Security Directory

K

KÜS Automotive GmbH

kues-automotive.de

57

KÜS Automotive GmbH is a specialized service provider in the automotive sector, focusing on expert damage assessment reports, vehicle valuations, and evaluations of historical vehicles. The company operates as part of the larger KÜS group, which includes several related subsidiaries offering complementary automotive services. Their market position is that of an important regional player in Germany, serving vehicle owners, insurance companies, and automotive professionals. The website reflects a professional and consistent brand image with clear communication of services and contact information. Technically, the website is built on a modern WordPress platform using Elementor and the Astra theme, ensuring good mobile optimization and user experience. The presence of Borlabs Cookie plugin indicates attention to GDPR compliance and user privacy. Performance is moderate, with room for optimization. No hosting provider details were identified. From a security perspective, the site uses HTTPS with a good SSL configuration and implements cookie consent mechanisms. However, there is a lack of explicit security headers and no visible security or incident response policies published. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but consistent with the business branding, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements in security headers and incident response transparency would further enhance trust and security posture.

K

KÜS Fahrzeugüberwachung

kues-fahrzeugueberwachung.de

57

KÜS Fahrzeugüberwachung is a well-established German organization specializing in vehicle inspection and certification services. With a network of approximately 1,600 inspectors and experts, it provides a broad range of services including main vehicle inspections, emission testing, safety checks, and specialized certifications for gas-powered vehicles and hazardous goods transport. The website reflects a professional and comprehensive service offering targeted at vehicle owners and operators within Germany. The business operates within the transportation sector and is part of a larger corporate group with several related subsidiaries.

F

Fabricatorz Foundation

fabricatorz.org

47

Fabricatorz Foundation is a small non-profit organization focused on decentralizing culture through grants supporting technology, art, and cultural preservation projects. The website presents active grant initiatives and provides a contact email and subscription form for updates. The foundation positions itself as a niche player in the intersection of technology and culture, targeting artists, technologists, and preservationists. Technically, the site is built on WordPress with WooCommerce and Jetpack plugins, hosted behind Cloudflare DNS, and uses HTTPS with a good SSL configuration. However, it lacks DNSSEC and advanced security headers, and no formal privacy or cookie policies are published. Security posture is moderate with room for improvement in policy transparency and technical controls. Overall, the site is accessible, professionally designed, and trustworthy, but privacy compliance and security documentation need enhancement.

Bike Slovenia is a small tourism business specializing in guided cycling tours and bike rentals in Slovenia, particularly in the Green Karst region. The company targets active travelers and cycling enthusiasts seeking customized and group cycling experiences. The website is built on Joomla CMS with modern frameworks like Bootstrap and integrates tracking and marketing tools such as Google Analytics and Amplitude. It implements a cookie consent mechanism with user control and uses hCaptcha for form security. However, it lacks a published privacy policy, terms of service, and explicit contact information, which are important for compliance and trust. The domain registration is consistent with the business location and age, supporting legitimacy. Overall, the website is professional and functional but could improve privacy and security transparency.

N

Nova Vizija d.d.

vizija.si

47

Nova Vizija d.d. is a well-established Slovenian company specializing in business, healthcare, and higher education information systems with over 30 years of experience. Their key offerings include ProPIS for business information systems, ProMedica for healthcare, ZPNet for employment services, and Novis for higher education institutions. The company targets institutional clients in Slovenia and possibly the broader region, positioning itself as a trusted provider with a strong project portfolio and client base. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates essential plugins for SEO, forms, and cookie compliance. Security posture is solid with HTTPS and reCAPTCHA, though there is room for improvement in security headers and published policies. Overall, the website is professional, user-friendly, and compliant with GDPR cookie consent requirements, reflecting a mature digital presence.

C

Celje.info

celje.info

63

Celje.info is a well-established local online news media platform serving the Celje region in Slovenia since 2016. It offers a variety of content including news articles, event listings, photo galleries, and advertising services, positioning itself as the most visited local media outlet in the area. The website targets residents and visitors interested in local happenings and community information. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and AdRotate for advertising, and it integrates Google Analytics for user tracking. The site is mobile-optimized and demonstrates good SEO and accessibility practices. Security-wise, the site uses HTTPS with a good SSL configuration but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. The WHOIS data is unavailable due to privacy protection, which is common and justified for media websites. Overall, Celje.info presents a professional, trustworthy, and content-rich platform with moderate technical sophistication and a solid security posture.

T

TIC Vitanje

tic-vitanje.si

41

TIC Vitanje operates as a local tourist information center focused on promoting tourism in Vitanje and the Rogla-Pohorje destination. The website provides comprehensive information about local attractions, events, accommodations, and cultural offerings, including the Center Noordung. The organization targets tourists, local residents, families, schools, and groups, offering services such as guided tours, event organization, and cultural exhibitions. The business model centers on tourism promotion and community engagement, supported by partnerships with local government and tourism entities. Technically, the website is built on WordPress with modern libraries such as jQuery and Bootstrap, integrating Google Analytics and YouTube for enhanced user experience and tracking. The site is mobile optimized and performs moderately well, with good SEO practices and structured data for enhanced search visibility. From a security perspective, the site uses HTTPS and implements basic security best practices, including secure cookies and consent checkboxes for personal data processing. However, it lacks explicit security policies, incident response contacts, and advanced security headers. No vulnerabilities or suspicious activities were detected. Privacy compliance is partial, with a comprehensive privacy policy present but no cookie consent banner. Overall, the website presents a trustworthy and professional digital presence for TIC Vitanje, with clear business credibility and good content quality. Strategic improvements in security policies, cookie consent mechanisms, and incident response readiness would enhance its security posture and compliance.

