Security Directory

S

Stadt Kulmbach

kulmbach.de

58

Stadt Kulmbach operates a comprehensive municipal website serving residents, tourists, and businesses with a broad range of public services, cultural information, and tourism promotion. The site is well-structured, professionally designed, and provides clear navigation and contact information. The technical infrastructure leverages modern web technologies including jQuery, Bootstrap, and Material Design Lite, hosted likely by Deutsche Telekom, ensuring reliable performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and incident response information are absent. Overall, the website reflects a mature digital presence appropriate for a medium-sized municipal government entity in Germany.

P

Prinzen-Fanshop

prinzenfanshop.de

43

Prinzen-Fanshop is a German e-commerce website specializing in official merchandise for the band Die Prinzen, including autographed CDs, videos, clothing, and fan articles. The site targets fans of the band and operates a niche online retail business model. The website is built on WordPress with WooCommerce and enhanced by the WooCommerce German Market plugin to ensure compliance with German e-commerce regulations. It uses modern web technologies and includes cookie consent management via Borlabs Cookie, reflecting a moderate level of digital maturity. From a security perspective, the site enforces HTTPS and employs secure login and registration forms with nonce tokens. However, it lacks explicit security headers and a dedicated security policy or incident response contact, which are areas for improvement. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with accessible privacy and cookie policies and GDPR adherence. Overall, the website presents a professional and trustworthy front for a small e-commerce business with good content quality, user experience, and technical implementation. The absence of direct contact emails or phone numbers slightly reduces business credibility but is mitigated by the presence of legal pages and official social media links. There is no indication of WAF or content blocking, and the site is safe for general audiences.

E

Emerald Technology Ventures

emerald-ventures.com

68

Emerald Technology Ventures is a well-established venture capital firm specializing in sustainable industrial innovation. With over €1 billion in commitments and a global team of more than 50 professionals, Emerald connects innovative startups with corporate partners and institutional investors to accelerate solutions for global challenges. Their business model focuses on providing capital and strategic support to entrepreneurs in sectors such as energy, packaging, water, industrial IT, and food & agriculture. The website reflects a mature market position with strong trust indicators including blue-chip corporate limited partners and comprehensive SFDR disclosures. Technically, the website is built on WordPress and leverages modern web technologies including HubSpot for marketing and analytics, Google Tag Manager, and Lottie animations for enhanced user experience. The site is mobile-optimized, SEO-friendly, and integrates secure forms with reCAPTCHA to protect user data. Performance is moderate with good accessibility and navigation clarity. From a security perspective, the site enforces HTTPS, employs multiple security headers, and avoids exposing sensitive data. However, it lacks a dedicated security policy or incident response contact information, which are recommended for enhanced transparency and readiness. Privacy compliance is strong with clear privacy and cookie policies and opt-in consent mechanisms. Overall, Emerald Technology Ventures presents a professional, trustworthy, and secure online presence aligned with its business objectives. Strategic recommendations include publishing a security policy, adding incident response contacts, and implementing a vulnerability disclosure program to further strengthen security posture and stakeholder trust.

K

Katholische Landvolkbewegung Bamberg

klb-bamberg.de

44

The Katholische Landvolkbewegung Bamberg (KLB Bamberg) is a regional non-profit organization focused on serving the rural community within the Erzdiözese Bamberg. Their activities include educational programs, community events, and providing materials related to religious and social concerns. The website reflects a well-structured, content-rich platform targeting members and interested parties in the rural Catholic community. Technically, the site employs a moderate modern tech stack including jQuery, Leaflet, and FontAwesome, with a custom or proprietary CMS. It is mobile-optimized and uses self-hosted Matomo analytics to balance functionality with privacy. Security posture is good with HTTPS enforced and cookie consent managed via Usercentrics, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

K

Katholischer Deutscher Frauenbund e.V. (KDFB)

frauenbund-bamberg.de

51

The Katholischer Deutscher Frauenbund e.V. (KDFB) Diözesanverband Bamberg is a regional non-profit organization dedicated to advocating for women's equality in society, politics, and church within Germany. The website serves as an information hub for events, membership, and organizational news, targeting women interested in social and spiritual empowerment. It is part of a larger national federation with a clear mission and values centered on solidarity, justice, and empowerment. Technically, the site is built on WordPress with modern plugins such as Gravity Forms and Yoast SEO, supported by Matomo analytics and Captcha.eu for security. The hosting is likely provided by GoDaddy, indicated by the domain control nameservers. Security posture is good with HTTPS and bot protection, though some HTTP security headers could be improved. Privacy compliance is strong with a comprehensive cookie consent mechanism and GDPR-aligned privacy policy. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its mission.

