Security Directory

E

EnviWeb s.r.o.

enviweb.cz

68

EnviWeb.cz is a Czech environmental news and information portal operated by EnviWeb s.r.o., established since 1999. It serves as a leading source for environmental news, CSR, climate change, education, and professional ecology events in the Czech Republic. The website targets municipalities, businesses, environmental professionals, and the general public interested in ecological topics. The business model is primarily content-driven with advertising and event promotion revenue streams. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for analytics and cookie consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though no explicit security policy or incident response contacts are published. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is privacy-protected, limiting domain registration transparency.

JIC INMEC is a European innovation agency based in the Czech Republic focused on supporting startups and entrepreneurs from ideation through scaleup stages. The agency offers incubation, acceleration, mentoring, and investor connection services to foster business growth and innovation. Their market position is strong regionally with international outreach, supported by partnerships with universities and European networks. Technically, the website is built on Kentico CMS with modern frameworks like Bootstrap and integrates multiple analytics and marketing tools such as Google Tag Manager, TikTok Pixel, and Hotjar. The site is mobile-optimized, accessible, and professionally designed, reflecting a mature digital presence. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and policies are absent. WHOIS data is unavailable, limiting domain registration trust verification, but the website content and business signals indicate legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR and cookie regulations.

6

6DHUB

6dhub.cz

51

6DHUB.cz is a Czech media platform established in 2016, specializing in technology, business innovation, leadership, and science content. The site targets professionals and enthusiasts interested in these sectors within the Czech Republic. It operates a content publishing business model supported primarily by advertising revenue. The platform uses Joomla CMS with the K2 component and integrates modern web technologies such as Bootstrap, jQuery, Google Analytics, and Cookiebot for analytics and consent management. Hosting and domain registration are consistent with Czech providers, supporting the site's legitimacy. From a technical perspective, the website demonstrates moderate performance with good mobile optimization and SEO practices. The security posture is adequate with HTTPS enforced and cookie consent implemented, though it lacks advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with privacy and cookie policies present but lacking detailed GDPR compliance indicators. Contact information is limited to a contact form without direct emails or phone numbers. Overall, the site is professionally designed, content-rich, and safe for general audiences. It does not exhibit any adult or questionable content. The domain registration and hosting align well with the website's purpose and audience. Strategic improvements could focus on enhancing security headers, publishing detailed security and incident response policies, and expanding privacy compliance transparency.

S

Smart Connections s.r.o.

svetprumyslu.cz

10

Svět Průmyslu is a Czech media company operated by Smart Connections s.r.o., specializing in publishing news, articles, and interviews related to the industrial sector both domestically and internationally. The website serves industry professionals and stakeholders by providing relevant and timely industrial news. Technically, the site is built on WordPress CMS with WooCommerce and several plugins for SEO, advertising, and interactive content such as 3D flipbooks. The infrastructure includes Cloudflare DNS and HTTPS, ensuring a secure browsing experience. Security posture is moderate with HTTPS enabled but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is professionally designed with good content quality and moderate trustworthiness.

S

Scuk.cz

scuk.cz

61

Scuk.cz is an e-commerce platform specializing in the sale of local farm products including bakery items, meats, dairy, fruits, and vegetables primarily serving the Czech Republic market. The platform connects local farmers directly with consumers, offering delivery and pickup options, as well as wholesale services. The website demonstrates a professional and consistent brand presence with a clear focus on local and fair-priced farm goods. Technically, the site is built on modern web technologies such as React and Apollo GraphQL, with integrations for analytics and marketing tools like Google Analytics and Facebook Pixel. The site is mobile optimized and provides a good user experience with clear navigation and content relevance. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, though some security headers and policies are missing. The absence of WHOIS data reduces domain trust slightly but does not detract from the overall legitimacy of the business. Privacy compliance is well addressed with a comprehensive privacy policy and cookie banner. Overall, Scuk.cz presents a solid digital presence with room for improvement in security documentation and WHOIS transparency.

Future Farming is a Polish-based online platform focused on delivering content and insights related to modern agricultural technologies and sustainable farming practices. The website serves as an information hub for farmers and agricultural professionals interested in innovations such as IoT, AI, precision agriculture, and sustainable methods. The platform positions itself as a global supplier of technological units in modern agriculture, primarily through educational and editorial content. Technically, the website is built on WordPress with popular SEO and layout plugins, ensuring a good user experience and mobile optimization. Security-wise, the site uses HTTPS but lacks visible security headers and formal privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, although the website content and structure appear professional and trustworthy. Overall, the site is functional and relevant for its niche audience but would benefit from enhanced compliance and security practices.

The website futurefarming.group is currently inaccessible due to a Cloudflare Web Application Firewall (WAF) block, which prevents any meaningful content or metadata from being retrieved or analyzed. The domain WHOIS information is not available or supported for this TLD, providing no registrar, creation, expiry, or registrant details. This lack of transparency and accessibility severely limits the ability to assess the business, technical, and security posture of the site. The only visible page is a Cloudflare security block notice indicating that the visitor has been blocked due to triggering security rules. Consequently, no business description, contact information, or compliance policies are available. From a technical perspective, the site is protected by Cloudflare, but the current configuration or visitor behavior results in access denial. No security headers, SSL configuration details, or scripts are observable. The absence of privacy, cookie, or terms of service policies further reduces compliance confidence. No analytics or marketing tools are detected. The domain's legitimacy is questionable due to missing WHOIS data and lack of accessible content. Security posture is weak from an external viewpoint due to the block preventing analysis. The site does not expose any content or forms, so no direct vulnerabilities are visible, but the lack of transparency and contact channels is a concern. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility due to the block and missing data. Strategic recommendations include reviewing WAF rules to avoid blocking legitimate users, publishing clear privacy and contact information, implementing security headers, and ensuring WHOIS data is available and accurate to improve trust and compliance.

