Security Directory

The website www.ceskyskokovypohar.cz represents the Asociace Český skokový pohár,o.s., an organizer and promoter of the largest Czech equestrian show jumping event series. The site provides comprehensive information about the competition schedule, results, online TV streaming, and rankings, targeting a general audience interested in equestrian sports. The business model focuses on event organization and community engagement within the Czech equestrian sports sector. Technically, the website uses a custom CMS (IPO by ANTEE s.r.o.) with a technology stack including jQuery, jQuery UI, Google reCAPTCHA, and Matomo analytics. The site is mobile responsive and employs HTTPS with good SSL configuration. However, some JavaScript libraries are outdated, and security headers are not detected, indicating room for improvement in security hardening. From a security perspective, the site demonstrates awareness of privacy through cookie consent and use of privacy-respecting analytics. However, the absence of a published privacy policy, terms of service, and WHOIS data limits full trust assessment. No critical vulnerabilities or adult content were detected, and the site appears safe for general audiences. Overall, the website is functional, professional, and serves its niche well but would benefit from enhanced transparency, updated security practices, and improved compliance documentation to strengthen trust and security posture.

E

EquiSoul s.r.o.

equisoul.cz

51

EquiSoul s.r.o. operates an e-commerce website specializing in equestrian clothing and accessories, primarily targeting customers in the Czech Republic. The company emphasizes manufacturing 100% Czech products and maintains a professional online presence with clear branding and customer engagement through social media and a customer club. The website is built on the Shoptet platform, leveraging standard e-commerce technologies and multiple analytics tools for marketing and user behavior tracking. Privacy and cookie policies are well implemented, reflecting GDPR compliance. Security posture is generally good with HTTPS and CSRF protections, though improvements are recommended in security headers and updating legacy libraries. The absence of WHOIS data limits domain legitimacy verification, but the website content and business information appear credible and professional. Overall, the site presents a trustworthy and user-friendly shopping experience for its niche market.

M

Mooimakers

mooimakers.be

48

Mooimakers.be is a Flemish government-backed initiative focused on combating litter and illegal dumping through community engagement, education, and support for local governments and businesses. The website serves multiple audiences including volunteers, municipalities, schools, and companies, providing resources, news, and tools such as a mobile app for tracking litter collection. Technically, the site is built on Drupal 9 with modern web technologies and integrates Google Maps and YouTube APIs. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS and secure forms, though it lacks a publicly visible security policy or incident response information. Privacy compliance is strong with a clear privacy policy, cookie consent, and GDPR adherence. Overall, the site is professional, trustworthy, and well-positioned as a regional environmental non-profit initiative.

The website sorteersmurf.be is a recently created domain associated with Fost Plus, a Belgian organization focused on recycling education. The site aims to inform visitors about proper recycling practices, specifically what can be placed in blue recycling bags, encouraging users to become recycling champions. The content is minimal and primarily educational, targeting the general public in Belgium. Technically, the site uses modern web technologies including Font Awesome Pro for icons, a loading progress bar library (Pace.js), and a cookie consent management platform (Usercentrics). The domain is registered with Combell nv, a reputable registrar and hosting provider, indicating legitimacy despite the recent creation date. Security posture is moderate with HTTPS implied but lacking visible security headers and detailed security policies. Privacy compliance is basic, with a cookie consent mechanism present but no privacy or terms of service pages found. Overall, the site is functional and safe but would benefit from enhanced security practices and more comprehensive compliance documentation.

Recycle! is a Belgium-focused digital platform providing residents with comprehensive waste management information including recycling calendars, sorting guides, and local collection points. The website is positioned as a niche service supporting environmental sustainability efforts in Belgium, leveraging partnerships with recognized organizations such as Fost Plus and Bebat. The platform is accessible via web and mobile apps, with verified presence on Google Play and Apple App Store, indicating a mature digital offering. Technically, the site uses modern web technologies including React, Google Tag Manager, Facebook Pixel, and Dynatrace for monitoring, reflecting a moderate to advanced digital infrastructure. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks explicit security headers and privacy policies, which are areas for improvement. WHOIS data is restricted due to registry policies, but the domain and website content appear legitimate and consistent with the business purpose. Overall, the site is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

F

Fost Plus

betersorteren.be

61

Beter Sorteren is the official website operated by Fost Plus, a Belgian organization dedicated to educating the public on proper waste sorting and recycling processes. The site offers comprehensive guides on sorting household packaging materials such as PMD, paper-cardboard, and glass, supported by interactive tools, a mobile app, and multimedia content like blogs and podcasts. It targets Belgian residents seeking to improve their recycling habits and contributes to environmental sustainability efforts. Technically, the website is built on Drupal CMS with modern frameworks like Bootstrap and uses advanced features such as lazy loading and consent management to enhance user experience and privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Overall, the website demonstrates high professionalism, trustworthiness, and technical maturity, supporting Fost Plus's role as a leading recycling authority in Belgium.

