Security Directory

E

EP Energo Mineral Sp. z o.o. and EP Energo Mineral Deutschland GmbH

epenergomineral.pl

52

EP Energo Mineral operates as a specialized supplier and service provider in the energy and construction sectors, focusing on the management and supply of power plant by-products such as fly ash, slag mixtures, and microspheres. The company is supported by experienced shareholders and offers laboratory testing and logistics services to ensure product quality and reliable delivery. The website is professionally designed, multilingual, and provides comprehensive business and product information targeting industrial clients in Poland and Germany. Technically, the site uses TYPO3 CMS with Matomo analytics and a consent management platform, reflecting a modern digital infrastructure. Security posture is generally good with HTTPS and cookie consent implemented, though the absence of security headers and WHOIS data transparency are notable gaps. Overall, the site presents a trustworthy business presence but would benefit from enhanced security disclosures and domain registration clarity.

E

EP Power Grit

eppowergrit.com

53

EP Power Grit is a specialized manufacturer and global supplier of high-quality abrasives and industrial minerals based on aluminum, iron, and calcium silicates, natural minerals, glass, and other raw materials. The company operates production facilities in Germany, Belgium, the Netherlands, and Finland, with local customer service in several European countries. Their product portfolio includes disposable abrasives, reusable abrasives, special abrasives, and industrial minerals, complemented by flexible packaging and logistics services. The website is professionally designed, multi-lingual, and provides detailed product and service information, targeting industrial and construction sectors worldwide. Technically, the site is built on TYPO3 CMS, uses Matomo for analytics with a cookie consent mechanism, and employs modern web technologies ensuring good performance and mobile optimization. Security posture is solid with HTTPS and privacy compliance, though some security headers and explicit policies could be improved. The WHOIS data is unavailable, which raises some concerns about domain legitimacy, but the professional content and business presence suggest a legitimate operation. Overall, the website presents a trustworthy and mature digital presence for EP Power Grit.

W

Waibel

waibel-gruppe.de

56

Waibel is a medium-sized German company specializing in the building materials market, offering integrated services including extraction, production, transport logistics with its own fleet, shipping, and disposal. The company has over 50 years of experience and targets both construction companies and private customers. The website is built on TYPO3 CMS and uses modern web technologies, providing a professional and well-structured user experience with good mobile optimization. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website reflects a credible business with room for improvement in security and privacy transparency.

I

inspiration Miller

inspiration-miller.de

42

Inspiration Miller is a small freelance consultancy based in Germany specializing in IT consulting, data protection, and auditing services. The business leverages over 25 years of experience and cooperates with reputable certification bodies such as DEKRA and TÜV-Süd. The website presents a professional image with clear contact information and a focus on compliance and certifications. Technically, the site is built on Joomla CMS with standard modern libraries and includes a GDPR-compliant cookie consent mechanism. Security posture is adequate with HTTPS and no visible vulnerabilities, though security headers could be improved. Overall, the site is trustworthy and well-suited for its target SME audience in technology and related sectors.

I

Internetagentur dd-media.de

werratal-news.de

47

werratal-news.de is a regional news portal operated by Internetagentur dd-media.de, serving the Mittleres Werratal and Waldhessen regions in Germany. The site provides local news, event calendars, weather updates, and cultural information, positioning itself as a trusted source for residents and regional stakeholders. The business model focuses on digital regional news dissemination and community engagement through a well-structured website with categorized content and social media integration. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, FontAwesome, and Matomo analytics, combined with a cookie consent manager compliant with GDPR. The site is mobile-optimized with good navigation and SEO practices, although some outdated libraries like jQuery 1.11.2 present potential security risks. Hosting details are not explicitly identified, but HTTPS is enforced with a good SSL configuration. From a security perspective, the site demonstrates good practices such as HTTPS, privacy-respecting analytics, and cookie consent mechanisms. However, it lacks advanced security headers like Content-Security-Policy and does not provide a security policy or vulnerability disclosure page. No critical vulnerabilities or exposed sensitive data were detected, but updating outdated libraries and enhancing security headers is recommended. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its regional audience effectively. Strategic improvements in security posture and transparency would further enhance its credibility and resilience.

U

unimess GmbH

anwaltskanzlei-marketing.de

42

The website represents unimess GmbH, a specialized marketing agency focused on legal professionals such as lawyers and tax advisors in Germany. Their services include internet presence creation, marketing consulting, print media, and office equipment for law firms. The company positions itself as an experienced niche player with a nationwide clientele. Technically, the website uses a modern frontend stack including Bootstrap, jQuery, and Matomo analytics configured for privacy by disabling cookies. The site is responsive and well-structured, providing a professional user experience. Security posture is moderate; while HTTPS is assumed, no explicit security headers or policies are visible, and no cookie consent mechanism is implemented despite analytics usage. WHOIS data aligns with the company branding, indicating legitimacy. Overall, the site is professional and trustworthy but could improve in security and privacy compliance aspects.