C

Center Noordung

center-noordung.si

47

Center Noordung is a Slovenian educational and cultural center focused on space technologies and the legacy of Herman Potočnik Noordung. The website presents a well-structured platform offering detailed information about exhibitions, guided tours, VR experiences, and educational programs targeting schools, families, and general visitors interested in space science. The business operates primarily in the education and technology sectors with a small-sized organizational footprint founded in 2018. Technically, the website is built on WordPress with modern frameworks like Bootstrap and jQuery, featuring good SEO and accessibility implementations. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, professional, and compliant with GDPR, with clear contact information and active social media presence.

U

Urad RS za mladino - mlad.si

mlad.si

45

The website mlad.si is an official youth portal operated under the Urad RS za mladino, a governmental office in Slovenia. It serves as a comprehensive information and communication hub for young people in Slovenia and those working with youth. The portal offers news, events, educational content, and resources, positioning itself as a trusted and authoritative source in the youth sector. The site is well-branded, professionally maintained, and supported by a governmental parent organization, ensuring credibility and stability. Technically, the site is built on WordPress 6.8.2 with modern JavaScript libraries such as jQuery and integrates analytics tools like Google Tag Manager and Plausible Analytics. It employs GDPR-compliant cookie consent mechanisms and accessibility tools, reflecting a mature digital infrastructure. The hosting provider is HITROST.COM, consistent with the domain registration data. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. The site is not blocked by any WAF or security challenge, allowing full content access. Overall, mlad.si presents a low-risk profile with strong business credibility and compliance posture. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

Z

Zveza svobodnih sindikatov Slovenije

zsss.si

46

Zveza svobodnih sindikatov Slovenije (ZSSS) is a well-established Slovenian trade union federation founded in 2005, serving as a key organization advocating for workers' rights and social protection. The website acts as a comprehensive portal offering news, educational resources, member benefits, and campaign information targeted primarily at union members and labor market participants in Slovenia. The organization maintains a consistent brand presence and provides clear contact information, enhancing trust and accessibility. Technically, the website is built on WordPress with a modern tech stack including jQuery, Bootstrap, and popular plugins like Revolution Slider and Yoast SEO. The site demonstrates good mobile optimization and SEO practices, though performance is moderate. Hosting and domain registration are consistent with the organization's Slovenian identity, registered through Telekom Slovenije. From a security perspective, the site uses HTTPS and employs nonce tokens for AJAX error reporting, indicating some security awareness. However, there is a lack of explicit security headers and no visible privacy or cookie policies, which are areas for improvement. No incident response or vulnerability disclosure information is publicly available, and no data protection officer contact is found. Overall, the website is professional, content-rich, and trustworthy, but it would benefit from enhanced privacy compliance and security hardening to align with best practices and regulatory requirements.

E

Ekvilib Inštitut

ekvilib.org

45

Ekvilib Inštitut is a Slovenian non-profit organization specializing in corporate social responsibility, human rights, and development cooperation. The organization provides education, consulting, and certification services focused on work-life balance, sustainable business practices, and responsible citizenship. It holds recognized certifications for socially responsible employers and family-friendly companies, positioning itself as a trusted entity in the Slovenian non-profit sector. The website is professionally designed, content-rich, and targets organizations and individuals interested in social responsibility and sustainable development. Technically, the site runs on WordPress with a modern tech stack including Google Analytics and various plugins, offering good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks some security headers and cookie consent mechanisms. WHOIS data is unavailable due to malformed responses, limiting domain trust verification. Overall, the site is trustworthy and professional but could improve privacy compliance and security practices.

B

blau direkt GmbH

blaudirekt.de

70

blau direkt GmbH is a German-based company specializing in digital solutions for insurance brokers and financial intermediaries. Their core offering is an integrated software ecosystem that automates sales and administrative processes, enhancing efficiency and customer satisfaction. The company targets insurance brokers, banks, and financial institutions with products such as a broker management program, a customer app, and a marketplace with multiple integrations. Their market position is that of an innovative and comprehensive service provider within the German insurance technology sector. Technically, the website is built on WordPress with Elementor, leveraging modern web technologies and performance optimizations like WP Rocket. The site is mobile-optimized and includes GDPR-compliant cookie consent management via Borlabs Cookie. Social media presence and structured data enhance their digital maturity and SEO. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks visible security headers and explicit security policies or incident response information. No vulnerabilities or suspicious content were detected. The WHOIS data is consistent and trustworthy, supporting the legitimacy of the domain and business. Overall, blau direkt GmbH presents a professional, secure, and business-focused online presence with room for improvement in security policy transparency and security header implementation.