P

Philadelphia Convention and Visitors Bureau

discoverphl.com

61

DiscoverPHL, operated by the Philadelphia Convention and Visitors Bureau, serves as the official tourism and convention sales agency for Philadelphia and the Pennsylvania Convention Center. The organization targets tourists, event planners, travel trade professionals, and partners, offering services such as tourism promotion, convention sales, event planning resources, and a partner directory. The website reflects a professional and consistent brand image aligned with its government-affiliated status. Technically, the website is built on WordPress and leverages modern technologies including jQuery, Google Tag Manager, Google reCAPTCHA Enterprise, Mapbox GL JS, and New Relic for performance monitoring. The site is mobile-optimized, accessible, and SEO-friendly, providing a positive user experience. Advertising and analytics tools are used responsibly with clear cookie consent mechanisms. From a security perspective, the site enforces HTTPS, implements security headers, and uses advanced bot protection via reCAPTCHA Enterprise. However, it lacks a publicly available security policy or incident response page, and no vulnerability disclosure or security.txt file is found. The WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional presentation and official nature of the site. Overall, DiscoverPHL presents a secure, compliant, and user-friendly digital presence appropriate for its role as a government tourism bureau. Strategic improvements include publishing security and incident response policies and enhancing WHOIS transparency to further strengthen trust and compliance.

C

Commonwealth of Pennsylvania

filminpa.com

51

Film In PA is the official website of the Pennsylvania Film Office, a government entity promoting film and television production within the state. The site provides comprehensive information on tax incentives, location resources, production guides, and showcases films shot in Pennsylvania. It serves as a key resource for filmmakers, production companies, and industry professionals interested in leveraging Pennsylvania's diverse locations and incentives. Technically, the website is built on WordPress with modern libraries such as jQuery and Video.js, and integrates Google Analytics and translation tools. The site is mobile-optimized and SEO-friendly, though it lacks some advanced accessibility features and cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but could be improved by enabling DNSSEC and adding security headers. The domain is long-established and registered with a reputable registrar, aligning well with the official government branding and content, indicating high legitimacy and trustworthiness.

T

TEKA Systems

tekasystems.gr

60

TEKA Systems is a well-established company founded in 2004, specializing in engineering and information technology services, including SAP solutions, digital transformation, and analytics. The company holds a leading market position in its sector and targets business and enterprise clients. The website reflects a professional digital presence built on WordPress with modern SEO and tracking tools. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced DNS security and explicit security policies. Overall, the site is trustworthy and business credible but could improve privacy and security transparency.

N

Navingo BV

navaltoday.com

66

NavalToday.com is a specialized online news platform delivering expert coverage and press releases focused on the naval, maritime, and offshore energy sectors. The website targets industry professionals and businesses seeking timely and relevant information about naval technology, vessels, and related industry developments. The business operates under Navingo BV and appears to have been active since at least 2020, positioning itself as a niche media provider within the maritime and energy industries. Technically, the website is built on WordPress with modern SEO and analytics tools such as Yoast SEO Premium, Google Analytics, Microsoft Clarity, and Google Tag Manager. It employs a comprehensive cookie consent mechanism powered by CookieYes, supporting GDPR compliance and user privacy preferences. The site is mobile-optimized, accessible, and features a professional design with clear navigation. From a security perspective, the site enforces HTTPS and uses cookie consent best practices. However, no explicit security headers were detected in the provided data, and there is no visible security policy or incident response information. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, although the website content and branding appear professional and trustworthy. Overall, NavalToday.com demonstrates a solid digital presence with good content quality and privacy compliance but would benefit from enhanced transparency in domain registration and explicit security policies to strengthen trust and security posture.