B

B-TA Soft

btasoft.hu

42

B-TA Soft is a Hungarian small technology company specializing in cloud-based services aimed at improving business workflows, communication, and efficiency. Their key offerings include business process support software (aMetszet), a sports career tracking application (MobilisSport), and comprehensive hosting services. The company targets local businesses and sports professionals, positioning itself as a niche provider of integrated cloud solutions. The website reflects a professional and consistent brand image with good design and mobile optimization, though it lacks comprehensive privacy and security disclosures. Technically, the site uses modern frontend technologies such as Bootstrap, jQuery, and SumoMe for marketing and analytics, but does not employ advanced security headers or provide incident response contacts. The domain is well-established since 2015, consistent with the business profile, and no suspicious elements were detected. Overall, the site is functional and professional but would benefit from enhanced security and privacy compliance measures.

I

intolight

intolight.de

65

Intolight is a specialized creative agency based in Germany, focused on designing and implementing interactive installations and exhibitions for clients including museums, events, and trade shows. The company positions itself as a niche player with expertise in immersive and interactive digital experiences, supported by a portfolio of notable clients such as Netflix and Thyssenkrupp. Technically, the website is built on WordPress using the Avada theme and several modern plugins, demonstrating a mature digital infrastructure with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent managed via Borlabs Cookie, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a well-managed digital presence for a small but important business in the creative technology sector.

A

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V.

anaev.de

54

ANA Allgemeiner Norddeutscher Arbeitgeberverband e. V. is a regional non-profit employer association in Northern Germany providing labor law advisory services, legal representation, and political interest representation for its member companies. The website is professionally designed using TYPO3 CMS and modern web technologies, offering clear navigation and relevant content targeted at member companies and stakeholders. The technical infrastructure is moderate in performance with good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS implied but could be improved by adding explicit security policies and incident response contacts. Overall, the website is trustworthy and credible with strong partner networks and clear contact information.

N

NetEnt AB (publ)

netent.com

71

NetEnt AB (publ) is a leading technology provider specializing in digitally distributed gaming systems for the online gaming industry. With over 20 years of experience, the company offers a comprehensive suite of gaming solutions including games, pooled jackpots, branded games, and back-office services. Their target audience primarily consists of online gaming operators seeking premium gaming content and services. NetEnt holds multiple licenses from reputable regulatory bodies such as the UK Gambling Commission and Malta Gaming Authority, underscoring their commitment to compliance and responsible gaming. Technically, the website is built on WordPress and leverages modern web technologies including jQuery, Modernizr, and Owl Carousel. It demonstrates excellent mobile optimization, fast performance, and good SEO practices. The site employs HTTPS with strong SSL configuration and integrates analytics tools like Google Analytics and Facebook Pixel for user tracking and marketing insights. A cookie consent mechanism is present, supporting privacy compliance. From a security perspective, the site follows best practices such as HTTPS enforcement, use of reCAPTCHA, and cookie consent banners. However, it lacks explicit security policy documentation and incident response contact details, which are recommended for enhanced transparency and readiness. No critical vulnerabilities or exposed sensitive data were detected in the analysis. Overall, NetEnt's website reflects a mature, professional, and trustworthy online presence aligned with its market position as a premium gaming technology supplier. The absence of WHOIS data is noted but likely due to registrar query limitations rather than suspicious activity. Strategic recommendations include publishing a dedicated security policy, providing incident response contacts, and enhancing security headers to further strengthen the security posture.

D

dfv Mediengruppe

ruw.de

58

The website www.ruw.de represents a specialized legal and economic media publishing business under the dfv Mediengruppe umbrella. It offers a portfolio of 17 professional journals, a large book program, events, an online database, and news portals targeting legal and economic professionals primarily in Germany. The site is well-structured with clear navigation and professional design, supporting a medium-sized enterprise business model focused on niche publishing. Technically, the site uses modern frontend technologies such as Bootstrap and jQuery, with moderate performance and good mobile optimization. However, no CMS or hosting provider details are evident, and accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the domain WHOIS data is consistent and legitimate, supporting the business credibility. The site is safe with no adult or questionable content detected.

S

Studentska Unie ?VUT

avc.sh

45

AVC Silicon Hill is a student audiovisual center affiliated with the Students' Union of Czech Technical University (ČVUT). It provides technical support for small to medium-sized events including audio, video, and lighting services, both live and online, with a strong focus on education and training in audiovisual technologies. The organization collaborates with several partners and maintains an active presence on social media platforms. Technically, the website uses modern web technologies and is hosted by OVH SAS, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS and no exposed sensitive data, but lacks advanced security headers and privacy compliance documentation. Overall, the domain registration and WHOIS data align well with the organization's identity, supporting legitimacy and trustworthiness.

B

Bayerische Landeszahnärztekammer

blzk.de

64

The Bayerische Landeszahnärztekammer (BLZK) website serves as the official online presence of the statutory professional association representing approximately 17,500 dentists in Bavaria, Germany. The site provides comprehensive information and services for dental professionals, dental staff, and patients, including professional representation, patient counseling, quality management, continuing education, job listings, and radiology services. The website is well-structured, professionally designed, and targets a specialized healthcare audience within the Bavarian region. Technically, the website is built on the IBM Domino CMS platform, utilizing legacy but stable technologies such as jQuery 1.8 and Modernizr, supplemented by Font Awesome icons and Cookiebot for cookie consent management. The site is hosted on servers associated with kasserver.com, a known German hosting provider. Performance is moderate, with good mobile optimization and basic accessibility features. Analytics are handled via Matomo, ensuring privacy-conscious visitor tracking. From a security perspective, the site enforces HTTPS and employs a robust cookie consent mechanism via Cookiebot, supporting GDPR compliance. However, no explicit security headers were detected in the provided data, and the use of an outdated jQuery version may pose potential vulnerabilities. No privacy policy or terms of service pages were clearly identified, which could be improved to enhance compliance and user trust. Overall, the website presents a trustworthy and professional digital front for the BLZK, with a solid business credibility score. Strategic recommendations include updating technical components, enhancing security headers, publishing clear privacy and security policies, and implementing a security.txt file for vulnerability disclosures to further strengthen the security posture and compliance framework.

