experience with clear navigation and structured content. From a security perspective, the site shows good practices including cookie consent and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and a published security policy or incident response contact. No terms of service or vulnerability disclosure mechanisms are present. The WHOIS data is consistent with the organization's claims, indicating legitimacy. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic improvements include adding security headers, publishing a security policy, and providing more direct contact information to enhance trust and security posture.

U

User.com

user.com

71

User.com is a comprehensive marketing automation platform designed to help businesses streamline their marketing, sales, and customer support processes. Positioned as an all-in-one SaaS solution, it offers a wide range of tools including customer data platforms, personalization engines, no-code automation builders, analytics, loyalty programs, and multi-channel communication channels such as email, SMS, WhatsApp, and live chat. The platform targets marketing, sales, support, and product teams across various industries including SaaS, e-commerce, education, finance, healthcare, and real estate. User.com is part of the Positive Group and operates primarily from France. Technically, the website is built on modern web technologies including Webflow CMS, Google Tag Manager, and uses AWS Cloudfront CDN for hosting and performance optimization. The site is well-optimized for mobile devices, features good accessibility and SEO practices, and integrates cookie consent mechanisms compliant with GDPR. The presence of multiple language versions and extensive product documentation indicates a mature digital infrastructure. From a security perspective, User.com enforces HTTPS, provides a dedicated security overview page, and claims regular penetration testing and audits. While explicit security headers are not fully visible in the HTML, the overall posture is strong with GDPR compliance and cookie consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. However, the WHOIS data for the domain is unavailable, which slightly reduces trust but is common for privacy reasons. Overall, User.com presents a professional, trustworthy, and technically sound platform with strong business credibility and compliance focus. Strategic recommendations include enhancing transparency on incident response, publishing security.txt, and reinforcing security headers to further improve trust and security posture.

T

Transactional Email API Service For Developers | Mailgun

mailgun.com

75

Mailgun is a leading transactional email API service provider targeting developers and businesses that require reliable, scalable email delivery solutions. The company offers a comprehensive suite of email services including sending, validation, optimization, and testing, positioning itself strongly in the technology sector with a large enterprise customer base including major tech companies. The website demonstrates a mature technical infrastructure built on WordPress with modern performance and SEO optimizations, ensuring excellent user experience and accessibility. Security posture is robust with HTTPS enforcement, ISO 27001 certification, and a dedicated security portal, although WHOIS data is unavailable which slightly impacts trust but is mitigated by the company's known parent entity, Sinch. Overall, Mailgun presents a professional, trustworthy, and technically sound platform for transactional email services.

D

Dinas Lingkungan Hidup Provinsi Kalimantan Tengah

dlhkalimantantengah.id

54

Dinas Lingkungan Hidup Provinsi Kalimantan Tengah is the official environmental agency for Central Kalimantan Province, Indonesia, dedicated to environmental preservation, pollution control, waste management, and public education. The website serves as a public information portal offering access to official documents, programs, and complaint mechanisms. The site targets local residents, government officials, and environmental stakeholders. Technically, the website uses modern frontend technologies such as Alpine.js and Laravel Livewire, hosted behind Cloudflare DNS services, ensuring moderate performance and mobile responsiveness. Security posture is generally good with HTTPS enabled and clientTransferProhibited domain status, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security policies.

A

Arbonia AG

smart-doors.de

58

Arbonia AG is a Swiss-based company specializing in smart door solutions for residential buildings, offering keyless access systems branded as SmartDOOR. The company collaborates with KIWI.KI GmbH for sensor technology integration and distributes products through established system partners in Germany and Switzerland. Their business model combines manufacturing, distribution, and digital access management services via the KIWI Portal, targeting residents, landlords, and service providers. The website is professionally designed, multilingual, and provides comprehensive product information and contact options. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and cookie consent management tools. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and published security policies are absent. The WHOIS data is unavailable, likely due to privacy protection, which slightly impacts trust but is common for corporate domains. Overall, the website reflects a mature digital presence with strong business credibility and moderate security maturity. There are opportunities to enhance security transparency and incident response readiness. The site is safe for general audiences and free from adult or questionable content.