D

Dredging Today

dredgingtoday.com

67

DredgingToday.com is a specialized online news platform delivering expert coverage and breaking news in the dredging and offshore energy sectors. The website targets industry professionals and businesses, providing timely updates, analysis, and event information. The business operates as a niche media publication within the energy and transportation sectors, with a medium-sized digital presence established since 2020. Technically, the site is built on WordPress with modern web technologies including Google Tag Manager, CookieYes for consent management, and ElasticPress for search enhancements. The site demonstrates good SEO and accessibility practices, with mobile optimization and structured data implemented. Security posture is strong with HTTPS enforced and privacy compliance mechanisms in place, including a comprehensive cookie consent banner with granular controls. However, the absence of WHOIS registration data and lack of explicit security policy or incident response pages reduce overall trustworthiness. The site integrates standard advertising and analytics services such as Google Analytics and Microsoft Clarity, with extensive user tracking balanced by GDPR-compliant consent. Overall, the website is professional, content-rich, and technically sound but would benefit from improved domain registration transparency and enhanced security disclosures.

N

Navingo BV

offshorewind.biz

66

offshoreWIND.biz is a specialized online media platform delivering daily news and insights focused on the offshore wind energy sector, including emerging technologies like floating wind and Power-to-X. The platform serves industry professionals and stakeholders, providing timely updates on projects, market developments, and technological advancements. The website is part of the Navingo BV media group, which operates several related industry news sites, positioning offshoreWIND.biz as a reputable niche media outlet within the renewable energy sector. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and ElasticPress, ensuring good SEO and search capabilities. It employs Google Analytics and Google Tag Manager for analytics and tracking, alongside a comprehensive cookie consent management system powered by CookieYes, reflecting a moderate level of digital maturity and privacy compliance. The site is mobile-optimized and accessible, with a professional design and clear navigation. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks visible security headers in the provided data. No critical vulnerabilities or exposed sensitive data were detected. The cookie consent mechanism is robust, offering granular control over tracking and advertising cookies, though the absence of a published privacy policy and terms of service pages is a compliance gap. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces trust but is common for media companies. Overall, offshoreWIND.biz presents a professional and trustworthy online presence with good technical and content quality. Strategic improvements include publishing comprehensive privacy and terms of service documents, enhancing security headers, and providing clearer business contact information to strengthen compliance and trustworthiness.

O

Offshore Energy

oeec.biz

65

Offshore Energy operates a professional event website promoting the Offshore Energy Exhibition & Conference scheduled for November 2025 in Amsterdam. The business focuses on organizing and hosting a major industry event targeting energy sector professionals, exhibitors, and visitors interested in offshore energy solutions. The website provides comprehensive event information, exhibitor details, ticketing options, and networking opportunities, positioning itself as a key player in the offshore energy event market. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies including Google Analytics, Microsoft Clarity, and CookieYes for privacy compliance. The site demonstrates good SEO, accessibility, and mobile optimization, with a moderate performance profile. Security measures include HTTPS enforcement, Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers and policies are not explicitly published. The security posture is solid with no critical vulnerabilities detected in the HTML content. However, the absence of a published privacy policy, terms of service, security policy, and incident response contacts represents areas for improvement. The domain registration uses privacy protection, which is justified for this event business, and the domain age aligns with the event timeline. Overall, the website is trustworthy, professional, and compliant with cookie consent regulations but would benefit from enhanced transparency in privacy and security policies to strengthen user trust and regulatory compliance.

L

LSP Renewables

lsprenewables.com

66

LSP Renewables is a specialized recruitment agency focused on the renewable energy sector, providing talent acquisition services globally with offices in Europe, Asia, and the USA. Their offerings include permanent recruitment, contract labor hire, retained search, talent advisory, and RPO services, targeting a broad spectrum of renewable energy sectors such as offshore wind, solar, subsea, and green hydrogen. The company positions itself as a market leader with a strong emphasis on quality and client service. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics and marketing tools like Google Tag Manager and Mailchimp. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS enforcement and standard security headers, with cookie consent mechanisms in place, indicating good privacy compliance. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the absence of a public vulnerability disclosure or incident response contact is noted. The missing WHOIS registration data is a concern but does not detract significantly from the overall legitimacy given the professional web presence and business indicators. Overall, LSP Renewables presents a credible, professional, and secure online presence suitable for its business domain. Strategic recommendations include enhancing transparency around security incident response and verifying domain registration details to strengthen trust further.