H

hagebau Gebrüder Ott Baustoffe GmbH

hagebau-ott.de

67

hagebau Gebrüder Ott Baustoffe GmbH is a well-established regional building materials retailer in Germany, operating since 1928 with locations in Kirchheim and Nürtingen. The company offers a broad range of construction and building supplies, supported by digital tools such as configurators and integrated data interfaces to optimize customer ordering processes. The website reflects a mature digital presence with modern technologies including SAP Hybris Commerce, Usercentrics for consent management, and Piwik PRO for analytics. Security posture is solid with HTTPS and consent mechanisms in place, though some security headers could be improved. Privacy compliance is partially addressed via a consent management platform, but explicit privacy and terms of service pages were not found in the provided content. Overall, the site is professional, trustworthy, and well-optimized for SEO and user experience.

S

Stuttgarter Verlagskontor SVK GmbH

svk.de

44

Stuttgarter Verlagskontor SVK GmbH operates as a full-service publishing distributor primarily serving the German book trade and resellers. The company distributes products from over 50 publishers and provides an online order portal and service centers tailored for trade customers and publishers. The website is professionally designed, content-rich, and clearly targeted at its business audience. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is partially met with a comprehensive privacy policy but no cookie consent mechanism. Overall, the site is trustworthy and credible with clear contact information and legal disclosures.

G

Gorkana

gorkana.com

65

Gorkana is a UK-based leader in media intelligence, offering a comprehensive suite of services including media databases, monitoring, social media services, analysis, surveys, and media distribution. The company operates under the parent company Cision and targets communications professionals and journalists. The website is professionally designed, mobile-optimized, and integrates modern analytics and cookie consent mechanisms, reflecting a mature digital infrastructure. Security posture is strong with HTTPS and consent mechanisms, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS registration data is a notable concern but does not detract from the professional presentation and market position. Overall, Gorkana presents as a credible and established media intelligence provider with room for improvement in transparency and security disclosures.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

empirische-bildungsforschung-bmbf.de

60

The website represents the official framework program for empirical educational research managed by the German Federal Ministry for Education, Family, Seniors, Women and Youth. It serves as a comprehensive informational platform targeting researchers, educators, policymakers, and the interested public, providing access to research priorities, events, publications, and related services. The site is well-branded with consistent government ministry logos and messaging, reinforcing its authoritative position in the education sector in Germany. Technically, the site employs a mature infrastructure including jQuery, Matomo analytics with explicit user consent, and a RedDot CMS backend. The hosting appears to be managed by government-affiliated providers, ensuring reliability and security. The website demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics with opt-in consent. However, it lacks explicit security headers and a published security or incident response policy, which are recommended for enhanced protection and transparency. No vulnerabilities or suspicious content were detected. Overall, the website is trustworthy, professional, and compliant with GDPR requirements, making it a reliable resource for its target audience. Strategic improvements in security policy publication and header implementation could further strengthen its security posture.

Gór-Stal sp. z o.o. is a well-established Polish manufacturer specializing in sandwich panels and insulating boards, serving industrial, agricultural, and residential construction markets. With nearly two decades of experience and two production facilities, the company holds reputable certifications such as ISO 9001, ISO 14001, AQAP, and FM Approvals, underscoring its commitment to quality and safety. The website reflects a professional and consistent brand image, targeting B2B clients seeking high-quality construction materials. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, and cookie consent mechanisms, ensuring a good user experience and compliance with GDPR. Security posture is solid with HTTPS and no exposed sensitive data, though security headers could be improved. Overall, the digital presence supports the company's market position effectively.

M

MADSEN GBR

madsenmusik.de

42

Madsenmusik.de is the official website of the German rock band Madsen, providing comprehensive information about their music albums, merchandise, and upcoming tours. The site targets fans and music enthusiasts, offering direct links to purchase albums, tickets, and band merchandise. The band has a strong market presence in Germany with a history spanning over 20 years, reflected in their consistent branding and professional content presentation. Technically, the website is built on WordPress using the Enfold theme and Avia framework, hosted on kasserver.com, and integrates modern web technologies such as jQuery and MediaElement.js. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

KYOCERA Corporation operates a comprehensive global website showcasing its diversified manufacturing capabilities across fine ceramics, semiconductor components, electronic components, telecommunications, energy solutions, and healthcare products. The company targets a broad audience including business customers, engineers, and healthcare professionals, positioning itself as a large multinational enterprise with a strong global network and multiple subsidiaries. The website content is professionally designed, well-structured, and provides extensive product and corporate information. Technically, the website employs modern web technologies including JavaScript, Google Fonts, and Google Analytics, with good mobile optimization and accessibility features. Security best practices are observed with HTTPS enforcement and multiple security headers, although explicit security policies and incident response information are not published. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. The security posture is strong with no detected vulnerabilities or exposed sensitive data, but the absence of WHOIS registration data raises concerns about domain registration legitimacy. No direct company contact emails or phone numbers are found, relying instead on contact forms. Overall, the website is trustworthy and professional but would benefit from improved transparency in domain registration and security incident handling.