G

Gemeinde Salenstein

salenstein.ch

58

Gemeinde Salenstein operates as the official municipal government website for the Salenstein area in Switzerland, providing residents and visitors with comprehensive information about local governance, services, infrastructure, social programs, and community events. The site serves as a digital portal for accessing municipal services including online applications, contact information, and public announcements. The target audience primarily consists of local residents, businesses, and visitors seeking official information and services. Technically, the website is built on a modern CMS platform (i-web.ch) with a responsive design optimized for mobile devices. It employs standard web technologies such as HTML5, CSS3, JavaScript, and Bootstrap framework components. The site includes accessibility features and SEO optimizations, with a moderate performance profile. Security is enforced through HTTPS, secure login forms, and an opt-in consent mechanism for anonymized web analytics. From a security perspective, the website demonstrates good practices such as encrypted connections and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. Overall, the website is trustworthy and professionally maintained, with a strong alignment between WHOIS registration data and website content, indicating legitimacy. The site is free from suspicious content or security red flags, making it a reliable source of municipal information. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure to further strengthen the security posture.

B

Basics09

basics09.de

38

Basics09 is a Berlin-based design agency specializing in transmedia concepts primarily serving the art, culture, design, science, and education sectors. The company offers services including visual identity, campaigns, strategy, publication, exhibition graphics, and website design. Their market position is that of a niche, small-sized agency with a professional and consistent brand presence. The website reflects a high level of digital maturity with modern technologies such as Alpine.js, lazy loading, and embedded Vimeo videos, delivering excellent user experience and mobile optimization. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though lacking explicit security headers and published security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the site is trustworthy and professional but would benefit from enhanced compliance and security transparency.

O

ONLYLYON

onlylyon.com

64

ONLYLYON is the official territorial marketing program for the Lyon metropolitan area, focusing on promoting tourism, business investment, education, and cultural activities. The website serves as a comprehensive portal for visitors, investors, students, and event organizers, supported by a network of ambassadors and partners. The site demonstrates a strong market position as a key promoter of Lyon's international ambitions, backed by public and private stakeholders. Technically, the website is built on the Roadiz CMS platform, uses modern web technologies, and integrates Google Analytics and a cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement and standard security headers, although explicit security policies and incident response contacts are not published. The absence of WHOIS registration data for the domain is a notable anomaly that slightly reduces trustworthiness but does not detract from the professional presentation and content quality. Overall, the website is well-designed, user-friendly, and compliant with privacy regulations, making it a credible and authoritative source for information about Lyon's metropolitan offerings.

Z

Zammad

zammad.com

75

Zammad is a medium-sized technology company founded in 2012, specializing in open source helpdesk and ticketing software designed to streamline customer service operations. The company positions itself as a provider of powerful yet user-friendly solutions that integrate multiple communication channels and offer extensive features such as multilingual support, automation, and various integrations. Their market presence is supported by strong branding, customer testimonials, and a focus on digital sovereignty. Technically, the website demonstrates a modern and responsive design with fast performance and good SEO practices. The use of Matomo analytics indicates a privacy-conscious approach to user tracking. Security-wise, the site enforces HTTPS and employs domain transfer protections, but lacks visible security headers and explicit incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR, though improvements in cookie consent and security transparency are recommended.

G

Gebäudeversicherung Bern

gvb.ch

65

Gebäudeversicherung Bern (GVB) is a well-established regional insurance provider specializing in obligatory building insurance for the Canton of Bern, Switzerland. With over 200 years of history, GVB offers comprehensive insurance products including obligatory building and construction period insurance, as well as voluntary insurance products through its subsidiaries. The website targets property owners and residents in Bern, providing detailed information on insurance services, claims, fire prevention, and natural hazard protection. The company maintains a strong market position as a trusted insurer in the region.

S

Slovenská technická univerzita v Bratislave (STU)

stuba.sk

61

Slovenská technická univerzita v Bratislave (STU) is a leading technical university in Slovakia, providing comprehensive higher education, research, and innovation services. The website serves a broad audience including prospective and current students, staff, alumni, and partners, offering detailed information on faculties, study programs, research activities, and cooperation opportunities. The university maintains a strong market position as a key educational institution in the region. Technically, the website employs modern web technologies such as Google Tag Manager, Google Analytics with consent mechanisms, Bootstrap framework, and optimized fonts, ensuring a good user experience across devices. Security posture is solid with HTTPS enforced and privacy-conscious analytics implementation, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-structured, reflecting the university's credibility and commitment to compliance.