O

Offshore Wind North East 2025

offshorewindne.com

54

Offshore Wind North East 2025 is a professional event focused on the offshore wind energy sector in North East England. The website serves as a platform to promote the conference and exhibition, providing detailed information about the event, its organizers, sponsors, and partners. The event targets industry professionals and stakeholders in the renewable energy sector, emphasizing networking, knowledge sharing, and business opportunities. Technically, the website is built on Joomla CMS, uses modern JavaScript libraries and sliders, and integrates Google Tag Manager for analytics. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and includes CSRF tokens but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and should be investigated further. Overall, the website is functional and credible for its purpose but would benefit from enhanced security and privacy compliance measures.

S

Scottish Renewables

scottishrenewables.com

67

Scottish Renewables is a prominent industry association representing the renewable energy sector in Scotland. The organization acts as a key voice advocating for renewable energy businesses, working closely with government entities to support industry growth and policy development. Their website reflects a professional and well-structured platform offering membership services, event information, policy updates, and industry statistics. The presence of numerous partner and sponsor logos underscores their established position within the renewable energy ecosystem. From a technical perspective, the website employs modern web standards including HTML5, CSS3, and JavaScript, with good mobile optimization and accessibility features. The site is served over HTTPS, ensuring secure communications, though explicit security headers are not evident from the provided data. Privacy and cookie policies are clearly presented with a consent mechanism, indicating compliance with GDPR requirements. Security posture is moderate; while HTTPS is enforced and privacy compliance is strong, the absence of detailed security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement. The lack of WHOIS domain registration data is a notable concern, potentially indicating domain registration issues or privacy restrictions, which slightly impacts trustworthiness. Overall, Scottish Renewables presents a credible and professional online presence aligned with its business mission. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and verifying domain registration details to bolster trust and compliance.

Z

ZX Lidars

zxlidars.com

65

ZX Lidars is a specialized company providing advanced wind lidar technology for accurate remote wind measurement, primarily serving the energy sector globally. Their product portfolio includes onshore, offshore, and turbine-mounted wind lidars, positioning them as an industry leader in wind energy measurement solutions. The company is based in the UK and has been operational since 2007, targeting wind energy developers and meteorological organizations. Technically, the website is built on WordPress and leverages modern web technologies such as jQuery, Slick Carousel, Font Awesome, and Google Tag Manager, indicating a mature digital infrastructure. The site is well-optimized for SEO and mobile devices, with good content quality and professional design. Security-wise, the site uses HTTPS and implements reCAPTCHA for form protection, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain registration transparency, although the website content and contact information suggest a legitimate business. Overall, the site demonstrates a solid business and technical foundation but would benefit from enhanced privacy compliance and security best practices.

P

ProjectNeverland

projectneverland.gr

58

ProjectNeverland is a small creative agency based in Athens, Greece, specializing in full-service graphic and web design solutions including branding, hosting, and digital media. The company showcases a professional portfolio with notable clients, emphasizing a balance between strategy and execution to deliver creative results. The website is built on Joomla CMS with modern web technologies and includes a contact form with spam protection. While the site enforces HTTPS and uses Google Analytics for tracking, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security headers are not detected, indicating room for improvement in security posture. Overall, the website presents a professional and trustworthy image consistent with a legitimate creative agency.

F

Fitmin.cz

fitmin.cz

55

Fitmin.cz is a Czech-based e-commerce business specializing in manufacturing and retailing high-quality pet food and accessories for dogs, cats, horses, and rodents. The company emphasizes fresh ingredients sourced from the Orlické Mountains region and targets pet owners primarily in the Czech Republic. The website is professionally designed with clear navigation and a comprehensive product catalog, including loyalty programs and promotional offers. Technically, the site leverages modern e-commerce technologies, including the Shoptet platform, Google Analytics, Microsoft Clarity, and Facebook SDK, ensuring a robust digital presence. Security measures such as HTTPS and security headers are properly implemented, though the site lacks a dedicated security policy or incident response contact. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, the absence of WHOIS data limits domain legitimacy verification, posing a moderate risk. Overall, Fitmin.cz presents a trustworthy and professional online retail platform with room for improvement in transparency around security and incident response.