OCHOIMEDIO Tecnología Creativa is a Spanish digital agency specializing in design, web development, multimedia, and digital marketing services targeted primarily at freelancers and small to medium-sized enterprises (SMEs) in Spain. The company leverages government subsidy programs such as KIT Digital to offer cost-effective digital transformation solutions including websites, e-commerce platforms, and social media management. Their market position is that of a niche regional agency focused on helping local businesses increase their digital presence. Technically, the website is built on WordPress using the Divi theme and incorporates modern plugins for SEO, analytics, and GDPR compliance. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS, uses CAPTCHA on contact forms, and includes cookie consent mechanisms, but lacks advanced security headers and explicit security policies. The WHOIS data for the domain is unavailable, which raises some concerns about domain legitimacy, although the website content and contact information appear professional and trustworthy. Overall, the site scores well on content quality and technical implementation but could improve in security transparency and domain registration clarity.

K

KÜS

kues.de

58

KÜS is a well-established German organization specializing in vehicle and traffic safety services. The company operates multiple subsidiaries covering vehicle inspections, technical assessments, automotive expertise, training, data services, and safety consulting. Their market position is strong with a nationwide presence and a large team of vehicle inspection engineers. The website reflects a professional and consistent brand image with clear navigation and relevant content for their target audience of vehicle owners and automotive professionals. Technically, the site is built on WordPress with Elementor, uses modern libraries, and implements cookie consent mechanisms, indicating a moderate to good digital maturity. Security posture is solid with HTTPS and cookie consent, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy and professionally maintained, supporting KÜS's business credibility in the transportation sector.

T

tixxt

tixxt.dev

54

tixxt.com is a professional website offering enterprise social intranet and collaboration solutions targeted at member organizations and enterprises. The company positions itself as a specialized provider in the technology sector, focusing on boosting internal communication and collaboration. The website is built on a modern WordPress CMS with the Divi theme and integrates tools such as Google Tag Manager and Cookiebot for analytics and cookie consent management. While the technical infrastructure is solid and the website is mobile-optimized with good SEO practices, there is a lack of visible contact information and formal privacy or terms of service policies, which impacts trust and compliance perception. The security posture is adequate with HTTPS enforced and consent mechanisms in place, but could be improved by adding explicit security headers and incident response contacts. The absence of WHOIS data raises some concerns about domain registration transparency, though the website content suggests a legitimate business presence.

V

Villa Olea

villaolea.eu

37

Villa Olea's website is a password-protected portal likely representing a hospitality or real estate business. The site uses WordPress CMS with standard login forms and basic jQuery libraries. The content is minimal and restricted, with no public business descriptions, contact information, or policies visible. Technically, the site uses HTTPS with valid SSL but lacks important security headers and privacy compliance features. No analytics or advertising scripts are present, indicating minimal tracking or marketing activities. The overall security posture is moderate but could be improved with standard security headers and visible compliance documentation. The domain registration appears legitimate with no suspicious WHOIS patterns, but registrant details are limited. The site’s content is safe with no adult or questionable material detected.

D

Deutsches Krankenhaus Verzeichnis

deutsches-krankenhaus-verzeichnis.de

53

The Deutsches Krankenhaus Verzeichnis is a well-established German hospital directory providing comprehensive search and comparison services for hospitals across Germany. It targets patients, relatives, and medical professionals seeking detailed hospital information and transparency. The platform offers multiple search modalities including location-based, structural, and accessibility-focused searches, supported by a modern and responsive web interface. The business is operated by bokonet GmbH and maintains a strong market position as a trusted healthcare information portal. Technically, the website leverages modern web technologies such as Bootstrap 5, jQuery, Highcharts, and integrates Cookiebot for GDPR-compliant cookie management. The use of TYPO3 CMS is implied, supporting structured content management. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate and could benefit from further optimization. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected in the content or WHOIS data. Privacy compliance is strong, with clear privacy and cookie policies and GDPR adherence. Overall, the website presents a low-risk profile with a professional and trustworthy appearance. Strategic improvements include enhancing security headers, publishing security policies, and providing explicit contact information for incident response to further strengthen trust and compliance.

B

blau direkt GmbH

simplr.de

69

simplr is a digital insurance management platform operated by blau direkt GmbH, offering customers and insurance brokers a mobile app to manage insurance contracts, documents, and communications efficiently. The platform emphasizes ease of use, personal advisor contact, and contract optimization through modern technology. The website is professionally designed, mobile-optimized, and compliant with GDPR, featuring cookie consent mechanisms and structured FAQ content. Technically, it is built on WordPress with Elementor and uses Borlabs Cookie for privacy management. Security posture is strong with HTTPS and encrypted data transmission, though some security headers and explicit incident response policies are absent. Overall, simplr presents a trustworthy and modern digital solution in the finance sector, targeting German-speaking insurance customers and brokers.

T

tixxt

tixxt.com

53

tixxt.com is a professional website offering enterprise social intranet and collaboration solutions targeted at member organizations and enterprises. The company positions itself as a specialized provider of social intranet and enterprise social network platforms, aiming to boost internal communication and collaboration. The website is built on a modern WordPress CMS infrastructure using the Divi theme and includes common plugins such as Cookiebot for cookie consent and Google Tag Manager for analytics. The technical infrastructure is moderately optimized with good mobile responsiveness and SEO practices. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and visible incident response or vulnerability disclosure information. The absence of WHOIS data for the domain reduces trustworthiness and raises questions about domain registration transparency. Overall, the website is professional and business-focused but would benefit from enhanced privacy, security, and contact transparency.