P

Portfolio Csoport

portfoliocsoport.hu

49

Portfolio Csoport is a leading Hungarian internet-based economic news and data service provider, offering a wide range of financial news, real-time market data, analytical tools, and professional events. The company holds a strong market position with multiple subsidiary brands serving diverse segments of the financial and agricultural sectors. Technically, the website employs modern JavaScript libraries and Google reCAPTCHA Enterprise for form security, with good mobile optimization and moderate performance. Security posture is solid with HTTPS and form protection, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and safe for general audiences.

C

CCC CZ servis, s.r.o.

cccservis.cz

44

CCC CZ servis, s.r.o. is a Czech company specializing in simplifying European toll payments and related services for owners of recreational vehicles and passenger cars. They provide electronic toll devices compliant with the European Electronic Toll Service (EETS), fuel cards in partnership with Shell, and insurance solutions for motorhomes. The company positions itself uniquely in the Czech market as the sole provider of EETS services for vehicles over 3.5 tons, targeting a niche audience of travelers across multiple European countries. Their business model revolves around monthly rental fees for toll devices and fuel cards, combined with invoicing for actual toll usage, offering convenience and administrative relief to customers. The website content is professionally presented in Czech, with clear service descriptions, partner references, and contact information.

F

Funk & Fernsehen Nordwestdeutschland Marketing- und Vertriebs GmbH & Co. KG

ffn-werbung.de

51

Funk & Fernsehen Nordwestdeutschland Marketing- und Vertriebs GmbH & Co. KG operates the website ffn-werbung.de, providing advertising services primarily focused on radio and digital audio in the Niedersachsen and Bremen regions of Germany. The company offers a range of advertising formats including traditional radio spots, digital audio, 360° campaigns, specials, and podcast advertising. The website positions itself as a regional media group with a strong presence and reach, targeting advertisers seeking to engage audiences in these German states. The site is professionally designed, with clear branding and consistent messaging aligned with its business focus.

D

Diakonisches Werk Baden

diakonie-baden.de

42

Diakonie Baden is a leading non-profit social welfare organization in Baden-Württemberg, Germany, affiliated with the Evangelical Church. The website provides comprehensive information about their social services, including care, migration support, family services, and volunteer opportunities. The organization targets individuals in need, volunteers, and social institutions, positioning itself as a key player in the regional social welfare sector. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery, Bootstrap, and various UI libraries, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to social causes.

E

ESC SA

escsa.pl

61

ESC SA is a well-established Polish technology company specializing in software solutions for the hospitality and business sectors, including catering, hotels, ERP systems, and IT outsourcing services. With over 30 years of market presence, the company demonstrates a strong foothold and trusted reputation in its industry. The website reflects a professional and consistent brand image, targeting business clients primarily in Poland but also offering English and Ukrainian language options. Technically, the site uses modern JavaScript libraries and tracking tools, with good mobile optimization and SEO practices. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, although explicit security policies and vulnerability disclosure mechanisms are absent. Overall, ESC SA presents a credible and trustworthy digital presence aligned with its business claims.

Klett Vertrieb operates as a service and distribution portal for multiple Klett publishing brands, targeting the German book retail sector. The website provides current information, catalogs, and contact points primarily for book retailers and partners. The business model centers on representing Klett Verlag im Handel and facilitating orders and deliveries through the SVK GmbH logistics partner. Technically, the site is built on WordPress with common libraries such as jQuery and Bootstrap, offering a moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response details are lacking. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism present. Overall, the site is professional and trustworthy but could improve in transparency and security communication.

H

HD Hyundai Heavy Industries Co., Ltd.

hd-artscenter.co.kr

50

HD Hyundai Heavy Industries Co., Ltd. operates the HD Arts Center website, a regional cultural hub in Ulsan, South Korea, providing ticketing and event management services for performances, exhibitions, movies, and lectures. The website targets a general audience interested in arts and culture, offering a comprehensive range of services including venue rental and membership programs. The business model centers on event ticket sales and cultural engagement, positioning the company as a key player in the local arts and entertainment sector. Technically, the website employs a custom CMS with modern JavaScript libraries such as jQuery, Slick Slider, and the Kakao SDK, supporting both web and mobile platforms including a Cordova-based app. The site demonstrates good mobile optimization and basic accessibility features, with moderate performance and SEO optimization. Hosting and domain management are handled by Gabia, a reputable Korean registrar. From a security perspective, the site uses HTTPS and includes several security headers like Content-Security-Policy, though the CSP allows unsafe inline scripts and eval, which is a potential risk. DNSSEC is not implemented, and no dedicated security or incident response policies are visible. Privacy and cookie policies are present, but GDPR compliance is limited. Overall, the security posture is adequate but could be improved with stronger CSP, DNSSEC, and incident response disclosures. The domain WHOIS data is consistent with the business identity, showing transparent registration without privacy protection, appropriate for this type of cultural institution. The domain is relatively new but aligns with the event dates presented. No suspicious patterns were detected. The website content is safe for general audiences with no adult or questionable material. Strategic recommendations include enhancing security headers, implementing DNSSEC, and publishing incident response contacts to strengthen trust and compliance.