M

Martin Tour

martintour.cz

50

Martin Tour is a well-established Prague-based tourism company specializing in sightseeing tours across Prague and the Czech Republic. Their offerings include city tours, boat cruises, trips outside Prague, hop-on hop-off bus tours, and private group tours with multilingual commentary. The company targets tourists seeking guided travel experiences with convenient online booking and diverse language support. The website reflects a small but professional business with consistent branding and clear contact information. Technically, the website is built on Joomla CMS using the Helix Ultimate template framework, leveraging modern libraries such as jQuery and Bootstrap 5.3.3. The site is mobile-optimized with good SEO practices and moderate performance. Security-wise, HTTPS is enforced with CSRF tokens present, but lacks some recommended security headers and a cookie consent mechanism, which impacts privacy compliance. The security posture is solid but could be improved by adding explicit security policies, incident response contacts, and vulnerability disclosure information. No WAF or blocking mechanisms were detected, and the domain WHOIS data is consistent with the business claims, indicating high legitimacy. Overall, the website is professional, trustworthy, and suitable for its tourism business purpose. Strategic recommendations include implementing a cookie consent banner, publishing a comprehensive privacy policy with GDPR compliance details, adding security headers, and establishing a vulnerability disclosure policy to enhance security and compliance posture.

L

LERAM s.r.o.

leram.cz

47

LERAM s.r.o. is a family-owned Czech company with nearly 30 years of experience primarily in the healthcare and pharmacy sectors. The company offers a comprehensive range of services including pharmaceutical manufacturing, distribution, storage, and retail pharmacy operations. Additionally, it has diversified interests in construction and gastronomy. The website reflects a professional and consistent brand image targeting business partners and customers in healthcare. Technically, the site uses modern web technologies such as Google Tag Manager, Google reCAPTCHA v3, and Three.js, with a YII PHP framework backend inferred from form validation patterns. The site is mobile-optimized and includes cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforced and reCAPTCHA protecting forms, though HTTP security headers are not explicitly detected. WHOIS data is not publicly available, likely due to privacy protection, which is common for businesses of this size and sector. Overall, the website is trustworthy, professional, and compliant with privacy regulations.

Švýcarna Slatinany is a small hospitality and cultural venue located in the Czech Republic, offering a variety of events, exhibitions, and educational programs primarily targeting local visitors and schools. The website is professionally designed using WordPress with Elementor and Astra theme, providing a good user experience with multilingual support and clear navigation. The technical infrastructure is modern and mobile-optimized, though hosting details are not explicitly available. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Privacy compliance is good with accessible privacy and cookie policies. Overall, the site represents a legitimate and trustworthy small business with a focus on cultural hospitality services.

K

KEDGE Business School

kedge.edu

68

KEDGE Business School is a prominent French business and management school with campuses in Marseille, Bordeaux, Paris, and Toulon. It offers a range of academic programs including bachelor, master, and specialized master's degrees targeting students, professionals, companies, alumni, and candidates. The school holds triple accreditation (AACSB, EQUIS, AMBA), reinforcing its market position and reputation in higher education. The website reflects a mature digital presence with comprehensive content, clear navigation, and professional branding consistent with its educational mission. Technically, the site employs modern analytics and marketing tools such as Google Tag Manager, Hotjar, Kameleoon, and Plausible Analytics, integrated with a GDPR-compliant cookie consent mechanism via OneTrust. Security posture is strong with HTTPS enforced and appropriate security headers, though there is room for improvement in publishing explicit security policies and incident response information. WHOIS data aligns well with the business claims, showing transparency and legitimacy. Overall, the website is professional, secure, and compliant, supporting KEDGE's credibility as a leading educational institution.

K

Kindermissionswerk Die Sternsinger e.V.

sternsinger.de

54

Kindermissionswerk Die Sternsinger e.V. operates a professional and well-established German non-profit website dedicated to supporting children worldwide through fundraising, educational materials, and awareness campaigns. The organization holds recognized certifications such as the DZI Spendensiegel, enhancing its credibility and trustworthiness. The website targets a broad audience including donors, schools, and children, providing clear donation pathways and educational content. Technically, the site is built on TYPO3 CMS with modern web technologies, good SEO, and mobile optimization, though some security header enhancements could be made. The security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies or incident response contacts. Privacy compliance is strong with GDPR-aligned cookie consent and privacy policies. Overall, the site presents a trustworthy and professional digital presence for a charitable organization.

M

missio Aachen

missio-hilft.de

49

missio Aachen is a well-established international Catholic non-profit organization focused on humanitarian aid and church development projects primarily in Africa, Asia, and Oceania. The organization holds a strong market position in Germany as one of the largest Catholic aid agencies, supported by transparent operations and recognized certifications such as the DZI-Spendensiegel. Their website reflects a professional and trustworthy image, offering multiple donation channels and detailed project information to engage donors and partners. Technically, the website is built on the TYPO3 CMS platform, leveraging modern tools like Google Tag Manager and Usercentrics for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly, hosted likely by a reputable German provider (NetCologne). Performance is moderate with good technical implementation. Security posture is solid with HTTPS enforced, consent mechanisms for cookies, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not published, and a security.txt file is absent, representing areas for improvement. Overall, the website and domain registration data indicate a legitimate, trustworthy organization with a high level of professionalism and compliance. The risk level is low, but strategic enhancements in security transparency and vulnerability disclosure would further strengthen their posture.