Š

Šport Maribor d.o.o.

sportmaribor.si

47

Šport Maribor d.o.o. is a medium-sized Slovenian company specializing in managing sports facilities and organizing events in Maribor. The company operates under the public holding group JHMB and offers services including event space rental, advertising surfaces, and sports infrastructure management. The website reflects a professional and regionally focused business model targeting local communities, event organizers, and sports enthusiasts. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and SEO best practices. The presence of cookie consent and Google Analytics indicates a moderate level of digital maturity. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy, well-branded, and provides clear contact information, but could improve privacy transparency and security disclosures.

M

Mestne nepremičnine d.o.o.

mestne-nepremicnine.si

39

Mestne nepremičnine d.o.o. is a Slovenian municipal company focused on managing and developing public markets, city parking facilities, and real estate assets of public interest in Maribor. The website presents a professional and consistent brand image, targeting local residents and businesses. The company operates with a clear municipal mandate, providing essential services to the community. Technically, the website is built on WordPress with modern plugins such as Slider Revolution and Rank Math SEO, ensuring good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security documentation.

M

MARIBORSKI VODOVOD D.D.

mb-vodovod.si

42

Mariborski vodovod is a well-established public water utility company based in Slovenia, with a history dating back to 1901. The company provides potable water supply and wastewater treatment services to multiple municipalities in northeastern Slovenia. Their website reflects a mature digital presence built on WordPress, featuring comprehensive service information, customer resources, and contact details. The technical infrastructure includes modern plugins and integrations such as Google Analytics and OneSignal for notifications, indicating a moderate level of digital maturity. Security posture is generally good with HTTPS enforced and security plugins in use, though explicit security policies and headers could be improved. Privacy compliance is basic with a cookie consent mechanism but lacks a clearly accessible privacy policy or terms of service. Overall, the website is professional, trustworthy, and serves its target audience effectively.

J

Javni holding Maribor d.o.o.

jhmb.si

42

Javni holding Maribor d.o.o. is a Slovenian holding company established in 2020 that provides centralized support services to public utility companies operating in Maribor and surrounding municipalities. The company focuses on optimizing administrative and operational functions such as finance, legal, IT, procurement, and corporate communications to enable its subsidiaries to concentrate on delivering essential public services. The holding oversees a group of subsidiaries active in sectors including energy, water supply, waste management, public transport, and municipal real estate. The website reflects a mature digital presence built on WordPress with Elementor, featuring good SEO and mobile optimization. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, although explicit security policies and incident response information are not publicly available. The company demonstrates social responsibility and sustainability commitments through certifications and partnerships.

N

NIEDERSÄCHSISCHER LANDKREISTAG

nlt.de

49

The Niedersächsischer Landkreistag (NLT) is a government association representing the interests of the 36 counties of Lower Saxony and the Hannover region. It functions as a municipal peak association, providing advocacy, information dissemination, and coordination services to its members. The website reflects a professional and consistent brand image, targeting local government officials and stakeholders in the region. The business model is non-profit and focused on public sector collaboration and representation. Technically, the website is built on WordPress 6.8.2 with the Enfold theme and uses modern plugins such as Yoast SEO for optimization, Matomo for privacy-conscious analytics, and Borlabs Cookie for GDPR-compliant cookie management. The site is mobile-optimized, accessible, and performs moderately well. Hosting appears to be managed via your-server.de, a known hosting provider. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms. However, explicit security headers are not detected, and there is no public security policy or incident response information. No vulnerabilities or sensitive data exposures are evident. The domain WHOIS data is consistent with the website's claims, indicating legitimacy and trustworthiness. Overall, the site presents a low-risk profile with good privacy compliance and business credibility. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding a vulnerability disclosure mechanism to further improve trust and security posture.

C

cpm Defence Network - News: Verteidigung und Wehrtechnik

security-network.com

63

The CPM Security Network website is a well-established German media platform specializing in news and expert commentary on internal security, disaster protection, and defense technologies. Founded in 2003 and operated under the auspices of rockenstein AG as registrar, the site targets professionals and stakeholders in police, fire brigade, THW, and Bundeswehr sectors. It offers timely news, industry insights, and event coverage, positioning itself as a niche but authoritative source in the German security media landscape. Technically, the site runs on WordPress with modern plugins for SEO, advertising, and user engagement, hosted behind Cloudflare DNS services. The site demonstrates good digital maturity with mobile optimization, structured data, and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though DNSSEC is not enabled and some security headers could be improved. No critical vulnerabilities or WAF blocking were detected. Privacy compliance is strong with a comprehensive privacy policy and cookie management in place. Overall, the site is trustworthy, professional, and well-maintained, serving a specialized audience with relevant content.

B

BUNDESVERBAND DER SICHERHEITSWIRTSCHAFT (BDSW) e.V.

bdsw.de

60

The Bundesverband der Sicherheitswirtschaft (BDSW) is a German federal association representing the security industry. The website serves as an information and service portal for members and stakeholders, providing news, events, publications, and contact resources. The site is professionally designed using Joomla CMS and modern web technologies, with a clear focus on the German security sector. It maintains GDPR compliance with comprehensive privacy and cookie policies and employs a cookie consent mechanism. The presence of multiple contact points and partner links reinforces its credibility as a legitimate industry association. Technically, the site uses HTTPS and standard security practices, though it could improve by adding security headers and a vulnerability disclosure policy. Overall, the site is well-maintained, secure, and trustworthy, serving its target audience effectively.