S

Sabima

sabima.no

51

Sabima is a Norwegian non-profit environmental organization dedicated to halting biodiversity loss and conserving natural habitats such as forests, wetlands, and cultural landscapes. The website serves as a platform for advocacy, public education, and fundraising, featuring campaigns, news, events, and membership information. Sabima holds a strong position in the Norwegian environmental NGO sector, collaborating with multiple member associations and maintaining active social media engagement. Technically, the website is built on WordPress with WooCommerce integration for e-commerce functionality. It employs modern web technologies including Google Analytics for tracking, Google Maps API for geospatial features, and Yoast SEO for search engine optimization. The site is mobile-optimized and demonstrates good performance and accessibility standards, although some accessibility features could be enhanced. From a security perspective, the site uses HTTPS with a strong SSL configuration and avoids exposing sensitive data. However, it lacks explicit security headers and a published security policy or incident response plan. Privacy compliance is generally good, with a comprehensive privacy policy and terms of service, but it lacks a visible cookie consent mechanism. The WHOIS data is unavailable due to Norid's privacy policy for .no domains, which is typical and not suspicious. Overall, Sabima's website is professional, trustworthy, and well-maintained, with minor improvements recommended in security headers and cookie consent to enhance compliance and user trust.

R

raumzeit.cc

raumzeit.cc

45

Raumzeit.cc is a specialized e-commerce platform focused on natural material interior design products such as stone, moss, wood, glass, wall films, and acoustic solutions. The company targets premium partners, architects, and customers seeking high-quality natural design elements, positioning itself as a niche leader in the German-speaking retail market. The website is built on the Shopware CMS platform, hosted by Vautron Rechenzentrum AG, and employs modern web technologies including HTTPS and cookie consent mechanisms, ensuring a secure and user-friendly experience. While DNSSEC is not enabled, the overall security posture is solid with no critical vulnerabilities detected. The site provides comprehensive legal and contact information, enhancing business credibility and GDPR compliance. No adult or questionable content is present, making it suitable for general audiences.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

100genussorte.bayern

71

Genussorte Bayern is a government-backed initiative promoting the culinary richness of Bavaria through a well-structured website featuring regional specialties, events, recipes, and interactive maps. The platform targets both residents and tourists interested in exploring Bavarian food culture. Technically, the site is built on WordPress with Elementor and uses modern JavaScript libraries and plugins to enhance user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some HTTP security headers could be improved. Privacy compliance is robust, with a comprehensive privacy policy and cookie management system. Overall, the site presents a trustworthy and professional image consistent with its government affiliation.

L

Landeshauptstadt Mainz

kultursommer-eroeffnung.de

67

Landeshauptstadt Mainz operates an official municipal website providing comprehensive information about cultural events such as the Kultursommer Eröffnungsfest 2025. The site targets residents and visitors interested in cultural and community activities, offering detailed event programs, partner information, and accessibility features. The website is well-branded, consistent, and professionally maintained, reflecting the city's commitment to public service and cultural promotion. Technically, the site uses a custom CMS (Sitepark Information Enterprise Server) with modern JavaScript libraries like jQuery and Modernizr, and integrates Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with clear navigation and multilingual support. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers could be improved. WHOIS data confirms the domain's legitimacy as an official city domain. Overall, the site is trustworthy, compliant with GDPR, and provides a positive user experience.

E

Evangelischer KITA-Verband Bayern e.V.

evkita-bayern.de

49

The Evangelischer KITA-Verband Bayern e.V. is a regional non-profit association representing childcare providers affiliated with the Evangelical Lutheran Church in Bavaria. The organization offers advisory services, training, information, and advocacy for kindergartens and daycare providers. Their website reflects a professional and consistent brand image, targeting childcare professionals and church organizations in Bavaria. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, providing a responsive and accessible user experience. Security-wise, the site enforces HTTPS and includes a cookie consent mechanism, though it lacks published formal security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with its business purpose.