E

Einhard-Verlag GmbH

kirchenzeitung-aachen.de

60

KirchenZeitung Aachen is a regional church newspaper serving the Diocese of Aachen, Germany. It provides weekly news and information about church activities, events, and community stories. The website is professionally designed, mobile-optimized, and integrates modern consent management and privacy-respecting analytics tools. It is affiliated with the Einhard-Verlag GmbH and the Diocese of Aachen, reflecting a strong organizational backing and trustworthiness. The content is primarily in German and targets the Catholic community and interested general public in the region. Technically, the site uses OpenCms as its CMS, Piwik PRO for analytics, and Usercentrics for cookie consent, indicating a mature digital infrastructure.

K

Katholische Kirche

akademie-bistum-aachen.de

57

The Bischöfliche Akademie des Bistums Aachen is a well-established educational and cultural institution affiliated with the Catholic Church in Germany. It offers a broad range of workshops, seminars, and events focused on politics, society, theology, ethics, culture, and digital topics, targeting a diverse audience interested in societal discourse and faith-based dialogue. The institution also provides facilities for conferences and guest accommodations, supporting its educational mission. Technically, the website is built on the Alkacon Mercury CMS platform, employs modern web technologies, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks publicly available security policies or incident response contacts, which could be improved. Overall, the domain registration and hosting align with the institution's identity, indicating legitimacy and trustworthiness.

C

CEMEC

cemecpesquisaclinica.com.br

45

CEMEC is a Brazilian clinical research center with a professional online presence focused on clinical studies across more than 15 medical areas. The website is built on WordPress using Elementor and includes modern tracking and analytics tools such as Google Analytics, Facebook Pixel, and Microsoft Clarity. The site is well-structured, mobile-optimized, and secured with HTTPS, reflecting a moderate to good level of digital maturity. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. Security posture is adequate with HTTPS and reCAPTCHA usage, but could be improved by adding security headers and publishing a security policy. Overall, the site is legitimate and consistent with its business claims, but could enhance compliance and security transparency.

D

Deutsches Studentenwerk

studentenwerke.de

64

The Deutsches Studentenwerk (DSW) website serves as the central portal for student services in Germany, offering comprehensive information on financing, housing, counseling, and cultural activities for students. The site targets students, educational institutions, and stakeholders within the German higher education system. The organization operates as a large non-profit entity with a strong market position in the education sector. Technically, the website is built on TYPO3 CMS with modern front-end technologies and is hosted behind Cloudflare for performance and security. Privacy compliance is demonstrated through the use of Cookiebot for cookie consent and Matomo for analytics, reflecting a privacy-conscious approach. However, explicit privacy policies and terms of service are not clearly found in the provided content, which could be improved. Security posture is good with HTTPS enforced, but additional security headers and a published security policy would enhance trust. Overall, the website is professional, accessible, and trustworthy, with moderate tracking and good user experience.

W

Westsächsische Hochschule Zwickau

fh-zwickau.de

68

Westsächsische Hochschule Zwickau is a regional German university of applied sciences offering a broad range of technical, economic, and life quality related academic programs. The institution targets students, prospective students, alumni, and international participants, providing comprehensive study options including bachelor, master, dual study programs, and extensive research activities. The website reflects a mature digital presence built on TYPO3 CMS, integrating modern JavaScript libraries and analytics tools such as Matomo. It demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security and incident response policies are not publicly detailed. WHOIS data aligns well with the institution's identity, reinforcing legitimacy. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

U

Utopia

utopia-lueneburg.de

41

Utopia is a social and sustainable startup incubator and co-working center based in Lüneburg, Germany. It offers a variety of services including co-working spaces, startup incubation, maker spaces, event rooms, and community events. The organization targets freelancers, entrepreneurs, and startups seeking a collaborative and inspiring environment. The website reflects a well-established local business with a strong partner and sponsor network, emphasizing community and sustainability. Technically, the site is built on WordPress with common plugins for SEO and contact forms, showing moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, but lacks some security headers and explicit incident response policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-positioned in its niche.