The website www.mycnhstore.com serves as the official German e-commerce platform for CNH Industrial brands such as Case IH, Case CE, and New Holland AG. It targets customers in Germany and the broader EU region, offering brand selection and online purchasing of industrial and agricultural machinery and parts. The site demonstrates consistent branding aligned with CNH Industrial's global presence and provides a professional user experience with responsive design and clear navigation. From a technical perspective, the website employs a modern technology stack including SAP Commerce (Hybris), Google Tag Manager, Microsoft Clarity, Bing Ads, Marketo, and WalkMe. The site is well-optimized for mobile devices and incorporates multiple tracking and marketing tools, indicating a mature digital marketing strategy. Performance is moderate, with good SEO and accessibility features. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. The site includes GDPR-compliant privacy and cookie policies with consent mechanisms. However, no explicit security policy or incident response contact information is publicly available, which could be improved. The WHOIS data for the domain is missing, which reduces trustworthiness and raises questions about domain registration legitimacy. Despite this, the website content and technical setup strongly suggest it is a legitimate business platform. Overall, the site scores well in content quality, technical implementation, security, and privacy compliance, but business credibility is slightly impacted by the lack of WHOIS transparency and direct contact information.

S

Swiss Private Equity & Corporate Finance Association (SECA)

seca.ch

52

The Swiss Private Equity & Corporate Finance Association (SECA) is a well-established representative body for the private equity, venture capital, and corporate finance industries in Switzerland. The organization provides industry representation, educational workshops, events, and a knowledge library to its members, which include investment companies, banks, advisors, and private investors. The website reflects a professional and consistent brand image, targeting finance professionals and stakeholders in the Swiss market. Technically, the site is built on the Umbraco CMS and leverages modern web technologies such as Bootstrap, jQuery, and Google services for analytics and security. Security posture is strong with HTTPS enforcement and reCAPTCHA integration, though some security headers could be improved. Privacy compliance is well addressed with clear cookie and privacy policies aligned with GDPR. Overall, the site demonstrates a mature digital presence with good content quality and user experience.

Y

Yieldlove GmbH

yieldlove.com

45

Yieldlove GmbH is a specialized European market leader in ad monetization, providing publishers with advanced technology and access to premium demand partners to maximize revenue across multiple platforms including Display, AMP, and In-App. The company operates as part of the Ströer Group, enhancing its market position and reach. The website demonstrates a high level of professionalism, with comprehensive privacy and cookie policies, multilingual support, and strong trust indicators such as client testimonials and industry certifications. Technically, the site is built on WordPress with modern JavaScript libraries and is optimized for mobile and SEO. Security posture is good with HTTPS enforced and secure forms, though the absence of security headers and a public security policy suggests room for improvement. WHOIS data is unavailable, which slightly impacts domain trust, but the overall business credibility and website quality mitigate this concern.

F

Fundacja ABCXXI - Cała Polska czyta dzieciom

calapolskaczytadzieciom.pl

46

Fundacja ABCXXI - Cała Polska czyta dzieciom is a well-established Polish non-profit organization dedicated to promoting reading among children. The foundation operates through educational programs, media campaigns, and community engagement, supported by recognized ambassadors and media patronage. The website reflects a professional and consistent brand presence, targeting parents, educators, and supporters of children's literacy. Technically, the site is built on WordPress with WooCommerce, integrating modern libraries and analytics tools, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS, DNSSEC, and reCAPTCHA, though improvements in security headers and vulnerability disclosure could be made. Privacy compliance is evident with a comprehensive privacy policy, but lacks a visible cookie consent mechanism. Overall, the site is trustworthy and credible, with clear contact information and legal data.

B

BUND Landesverband Rheinland-Pfalz e. V.

bund-rlp.de

60

BUND Landesverband Rheinland-Pfalz e. V. is a regional non-profit environmental organization dedicated to protecting nature and promoting sustainability in the German state of Rheinland-Pfalz. The website serves as an information hub for their projects, advocacy efforts, and community engagement, including membership and donation drives. The organization maintains a strong presence with educational resources and active social media channels. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism via tarteaucitron.js, reflecting a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for users interested in environmental issues in Rheinland-Pfalz.

M

Medien kindersicher

medien-kindersicher.de

58

Medien kindersicher is a German-language portal dedicated to informing parents about technical protection solutions for their children's devices, services, and apps. It offers a specialized assistant tool that creates tailored protection solutions based on the child's age and used devices. The website is supported by multiple German regional media authorities, indicating a strong institutional backing and trust. The content is professionally curated, highly relevant to its target audience of parents and guardians, and presented with excellent design and navigation.