C

CHVÁLEK ATELIÉR s.r.o.

chvalekatelier.cz

47

CHVÁLEK ATELIÉR s.r.o. is a Czech Republic based architectural and engineering firm specializing in 3D architecture, urbanism, engineering preparation, and interior design services. The company targets clients seeking comprehensive and individualized architectural solutions, positioning itself as a professional and reliable service provider in the regional real estate and construction sector. The website reflects a well-structured and professionally designed digital presence, leveraging modern web technologies and CMS platforms to deliver a good user experience across devices. From a technical perspective, the site uses a variety of contemporary JavaScript libraries and frameworks such as jQuery, Swiper.js, and Google Tag Manager, integrated with analytics and social media SDKs. The site is hosted securely with HTTPS and includes cookie consent mechanisms, though it lacks some advanced security headers and explicit privacy policy documentation. Security posture is moderate with HTTPS enforced and no visible sensitive data exposure, but the absence of security headers and incident response information suggests room for improvement. The lack of WHOIS data is a notable gap, limiting the ability to fully verify domain legitimacy and ownership, which slightly reduces overall trustworthiness. Overall, the website is a credible and professional representation of the business with good content quality and user experience. Strategic improvements in security policies, privacy documentation, and domain registration transparency would enhance trust and compliance.

S

significa GmbH

significa.de

46

significa GmbH is a German full-service marketing agency specializing in digital and classical marketing solutions primarily for medium-sized companies in the technology and industrial sectors. With over 20 years of experience, the company offers a broad range of services including design, digital marketing, classic advertising, content creation, consulting, and innovative marketing on demand. The website reflects a professional and consistent brand image supported by client testimonials and a diverse portfolio of reputable clients. Technically, the site is built on a modern stack including HTML5, CSS3, JavaScript, jQuery, and uses REDAXO CMS with Matomo for privacy-conscious analytics. The site is well-optimized for SEO, accessibility, and mobile devices, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness with no signs of malicious content or blocking mechanisms.

B

Barbican Centre

barbican.org.uk

70

The Barbican Centre is a leading non-profit arts and learning institution based in London, UK, offering a wide range of cultural events including theatre, music, dance, cinema, and visual arts. The website reflects a mature digital presence with comprehensive event information, membership options, venue hire services, and educational programs. Technically, the site is built on Drupal CMS, integrates modern technologies such as Google Tag Manager and Spektrix ticketing, and demonstrates good performance and accessibility standards. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be explicitly verified and enhanced. Privacy compliance is robust, with clear policies and GDPR adherence. Overall, the site projects high business credibility and trustworthiness, supported by consistent branding and clear contact information. WHOIS data for the 'www' subdomain is unavailable due to domain naming rules but does not detract from the legitimacy of the main domain.

B

Bayerisches Staatsministerium für Ernährung, Landwirtschaft, Forsten und Tourismus

genussorte.bayern

71

Genussorte Bayern is a government-supported platform dedicated to promoting the culinary heritage and regional specialties of Bavaria. It serves as an informational and promotional resource for residents and tourists interested in exploring Bavarian food culture, events, and local producers. The website is professionally designed using WordPress and Elementor, featuring interactive maps, event calendars, video galleries, and recipe collections. It is backed by the Bavarian State Ministry for Food, Agriculture, Forestry and Tourism, lending it strong credibility and trustworthiness. Technically, the site employs a modern WordPress ecosystem with various plugins for event management, accessibility, and cookie consent. The site is well-optimized for mobile devices and accessibility, with good SEO practices and performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though HTTP security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and cookie management system that aligns with GDPR requirements. The WHOIS data is privacy protected, which is typical for government-affiliated sites, and does not detract from the site's legitimacy. Overall, Genussorte Bayern presents a low-risk profile with a strong business and security posture, making it a reliable source for Bavarian culinary tourism information.

B

Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V.

bagfw.de

50

The Bundesarbeitsgemeinschaft der Freien Wohlfahrtspflege (BAGFW) e. V. is a well-established German non-profit umbrella organization representing the leading free welfare associations. The website clearly communicates its mission to secure and develop social work through collaborative initiatives and social policy activities. It targets social welfare organizations, policymakers, and the general public interested in social welfare in Germany. The organization has a strong market position as a key coordinating body in the social welfare sector. Technically, the website is built on TYPO3 CMS with a modern frontend stack including Bootstrap, jQuery, and accessibility features. It is mobile-optimized and provides a good user experience with clear navigation and relevant content. The site uses HTTPS and implements a cookie consent mechanism compliant with GDPR, employing Piwik/Matomo for analytics. From a security perspective, the site enforces HTTPS and cookie consent but lacks visible security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the organization's identity and history, supporting legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security headers and published security policies could further enhance its security posture.

D

digitalfabriX GmbH

digitalfabrix.de

69

digitalfabriX GmbH is a German-based company specializing in digital solutions for public administrations, municipalities, and government entities. The company offers a range of services including digital transformation consulting, custom software development, process automation, and digital future strategies. With over 20 years of experience and more than 1000 public sector customers, digitalfabriX holds a strong market position in the government technology sector. Their website reflects a professional and consistent brand image targeting public sector clients. Technically, the website is built on the Umbraco CMS platform and leverages modern web technologies such as jQuery, Bootstrap, and Matomo analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Cookie consent and privacy compliance mechanisms are well implemented, reflecting GDPR adherence. The site uses HTTPS with excellent SSL configuration, though security headers could be improved. From a security perspective, the website shows good practices including HTTPS enforcement, anti-CSRF tokens in forms, and no visible vulnerabilities or exposed sensitive data. However, there is no explicit security policy or incident response information published, and no vulnerability disclosure or security.txt file is found. The domain WHOIS data aligns well with the website content, indicating legitimacy and trustworthiness. Overall, the website is professional, secure, and compliant with privacy regulations, serving a specialized niche in public sector digitalization. Strategic improvements in security headers and transparency around security policies could further enhance trust and security posture.