O

Onlineshop Musik Haag AG

blaswerkhaag.ch

10

Onlineshop Musik Haag AG operates the Blaswerkshop website, a specialized e-commerce platform focused on brass and woodwind musical instruments, accessories, and related services such as instrument rental, mouthpiece analysis, and repairs. The company targets musicians and music enthusiasts primarily in Switzerland, offering a niche product range supported by workshops and events. The website is built on the Shopware CMS platform, leveraging modern JavaScript libraries and Google Tag Manager for analytics and marketing. The site is well designed, mobile optimized, and provides a good user experience with clear navigation and professional branding. However, it lacks explicit privacy and terms of service policies, which are important for compliance and user trust. Security posture is good with HTTPS and standard security headers, but no published security or incident response policies were found.

H

Hessen.de

hessen.de

64

Hessen.de is the official government portal for the state of Hessen, Germany, providing news, press releases, and public service information. The website serves as a central hub for citizens and stakeholders to access government projects, events, and announcements. It maintains a strong market position as the authoritative source for Hessen state government information. Technically, the site is built on Drupal 10 with modern web technologies ensuring good mobile optimization, accessibility, and user experience. Security posture is solid with HTTPS enforced, but lacks explicit security headers and incident response disclosures. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and professional, but could improve transparency and security practices.

Grand Resort Bad Ragaz AG operates a luxury five-star resort in Switzerland, combining hospitality with leading medical expertise and wellness services. The company holds a strong market position in the premium hospitality and healthcare sectors, offering accommodations, medical health centers, wellness packages, golf clubs, and casino entertainment. The website reflects a mature digital presence with integrated booking systems and comprehensive corporate information. Technically, the site employs modern web technologies, lazy loading, and secure HTTPS connections, ensuring good performance and user experience. Security posture is strong with appropriate headers and consent mechanisms, though a dedicated security policy and incident response information are absent. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting the company's credibility and market standing.

H

Hotel Krone Unterstrass

hotel-krone.ch

67

Hotel Krone Unterstrass is a small-sized, 4-star hospitality business located in the center of Zurich, Switzerland. The company offers hotel accommodation services with a focus on combining tradition and modernity, targeting travelers and business visitors. The website serves as the official online presence, featuring booking capabilities integrated with the iHotelier and TravelClick platforms. The site is professionally designed with good content quality, clear navigation, and multi-language support, enhancing user experience and accessibility. Technically, the website leverages modern web technologies and a specialized CMS from TravelClick, ensuring a stable and performant platform. Security posture is strong with HTTPS enforcement and content security policies, though additional headers and incident response information could improve the security maturity. Privacy compliance is addressed with visible cookie consent and a privacy policy, supporting GDPR adherence. Overall, the website demonstrates high business credibility and trustworthiness, with legitimate WHOIS registration data consistent with the business claims.

B

Balmer Bücherdienst AG

balmer-bd.ch

55

Balmer Bücherdienst AG is a Swiss-based classical publishing distribution company serving the book trade and resellers with products from domestic and international partner publishers. The company operates a B2B webshop and reporting portals to facilitate order placement and business analytics. Their market position is that of an established regional distributor with a focus on the Swiss book market. Technically, the website is built on Shopware CMS, uses modern web technologies, and integrates third-party search services. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response information are not published. Privacy and cookie policies exist and indicate GDPR compliance. Overall, the website and domain registration data align well, indicating a legitimate and trustworthy business presence online.

H

HANSAINVEST Hanseatische Investment-GmbH

hansainvest.com

59

HANSAINVEST Hanseatische Investment-GmbH is a leading German service capital management company specializing in fund administration across all relevant asset classes. The company emphasizes personalized service and comprehensive fund partner support, positioning itself as a key player in the German financial services market. Their website offers extensive fund listings, financial calculators, and compliance information, targeting institutional investors and financial professionals. Technically, the website is built on a custom CMS with Bootstrap and jQuery, providing a responsive and well-structured user experience. Security posture is strong with HTTPS enforcement, security headers, and ISO 27001 certification, though DNSSEC is not enabled, representing an area for improvement. Privacy compliance is robust with clear privacy and cookie policies and GDPR adherence. Overall, the website reflects a mature, professional, and trustworthy financial services provider with a solid digital presence.