F

Finanzkompensierung Jörg Wendland

finanzkompensierung.de

66

Finanzkompensierung Jörg Wendland is a small, independent financial advisory firm based in Germany, specializing in construction financing, building savings, and insurance services primarily for clients in the Hamburg and Buxtehude regions. With over 25 years of experience, the company positions itself as a trusted regional expert offering personalized and comprehensive financial solutions. The website reflects a professional and consistent brand image, supported by positive customer ratings and a network of reputable partners. Technically, the site is built on WordPress with modern plugins and includes SEO and GDPR compliance features such as cookie consent mechanisms. Security posture is solid with HTTPS and no exposed sensitive data, though improvements in security headers and explicit policies could enhance trust further. Overall, the website is well-structured, user-friendly, and compliant with privacy regulations, making it a credible digital presence for the business.

D

DNGL Media

dngl-media.de

37

DNGL Media is a small digital media company based in Hamburg, Germany, specializing in digital content and visual media services. The website is currently under construction and provides basic contact information including phone numbers, email addresses, and a physical address. The company shareholders are named, indicating a formal business structure. The website uses a modern WordPress CMS with Elementor and related plugins, indicating a contemporary technical infrastructure. Hosting appears to be provided by Kasserver based on nameserver data. Security posture is moderate with HTTPS enabled but lacking security headers and formal security or privacy policies. No analytics or tracking scripts are detected, suggesting minimal user tracking. Overall, the website is functional but minimal, with room for improvement in content, privacy compliance, and security best practices.

S

SLOADO

sloado.si

40

SLOADO is the official national anti-doping organization of Slovenia, established in 2013 under the Slovenian Olympic Committee. It provides anti-doping testing, education, and compliance services to protect athletes' rights to compete in doping-free sports. The website reflects a well-structured and professional presence with clear communication of its mission and services. The organization targets athletes, sports federations, event organizers, and the general public interested in sports integrity. Technically, the site is built on WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Security measures include HTTPS and Google reCAPTCHA, but lack some advanced security headers and a public vulnerability disclosure policy. Contact information is clearly provided, including phone, email, and physical address, enhancing trust. Overall, the site is credible, professional, and serves its mission effectively.

E

European Avalanche Warning Services (EAWS)

avalanches.org

59

The European Avalanche Warning Services (EAWS) website serves as a cooperative platform for national and regional avalanche warning agencies across Europe. It provides standardized avalanche danger scales, educational resources, fatality statistics, and organizes conferences to enhance avalanche safety. The site targets professionals in avalanche forecasting as well as the general public interested in avalanche risk awareness. Technically, the website is built on WordPress with a modern JavaScript stack including jQuery, FontAwesome, and various UI libraries, delivering a good user experience with responsive design and clear navigation. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement. WHOIS data is unavailable due to privacy protection, which is justified for this non-profit entity. Overall, the site is trustworthy, professional, and well-maintained, supporting its mission effectively.

B

Bündnis Sahra Wagenknecht

bsw-vg.de

61

Bündnis Sahra Wagenknecht is a newly founded political party in Germany focused on promoting economic reason, social justice, peace, and freedom. The website serves as an information hub for the party's mission, election campaigns, and supporter engagement, including donation and membership opportunities. The party targets politically engaged German citizens seeking an alternative political voice. Technically, the site is built on WordPress with modern plugins and scripts, including donation widgets and CAPTCHA for form security. The site is mobile-optimized and well-structured, though some accessibility features are basic. Security posture is solid with HTTPS and CAPTCHA usage, but lacks explicit security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the site is professional and trustworthy, with a moderate security score and good business credibility.

H

htp GmbH

htp-tel.de

66

htp GmbH is a regional telecommunications provider serving the Hannover metropolitan area and surrounding cities in Germany. The company offers a range of services including high-speed internet, fixed-line telephony, mobile telephony, fiber optic connections, and security solutions. The website reflects a mature and professional business with a clear regional focus and customer-centric offerings. The company maintains a presence on major social media platforms and displays customer trust signals such as positive reviews and environmental certifications. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery, lazy loading for images, and accessibility tools. The site is mobile-optimized, well-structured, and includes comprehensive privacy and cookie policies with user consent mechanisms, indicating good digital maturity and compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and uses a reputable cookie consent management system. However, it lacks explicit published security policies, incident response contacts, and security headers, which are areas for improvement. The absence of WHOIS registration data reduces transparency and trustworthiness from a domain registration standpoint, although the website content and external trust indicators support legitimacy. Overall, htp.net presents a trustworthy and professional online presence for a regional telecom provider with good technical and privacy compliance. Strategic enhancements in security transparency and domain registration clarity would further strengthen its security posture and business credibility.