B

British Oceanographic Data Centre

bodc.ac.uk

72

The British Oceanographic Data Centre (BODC) operates as the UK's national facility for preserving and distributing oceanographic and marine data. Affiliated with the National Oceanography Centre and the Natural Environment Research Council (NERC), BODC serves a specialized audience of marine scientists, researchers, and governmental agencies. The website offers extensive resources including data inventories, submission guidelines, and hosted data systems, positioning BODC as a key player in marine data management within the UK and internationally. Technically, the website employs a modern yet straightforward technology stack including jQuery, Modernizr, Google Analytics, and Matomo for analytics, alongside social sharing tools like AddThis. The site is mobile-optimized with good accessibility and SEO practices, though some legacy scripts like Google+ API remain. Performance is moderate, with room for optimization. Security is robust with HTTPS enforced, but lacks explicit security headers and incident response information. From a security and compliance perspective, the site demonstrates good practices with no visible vulnerabilities or exposed sensitive data. Privacy and cookie policies are present and GDPR compliance is indicated, though no active cookie consent mechanism is detected. WHOIS data is unavailable, likely due to privacy protection, but the site's affiliation and certifications such as CoreTrustSeal support its legitimacy. Overall, the site is professional, trustworthy, and well-suited for its scientific and governmental audience.

S

Stadt Kronach

kronach.de

53

Stadt Kronach operates an official municipal website serving as a comprehensive portal for residents, tourists, and stakeholders interested in the city of Kronach, Germany. The website provides detailed information on tourism, culture, city services, politics, and community events, positioning itself as a trusted source for local information and engagement. The business model is focused on public service and community outreach, with a medium-sized municipal scope. Technically, the site employs a modern technology stack including jQuery, Bootstrap 4, and accessibility tools like Eye-Able, ensuring good performance, mobile optimization, and accessibility compliance. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though formal security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

T

Tikiti.cz s.r.o.

tikiti.cz

49

Tikiti.cz s.r.o. is a small creative and technology studio based in Brno, Czech Republic, specializing in web application development, creative design, event organization, chatbot solutions, and ticketing and parking systems. The company has an established market presence with municipal and commercial clients, demonstrated by their portfolio and long domain registration since 2015. The website is professionally designed with good content quality and clear navigation, targeting businesses and municipalities seeking digital and creative services. Technically, the site uses modern front-end technologies such as Bootstrap, jQuery, and FontAwesome, providing a good mobile experience and moderate performance. However, there is no detected CMS or hosting provider information. Security posture is moderate with HTTPS implied but lacking visible security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies or consent mechanisms. Contact information is clearly provided, enhancing business credibility. Overall, the site is safe, professional, and trustworthy but would benefit from improved privacy and security practices.

V

Vydavateľstvo Absynt s.r.o.

absynt.sk

46

Absynt is a Slovak publishing company specializing in contemporary books, focusing on strong stories and reportages that address important societal topics. Their market position is that of a niche publisher with a dedicated audience interested in historical and literary reportage. The website supports e-commerce sales of books, e-books, and gifts, complemented by a newsletter offering marketing promotions. Technically, the site uses modern JavaScript libraries such as jQuery, Google Tag Manager, and Facebook SDK, built likely on the Nette framework, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and formal security policies are missing. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

A

AudiobookSTORE.com

audiobookstore.com

64

AudiobookSTORE.com is a well-established e-commerce platform specializing in digital audiobook downloads and podcast episodes, serving a general audience primarily in the United States. Founded in 2006 with a domain registered since 2003, the company offers a large catalog of over 200,000 audiobooks and 100 million podcast episodes, accessible via web and mobile apps. The business model focuses on direct digital sales, subscription services like FlexPass™, and gift certificates, positioning itself as a niche player in the digital media retail market. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various analytics and optimization tools such as Google Tag Manager, FullStory, and Visual Website Optimizer. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized with good SEO and accessibility practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protections. However, DNSSEC is not enabled and several important security headers are missing, which could expose the site to certain risks. Privacy compliance is basic with a privacy policy present but lacking explicit cookie consent. No incident response or vulnerability disclosure information is found. Overall, AudiobookSTORE.com demonstrates a solid business and technical foundation with a high trustworthiness rating. Strategic improvements in security headers, DNS security, and privacy compliance would enhance its security posture and regulatory adherence.

C

Cambridge Mathematics

cambridgemaths.org

64

Cambridge Mathematics is an academic initiative affiliated with the University of Cambridge, focused on developing a flexible and interconnected digital framework to reshape mathematics education for ages 3-19. The organization provides research, educational resources, podcasts, and events targeting teachers, researchers, and educators. Their market position is strong within the academic and educational research community, leveraging university partnerships to enhance credibility and reach. Technically, the website employs a modern yet stable technology stack including jQuery, Modernizr, JWPlayer, Google Tag Manager, and OneTrust for cookie consent. The site is well-structured, mobile-optimized, and incorporates SEO best practices. Performance is moderate with room for optimization. Privacy compliance is robust with clear cookie and privacy policies and consent mechanisms. Security posture is solid with HTTPS enforced, security headers present, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response details, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Overall, the website presents a low-risk profile with high trustworthiness and professional presentation. The lack of WHOIS data due to privacy protection does not detract from legitimacy given the strong university affiliation and consistent branding. Strategic recommendations include publishing security policies, implementing vulnerability disclosure, and enhancing performance.