G

GFF s.r.o.

gffgroup.cz

55

GFF s.r.o. is a Czech investment group focused on strengthening future value by supporting innovative projects and talented individuals primarily in technology, agriculture, innovation, development, and services sectors. The company operates a professional website built on WordPress, employing modern web technologies and performance optimizations such as WP Rocket, Cloudflare DNS, and GDPR-compliant cookie management. The site is well-structured, mobile-optimized, and provides clear business and contact information, including legal disclosures and privacy policies. Security posture is solid with HTTPS enforced, anti-spam measures, and cookie consent mechanisms, though explicit security headers and incident response details are not publicly disclosed. The domain registration is consistent with the business profile, enhancing trustworthiness. Overall, the website reflects a credible, medium-sized investment firm with a good digital presence and compliance with privacy regulations.

H

Hans Brantner & Sohn Fahrzeugbaugesellschaft mbH

brantner-hallenbau.at

47

Hans Brantner & Sohn Fahrzeugbaugesellschaft mbH operates the website brantner-hallenbau.at, providing specialized steel and hall construction services primarily in Eastern Austria. The company has a strong regional presence with over 70 years of experience, offering a range of services including hall construction, steel fabrication, roof and wall installation, and vehicle manufacturing through its subsidiaries. The website reflects a professional business model targeting industrial and commercial clients requiring manufacturing and construction solutions. Technically, the site is built on Joomla CMS with a mix of legacy and modern JavaScript libraries, including jQuery and Revolution Slider. While the site is functional and moderately optimized for mobile, some outdated libraries and lack of advanced security headers suggest room for improvement. Security posture is adequate with HTTPS enforced and cookie consent implemented, but updating libraries and adding security headers would enhance protection. Privacy compliance is good with a visible cookie banner and a privacy policy linked in the imprint. Overall, the website is trustworthy and professionally maintained, supporting the company's credibility in its sector.

B

Brantner Lohnfertigung

brantner-lohnfertigung.at

49

Brantner Lohnfertigung is a specialized Austrian manufacturing company focusing on advanced 3D laser processing and Rohrlaser parts production. Their website reflects a professional B2B service provider targeting industrial clients requiring precision laser cutting. The company leverages modern web technologies including Joomla CMS, Neko Framework, and Revolution Slider, with a moderate level of mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements are recommended in security headers and incident response transparency. Overall, the website is trustworthy and well-structured, supporting the company's market position as a niche manufacturing service provider.

U

UTILO KG

utilo.eu

47

UTILO KG, led by DI Christian Osterrieder-Schlick, is a specialized web development and software consultancy firm based in Salzburg, Austria. With over 20 years of experience, the company offers bespoke web applications, custom software solutions, and certified expert witness services for IT projects. The website showcases a professional portfolio with detailed client projects, emphasizing long-term collaborations with notable clients such as SPAR, Brantner Gruppe, and Salzburg AG. The business model focuses on delivering tailored digital solutions and expert legal consulting in IT, targeting businesses and organizations requiring high-quality, technically sound web and software services. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and frameworks like Bootstrap and Grails. It integrates CMS Joomla for content management and uses Docker microservices for some client projects. Hosting is provided by IONOS SE, a reputable registrar and hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with minimal user tracking via UMAMI Analytics, reflecting a moderate digital maturity. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and publicly available security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is limited due to the absence of privacy and cookie policies or consent mechanisms, representing an area for improvement. The business credibility is high, supported by clear contact information, professional content, and trust indicators such as certifications and client references. Overall, UTILO KG presents a trustworthy and professional digital presence with strong business credibility and technical implementation. To enhance security posture and compliance, the company should implement security headers, publish privacy and cookie policies, and establish a vulnerability disclosure or incident response channel.

The website rosalint.de currently serves as a placeholder domain reserved page hosted by STRATO, a German hosting provider. The site contains no business content, contact information, or policies, indicating it is newly registered and inactive. The technical infrastructure is minimal, consisting of basic HTML and SVG graphics with no advanced frameworks or CMS detected. Security posture is weak due to lack of HTTPS confirmation, absence of security headers, and no privacy or cookie policies. No vulnerabilities or tracking technologies are present, but the site lacks essential compliance and trust indicators. Overall, the domain appears legitimate but inactive, with a low risk profile due to minimal exposure. Strategic recommendations include enabling HTTPS, adding privacy and cookie policies, and publishing business and contact information to improve credibility and compliance.

H

Hochschulnetzwerk NRW

hn-nrw.de

10

Hochschulnetzwerk NRW (HN NRW) is a regional network of 21 state and state-funded universities of applied sciences in North Rhine-Westphalia, Germany. The organization promotes applied research, interdisciplinary collaboration, and knowledge exchange between academia, politics, industry, and society. It is funded by the Ministry of Culture and Science of NRW and serves as a key platform for research dissemination and networking in the region. The website provides information on research projects, events, newsletters, and sustainability initiatives, targeting academic and professional audiences. Technically, the website is built on WordPress using the Avada theme and incorporates modern web technologies such as jQuery and Flexslider. It employs the Borlabs Cookie plugin for GDPR-compliant cookie management and uses HTTPS with a good security posture. The site is mobile-optimized and includes accessibility and SEO best practices, although some improvements in security headers and accessibility could be made. From a security perspective, the site demonstrates good practices including HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy, incident response contacts, and a security.txt file, which are recommended for enhanced transparency and vulnerability management. Overall, HN NRW's website is professional, trustworthy, and compliant with privacy regulations, serving its educational and research-focused mission effectively. Strategic recommendations include enhancing security policy transparency, implementing a security.txt file, and improving accessibility compliance to further strengthen its digital maturity and trustworthiness.