Ä

Ätztechnik Herz GmbH & Co. KG

aetztechnik-herz.de

53

Ätztechnik Herz GmbH & Co. KG is a medium-sized German manufacturing company specializing in photochemical etching and laser technology for precision metal parts. Positioned as a technology leader in Europe, the company offers rapid prototyping, extensive material selection, and specialized services such as reel-to-reel etching. Their website reflects a professional B2B focus targeting industrial clients requiring high precision and economic manufacturing solutions. Technically, the website is built on WordPress with a modern theme and plugins, supporting multilingual content and SEO best practices. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the site demonstrates high professionalism, trustworthiness, and digital maturity.

V

VS Qloud Solution GmbH

vsqloud.de

62

VS Qloud Solution GmbH is a German-based cloud hosting and IT services provider specializing in secure, scalable cloud solutions tailored for small and medium-sized enterprises. Their offerings include cloud hosting, virtualization, enterprise mobility management, file management, and managed exchange services, all emphasizing data protection and compliance with German and EU regulations. The company positions itself as a trusted partner for digital transformation and flexible IT infrastructure solutions. Technically, the website is built on WordPress with a modern theme and plugins, including Revolution Slider and lazy loading for performance optimization. The site is mobile-optimized and uses HTTPS with strong encryption. Integration of AnyDesk for remote support and Google Translate for multilingual support indicates a mature digital infrastructure. From a security perspective, the site enforces HTTPS and uses encrypted connections for support tools. However, it lacks explicit security headers and dedicated incident response or security policy pages, which are recommended for enhanced trust and compliance. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website and domain appear legitimate and professionally maintained, with strong business credibility and compliance posture. Strategic improvements in security policy transparency and header implementation would further strengthen their security stance.

AnnualCreditReport.com is the federally authorized website providing free credit reports from the three major credit bureaus: Equifax, Experian, and TransUnion. The site offers educational content about credit reports, identity theft, and credit scores, targeting consumers who want to monitor and protect their financial health. The business model is focused on compliance with federal law and consumer education, positioning itself as the official and trusted source for free credit reports. Technically, the website uses a modern JavaScript stack with jQuery and bxSlider for UI components. The site is mobile optimized and accessible, with a clear navigation structure and professional design. However, some technical aspects such as security headers and cookie consent mechanisms are not evident, indicating room for improvement in security and privacy compliance. From a security perspective, the site claims SSL encryption and provides a security policy page, but lacks visible security headers and incident response contact details. The absence of WHOIS data for the domain is a concern, reducing trustworthiness from a domain registration perspective. Despite this, the site’s content, branding, and partnerships with major credit bureaus support its legitimacy. Overall, the website is a reliable and professional resource for consumers seeking free credit reports, but it would benefit from enhanced security practices, clearer privacy compliance mechanisms, and improved domain registration transparency.

F

FC Sankt Pauli von 1910 e.V. Blindenfussball

fcstpauli-blindenfussball.de

56

FC Sankt Pauli von 1910 e.V. Blindenfussball is a specialized sports club focused on blind football, promoting inclusive sports activities primarily in Germany. The website serves as a hub for news, events, training schedules, and international competition updates, targeting visually impaired athletes and sports enthusiasts. The club holds a recognized position in the blind football community with regular participation in national and international tournaments. Technically, the website is built on WordPress 6.8.1 with common plugins for galleries and event management. It uses HTTPS with a good SSL configuration and is hosted on infrastructure associated with GoDaddy (DomainControl). The site is moderately performant, mobile-optimized, and accessible, with good SEO practices and clear navigation. From a security perspective, the site enforces HTTPS but lacks important security headers and a formal incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is available via email and social media, but no phone numbers or detailed business certifications are provided. Overall, the website is trustworthy and professional, with a strong focus on community and sports promotion. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance.

S

SAMA Navitas d.o.o.

poletni-tabori.si

54

SAMA Navitas d.o.o. operates the website www.poletni-tabori.si, which offers international summer language camps primarily for children aged 5 to 15. The business has a strong focus on immersive language learning through outdoor activities, cultural experiences, and photo-sport camps. The company has been active since 2010, demonstrating a mature presence in the niche educational market in Slovenia with international participation. The website is professionally designed using WordPress with a modern theme and multilingual support, featuring rich multimedia content and testimonials that enhance trust and engagement. Technically, the site uses standard web technologies and integrates Google Analytics and Tag Manager for tracking, with a cookie consent mechanism that supports GDPR compliance to some extent. Security posture is good with HTTPS enforced, but some security headers are missing, and explicit privacy and terms of service pages are not clearly found, which could be improved. Overall, the site is accessible, trustworthy, and well-positioned in its market segment.

G

Globetrotter Ausrüstung GmbH

globetrotter.de

73

Globetrotter Ausrüstung GmbH operates as Germany's largest outdoor equipment retailer, offering a wide range of outdoor clothing and gear both online and through physical stores. The company targets outdoor enthusiasts, hikers, and travelers primarily in German-speaking countries. Their business model combines e-commerce with brick-and-mortar retail, positioning them strongly in the outdoor retail market. The website is professionally designed with good content quality, clear navigation, and mobile optimization, supporting a positive user experience. Technically, the site uses a modern tech stack including jQuery, Google Tag Manager, and a custom e-commerce platform, hosted likely by Deutsche Telekom, ensuring reliable performance and security. Security posture is strong with HTTPS, security headers, and GDPR-compliant consent management, though explicit security policies and incident response contacts are not publicly detailed. Overall, the domain and WHOIS data align with a legitimate and established business. Recommendations include publishing a dedicated security policy, incident response contacts, and vulnerability disclosure information to enhance trust and compliance.