G

Górskie Ochotnicze Pogotowie Ratunkowe

gopr.pl

56

Górskie Ochotnicze Pogotowie Ratunkowe (GOPR) is a Polish mountain rescue organization dedicated to providing rescue services and safety information in mountainous regions of Poland. The organization operates multiple regional groups with central stations, offering emergency contact numbers, avalanche warnings, and safety education. The website serves as an information hub for tourists, skiers, and hikers, providing weather conditions, avalanche risk updates, and a dedicated rescue application. GOPR is supported by government funding and partners, reflecting its important role in public safety. Technically, the website is built on a modern CMS platform (Vela CMS) and utilizes a variety of JavaScript libraries such as jQuery, FancyBox, and Slick Carousel to enhance user experience. The site is mobile optimized and includes accessibility features, though some improvements in security headers and SEO could be made. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating basic privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit published security policies or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not contradict the legitimacy suggested by the official content and government affiliations. Overall, the site presents a good security posture with room for improvement in formal security documentation and technical hardening. The overall risk assessment is moderate-low, with recommendations focusing on enhancing security headers, publishing incident response policies, and improving WHOIS transparency. The website effectively supports GOPR's mission to provide mountain rescue services and safety information to the public.

V

Volkshochschule Kaiserslautern e.V.

kochklasse-kaiserslautern.de

44

Kochklasse Kaiserslautern is a cooking school operated under the Volkshochschule Kaiserslautern e.V., offering a variety of culinary education services including in-person and online cooking courses, workshops on food and drink culture, and event-based cooking experiences. The website is professionally designed using WordPress and targets a general audience interested in culinary arts and cooking education within the Kaiserslautern region. Technically, the site uses standard WordPress technologies with jQuery and Modernizr, hosted on servers associated with rzone.de. The site is mobile-optimized and provides clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices. Overall, the site is trustworthy and serves its educational purpose effectively.

Ostbelgienrecht.be is an official terminology portal managed by the German-speaking community of Belgium, providing authoritative legal terminology databases and related resources. The site serves legal professionals, translators, and government officials by offering the Debeterm and minTerm databases, alongside committee information and downloadable legal documents. The portal is developed and maintained by Demetec Sprl, a recognized software company, ensuring professional content delivery and technical stability. The website is well-structured, multilingual, and targets a specialized audience within the governmental and legal sectors. Technically, the site leverages ASP.NET Web Forms, contentXXL CMS, and integrates modern JavaScript libraries and consent management tools, reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, uses reCAPTCHA for form protection, and provides cookie consent mechanisms, though it could improve by adding advanced security headers like CSP and X-Frame-Options. Overall, the website demonstrates a strong security posture with no evident vulnerabilities or malicious content. The domain registration aligns with the developer company, supporting legitimacy and trust. Privacy compliance is well addressed with clear policies and consent banners. The site is safe for general audiences and maintains a professional and trustworthy online presence.

K

Kommission für Forschungsinformationen in Deutschland (KFiD)

kfid-online.de

50

The Kommission für Forschungsinformationen in Deutschland (KFiD) is a small, non-profit commission dedicated to promoting the KDSF-Standard for harmonizing research information exchange within the German scientific community. The website provides detailed information about the commission's goals, members, events, and services such as the FIS-Landkarte. The target audience includes scientific institutions and data stakeholders in Germany. Technically, the site uses standard web technologies including HTML5, CSS3, JavaScript, jQuery, and Modernizr, hosted by Variomedia. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is good with HTTPS enforced, but lacks security headers and cookie consent mechanisms. No vulnerabilities or exposed sensitive data were detected. Overall, the site is professional, trustworthy, and content-rich, supporting the commission's mission effectively.

Ostbelgienrecht.be is an official government-supported portal dedicated to providing authoritative legal terminology resources for the German-speaking community of Belgium. The site hosts the Debeterm database, a trilingual legal terminology database, and the minTerm database for administrative vocabulary, serving legal professionals, translators, and government officials. The portal is developed and maintained by Demetec Sprl, a recognized CMS provider, ensuring a professional and consistent digital presence. The website demonstrates a solid technical infrastructure based on ASP.NET and contentXXL CMS, with modern web technologies and accessibility features implemented. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and reCAPTCHA integration, although explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, well-maintained, and compliant with GDPR requirements, making it a reliable resource for its target audience.

Kulturrat Thüringen e.V. is a regional non-profit umbrella organization dedicated to representing and promoting cultural and artistic interests within the Free State of Thuringia, Germany. The organization provides advocacy, cultural education projects, political dialogue on cultural matters, and awards cultural honors such as the Kulturnadel. The website reflects a focused mission targeting cultural institutions, artists, policymakers, and the public in Thuringia. Technically, the site is built on the Contao CMS platform, leveraging common JavaScript libraries such as jQuery and Font Awesome, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers are not evident and no explicit security policy or incident response contacts are published. Privacy compliance is well addressed with a clear privacy policy and cookie banner. Overall, the site is professional, trustworthy, and aligned with its non-profit cultural mission.