E

Erlebniswelt Lüneburger Heide GmbH

erlebniswelt-lueneburger-heide.de

46

Erlebniswelt Lüneburger Heide GmbH operates a regional tourism and leisure website focused on promoting attractions such as amusement parks, designer outlets, and climbing gardens in the Lüneburger Heide region of Germany. The website targets tourists and visitors seeking leisure activities and provides multilingual support via Google Translate. The business model centers on information dissemination and regional promotion, positioning itself as a key regional tourism service provider. Technically, the site uses a combination of Bootstrap, jQuery, and custom CMS components hosted on infrastructure managed by UI-DNS services. Accessibility is a strong focus, with an advanced digiaccess tool integrated to support users with various disabilities. Security posture is moderate with cookie consent and privacy policies in place, but lacks explicit security headers and incident response information. Overall, the site is professional, well-structured, and compliant with GDPR requirements, though improvements in security policy transparency and contact information visibility are recommended.

L

leanact GmbH

leanact.de

38

leanact GmbH is a German-based company specializing in software solutions for digital citizen participation and e-participation targeted at municipalities and public institutions. Founded in 2017, the company positions itself as a niche provider supporting efficient IT process implementation in local governments. The website reflects a professional and consistent brand image with clear contact information and a focus on privacy compliance. Technically, the site is built on WordPress with Elementor and uses Matomo for analytics, indicating a modern and privacy-conscious infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers could be improved. Overall, leanact GmbH demonstrates a trustworthy and compliant online presence suitable for its government sector clientele.

C

Communauté de communes du Pays de Barr

paysdebarr.fr

45

The website www.paysdebarr.fr serves as the official portal for the Communauté de communes du Pays de Barr, a regional community organization in Alsace, France. It provides comprehensive information on local tourism, economic development, cultural heritage, and community services across 20 communes. The site targets residents, tourists, and local businesses, promoting the region's viticulture, heritage sites, and local economy. The business model is that of a public community portal aimed at information dissemination and regional promotion. Technically, the website is built on Drupal 10, leveraging modern web technologies including Google Maps API for interactive maps, Piwik PRO and Google Analytics for visitor tracking, and Facebook SDK for social media integration. It employs a cookie consent management system (Tarteaucitron) to comply with privacy regulations. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers could be improved. From a security perspective, the site enforces HTTPS and manages cookie consent effectively, with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not present, which could be enhanced to improve transparency and trust. The WHOIS data is not publicly available, indicating privacy protection, which is typical for such public-facing community websites. Overall, the website presents a professional, trustworthy, and well-maintained digital presence for the Pays de Barr community, with strong content quality and compliance with privacy standards. Strategic improvements could focus on enhancing security headers and publishing detailed security and incident response policies.

T

Télécom Physique Strasbourg

telecom-physique.fr

47

Télécom Physique Strasbourg is a reputable engineering school affiliated with the University of Strasbourg and Institut Mines-Télécom, offering specialized engineering education and research in fields such as computer science, physics, and health technologies. The institution holds recognized certifications and maintains active partnerships with industry and academic entities. The website is built on TYPO3 CMS with modern web technologies, providing a good user experience and mobile optimization. Security posture is moderate with HTTPS usage and no exposed sensitive data, but lacks some security headers and explicit cookie consent mechanisms. WHOIS data is unavailable, which slightly reduces domain trustworthiness. Overall, the site is professional, content-rich, and trustworthy for its educational purpose.

I

Icam

icam-strasbourg.eu

56

Icam is a well-established French engineering school with multiple campuses across France and international partnerships. The institution offers a broad range of engineering education programs, including preparatory cycles, specialized engineering degrees, professional training, and international double degrees. The website reflects a mature digital presence with professional design, comprehensive content, and clear navigation tailored to prospective students, professionals, and partner companies. Technically, the site is built on WordPress with modern analytics and marketing integrations, including consent management compliant with GDPR. Security posture is strong with HTTPS enforced and secure form handling, though some security headers could be improved. The absence of WHOIS data is likely due to privacy protection, which is justified for this type of educational institution. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations.

L

Le Cnam Grand Est

cnam-grandest.fr

58

Le Cnam Grand Est is a well-established regional educational institution specializing in professional higher education and training across Alsace, Champagne-Ardenne, and Lorraine. It offers a variety of accessible learning modalities including alternance, in-person, and distance education, targeting students, professionals, and organizations. The website reflects a mature digital presence with comprehensive content, clear navigation, and strong branding consistent with its historical legacy dating back to 1794. Technically, the site is built on WordPress with modern SEO and analytics tools integrated, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. The absence of WHOIS data is a notable gap but does not detract significantly from the site's legitimacy given its official certifications and professional presentation. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations.