N

Niedersaechsische Verbands-Service eG

nvsg.online

50

Niedersaechsische Verbands-Service eG operates as a cooperative service provider based in Lower Saxony, Germany, offering administrative and support services such as cloud hosting, document storage, payroll, and communication services targeted at associations and cooperative members. The website is professionally designed using WordPress CMS with modern plugins for GDPR compliance and contact forms, reflecting a moderate to high level of digital maturity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some improvements in security headers and incident response disclosures are recommended. Overall, the website presents a trustworthy and compliant digital presence aligned with its business objectives.

P

Projekt 29 GmbH & Co. KG

projekt29.de

62

Projekt 29 GmbH & Co. KG is a well-established German full-service provider specializing in data protection, information security, and compliance consulting and solutions. Founded in 1996 and headquartered in Regensburg, the company serves over 4500 customers across various industries, offering services such as external data protection officers, IT compliance, ISO 27001 and TISAX certification support, and e-learning platforms. Their market position is strengthened by memberships in key industry associations and certifications, positioning them as a trusted partner for businesses seeking regulatory compliance and security assurance. Technically, the website is built on a modern WordPress CMS with professional design, responsive layout, and integration of relevant plugins and tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response transparency are recommended. Overall, Projekt 29 demonstrates a strong commitment to privacy compliance and business credibility, making it a reliable service provider in its domain.

S

SKPD SAVA e.V.

sava-frankfurt.de

51

SKPD SAVA e.V. is a small non-profit Slovenian cultural and educational association based in Frankfurt, Germany, dedicated to promoting Slovenian language, culture, and community activities among the Slovenian diaspora. The website serves as a hub for news, events, language courses, and cultural programs, targeting Slovenians living in Germany and Europe. The organization collaborates with several partner sites and cultural groups to offer language camps, social events, and educational exchanges. The website is well-branded, consistent, and provides clear contact information and community resources. Technically, it is built on WordPress with common plugins and hosted on a German hosting provider, showing moderate performance and good mobile optimization.

A

AS Latvijas valsts meži

cukmens.lv

63

The website cukmens.lvm.lv represents AS Latvijas valsts meži, a Latvian state-owned forestry company focused on forest management and environmental education. The site serves as an educational platform targeting children and the general public to promote forest conservation and awareness. It is well-branded with official logos and links to the parent organization, reflecting a strong market position within the government and non-profit sectors in Latvia. The content is primarily in Latvian and includes news, educational materials, and contact information. Technically, the website is built on Joomla CMS with modern JavaScript libraries such as jQuery and Slick Carousel. It uses Matomo analytics configured to require user consent, demonstrating privacy awareness. The site is mobile-optimized and has a moderate performance profile. However, some improvements in accessibility and SEO could be made. Security-wise, the site enforces HTTPS, uses CSRF tokens, and has a cookie consent mechanism, but lacks explicit security headers and detailed security policies. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is good, with a clear privacy policy linked to the parent organization’s site and a functional cookie consent banner. Contact information is transparent and professional. There are no signs of malicious or suspicious activity. The domain registration aligns well with the business entity, supporting legitimacy and trustworthiness. The overall risk is low, but recommendations include enhancing security headers, publishing detailed security and incident response policies, and adding a vulnerability disclosure mechanism to further strengthen trust and compliance.

The Institute of Banking Personnel Selection (IBPS) is a premier autonomous organization in India specializing in employment testing, selection, and assessment services primarily for banking and government sectors. The website serves as a central hub for recruitment notifications, client information, and candidate resources, positioning IBPS as a key player in the Indian banking recruitment ecosystem. The site is built on a modern WordPress platform with Elementor, leveraging popular libraries such as jQuery, Bootstrap, Owl Carousel, and Swiper.js to provide a responsive and user-friendly experience. Security is well addressed with HTTPS and multiple security headers, though privacy compliance could be improved with cookie consent and GDPR indicators. Overall, the site reflects a mature digital presence aligned with its business objectives.

A

AS Latvijas valsts meži

lvm.lv

61

AS Latvijas valsts meži (LVM) is a Latvian state-owned enterprise responsible for managing and administering a vast area of state-owned forest land. The company focuses on sustainable forest management, environmental protection, and providing educational and recreational services to the public. The website serves multiple audiences including the general public, business partners, and educational institutions, offering detailed information about forest management, environmental projects, and public engagement opportunities. The organization holds recognized certifications such as PEFC, reinforcing its commitment to sustainable practices. Technically, the website is built on Joomla CMS with modern JavaScript libraries like jQuery and uses Matomo for analytics with user consent mechanisms in place. The site is mobile-optimized, accessible, and well-structured, providing a good user experience. Security practices include HTTPS enforcement and CSRF protection, although some advanced security headers and formal security policies are not publicly documented. The security posture is solid with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies. Contact information is transparent and includes multiple channels. The domain WHOIS data aligns with the business identity, indicating high legitimacy. Overall, the website is professional, trustworthy, and serves its purpose effectively.