K

Koch Klasse - Volkshochschule Kaiserslautern e.V.

kochklasse-kl.de

44

Kochklasse.de is the online presence of the VHS-Kochschule Kaiserslautern, a small educational institution focused on culinary arts and cooking culture. The website offers a variety of in-person and online cooking courses, workshops on culinary and drinking culture, and event-based cooking experiences. The business targets general consumers interested in cooking and culinary education within the Kaiserslautern region in Germany. Technically, the website is built on WordPress with common web technologies such as jQuery and Modernizr, hosted on RZone servers. The site is moderately optimized for performance and mobile use, with a professional design and clear navigation. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is limited, with no cookie consent mechanism detected and only a basic privacy policy present. Overall, the site is trustworthy and professional but could improve in security and privacy compliance to better protect users and meet regulatory requirements.

vhs.Pages is a digital platform transforming traditional VHS program booklets into interactive, mobile-friendly digital flip catalogs with integrated course booking capabilities. The service targets adult education centers in Germany, providing a modern channel to keep course offerings current and accessible. The platform integrates with established VHS management software such as KuferSQL, vhs.Connect, and LISSY.Net, enhancing operational efficiency and user experience. The website is professionally designed, with clear navigation and German language content, reflecting a focused business model serving the education sector. Technically, the site uses a combination of jQuery, Bootstrap, and Shadowbox, though some libraries are outdated, which may pose security risks. Security posture is moderate with HTTPS enforced and captcha-protected forms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy and functional but could benefit from technical and security enhancements.

P

Performance iN Lighting Deutschland

performanceinlighting.com

66

Performance iN Lighting Deutschland is a professional lighting company specializing in interior and exterior lighting projects with over 40 years of experience. The website targets professional clients seeking lighting solutions and project development services in Germany. The digital infrastructure includes modern web technologies, Google Analytics, Google Tag Manager, and Cookiebot for cookie consent management, reflecting a mature digital presence. Security posture is generally good with HTTPS enforced and privacy compliance mechanisms in place, though explicit security headers and incident response policies are absent. The lack of WHOIS registration data raises concerns about domain legitimacy, which should be addressed to enhance trust. Overall, the website is professional and functional but could improve transparency and security documentation.

S

sféra, a.s.

energoforum.sk

56

sféra, a.s. is an established Slovak IT solutions provider specializing in the energy sector since 1992. It organizes the annual ENERGOFÓRUM® conference, a key event for energy professionals in Slovakia and the region, fostering networking and knowledge exchange. The website reflects a professional business with a clear focus on energy industry events and services. Technically, the site uses a mix of legacy and modern web technologies, including jQuery and Google Tag Manager, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. WHOIS data confirms the legitimacy and consistency of the business entity. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

C

CURRY Innovations GmbH

contentxxl.com

59

CURRY Innovations GmbH operates contentXXL, an ASP.NET-based Content Management System designed for Microsoft Server environments. The company targets a broad range of businesses from small to enterprise level, offering modular CMS editions and premium packages. Their market position is solid with international customers and a professional digital presence. Technically, the website uses a mature tech stack including ASP.NET, Bootstrap v3, and various JavaScript plugins, delivering a responsive and user-friendly experience. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and DNSSEC. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the website reflects a credible and professional business with room for security and privacy enhancements.

S

Sharkness Media GmbH & Co. KG

sharkness-media.de

58

Sharkness Media GmbH & Co. KG is a specialized full-service agency focused on providing information systems, website hosting, marketing, and design services primarily for political entities associated with the CDU/CSU parties in Germany. With over 15 years of experience, the company offers tailored solutions including integrated newsletters, social media integration, SSL security, and media servers for video and podcasts. Their market position is that of a niche provider with a strong focus on political clients and associations. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience optimized for mobile devices. Security posture is adequate with SSL encryption and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

Ostbelgienfamilie.be is an official government portal serving the German-speaking community of Belgium, focusing on family-related services such as child benefits, childcare, and family support. The website is professionally designed with clear navigation and provides comprehensive information and online tools to its target audience of families and service providers. The site is built on a modern ASP.NET framework using the contentXXL CMS, supported by Demetec Sprl, a known CMS provider. It employs standard web technologies including jQuery and Telerik UI components, and integrates etracker analytics with respect for user privacy.

Ostbelgien Europa is an official governmental portal serving the German-speaking Community of Belgium, focusing on European Union funding, regional projects, and cooperation. The website provides comprehensive information about EU programs such as Interreg, Erasmus+, and others, targeting residents, organizations, and institutions within the community. The portal is developed and maintained by Demetec Sprl, a company credited in the website footer, and uses the contentXXL CMS platform. The site is well-structured, with clear navigation and a consistent branding approach, reflecting its official status and purpose. Technically, the website employs ASP.NET WebForms technology, jQuery, and modern JavaScript libraries like Modernizr. It integrates a cookie consent mechanism via Klaro and uses etracker for analytics, indicating a moderate level of digital maturity and compliance with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the website enforces HTTPS and includes some security headers, though there is room for improvement by adding explicit Content-Security-Policy and other headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. However, no explicit security or incident response policies are published. Overall, Ostbelgien Europa presents a trustworthy and professional online presence for its governmental function. The domain registration aligns with the website's developer, and no suspicious patterns were found. Recommendations include enhancing security headers, publishing incident response information, and adding clearer contact details to improve user trust and compliance.