A

Alsace Marchés Publics

alsacemarchespublics.eu

66

Alsace Marchés Publics is a regional government-affiliated platform providing comprehensive information and e-procurement services related to public contracts in the Alsace region of France. The website serves as a key resource for public sector buyers and suppliers, offering access to procurement announcements, contract details, news updates, and educational webinars. The platform supports transparency and efficiency in public procurement processes within the Haut-Rhin and Bas-Rhin departments. Technically, the website employs modern web technologies including React components for modals, Matomo for analytics, and structured data markup (JSON-LD) to enhance SEO and accessibility. The site is built on the Umbraco CMS platform and demonstrates good mobile optimization, accessibility, and performance characteristics. Cookie consent is managed via the Orejime framework, ensuring GDPR compliance. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit HTTP security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is protected by EURid privacy policies, which is typical for domains under .eu TLD, and does not raise legitimacy concerns given the official nature of the site. Overall, Alsace Marchés Publics presents a professional, trustworthy, and well-maintained digital presence that effectively supports its public sector mission. Strategic improvements could include publishing detailed security and incident response policies, adding a terms of service page, and enhancing HTTP security headers to further strengthen security posture.

F

Fédération Nationale des Offices Municipaux du Sport

fnoms.org

60

The Fédération Nationale des Offices Municipaux du Sport (FNOMS) is a French national federation dedicated to supporting local sports offices and promoting sport for all. The organization provides a wide range of services including legal advice, communication tools, training, and coordination of funding campaigns. The website reflects a well-established non-profit entity with a clear mission to develop sport-santé actions accessible to all publics. The federation positions itself as a central hub for sports organizations and local communities in France, offering resources and advocacy to its members. Technically, the website is built on WordPress and leverages modern web technologies such as the UKit CSS framework, jQuery, and Google Analytics for tracking. It employs a comprehensive cookie consent mechanism compliant with GDPR, ensuring user privacy and transparency. The site is mobile-optimized, accessible, and features a professional design with clear navigation, enhancing user experience. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent with high privacy settings. However, explicit security headers are not detected, and no dedicated security or incident response policies are publicly available. The WHOIS data is privacy protected, which is common and justified for non-profit organizations. Overall, the site demonstrates a solid security posture with room for improvement in security header implementation and incident response transparency. The overall risk assessment is low, with no signs of malicious activity or suspicious content. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts. These steps will further strengthen the federation's digital trust and compliance posture.

Winamax operates a professional online sports betting platform targeting the German market, offering a wide range of sports and leagues for betting, including live betting and VIP programs. The website is well-branded, consistent, and provides a good user experience with modern technical infrastructure including React and jQuery, hosted on AWS. Security posture is strong with HTTPS and implied security headers, though explicit privacy and terms of service documents were not found in the provided content. The platform uses cookie consent mechanisms and tracking tools such as Google Analytics and Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate and trustworthy, catering to adult users interested in sports betting.

É

Électricité de Strasbourg

es.fr

63

Électricité de Strasbourg (ÉS) is a regional energy provider serving the Alsace region in France, offering electricity and gas contracts, energy efficiency services, photovoltaic solutions, and green energy offers. The website is professionally designed using Drupal CMS and integrates privacy-conscious analytics (Matomo) and cookie consent mechanisms. Security posture is strong with HTTPS and some security headers, though explicit privacy and terms of service pages are missing. WHOIS data is unavailable, which slightly reduces trust but the website content and domain usage indicate a legitimate business. Overall, the site provides a good user experience with clear navigation and relevant content for its target audience.

R

Racing Club de Strasbourg Alsace

destination-racing.eu

50

The website destination-racing.eu serves as the official digital platform for the Racing Club de Strasbourg Alsace's stadium renovation project, providing detailed information about the extension and modernization of Stade de la Meinau. It targets supporters and local community members, offering updates on construction phases, new services, and ticketing access. The site leverages a modern WordPress infrastructure with Elementor and Jet plugins, ensuring a visually appealing and responsive user experience. Security posture is solid with HTTPS enabled, though improvements are recommended in security headers and privacy compliance. The absence of WHOIS data limits domain registration insights, but the website's branding, social media presence, and content quality strongly indicate legitimacy. Overall, the site is professional, trustworthy, and well-positioned to engage its audience effectively.

T

Transtech

transtech.pt

33

Transtech is a Portuguese technology-focused company specializing in qualification, digitalization, innovation, and technological development projects. The website presents a professional and consistent brand image targeting businesses interested in technological innovation and digital transformation. The technical infrastructure uses modern front-end technologies such as Google Fonts, FontAwesome, and popular JavaScript libraries for UI components, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information, which are recommended for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could expose the company to regulatory risks. Overall, the website is functional and professional but would benefit from enhanced security and privacy practices to improve trust and compliance.

P

Pohjanmaan hyvinvointialue

pohjanmaanhyvinvointi.fi

68

Pohjanmaan hyvinvointialue is a Finnish public sector entity responsible for social and healthcare services and emergency services in the Pohjanmaa region. As one of Finland's 21 welfare areas, it provides a comprehensive range of services including digital appointment booking, social welfare guidance, and emergency care. The website is professionally designed, multilingual, and targets residents and service users in the region. It reflects a strong public service orientation with clear communication channels and compliance with regulatory requirements. Technically, the website is built on WordPress with modern web technologies such as Google Tag Manager for analytics, ReadSpeaker for accessibility, and an embedded chatbot for user assistance. The site is mobile-optimized, accessible, and performs well with good SEO practices. Security measures include HTTPS enforcement and cookie consent mechanisms, although some security headers could be improved. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The domain registration is transparent and consistent with the organization's identity, enhancing trustworthiness. The site complies with GDPR and provides comprehensive privacy and cookie policies. Overall, the risk level is low, and the site serves as a reliable digital front for the welfare area's services. Strategic recommendations include enhancing security headers, continuous monitoring of third-party scripts, and maintaining transparency in privacy practices to uphold user trust and regulatory compliance.