株

株式会社NTTドコモ

nttdocomo-group.com

56

NTTドコモグループの公式ブランディングサイトは、日本の大手通信グループとして、通信技術の進化を基盤に多様なサービスを提供し、社会の豊かさと幸せを目指しています。サイトは日本語で提供され、個人消費者から法人顧客、パートナー企業まで幅広いターゲットに向けた情報を掲載しています。技術的には最新のJavaScriptライブラリやGoogle Tag Managerを活用し、Amazon AWSをホスティング基盤として利用していることが推察されます。サイトはモバイル対応も良好で、SEOやアクセシビリティも基本的に整っています。セキュリティ面ではHTTPSが適切に設定されているものの、DNSSEC未対応やセキュリティヘッダーの不足が見られます。プライバシーポリシーや利用規約は整備されているものの、クッキー同意メカニズムは未確認です。ドメインは非常に新しく、2024年8月に登録されたため、ブランドの歴史と比較すると若いですが、これは新しいブランドサイトとして妥当と考えられます。総合的に見て、サイトは高品質で信頼性が高く、主要な改善点はセキュリティ強化とプライバシー対応の拡充にあります。

S

squarelovin

squarelovin.com

66

squarelovin is a German-based technology company founded in 2014, operating a leading platform for user-generated content (UGC), influencer marketing, and branded content management. The platform targets brands, marketers, and content creators, offering tools to manage community content effectively and strengthen brand presence. The website reflects a mature digital presence with a professional design and consistent branding, supporting its market position as a key player in the UGC and influencer marketing space. Technically, the site is built on WordPress with Elementor, leveraging modern web technologies and integrations such as Google Tag Manager and Cookiebot for analytics and privacy compliance. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though additional security headers could enhance protection. Privacy compliance is well addressed with comprehensive policies and GDPR-aligned consent management. Overall, the website demonstrates a good balance of business credibility, technical implementation, and privacy awareness, positioning squarelovin as a trustworthy and professional platform in its industry.

B

Bitrock Blockchain

bit-rock.io

66

Bitrock Blockchain operates an Ethereum-compatible IBFT 2.0 Proof of Authority side chain launched in 2023, offering near-zero gas fees and fast block times. The platform targets blockchain developers and crypto users seeking scalable, low-cost transaction infrastructure. It supports a native decentralized exchange (Rockswap) with multichain capabilities and a stablecoin bridged 1:1 with USDT. The website demonstrates a modern technical infrastructure using Bootstrap, jQuery, and other contemporary web technologies, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and no exposed sensitive data, though explicit security headers and privacy policies are absent. The WHOIS data is privacy-protected, common for blockchain projects, but limits transparency. Overall, Bitrock presents as a legitimate emerging blockchain ecosystem with credible partnerships and audit evidence.

N

NeptuneLabs GmbH

neptunelabs.com

71

NeptuneLabs GmbH is a technology company specializing in dynamic imaging software solutions, offering products such as FSI Server and FSI Viewer that enable real-time responsive imaging for websites. Their solutions cater to businesses requiring advanced image management, zoom, pan, and 360° spin capabilities, delivered either on-premises or via SaaS. The company has a global footprint with over 1,000 installations across more than 35 countries, positioning it as a niche but established player in the imaging software market. Technically, the website is built on a modern WordPress CMS platform using the Avada theme and includes custom JavaScript libraries for their imaging products. The site is well optimized for performance, mobile responsiveness, and accessibility, with proper SEO metadata and structured navigation. Privacy and cookie policies are clearly presented with consent mechanisms, reflecting good compliance with GDPR requirements. From a security perspective, the site enforces HTTPS and includes cookie consent but lacks published formal security policies or incident response contacts. No security headers were detected in the provided data, and no vulnerabilities or exposed sensitive data were found. The absence of WHOIS registration data is a notable concern, as it limits domain legitimacy verification, although the website content and business information appear professional and trustworthy. Overall, NeptuneLabs demonstrates a mature digital presence with strong business and technical foundations but should improve transparency around domain registration and security governance to enhance trust and compliance.

H

Huehoco ACP do Brasil

huehocoacp.com.br

42

Huehoco ACP do Brasil is a large manufacturing company specializing in high-performance metal coatings and surface technology solutions for diverse industrial applications. With a strong presence in Brazil and Latin America, the company serves sectors such as construction, automotive, white goods, packaging, and personal protective equipment. Their product portfolio includes customized metal coils, stretched and stamped metal strips, and coil coating painting technology. The company is part of the GRUPO HUEHOCO, which operates globally across multiple continents and countries. The website reflects a professional and consistent brand image, targeting industrial clients with detailed product and segment information. Technically, the website is built on WordPress using Elementor and enhanced with GDPR compliance plugins like Complianz. It employs modern web technologies including WebP image optimization and integrates Google Analytics and Google Ads for tracking and marketing. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms. However, it lacks explicit security headers and a dedicated security policy or incident response page. No vulnerabilities or exposed sensitive data were detected in the analysis. WHOIS data is consistent with the business claims, showing no privacy protection or suspicious patterns. Overall, the website demonstrates a solid digital presence with good privacy compliance and business credibility. Strategic improvements in security headers and incident response documentation would enhance the security posture and trustworthiness further.