Ostbelgien Medien serves as the official media portal for the German-speaking Community of Belgium, providing comprehensive information and services related to media, culture, and public administration. The website is government-affiliated, operated under the registrar Demetec Sprl, and targets residents and stakeholders within the German-speaking region. It offers a variety of media-related services including media lending, film and television information, and public service announcements. The portal is well-positioned as a trusted source of regional media and governmental information.

V

Verbraucherzentrale Baden-Württemberg

verbraucherzentrale-bawue.de

63

The Verbraucherzentrale Baden-Württemberg is a well-established non-profit consumer protection organization serving the Baden-Württemberg region in Germany. It provides comprehensive consumer advice, information, and advocacy services across multiple sectors including energy, health, digital world, and contracts. The website is professionally designed using Drupal 10, featuring rich content, educational resources, and multiple user engagement channels such as newsletters and social media. The organization targets a broad audience including vulnerable groups such as seniors, refugees, and caregivers. Technically, the website employs modern web technologies and analytics tools like Matomo, ensuring good performance and accessibility. The site is mobile-optimized and SEO-friendly, with clear navigation and consistent branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit policies could be improved. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or malicious content. The organization maintains a moderate level of privacy compliance with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is available primarily via phone and contact forms, with no direct email addresses published. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing cookie consent to improve privacy compliance and user trust.

M

Ministerstvo dopravy a výstavby SR

studujdopravu.sk

44

The website www.studujdopravu.sk is a Slovak government-supported educational platform aimed at promoting vocational education in the transportation sector. It is managed by the Ministry of Transport and Construction of the Slovak Republic in cooperation with recognized railway companies and the Museum of Transport in Bratislava. The site targets parents, students, teachers, and educational counselors to provide career guidance and information about secondary and higher education opportunities in transportation. The platform serves a niche but important role in supporting the transportation education ecosystem in Slovakia. Technically, the website employs a modern but straightforward technology stack including jQuery, FontAwesome, Google Analytics, and a video player library. The site is mobile optimized and provides a good user experience with clear navigation and multimedia content. However, some technical improvements are recommended such as adding security headers and enhancing accessibility features. The site uses HTTPS and implements a cookie consent banner, indicating some compliance with privacy regulations. From a security perspective, the website shows a moderate security posture with HTTPS enabled and cookie consent implemented. However, the absence of security headers and a privacy policy page are notable gaps. No forms or sensitive data collection points were detected, reducing immediate risk exposure. The WHOIS data confirms the domain is registered to the Slovak Ministry of Transport, consistent with the website's purpose and location, supporting high legitimacy. Overall, the website is a credible and professional government initiative with good content quality and business credibility. To improve, it should publish a privacy policy, implement security headers, and provide clear contact information for security and general inquiries. These steps will enhance compliance, trust, and security posture.

Z

Združenie podnikateľov Slovenska

zps.sk

57

Združenie podnikateľov Slovenska is a Slovak non-profit business association focused on improving the business environment for Slovak entrepreneurs and SMEs. Founded in 1989, it represents companies contributing to the Slovak economy and actively participates in legislative consultation and advocacy. The website provides news, legislative updates, and engagement opportunities for members and the public. Technically, the site uses modern web technologies including Google Tag Manager and cookie consent mechanisms, ensuring GDPR compliance and a good user experience across devices. Security posture is solid with HTTPS and secure forms, though formal security policies and incident response contacts are not published. Overall, the site is professional, trustworthy, and well-aligned with its business mission.

E

Entdecken Sie Singapur

visitsingapore.com

68

The website www.visitsingapore.com/de_de/ serves as the official tourism portal for Singapore, targeting German-speaking tourists and travelers. It provides comprehensive travel information, event details, and business event resources, positioning itself as a key digital asset for Singapore's tourism promotion. The site is professionally designed with consistent branding and clear navigation, supporting a positive user experience. Technically, it leverages modern web technologies including Adobe Experience Manager, Google Tag Manager, and OneTrust for cookie consent, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and standard best practices, although explicit security headers could be further confirmed. Privacy compliance is well addressed with visible cookie consent and privacy policy in German, aligned with GDPR requirements. The absence of WHOIS data is notable but likely due to registry or query limitations rather than privacy protection or malicious intent. Overall, the site demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government-affiliated tourism entity.

M

Miteral

miteral.cz

42

Miteral is a Czech Republic-based company specializing in professional automotive service equipment, including autoservis and pneuservis tools and machinery. Operating since 1990, it serves a B2B market across the Czech Republic, offering a broad product range through a dedicated e-shop and direct sales. The website reflects a mature business with a clear market position as a trusted supplier of automotive workshop equipment. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. Privacy compliance is addressed with cookie consent and a basic GDPR-aligned privacy policy. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. Security posture is moderate with standard best practices but lacks advanced security headers and explicit security policies. Overall, the website is professional and trustworthy but would benefit from improved domain registration transparency and enhanced security measures.