M

Max Delbrück Center for Molecular Medicine in the Helmholtz Association

mdc-berlin.de

64

The Max Delbrück Center for Molecular Medicine is a leading biomedical research institute in Germany, focusing on understanding molecular mechanisms of health and disease and translating these findings into clinical applications. It operates under the Helmholtz Association umbrella and offers extensive research, education, and innovation services. The website reflects a mature digital presence with comprehensive content targeting researchers, students, and the scientific community. Technically, the site is built on Drupal 10 with modern web technologies, responsive design, and accessibility features. Security posture is strong with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and GDPR-aligned consent management. Overall, the site demonstrates high professionalism, trustworthiness, and business credibility.

N

National Cyber Security Centre

ncsc.gov.uk

82

The National Cyber Security Centre (NCSC) is a UK government organization dedicated to enhancing the cybersecurity posture of the UK by providing authoritative advice, guidance, and incident response support. Positioned as the leading UK government cybersecurity authority, the NCSC serves a broad audience including individuals, businesses of all sizes, public sector organizations, and cybersecurity professionals. Their key services encompass cybersecurity advice, incident reporting, assurance schemes, educational initiatives, and practical toolkits to improve cyber resilience. Technically, the NCSC website employs modern web technologies including React for a single-page application experience, uses web fonts for consistent branding, and implements JSON-LD structured data to enhance search engine understanding. The site is well-optimized for mobile devices, accessible, and demonstrates good SEO practices. Hosting and infrastructure details are not explicitly disclosed but the site benefits from the robust security and reliability standards typical of UK government domains. From a security perspective, the site enforces HTTPS, includes cookie consent mechanisms, and avoids exposing sensitive data. While explicit security headers are not visible in the provided data, the site likely adheres to UK government security standards. No vulnerabilities or security issues were detected. The absence of WHOIS data is consistent with UK government domain privacy policies and does not detract from the site's legitimacy. Overall, the NCSC website is a highly professional, trustworthy, and authoritative resource for cybersecurity information and services in the UK. It demonstrates strong content quality, technical maturity, and privacy compliance, making it a reliable platform for its diverse user base.

N

NETZSIEGER - Vertrauen ist gut, Vergleichen ist besser!

netzsieger.de

56

Netzsieger.de is a German-language online platform specializing in product comparisons and expert reviews across various categories including software, electronics, household goods, and business services. The website positions itself as a trusted source for consumers seeking detailed and practical advice to aid purchasing decisions. The platform features a well-structured navigation system and a cookie consent mechanism compliant with GDPR requirements, indicating a moderate level of digital maturity. Technically, the site employs modern web technologies such as Google Analytics and Google Tag Manager for analytics and tracking, custom fonts, and responsive design elements to ensure usability across devices. While the site is accessible and performs moderately well, there is room for improvement in accessibility and security headers implementation. From a security perspective, the website uses HTTPS and has implemented cookie consent, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is limited and partially consistent, which slightly reduces trustworthiness but does not indicate malicious intent. Overall, Netzsieger.de presents a professional and trustworthy platform for product comparison, with recommendations to enhance privacy transparency, security posture, and contact availability to further strengthen user trust and compliance.

E

Einwohnergemeinde Unterägeri

unteraegeri.ch

10

The website www.unteraegeri.ch serves as the official municipal portal for the Gemeinde Unterägeri in Switzerland. It provides comprehensive information and digital services to residents and visitors, including online administrative services, event calendars, contact information, and community news. The site targets local citizens and stakeholders, positioning itself as a key digital touchpoint for municipal engagement and service delivery. Technically, the website employs a modern CMS platform (i-web CMS) with responsive design, modular JavaScript, and privacy-conscious analytics via Matomo. The infrastructure supports accessibility and SEO best practices, ensuring a good user experience across devices. The site uses HTTPS with strong SSL configuration, though explicit security headers are not visible in the HTML source. From a security perspective, the site demonstrates good practices such as secure forms and no exposed sensitive data. However, it lacks publicly available security policies or incident response contacts, which could enhance trust and preparedness. Privacy compliance is well addressed with clear privacy and cookie policies and user consent mechanisms. Overall, the website is a well-maintained, trustworthy municipal portal with solid content quality and technical implementation. Strategic improvements could focus on enhancing security transparency and adding vulnerability disclosure mechanisms to further strengthen its security posture.