V

Verbraucherzentrale Baden-Württemberg

verbraucherzentrale-bawue.de

63

The Verbraucherzentrale Baden-Württemberg is a well-established non-profit consumer protection organization serving the Baden-Württemberg region in Germany. It provides comprehensive consumer advice, information, and advocacy services across multiple sectors including energy, health, digital world, and contracts. The website is professionally designed using Drupal 10, featuring rich content, educational resources, and multiple user engagement channels such as newsletters and social media. The organization targets a broad audience including vulnerable groups such as seniors, refugees, and caregivers. Technically, the website employs modern web technologies and analytics tools like Matomo, ensuring good performance and accessibility. The site is mobile-optimized and SEO-friendly, with clear navigation and consistent branding. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and explicit policies could be improved. Overall, the domain and website appear legitimate and trustworthy, with no signs of blocking or malicious content. The organization maintains a moderate level of privacy compliance with a comprehensive privacy policy but lacks a cookie consent mechanism. Contact information is available primarily via phone and contact forms, with no direct email addresses published. Strategic recommendations include enhancing security headers, publishing a security policy and incident response contacts, and implementing cookie consent to improve privacy compliance and user trust.

A

American Chamber of Commerce in the Slovak Republic

amcham.sk

10

AmCham Slovakia is a well-established non-profit organization representing American and international businesses in Slovakia, focusing on policy advocacy, networking, and member services. The website reflects a professional and consistent brand image with clear navigation and relevant business content. Technically, the site is built on the Cyclone3 framework, uses Cookiebot for GDPR-compliant cookie management, and integrates Google Tag Manager and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and vulnerability disclosure mechanisms are absent. Overall, the site is trustworthy and compliant with privacy regulations, serving its target audience effectively.

F

Fond Fit

fondfit.sk

43

Fond Fit is a Slovak investment fund focused on supporting innovative startups and companies with successful technologies. With over 10 years of experience, it provides capital financing, mentoring, and project analysis services to Slovak entrepreneurs. The website reflects a professional and consistent brand image, targeting the Slovak innovation ecosystem. Technically, the site is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO practices. Security posture is strong with HTTPS, security headers, and GDPR-compliant cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the site is trustworthy and well-maintained, supporting its business credibility.

The Medizinische Schule Brandenburg is a specialized educational institution affiliated with the Universitätsklinikum Brandenburg an der Havel GmbH, providing professional training in nursing, physiotherapy, and related medical fields. It serves a regional audience in Germany with a focus on high-quality theoretical and practical education. The website reflects a well-structured, content-rich platform that supports prospective students and stakeholders with comprehensive information and multimedia resources. Technically, the site employs modern web technologies including Bootstrap, jQuery, and a consent management platform, ensuring a responsive and accessible user experience. Security posture is solid with HTTPS enforcement, consent management, and form protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the domain and website present a trustworthy and professional digital presence aligned with the healthcare education sector.

Amici Pizza & Burgers, operated by Fusion Collective s.r.o., is a well-established food delivery and bistro service based in Brno, Czech Republic. The company specializes in pizza, burgers, and related food delivery services, complemented by franchising and catering options. The website reflects a mature digital presence with comprehensive menus, loyalty programs, and customer engagement features. Technically, the site employs modern web technologies including Google Tag Manager, Facebook Pixel, and Google Maps API, ensuring a robust and interactive user experience. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. The absence of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the professional presentation and clear business information. Overall, the site is safe, user-friendly, and compliant with GDPR requirements.

U

Universitätsklinikum Brandenburg an der Havel

klinikum-brandenburg.de

64

Universitätsklinikum Brandenburg an der Havel is a major university hospital in Germany providing specialized healthcare services, medical education, and research. It serves a large patient base annually with over 2,000 employees and operates several subsidiaries including a clinic service center and outpatient health center. The website is professionally designed, mobile-optimized, and integrates modern technologies such as Bootstrap, jQuery, and Usercentrics for consent management. It maintains GDPR compliance with clear privacy and cookie policies. Security posture is good with HTTPS enforced and consent-based tracking, though some security headers could be improved. No critical vulnerabilities or suspicious WHOIS data were found, supporting the legitimacy of the domain and business. Overall, the site reflects a trustworthy and professional healthcare institution with strong digital maturity.

Rybo.cz is a personal fishing blog and podcast operated by Jakub Hladký, targeting the Czech fishing community and members of the Czech Fishing Union. The website offers fishing-related content including blog posts, audio interviews with fishing personalities, and monitoring of fishing product discounts. The business model is content-driven with monetization through advertising and user support. The site is well-branded and maintains a consistent presence across social media platforms. Technically, the site is built on WordPress with modern SEO practices, Google Tag Manager, and Adsense integration. It is mobile-optimized and accessible with good performance metrics. Security posture is solid with HTTPS and security headers, though it lacks a published security policy or incident response information. Privacy compliance is good with GDPR-aligned cookie consent and privacy policy. The absence of WHOIS data reduces domain trust slightly but does not detract from the professionalism of the site content and business information.