S

Satakunnan hyvinvointialue

satakunnanhyvinvointialue.fi

68

Satakunnan hyvinvointialue is a Finnish regional welfare area authority focused on promoting wellbeing, safety, and health for residents of the Satakunta region. Established in 2021, it provides a broad range of healthcare and social services including hospital care, elderly services, mental health, and digital service access. The website serves as an official portal for residents and professionals, offering comprehensive information and digital interaction channels. Technically, the site is built on WordPress with modern frontend enhancements and integrates privacy-conscious analytics via Matomo. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms, though DNSSEC and explicit security policies could be improved. Overall, the domain registration and website content are consistent and trustworthy, reflecting a legitimate public sector entity.

S

ServiceValue

servicevalue.de

47

ServiceValue is a Cologne-based analysis and consulting company specializing in service quality and relationship management, founded in 2009. The company positions itself as Germany's number one ranking agency for quality marketing, offering services such as rankings, ratings, studies, and awarding quality seals. Their target audience includes businesses seeking to improve customer, employee, and partner relationships through data-driven insights. Technically, the website is built on WordPress with modern tools including Yoast SEO, Matomo analytics, and Borlabs Cookie for GDPR-compliant cookie management. The site is well-optimized for mobile and SEO, with a professional design and clear navigation. Security-wise, the site uses HTTPS and privacy-respecting analytics but lacks publicly visible security policies or incident response contacts. Overall, the website is trustworthy, professional, and compliant with privacy regulations, with room for improvement in explicit security disclosures.

S

Standpunkte – Das Chef-Magazin der norddeutschen Metall- und Elektroindustrie

standpunkte.online

61

Standpunkte.online is a newly launched German online magazine serving the northern German metal and electrical industry professionals and executives. The website provides industry news and digital magazine content tailored to this niche sector. The business model is focused on media publication with a regional and industry-specific target audience. The site is built on WordPress CMS, leveraging modern plugins and Google Tag Manager for analytics, indicating a moderate level of digital maturity. Cookie consent mechanisms are implemented, reflecting GDPR compliance awareness. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers are missing. No privacy policy or terms of service were found, which is a compliance gap. Overall, the website is professional, safe, and functional but would benefit from enhanced privacy documentation and additional security hardening.

W

Württembergische Landesbibliothek

wlb-stuttgart.blog

57

The Württembergische Landesbibliothek operates a blog website focused on sharing knowledge, cultural events, and academic lectures related to the library and its services. The site targets a general audience interested in cultural and educational content, primarily in the German language. The institution holds a regional government position in Stuttgart, Germany, providing public access to information and cultural resources. The website content dates back to 2020, indicating an established digital presence. Technically, the website is built on WordPress CMS, utilizing the Yoast SEO plugin for search engine optimization and jQuery for client-side scripting. The site demonstrates good mobile optimization and a moderate performance profile. SEO practices are well implemented with proper meta tags and structured data using JSON-LD schema.org vocabulary. However, accessibility features are basic, and no advanced performance or hosting details are evident. From a security perspective, the site uses HTTPS as implied by canonical URLs, but no explicit security headers were detected in the provided data. There is no visible cookie consent mechanism, which is a GDPR compliance gap. No forms or user data collection points were found on the homepage, reducing attack surface. The absence of WHOIS data reduces domain trustworthiness, but the presence of official contact information and consistent branding supports legitimacy. Overall, the website presents a low-risk profile with good content quality and business credibility. Strategic improvements include implementing security headers, adding cookie consent for privacy compliance, and publishing security policies to enhance trust and compliance posture.

S

Urlaub in Sachsen-Anhalt zwischen Harz und Elbe: Sachsen Anhalt Tourismus

sachsen-anhalt-tourismus.de

40

The website sachsen-anhalt-tourismus.de serves as a regional tourism portal promoting the German state of Sachsen-Anhalt. It highlights cultural, natural, and historical attractions, targeting tourists interested in exploring the region. The site uses TYPO3 CMS and integrates modern frontend technologies including FontAwesome icons and a carousel library. Usercentrics is employed for cookie consent management, indicating attention to privacy compliance. However, no explicit privacy policy or terms of service pages were found in the provided content, and no direct contact information is visible, which may impact user trust and compliance completeness. The technical infrastructure appears solid with good mobile optimization and SEO practices, but security headers and detailed security policies are not evident. The WHOIS data is minimal but does not raise immediate concerns, though registrant details are sparse. Overall, the site is professional and content-rich, suitable for its tourism promotion purpose, but could improve transparency and security posture.