G

Gemeinde Fisibach

fisibach.ch

10

Gemeinde Fisibach operates as the official municipal government website for the community of Fisibach in Switzerland. It provides residents and visitors with comprehensive information and services including political updates, administrative details, educational resources, safety information, and local events. The site targets local citizens and stakeholders, offering an accessible online portal for municipal services such as the online counter and e-move registration. The business model is that of a public sector entity focused on community service and information dissemination. Technically, the website is built on a modern CMS platform (i-web.ch) with responsive design and accessibility considerations. It uses standard web technologies including HTML5, CSS3, JavaScript, and SVG icons, with Bootstrap framework elements evident. The site demonstrates good SEO and mobile optimization, though hosting provider details are not explicit. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, indicating awareness of privacy compliance. However, explicit security headers are not detected in the HTML content, and no dedicated security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The WHOIS data aligns with the municipal nature of the site, confirming legitimacy. Overall, the website is a trustworthy, well-maintained municipal portal with good content quality and user experience. Strategic improvements could include enhanced security headers, explicit security policies, and publishing a vulnerability disclosure policy to strengthen security posture and trust.

S

Springer Medizin

springermedizin.at

64

Springer Medizin operates a professional medical information portal primarily targeting healthcare professionals in Austria and German-speaking regions. The website offers scientific medical news, journals, podcasts, and continuing education resources, positioning itself as a trusted source affiliated with the reputable Springer Nature publishing group. The business model focuses on content delivery and professional education within the healthcare sector. Technically, the site employs modern web technologies including responsive design, SVG icons, and asynchronous script loading, hosted likely on Springer Nature's infrastructure. Privacy compliance is partially implemented with a cookie consent mechanism but lacks a clearly accessible privacy policy page and terms of service. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are not published. Overall, the site is professional, trustworthy, and safe for its target audience.

C

coolLabs Technologies Bt.

safetyper.com

50

Safetyper is a technology startup offering a privacy-focused alternative to Grammarly, emphasizing user ownership of typed content. The website presents a clean, modern design built with the Astro framework, hosted on Hetzner infrastructure. It is mobile optimized and uses privacy-friendly analytics (Plausible). The site is currently in a pre-launch or coming soon state, with limited content and no active forms or user data collection. Security posture is basic but adequate, with HTTPS enabled and no critical vulnerabilities detected. However, the site lacks privacy and cookie policies, contact information, and security incident response details, which are important for trust and compliance. The domain registration is consistent with the business entity and startup age, indicating legitimacy.

C

coolLabs Technologies Bt.

jata.app

50

Jata.app is a minimalist todo list web application developed by coolLabs Technologies Bt., a small technology company based in Hungary. The app focuses on providing users with a simple, bloat-free interface to manage daily tasks and organize todos using hashtags. The website demonstrates a clean, modern design with good mobile optimization and fast performance, leveraging the Astro framework and custom fonts. The company maintains an active community presence on Discord and social media, enhancing user engagement and support. However, the website lacks formal privacy, cookie, and security policies, which are critical for compliance and user trust. Security posture is generally good with HTTPS enforced and no visible vulnerabilities, but the absence of security headers and incident response information indicates room for improvement. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security transparency.

P

PERI Deutschland

peri.de

70

PERI Deutschland is a well-established company specializing in formwork, scaffolding, wood-based materials, and related construction services. The company targets construction firms, scaffolding companies, and craft businesses, offering both sales and rental solutions complemented by digital tools and training programs. The website reflects a strong market position with comprehensive service offerings and a professional online presence. Technically, the site employs modern web technologies including Usercentrics for consent management and Google Tag Manager for analytics, hosted on a reputable provider. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site is trustworthy, well-designed, and compliant with GDPR requirements.

D

Deutsches Forschungszentrum für Künstliche Intelligenz GmbH (DFKI)

dfki.de

60

The Deutsches Forschungszentrum für Künstliche Intelligenz GmbH (DFKI) is a leading German research institute specializing in artificial intelligence. With over 30 years of experience, DFKI combines scientific excellence with practical applications, targeting industry, academia, and government sectors. Their website reflects a mature digital presence with comprehensive content about their research areas, projects, and collaborations. The site is professionally designed, multilingual, and optimized for accessibility and SEO. Technically, it is built on TYPO3 CMS with modern web technologies and uses self-hosted Matomo analytics to respect user privacy. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, DFKI presents a trustworthy and authoritative online presence aligned with its reputation as a premier AI research center.