A

Avelana CZ s.r.o.

avelana.cz

67

Avelana CZ s.r.o. is a small Czech company specializing in the design and realization of gardens, parks, and landscape projects primarily in South Bohemia, Central Bohemia, and Prague. With over 15 years of experience, the company offers a comprehensive range of services including garden design, park establishment, green roofs, swimming ponds, and tree care. The website reflects a professional and consistent brand image with clear contact and legal information, targeting general consumers and businesses seeking landscaping services. Technically, the website is built on WordPress using the Brilo theme and incorporates modern tools such as Yoast SEO, Google Tag Manager, and Google Analytics. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is adequate with HTTPS enabled and cookie consent implemented, though some security headers and incident response details are missing. The absence of WHOIS data limits the ability to fully verify domain registration legitimacy, but the website content and structured data strongly support the business's authenticity. No security vulnerabilities or suspicious content were detected. Overall, the site presents a trustworthy and professional digital presence for a small landscaping business. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to improve security posture and compliance.

M

MOLPIR, s.r.o.

molpir.com

43

MOLPIR, s.r.o. is a Slovak private company founded in 1993 specializing in the design, development, manufacturing, import, distribution, and servicing of a broad range of vehicle accessories for cars, trucks, buses, and trains. The company operates primarily in Slovakia and the Czech Republic with a presence across Europe through partners. Their key services include manufacturing and supplying components to vehicle and seat manufacturers, positioning them as a significant regional player in the transportation accessories sector. The website reflects a mature digital presence built on WordPress with modern frameworks and SEO optimizations, supporting their business model effectively. Security-wise, the site uses HTTPS and Google reCAPTCHA but lacks some advanced security headers and explicit security policies, which could be improved. The absence of WHOIS data for the domain is a notable concern, impacting domain trustworthiness despite the professional business presentation. Overall, MOLPIR demonstrates a solid business and technical foundation with room for enhanced security and privacy compliance.

S

Slovenské centrum digitálnych inovácií (SCDI)

scdi.tech

47

Slovenské centrum digitálnych inovácií (SCDI) is a Slovak organization dedicated to supporting small and medium enterprises in their digital transformation journey. The website presents SCDI as a key national player in digital innovation, offering a broad catalog of services including Industry 4.0 consulting, AI, cybersecurity, and workforce adaptation. The organization benefits from EU funding and is part of the European Digital Innovation Hubs network, enhancing its credibility and reach. The site targets Slovak SMEs, providing free services under specific EU schemes and detailed service pricing for others. Technically, the website is built on WordPress with modern JavaScript libraries and integrates Google Analytics and Tag Manager with privacy-conscious configurations. Security posture is strong with HTTPS and security headers, though no explicit security policy or incident response information is published. Privacy compliance is well addressed with a comprehensive privacy and cookie policy and consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, serving as a credible digital innovation hub for its target audience.

M

Medienförderung RLP GmbH

mf-rlp.de

46

Medienförderung RLP GmbH is a regional media funding agency based in Rheinland-Pfalz, Germany, operating as a subsidiary of the Medienanstalt Rheinland-Pfalz. Supported by the state government and major broadcasters such as SWR and ZDF, the organization aims to support creative and innovative media professionals in digital media sectors including audio-visual works, games, and online series. The website serves as an information and application portal for funding opportunities, providing clear guidance on application processes and showcasing funded projects. The target audience is media creators and producers within or connected to Rheinland-Pfalz. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Gutentor, leveraging Bootstrap 5 for responsive design. The site is hosted by SchlundTech, a reputable German hosting provider, and uses HTTPS with a good SSL configuration. The site is mobile-optimized and SEO-friendly, with structured data and Open Graph tags enhancing discoverability. However, some accessibility features are basic, and no cookie consent mechanism was detected, which is a GDPR compliance gap. From a security perspective, the site enforces HTTPS and uses secure forms for search and login. No security headers were detected in the provided data, and no explicit security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The absence of a cookie consent banner and security.txt or vulnerability disclosure policy are areas for improvement. Overall, the website is professional, trustworthy, and well-aligned with its public funding mission. The risk profile is low, but compliance with privacy regulations could be enhanced by implementing cookie consent and publishing security policies. Strategic recommendations include improving privacy compliance, adding security headers, and publishing incident response contacts to strengthen trust and security posture.