E

e.novum GmbH

enovum-lueneburg.de

50

e.novum GmbH operates a startup and innovation center located in Lüneburg, Germany, closely affiliated with the Leuphana Universität. The company provides affordable office spaces, conference rooms, and supportive services tailored to startups and young companies. It fosters a collaborative environment with a strong regional network including local economic development organizations and foundations. The website is professionally designed, SEO optimized, and includes structured data to enhance search visibility. Technically, it is built on WordPress with Elementor and integrates Usercentrics for consent management, indicating a moderate level of digital maturity. Security posture is good with HTTPS and no evident vulnerabilities, though some security headers could be improved. Privacy compliance is basic, with no explicit privacy policy or terms of service found, but a cookie consent mechanism is present. Overall, the website and domain registration data indicate a legitimate and trustworthy business with a clear market position in real estate and startup support.

S

Sparkasse Lüneburg

sparkasse-lueneburg.de

70

Sparkasse Lüneburg is a regional financial institution based in Germany, providing a broad range of banking and financial services to private and corporate customers. The website serves as a comprehensive online banking portal offering services such as account management, loans, credit cards, investments, insurance, and real estate services. The bank positions itself as a trusted local partner with a strong emphasis on customer service and accessibility. The site is well-structured to cater to different customer segments with clear navigation and dedicated sections for private and business clients. Technically, the website is built on a modern CMS platform, likely Adobe Experience Manager, and employs standard web technologies including JavaScript and CSS. It demonstrates good mobile optimization, accessibility features, and SEO practices. The site uses HTTPS and includes cookie consent mechanisms compliant with GDPR, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS, uses secure forms, and has a cookie consent banner indicating awareness of privacy regulations. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the website is professional, trustworthy, and compliant with relevant privacy laws. It effectively supports the bank's business model and customer engagement strategies. Strategic recommendations include enhancing security header implementation, publishing a security policy, and adding a vulnerability disclosure mechanism to further strengthen trust and security posture.

The website www.dvwe.de is currently inaccessible beyond a Cloudflare Turnstile security challenge page, which blocks direct content access. Due to this, no business-specific content, contact information, or policies are available for analysis. The domain uses Jimdo name servers, suggesting it may be hosted on a website builder platform. The lack of visible content and metadata prevents assessment of the business model, services, or market position. Technically, the site employs Cloudflare's security services but lacks visible security headers or SSL configuration details in the provided data. The security posture cannot be fully evaluated due to content blocking. Overall, the site appears to be a small or personal site with minimal digital maturity and no visible compliance or trust indicators.

V

Verein Lüneburger Kaufleute e. V.

verein-lueneburger-kaufleute.de

54

Verein Lüneburger Kaufleute e. V. is a historic business association based in Lüneburg, Germany, with a legacy spanning nearly 600 years. The organization focuses on fostering economic exchange, networking, and community engagement among local entrepreneurs and merchants. Their key offerings include exclusive events such as the Handelsball and Herrenessen, regular networking evenings, and political representation for their members. The website reflects a well-established regional presence with a professional and consistent brand image targeting business professionals in the region. Technically, the website is built on the Webflow platform, utilizing modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA for form security. The site is hosted on Webflow's CDN infrastructure, ensuring moderate performance and good mobile optimization. Accessibility features are basic but present, and SEO practices are adequately implemented with proper metadata and structured content. From a security perspective, the site enforces HTTPS and integrates reCAPTCHA to protect forms from abuse. A cookie consent mechanism compliant with GDPR is implemented, providing users control over data processing. However, the site lacks explicit security headers and does not publish a security policy or incident response contacts, which are areas for improvement. No vulnerabilities or suspicious activities were detected in the analysis. Overall, the website presents a trustworthy and professional digital presence for the Verein Lüneburger Kaufleute e. V., with strong content quality and compliance posture. Strategic recommendations include enhancing security headers, publishing incident response information, and providing direct contact details for security matters to further strengthen trust and resilience.