S

Stadt Mannheim

mannheim.de

68

The website www.mannheim.de serves as the official digital portal for the city of Mannheim, Germany. It provides comprehensive information and services related to municipal administration, citizen services, economic development, culture, education, tourism, and career opportunities. The site targets residents, businesses, tourists, and public service users, positioning itself as a key government resource with a broad service offering. The content is well-structured, multilingual, and accessible, reflecting a mature digital presence for a large municipal entity. Technically, the website is built on Drupal 10, utilizing modern web technologies such as Matomo for analytics, SVG icons, and slick carousel for UI elements. The site demonstrates good performance, mobile optimization, and accessibility features. Security is robust with HTTPS enforced, multiple security headers present, and consent-based tracking mechanisms implemented. However, explicit security policies and incident response contacts are not prominently published, and no vulnerability disclosure or security.txt files were found. Overall, the security posture is strong with no detected vulnerabilities or suspicious activity. Privacy compliance is well addressed with clear privacy and cookie policies and user consent mechanisms. The business credibility is high, supported by official domain registration, consistent branding, and transparent contact information. The site is safe for general audiences with no adult or questionable content. Strategically, the site could enhance trust and security culture by publishing dedicated security policies and incident response information, and by implementing a vulnerability disclosure program. Regular audits of third-party scripts and form input sanitization are recommended to maintain security integrity.

G

Gesellschaft für Freiheitsrechte e.V.

freiheitsrechte.org

62

Gesellschaft für Freiheitsrechte e.V. (GFF) is a German non-profit organization dedicated to defending fundamental and human rights through legal means. Established in 2015, it has built a reputable position in the human rights advocacy sector, focusing on strategic litigation, public education, and policy influence. The website reflects a professional and consistent brand image, targeting activists, legal professionals, and supporters of civil liberties. Technically, the site employs modern web technologies with good mobile optimization and accessibility, though some security enhancements like DNSSEC and security headers could be improved. The security posture is solid with HTTPS and domain transfer protections, but lacks explicit incident response or security policy disclosures. Overall, the site is trustworthy, transparent, and well-aligned with its mission.

E

easyname

easyname.eu

67

easyname is a medium-sized Austrian technology company specializing in web hosting, domain registration, and website building services. The company targets individuals and businesses seeking reliable and easy-to-use online presence solutions. Their market position is that of an established regional player with a multilingual website offering a broad portfolio of services including VPS hosting, SSL certificates, and marketing tools. The website content is professional, well-structured, and designed to facilitate user engagement and conversion. Technically, the website leverages modern web technologies such as React and Chakra UI, with integrations for Google Tag Manager and a consent management platform to ensure privacy compliance. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured data. Performance is moderate, with deferred scripts and optimized assets. From a security perspective, the site enforces HTTPS and uses consent management for cookies, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business claims, supporting legitimacy. Overall, easyname presents a trustworthy and professional online presence with good privacy compliance and a solid technical foundation. Strategic improvements in security headers and transparency around security policies would further enhance their security posture and trustworthiness.

A

astradirect Schließfächer GmbH

astradirect.de

51

astradirect Schließfächer GmbH is a German company specializing in providing locker rental services primarily for schools and students. They position themselves as the largest locker provider in Germany with over 6,300 satisfied schools. Their offerings include locker rentals, insurance packages for lockers and valuables, and innovative modular locker designs with digital locking systems using RFID technology. The company targets educational institutions and students, providing convenient online rental and service portals. Technically, the website is built using modern Angular framework (version 19.2.14) with good mobile optimization, accessibility, and SEO practices. Security-wise, the site enforces HTTPS, includes anti-clickjacking measures, and provides cookie consent mechanisms, although explicit security headers like CSP are not clearly visible. No critical vulnerabilities or suspicious content were detected. The WHOIS data aligns well with the business information, indicating legitimacy and consistency. Overall, the website demonstrates a mature digital presence with good security posture and compliance, supporting a trustworthy business operation.

M

McDonald's Gerhard Schmid

mcdonalds-ulm.de

57

McDonald's Gerhard Schmid operates a regional franchise network of McDonald's restaurants across multiple towns in Germany. The website serves as an informational and promotional platform for the franchise, offering details on locations, job opportunities, delivery services, and current offers. The site is built on the Squarespace platform, leveraging its CMS and hosting capabilities, with a moderate level of technical sophistication and mobile optimization. Security posture is strong with HTTPS and HSTS enabled, though cookie consent mechanisms and detailed security policies are lacking. Overall, the site reflects a professional local franchise business with consistent branding and good user experience.