K

Kominki.org | wszystko o kominkach w jednym miejscu

kominki.org

56

Kominki.org is a Polish content portal specializing in fireplaces, tiled stoves, wood-fired kitchens, and related heating solutions. It offers a variety of informational articles, expert advice, magazine issues, and multimedia content targeting both consumers and professionals interested in heating and home improvement. The website maintains a niche position within the energy sector, focusing on solid fuel heating technologies. Technically, the site employs modern web technologies including Bootstrap, Slick Slider, and integrates multiple advertising and analytics services such as Google Tag Manager, Cxense, and SmartAdServer. The site is mobile-optimized and uses HTTPS with good security practices, although some security headers are missing. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service pages found. WHOIS data is unavailable due to a malformed response, limiting domain trust analysis, but the site appears legitimate and professionally maintained. Overall, the site presents moderate risk with room for improvement in privacy transparency and security headers.

H

Haake digital

w-commerce.de

52

Haake digital is a small digital agency based in Germany specializing in web solutions including website development and digital marketing services. The company targets businesses seeking to enhance their online presence and digital transformation. The website is built on WordPress using modern technologies such as Elementor and WP Rocket, indicating a moderate level of digital maturity. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is basic with HTTPS enabled but lacks advanced security headers and explicit privacy or cookie policies. No contact information or incident response details are present, which limits trust and compliance indicators. Overall, the domain appears legitimate but privacy-protected WHOIS data limits full verification. Strategic improvements in privacy compliance and security practices are recommended.

I

InfraBuild

infrabuild.com

64

InfraBuild is a leading Australian steel manufacturer specializing in recycling, manufacturing, and distributing steel long products. It is uniquely positioned as the only fully vertically-integrated steel manufacturer in Australia, covering scrap metal recycling through to downstream distribution. The company emphasizes sustainability, demonstrated by its commitment to reducing embodied carbon and its multiple environmental certifications. InfraBuild targets construction, infrastructure, and industrial sectors within Australia, leveraging innovation such as the SENSE 600® product line. Technically, the website is built on WordPress with modern SEO and analytics integrations, providing a professional and accessible user experience. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though public security policies and incident response contacts are not evident. Overall, InfraBuild presents a credible and trustworthy digital presence aligned with a large enterprise manufacturing business.

M

Momentus Hotels & Resorts

momentushotels.com

66

Momentus Hotels & Resorts operates an upscale hospitality business focused on premier accommodations in Singapore. The website presents a professional and well-structured digital presence with integrated booking capabilities via TravelClick. Marketing and analytics tools such as Google Tag Manager and Facebook Pixel are actively used, indicating a mature digital marketing strategy. However, the absence of WHOIS registration data and lack of visible privacy policy or contact information present gaps in transparency and compliance. The security posture is strong with HTTPS and Content Security Policy implemented, but additional security headers and clearer privacy compliance documentation are recommended. Overall, the website is functional and trustworthy from a user perspective but would benefit from enhanced transparency and compliance documentation to improve business credibility and regulatory adherence.

L

Leipziger Dok-Filmwochen GmbH

dok-leipzig.de

56

DOK Leipzig is an established international festival specializing in documentary and animation films, held annually in Leipzig, Germany. The website provides comprehensive information about the festival's program, industry events, ticketing, and accessibility, targeting both general audiences and industry professionals. The festival is supported by notable partners including local government and European cultural programs, reflecting a strong market position in the media and cultural sector. Technically, the website is built on Drupal 9 with modern web technologies such as lazy loading images and JavaScript libraries for enhanced user experience. Hosting is provided by Hetzner, a reputable German hosting provider. The site is mobile-optimized, accessible, and SEO-friendly, with multilingual support for German and English. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place. However, explicit security headers are not visibly set in the HTML and could be improved. No public security policy or incident response information is available, which is common for cultural event sites but could be enhanced for transparency. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, providing a safe and informative experience for visitors. The domain registration data aligns well with the website content and hosting, indicating legitimacy and consistency.

L

LeFx GmbH

lefx.de

58

LeFx GmbH is a specialized development studio based in Leipzig, Germany, focusing on advanced real-time visualizations including AR, VR, and 3D solutions primarily for the automotive, pharmaceutical, and energy sectors. Established in 2011, the company offers a range of services such as interactive storytelling, virtual training, product visualization, and game development, positioning itself as a trusted partner with a strong regional presence and reputable clients like Volkswagen and Audi. The website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the website is built on WordPress with modern libraries such as jQuery, Bootstrap, and Slick Slider, hosted by Goneo. It features good mobile optimization, SEO practices, and a cookie consent mechanism compliant with GDPR, implemented via Borlabs Cookie. The site uses HTTPS with secure cookie settings, indicating a solid security foundation. Security posture is strong with no visible vulnerabilities or exposed sensitive data. The presence of TISAX certification further underscores their commitment to security standards. However, the site lacks explicit security policy and incident response information, which could enhance trust and preparedness. Overall, the website is trustworthy, well-maintained, and compliant with privacy regulations, serving its business audience effectively. Strategic improvements in security transparency and accessibility could further strengthen its position.