V

Verein Technologie-Centren Niedersachsen e.V.

vtn.de

55

The Verein Technologie-Centren Niedersachsen e.V. (VTN) is a well-established non-profit association founded in 1997, dedicated to networking and supporting technology centers across Niedersachsen, Germany. The organization acts as a regional economic promoter by managing projects and initiatives on behalf of the state, fostering innovation and startup growth. The website reflects this mission with clear, professional content targeting technology centers, startups, and regional stakeholders. Technically, the website is built on the limz CMS platform, utilizing jQuery and custom frameworks. While the technology stack is somewhat dated, the site is functional, mobile-optimized, and SEO-friendly. Security is adequate with HTTPS enforced and cookie consent implemented, though some security headers are missing and the jQuery version is outdated. The security posture is moderate; no critical vulnerabilities or exposed sensitive data were found, but improvements are recommended in updating libraries and enhancing HTTP security headers. Privacy compliance is strong with a comprehensive GDPR-compliant privacy policy and explicit cookie consent mechanisms. Overall, the website is trustworthy, professional, and aligned with the organization's mission. The domain registration data is consistent and legitimate, supporting the site's credibility. Strategic recommendations include modernizing the tech stack, improving security headers, and adding explicit security and incident response policies to enhance trust and compliance.

NEWIN is a non-profit network association representing economic development agencies across Lower Saxony, Germany. The organization facilitates communication, coordination, and knowledge exchange among regional economic promoters and collaborates closely with state ministries and funding bodies. The website is professionally designed using TYPO3 CMS and provides comprehensive information about events, workshops, and organizational structure. Technically, the site uses modern web technologies and offers good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced and secure forms, though explicit security headers and policies could be improved. WHOIS data is unavailable, likely due to privacy protection, but the website content and external links indicate a legitimate and established organization. Overall, the site is trustworthy and well-maintained, serving its target audience effectively.

B

BANSON e.V.

banson.de

58

BANSON e.V. is a well-established non-profit business angel network based in Germany, focused on connecting startups with investors primarily in Northern Germany. The organization facilitates matching events, networking opportunities, and supports the startup ecosystem with over 21 years of experience. Their website is professionally designed using WordPress and Elementor, featuring structured data for SEO and a clear presentation of their services and events. Technically, the site uses modern technologies and is hosted behind Cloudflare, ensuring good performance and security. The security posture is solid with HTTPS and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is moderate, with cookie consent implemented but no explicit privacy policy found. Overall, BANSON presents a credible and trustworthy digital presence aligned with their business goals.

FaMi-Siegel is a regional initiative based in Germany focused on awarding and promoting family-friendly companies and institutions in the Nordostniedersachsen region. The website provides information about the FaMi-Siegel award, including current awardees, application procedures, and press releases. The business model centers on fostering family-friendly workplace practices through recognition and networking. The site targets local businesses and public institutions aiming to improve work-life balance for employees. Technically, the website is built on Joomla CMS, utilizing Bootstrap for responsive design and FontAwesome for icons. Hosting is provided by Cloudpit, a German hosting provider, ensuring regional alignment. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. No advanced analytics or tracking technologies are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS with a valid SSL configuration and includes CSRF tokens in scripts, but lacks explicit security headers such as Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were found. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is minimal, and no incident response or security policy pages are available. Overall, the website presents a trustworthy and professional image appropriate for its regional and non-commercial focus. Recommendations include enhancing security headers, implementing cookie consent for GDPR compliance, and publishing security and incident response policies to improve trust and compliance.

feffa e.V. is a German non-profit organization focused on women's career development, education, and family-friendly workplace initiatives. The website serves as a coordination platform for regional offices in Lüneburg, Uelzen, and Harburg, offering events, workshops, and networking opportunities. The organization targets women seeking professional growth and re-entry into the workforce. The site content is well-structured, professionally presented in German, and includes comprehensive contact information and event calendars. The business model centers on non-profit community support and education.

A

Ausbildungsverbund Lüneburg e.V.

xn--al-yka.de

43

Ausbildungsverbund Lüneburg e.V. is a regional non-profit organization dedicated to coordinating apprenticeship training for young people in the Lüneburg area of Germany. The organization collaborates with numerous partner companies to offer up to 30 apprenticeship positions annually, providing services such as candidate pre-selection, apprentice support, and coordination with vocational schools and chambers. Their website reflects a professional and consistent brand image, targeting both prospective apprentices and companies seeking to train new talent. Technically, the website employs modern web technologies including JavaScript libraries like Swiper.js and integrates Google Analytics and Tag Manager for tracking, while maintaining GDPR compliance through cookie consent mechanisms. Security posture is adequate with HTTPS enforced and IP anonymization in analytics, though there is room for improvement in implementing security headers and publishing explicit security policies. Overall, the website is accessible, well-structured, and trustworthy, supporting the organization's mission effectively.