H

Hostsharing eG

hs.coop

56

Hostsharing eG operates hostsharing.coop, a Mastodon instance dedicated to members of their cooperative hosting community. The website serves as a social networking platform within the Fediverse, enabling decentralized communication. The business is positioned as a niche cooperative provider in the technology sector, focusing on privacy-respecting social media hosting since 2018. The site content is primarily in German, targeting cooperative members and Fediverse users. Technically, the platform uses Mastodon version 4.4.8 with modern web technologies including React and ES modules, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

F

Fachhochschule Dortmund

fh-dortmund.de

61

Fachhochschule Dortmund is a well-established public university of applied sciences in Germany offering approximately 70 Bachelor and Master degree programs across eight faculties. The institution targets prospective students, current students, academic staff, alumni, and industry partners, positioning itself as a key regional educational and research hub. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive information on academic offerings, research, and career services. Technically, the site is built on the Sitepark CMS platform, employs modern JavaScript and SVG assets, and integrates Matomo analytics with privacy-conscious configurations. Security posture is strong with HTTPS enforcement, privacy-respecting analytics, and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

G

Große Kreisstadt Annaberg-Buchholz

annabergerweihnachtsmarkt.de

67

The Annaberger Weihnachtsmarkt website represents the official online presence of the Annaberg-Buchholz Christmas market, a culturally significant and family-friendly event in Germany. The site effectively promotes the event with rich content including program overviews, vendor information, and service offerings. It targets tourists, families, and local visitors, positioning itself as one of Germany's most beautiful Christmas markets with strong municipal backing. Technically, the site uses the Sitepark CMS platform with modern JavaScript libraries and is hosted on rzone.de servers. The website is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Security posture is solid with HTTPS and no visible vulnerabilities, though it lacks explicit security policies and incident response contacts. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the site is trustworthy, professional, and well-maintained, supporting the event's reputation and visitor engagement.

S

Shazam

shazam.com

65

Shazam is a globally recognized music discovery platform that enables users to identify songs quickly and access related music content such as concerts and charts. Owned by Apple Inc., it integrates deeply with the Apple ecosystem, including Apple Music and the App Store. The website demonstrates a modern, performant, and mobile-optimized design with clear navigation and professional branding. Technically, it leverages Next.js and JavaScript frameworks, with custom beacon tracking for analytics and error reporting. Security posture is good with HTTPS enforced and error beacons implemented, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is limited as no privacy or cookie policies were detected in the provided content. WHOIS data is unavailable, likely due to privacy or registry restrictions, but the website's legitimacy is supported by strong brand presence and Apple affiliation.

B

bildung.social

bildung.social

58

bildung.social is an independent Mastodon social network instance focused on education and digital transformation topics. It provides a federated platform for users interested in these areas to connect and share content. The platform is based on the open-source Mastodon software, version 4.4.8, and is hosted using OVH Cloud infrastructure. The website demonstrates good content quality and user experience with a consistent brand and active user engagement. Technically, the site uses modern web technologies including React and ES modules, with a moderate performance profile and good mobile optimization. Security posture is solid with HTTPS enforced and some security best practices observed, though additional security headers could improve protection. Privacy compliance is basic with a privacy policy present but lacking cookie consent mechanisms and terms of service. WHOIS data is privacy protected, which is typical for such platforms, and does not raise immediate concerns. Overall, bildung.social is a legitimate, well-maintained social platform serving a niche educational community.

The website www.annaberg-buchholz.de serves as the official municipal portal for the Große Kreisstadt Annaberg-Buchholz in Saxony, Germany. It provides local news, event information, tourism details, and citizen services, positioning itself as a key information hub for residents and visitors. The site is professionally designed with consistent branding and good content quality, targeting a general audience interested in municipal affairs and local culture. Technically, the website is built on the Information Enterprise Server platform by Sitepark GmbH, utilizing modern JavaScript libraries such as jQuery and Slick Carousel for interactive elements. It is hosted on infrastructure likely provided by Deutsche Telekom AG, with HTTPS enabled ensuring secure communications. The site demonstrates good mobile optimization and accessibility features, though performance is moderate. From a security perspective, the site benefits from HTTPS and lacks visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and does not provide clear privacy or cookie policies, which are important for GDPR compliance. No incident response or vulnerability disclosure information is available, indicating room for improvement in security transparency. Overall, the website is trustworthy and credible as a government portal but would benefit from enhanced privacy compliance and security policy disclosures to strengthen user trust and regulatory adherence.