W

WeselMarketing GmbH

weselmarketing.de

69

WeselMarketing GmbH operates the official tourism and city marketing website for the city of Wesel, Germany. The website provides comprehensive information about cultural attractions, natural sites, events, travel planning, and local services aimed at tourists, visitors, and residents. The business is positioned as a key promoter of Wesel's tourism sector, leveraging digital channels to enhance visitor engagement and city branding. The site is well-structured, professionally designed, and offers multilingual support, reflecting a mature digital presence. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including JavaScript libraries and Google Tag Manager for analytics and marketing. The site is mobile-optimized, accessible, and employs a robust cookie consent mechanism compliant with GDPR standards. Performance is moderate with good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and uses session cookies appropriately. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced trust and compliance. No critical vulnerabilities or suspicious content were detected. Overall, the website demonstrates a strong business credibility and privacy compliance posture, with room for improvement in formal security documentation and incident readiness. The domain registration data aligns with the business location and sector, supporting legitimacy. Strategic recommendations include publishing security policies, adding vulnerability disclosure, and enhancing security headers to further strengthen the security posture.

W

WeselMarketing GmbH

wesel-tourismus.de

69

WeselTourismus.de is the official tourism website for the city of Wesel, Germany, managed by WeselMarketing GmbH. The site provides comprehensive information about local culture, nature, events, and travel planning, targeting tourists and local visitors. It features a professional design with clear navigation and multilingual support (German, English, Dutch). The website uses Drupal CMS and integrates Google Tag Manager for analytics and marketing purposes. Cookie consent mechanisms are implemented in compliance with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Contact information is clearly provided, including phone, email, and physical addresses. No terms of service or explicit security policies were found. Overall, the site is trustworthy, well-maintained, and serves as a reliable resource for tourism in Wesel.

KRZN – Kommunales Rechenzentrum Niederrhein is a large, well-established municipal IT service provider in Germany, founded in 1971. It serves 46 local government administrations with over 18,000 IT workstations supported by more than 500 employees across two main locations. The organization offers a broad portfolio of IT solutions tailored for public sector needs, including web conferencing systems with official certifications. Technically, the website is built on Drupal CMS, hosted likely by Deutsche Telekom, and uses eTracker for analytics. The site is well-structured, mobile-optimized, and professionally designed, reflecting a mature digital presence. Security posture is solid with HTTPS and no evident vulnerabilities, though explicit security headers and incident response policies are absent. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain registration data aligns well with the business profile, indicating high legitimacy and trustworthiness.

The website www.audacy.com currently displays only a minimal message indicating that the site is not available in the EU, suggesting geo-blocking or legal compliance restrictions. No additional content, metadata, or business information is accessible, limiting the ability to analyze the company's services, market position, or technical infrastructure. The WHOIS query returned no match, indicating missing or privacy-protected domain registration data, which further complicates legitimacy assessment. The lack of HTTPS confirmation and absence of security headers or policies suggest a low security posture. Overall, the site appears inaccessible or restricted, resulting in a low confidence analysis.

XIFIN operates in the healthcare technology sector, specializing in revenue cycle management and laboratory billing system software and solutions. The company appears to be an established player with a domain registered since 2000, indicating long-term market presence. However, the website content is extremely minimal, consisting only of a title tag without substantive information, metadata, or user engagement features. This limits the ability to fully assess the company's digital maturity and online presence. From a technical perspective, the website lacks visible modern technologies, metadata, or structured data, and no security headers or HTTPS status were provided. The domain registration is consistent and trustworthy, registered through GoDaddy.com, LLC with multiple client prohibitions to prevent unauthorized changes. DNSSEC is not enabled, which is a minor security shortfall. Security posture is weak due to the absence of visible security headers, privacy policies, cookie consent mechanisms, and contact information for incident response. No forms or data collection mechanisms were detected, reducing immediate privacy concerns but also limiting user interaction. The lack of privacy and cookie policies indicates non-compliance with GDPR and other privacy regulations. Overall, the website appears to be a placeholder or underdeveloped, which negatively impacts trust and user experience. Strategic improvements in website content, security practices, and privacy compliance are recommended to enhance credibility and protect user data.

L

Level Access

essentialaccessibility.com

69

Level Access is a leading enterprise provider specializing in digital accessibility solutions, offering a comprehensive platform for testing, remediation, and compliance reporting to ensure organizations meet global accessibility standards such as WCAG and Section 508. Their target audience includes businesses and government entities seeking to improve digital inclusivity and meet regulatory requirements. The company leverages a mature technical infrastructure built on WordPress CMS, enhanced with performance and marketing tools like NitroPack, HubSpot, and Cookiebot, demonstrating a high level of digital maturity and user experience optimization. Security posture is strong with HTTPS enforcement, multiple security headers, and privacy compliance mechanisms, although explicit security policies and vulnerability disclosures are not publicly detailed. Overall, the website reflects a professional, trustworthy, and well-established business with a strong market position in the accessibility technology sector.

I

Invitae

invitae.com

67

Invitae is a healthcare company specializing in genetic testing services, offering DNA testing solutions integrated with medical practices. The company partners with Labcorp to enhance its service delivery, positioning itself as a significant player in the genetic testing market. The website reflects a professional healthcare service provider with a focus on improving patient care through DNA-based insights. Technically, the website uses modern web technologies including Next.js, Adobe Launch, and analytics tools such as Amplitude and New Relic, indicating a mature digital infrastructure. Security posture is generally strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and detailed privacy policies are not evident in the provided content. The absence of WHOIS data reduces transparency but does not detract significantly from the overall legitimacy given the professional presentation and partnerships. Strategic recommendations include enhancing security header implementation, publishing comprehensive privacy and security policies, and improving contact transparency for security and privacy inquiries.