H

Hayy Cinema

hayycinema.org

66

Hayy Cinema is a culturally focused independent cinema offering a diverse range of film screenings, festivals, and educational programming. The website serves as a platform for online ticket sales and information dissemination to cinema enthusiasts and community members. Technically, the site employs modern JavaScript libraries and Google services, ensuring a responsive and interactive user experience. Security posture is adequate with HTTPS and reCAPTCHA integration, but lacks advanced security headers and explicit cookie consent mechanisms. The absence of WHOIS data limits domain trust assessment, though the website content and structure appear professional and legitimate. Overall, the site is functional and user-friendly but could improve transparency and security compliance.

N

N+P Informationssysteme GmbH

spartacus-fm.de

60

N+P Informationssysteme GmbH operates the SPARTACUS Facility Management software platform, a comprehensive CAFM solution designed to optimize facility management processes such as maintenance, space management, energy controlling, and cost tracking. Established in 1996, the company holds a solid market position with over 200 customers and a strong presence in Germany. The website reflects a professional and consistent brand image, targeting facility management professionals and organizations seeking integrated software solutions. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and integrates marketing and analytics tools such as HubSpot, Google Analytics, and Usercentrics for consent management. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some HTTP security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website demonstrates a mature digital presence aligned with business goals and compliance requirements.

N

N+P Informationssysteme GmbH

nuptools.de

58

N+P Informationssysteme GmbH operates the NuPTools website offering proprietary productivity software components designed to enhance IT core systems in manufacturing and construction industries. With over 30 years of experience, the company provides tailored IT solutions including automation tools for Autodesk Inventor, Vault, APplus, and PRO.FILE, supporting digital transformation initiatives such as Industry 4.0 and BIM. The website is built on TYPO3 CMS and integrates modern marketing and analytics technologies including HubSpot, Google Analytics, and Usercentrics for GDPR-compliant cookie management. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies could be improved. Overall, the site presents a professional, trustworthy digital presence aligned with the company's business focus and market position.

T

Talentech

ontame.io

70

Talentech is a well-established provider of recruitment software solutions, specializing in ATS and recruitment analytics. The company serves a broad audience of HR professionals and hiring managers, offering a comprehensive suite of tools to optimize recruitment processes through data-driven insights. Their market position is strong, supported by a large customer base and a professional, multilingual website that reflects their international reach. Technically, the website is built on WordPress with modern SEO and performance optimizations, leveraging tools like Google Tag Manager and Google Optimize for analytics and marketing. Security posture is solid with HTTPS, GDPR compliance, and cookie consent mechanisms, though there is room for improvement in DNS security and HTTP headers. Overall, the site is professional, trustworthy, and business-focused, with no indications of malicious content or blocking mechanisms.

L

Locawo

locawo.com

59

Locawo is a German-based e-commerce business specializing in low-carb food products such as pasta, pizza, and bread. Founded in 2021, it targets health-conscious consumers seeking low-carbohydrate alternatives with a focus on taste and fiber content. The website presents a professional and consistent brand image with good design and user experience, optimized for mobile users. Technically, the site leverages modern JavaScript libraries including jQuery, Bootstrap, and Slick Slider, and is built on the JTL Shop platform hosted by IONOS SE. Tracking and marketing tools such as Google Tag Manager and Facebook Pixel are integrated, indicating moderate user tracking. Security posture is adequate with HTTPS enabled and domain status protections, but lacks DNSSEC and visible security headers, which are recommended for enhancement. Privacy compliance is weak due to missing privacy and cookie policies, and no GDPR compliance indicators are found. Overall, the site is functional and credible but would benefit from improved privacy and security practices.

S

SSE Thermal

ssethermal.com

69

SSE Thermal is a UK-based energy company focused on providing flexible thermal energy solutions to support the country's transition to net zero emissions. The company emphasizes low-carbon technologies including carbon capture and hydrogen power projects. The website positions SSE Thermal as a key player in the energy sector with a strong commitment to sustainability and innovation. Technically, the website is built on the Umbraco CMS platform, uses modern web technologies, and includes a cookie consent mechanism compliant with GDPR. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional presentation and links to SSE plc suggest authenticity. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the lack of security headers and formal security policies indicates room for improvement. Overall, the site is well-designed and trustworthy but would benefit from enhanced transparency in domain registration and security disclosures.

E

evian

evian.com

66

Evian is a premium natural mineral water brand with a rich heritage of over 230 years, sourcing water from the French Alps. The website targets German consumers with detailed product information, sustainability initiatives, and brand storytelling. Technically, the site is built on TYPO3 CMS with modern web technologies and includes standard security features such as HTTPS and reCAPTCHA. Privacy compliance is well addressed with clear cookie and privacy policies and consent mechanisms. However, the absence of WHOIS data for the domain is unusual and warrants further investigation. Overall, the site demonstrates a strong brand presence and good digital maturity with room for improvement in security transparency and incident response disclosures.