B

Burgtheater

burgtheater.at

69

The Burgtheater website represents a well-established cultural institution in Austria, offering a comprehensive program of theatrical performances, educational offerings, and subscription services. The site targets theatergoers, educational institutions, and cultural enthusiasts, positioning itself as a key player in Vienna's cultural landscape. Technically, the website is built on Drupal with Bootstrap theming and uses modern JavaScript libraries such as Swiper for carousels and Matomo for analytics, indicating a moderate level of digital maturity. The site is mobile-optimized and accessible, with a professional design and clear navigation. However, there are notable gaps in privacy and security compliance, including the absence of visible privacy and cookie policies, lack of security headers, and no incident response contacts, which could expose the organization to compliance risks and reduce user trust. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy. Strategic improvements in privacy compliance and security posture are recommended to enhance trust and regulatory adherence.

Unilever PLC is a global leader in consumer goods, specializing in nutrition, hygiene, and personal care products. The company operates a large portfolio of well-known brands aimed at improving everyday life for consumers worldwide. The website reflects a mature digital presence with comprehensive content on corporate strategy, sustainability, and investor relations, targeting a broad audience including consumers, investors, suppliers, and partners. Technically, the website employs modern web technologies such as the Astro framework, optimized for performance and mobile responsiveness. It uses HTTPS with strong security headers and implements structured data for SEO enhancement. The site integrates standard analytics tools like Google Analytics and Tag Manager, with clear cookie and privacy policies indicating GDPR compliance. From a security perspective, the site demonstrates good practices including HTTPS enforcement, content security policies, and no visible vulnerabilities or exposed sensitive data. However, explicit incident response contacts and a security.txt file are not found, which could improve transparency and vulnerability management. Overall, the website is professional, secure, and compliant with privacy regulations, supporting Unilever's reputation as a trustworthy multinational corporation. The WHOIS data is not publicly available, likely due to privacy protection, which is justified for a company of this scale. Strategic recommendations include enhancing incident response visibility and maintaining regular security audits.

G

GranChef

granchefpremiumfood.it

56

GranChef is a specialized B2B e-commerce platform focused on distributing premium food products to upscale gastronomy clients, primarily in Italy and German-speaking markets. The website presents a professional and well-structured catalog with multi-level navigation, targeting professional chefs and hospitality businesses. Technically, the site is built on the Shopware CMS platform, leveraging modern JavaScript and SVG icons, with Google Tag Manager and CookieFirst for analytics and consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though improvements are needed in security headers and published policies. Overall, the site is trustworthy and functional but lacks some compliance documentation such as privacy policy and terms of service.

B

beige.party

beige.party

73

beige.party is an independent Mastodon social media server launched in 2022, serving a niche community described as friendly weirdos within the Fediverse. It operates on the open-source Mastodon platform version 4.4.7, providing decentralized social networking services without ads or algorithms. The website demonstrates a moderate level of digital maturity with modern web technologies, mobile optimization, and a functional user interface. However, it lacks comprehensive privacy and security policies such as cookie consent and terms of service. Security posture is adequate with HTTPS and domain transfer protection but could be improved by enabling DNSSEC and security headers. Overall, the site is legitimate and trustworthy for its community but would benefit from enhanced compliance and security transparency.

S

Schedler Music

schedlermusic.com

52

Schedler Music is a well-established independent music publishing company operating primarily in the German-speaking regions of Europe, including Austria, Germany, Switzerland, and Italy. Founded in 2004, it manages a broad repertoire of music rights and offers comprehensive services such as A&R, licensing, copyright management, and creative marketing. The company positions itself as a leading indie music publisher with the capabilities of a major label, supported by an international partner network. Their website reflects a professional and modern digital presence, built on WordPress, with responsive design and accessibility considerations. Social media integration and regular news updates indicate active engagement with their audience and industry stakeholders. Security-wise, the site uses HTTPS and has domain transfer protections, though DNSSEC is not enabled. Privacy and cookie policies are present and appear GDPR compliant, but no explicit security or incident response policies are found. Overall, the website and domain registration data support a credible and trustworthy business with a solid market position in the music publishing industry.