R

Rankai

rankai.ai

61

Rankai is a newly founded AI-powered SEO agency focused on delivering high-quality SEO services to startups and SMBs at a competitive price point. The company leverages a hybrid approach combining human SEO expertise with AI-driven content creation and optimization to generate significant organic traffic growth for clients. Backed by reputable investors such as OpenAI, Andreessen Horowitz, Y Combinator, and Microsoft, Rankai positions itself as an innovative player in the SEO technology space. Technically, the website is built on modern frameworks including Next.js and React, with integrations for analytics (Google Analytics, Plausible, PostHog) and customer engagement (Intercom). The site is well-optimized for performance, mobile responsiveness, and SEO best practices, reflecting a mature digital infrastructure for a startup. Hosting is via GoDaddy, with domain privacy protection enabled. From a security perspective, the site uses HTTPS and follows basic security best practices but lacks advanced security headers and published security policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a clear privacy policy and terms of service but no cookie consent mechanism. WHOIS data indicates a legitimate startup with privacy protection justified by business type. Overall, Rankai presents a professional, trustworthy, and technically sound online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas will strengthen trust and regulatory adherence.

A

Aflac

aflac.com

73

Aflac is a leading supplemental insurance provider in the United States, offering a broad portfolio of insurance products including accident, cancer, critical illness, dental, life, Medicare supplement, pet, hospital, and disability insurance. The company targets individuals, families, business owners, brokers, and agents, positioning itself as a market leader in supplemental insurance coverage. The website reflects a mature, enterprise-level business with consistent branding, comprehensive product information, and clear segmentation for different customer types. Technically, the website employs modern web technologies such as jQuery, RequireJS, and asynchronous script loading, alongside integrations with analytics (Dynatrace, Tealium) and chatbot services (Sutherland AI, Pega). The site is mobile-optimized, accessible, and SEO-friendly, with structured data enhancing search visibility. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and uses best practices like asynchronous script loading and cookie consent mechanisms. However, explicit security headers (CSP, HSTS) are not evident, and no public security or incident response policies are found. The WHOIS data is unavailable, which is unusual but the website's professional presentation and legal disclosures support its legitimacy. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations including GDPR. Recommendations include enhancing security headers, publishing a vulnerability disclosure policy, and improving WHOIS transparency to strengthen trust further.

L

Learning Technologies Group

ltgplc.com

65

Learning Technologies Group (LTG) is a well-established leader in the digital learning and talent management sector, serving large organizations globally. The company offers a broad portfolio of learning technologies and talent solutions, supported by a strong brand presence and multiple industry awards. The website reflects a mature business with clear market positioning and a focus on innovation in workplace learning. Technically, the site is built on WordPress, hosted on AWS, and employs modern web technologies including Google Tag Manager and CookieYes for analytics and privacy compliance. Security posture is solid with HTTPS enforced and bot management via Cloudflare, though some security headers could be improved. Privacy compliance is strong with comprehensive policies and a consent mechanism. Overall, LTG's website demonstrates professionalism, trustworthiness, and a good balance of business and technical maturity.

M

mecodia GmbH

mecodia.de

56

mecodia GmbH is a German-based software and educational agency specializing in software development, consulting, and digital education services. The company targets businesses and educational institutions seeking to leverage digital transformation and media competence. Their market position is that of a niche provider with a strong focus on practical digital solutions and educational media. The website reflects a professional and consistent brand image with clear service offerings and active engagement through a blog and social media channels. Technically, the site is built on WordPress using Elementor and Yoast SEO, indicating a modern and SEO-optimized infrastructure. Performance and mobile optimization are good, though accessibility could be improved. Security posture is solid with HTTPS enforced, but lacks explicit security headers and published security policies. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, mecodia GmbH presents a trustworthy and credible online presence with room for enhancement in security transparency and accessibility.

The website 'Kinderportal Schneverdingen' serves as a municipal children’s information portal for the town of Schneverdingen, Germany. It provides comprehensive information on leisure activities, sports, playgrounds, nature, and local government services targeted primarily at children and families. The site is positioned as a local government resource, offering public service content with a focus on community engagement and education. Technically, the website is built on the contentXXL Business CMS platform using ASP.NET Web Forms technology, with client-side libraries such as jQuery 2.1.1, Telerik UI components, and Google Maps API integration. The site demonstrates moderate performance and basic mobile optimization, with a clean and consistent design that supports good user experience and navigation clarity. From a security perspective, the site enforces HTTPS and uses standard form protections but lacks several modern security headers such as Content-Security-Policy and X-Frame-Options. The use of an outdated jQuery version introduces potential vulnerabilities. Privacy compliance is well addressed with a clear privacy policy, cookie consent mechanism, and GDPR adherence. However, no explicit security or incident response policies are published. Overall, the website is trustworthy and safe, with no adult or questionable content detected. It is suitable for its target audience and fulfills its role as a local government information portal. Strategic improvements in security headers, library updates, and enhanced mobile accessibility would further strengthen its posture.

M

Marktplatz Design und Software GmbH

marktplatz-agentur.de

61

Marktplatz Design und Software GmbH is a well-established German digital agency founded in 1999, specializing in innovative web and app development solutions. The company serves a diverse clientele including medium-sized businesses, institutions, and municipalities, offering a broad range of services from website creation and app development to corporate design and online marketing. Their portfolio includes proprietary digital products such as BIWAPP and KatS-Plan, positioning them as both a service provider and product innovator in the technology sector. Technically, the website leverages modern web technologies including Webflow CMS, Google reCAPTCHA for form security, Matomo for analytics, and GSAP for animations, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a high level of digital maturity. Security measures include HTTPS enforcement and GDPR-compliant cookie consent mechanisms, although explicit HTTP security headers are not detected. From a security perspective, the site demonstrates good practices with secure forms and privacy compliance, but lacks a published security policy or incident response contact, which could enhance trust and preparedness. The absence of WHOIS data limits domain registration trust verification, but the professional presentation and detailed business information mitigate concerns. Overall, the website presents a professional, trustworthy, and user-friendly digital presence with strong business credibility. Strategic recommendations include enhancing security headers, publishing a security policy, and improving WHOIS transparency to further strengthen trust and compliance.

The website sicher-melden.de serves as an informational landing page for a digital whistleblowing reporting platform operated by otris software AG. The platform enables anonymous reporting for companies via secure, cloud-based technology. The site targets corporate clients seeking compliant whistleblowing solutions and positions itself as a neutral authority in this niche. The business model is primarily B2B SaaS focused on compliance and risk management services. Technically, the site is simple and lightweight, built with standard HTML and CSS, and hosted behind Cloudflare DNS services which provide performance and security benefits. The site is mobile responsive and accessible at a basic level but lacks advanced SEO and accessibility features. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site benefits from Cloudflare's infrastructure but lacks explicit security headers and published security or incident response policies. No forms or direct data collection occur on this page, reducing attack surface. Contact information is clearly provided, but cookie consent mechanisms and privacy policy details are minimal. Overall, the security posture is moderate but could be improved with enhanced headers and transparency. The overall risk is low given the nature of the site as an informational platform without direct user data collection. Strategic recommendations include implementing security headers, publishing detailed privacy and security policies, and adding cookie consent mechanisms to improve compliance and trust.

A

azubi.ms

azubi.ms

62

azubi.ms is a regional online apprenticeship job board focused on the Münsterland area in Germany, operated under the Zeitungsgruppe Münsterland media group. The platform offers categorized job listings, company profiles, and search filters tailored to young job seekers and students looking for vocational training opportunities. The website demonstrates a good level of digital maturity, employing modern JavaScript libraries and frameworks, and providing a responsive and accessible user experience. Privacy compliance is well addressed with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Security posture is adequate with HTTPS enforced, though some common security headers are missing, which could be improved. The lack of WHOIS data raises concerns about domain registration legitimacy, but the professional presentation and association with a known media group mitigate some risk. Overall, the site is trustworthy and functional for its intended audience.

S

Soltau Therme

soltau-therme-online.de

69

Soltau Therme is a German regional wellness and leisure center offering a variety of services including sole baths, sauna, wellness treatments, swimming pools, and children's activities. The website reflects a well-structured and professionally maintained WordPress platform with modern plugins such as Yoast SEO, Events Manager, and Captcha EU, indicating a good level of digital maturity. The site is mobile optimized and provides clear navigation and relevant content for its target audience. Security posture is solid with HTTPS enforced and captcha protection on forms, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Business credibility is supported by clear contact information and social media presence. Overall, the website is trustworthy and suitable for its hospitality sector audience.

The website ivurz.de is currently inaccessible, returning a 403 Forbidden error page which blocks access to any meaningful content. Due to this, no business information, metadata, or technical details about the site’s offerings or infrastructure can be extracted. The domain is registered with German DNS providers, but no registrant details or domain age information is available to assess legitimacy fully. The lack of accessible content severely limits the ability to evaluate the company’s market position, services, or compliance posture. From a security perspective, the absence of HTTPS confirmation, security headers, or policies indicates a weak security posture or incomplete deployment. Overall, the site appears inactive or restricted, resulting in a low trust and quality score.

H

Heidekreis e-mobil

heidekreis-e-mobil.de

48

Heidekreis e-mobil is a regional electric mobility service provider in Germany, jointly operated by Stadtwerke Soltau and Stadtwerke Böhmetal. The company focuses on providing electric vehicle charging infrastructure, including wallbox sales and installation, a charging card with access to a broad European network, and services related to the THG-Quote for electric vehicle owners. The website is well-structured, professionally designed, and targets electric vehicle users in the Heidekreis region and beyond. Technically, the site uses Joomla CMS with modern front-end libraries and is hosted on AWS infrastructure, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and CSRF protections but lacks explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional with room for improvement in security and privacy transparency.

B

Berufsverband der Mitarbeitenden im Pfarrbüro im Bistum Münster (BVMiP)

bvmip-muenster.de

58

The Berufsverband der Mitarbeitenden im Pfarrbüro im Bistum Münster (BVMiP) is a non-profit professional association dedicated to supporting church office staff within the Münster diocese. The website serves as an information hub for members, providing details about the board, professional roles, upcoming events, and training opportunities. Membership is free for eligible church office employees, emphasizing community and professional development. The association holds regular meetings and participates in national gatherings, highlighting its active role in the sector. Technically, the website is built on the Jimdo Creator CMS platform, leveraging Jimdo's hosting and static asset infrastructure. The site employs standard web technologies including JavaScript and CSS, with moderate performance and good mobile responsiveness. SEO and accessibility features are basic but functional. Cookie consent mechanisms are implemented, reflecting attention to privacy compliance. From a security perspective, the site uses HTTPS with good SSL configuration but lacks advanced security headers and explicit incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and accessible, supporting GDPR compliance. The WHOIS data aligns with the hosting provider and domain purpose, indicating legitimacy. Overall, the website is a trustworthy, well-maintained resource for its niche audience, with room for improvement in security hardening and expanded contact information to enhance trust and compliance.