Security Directory

M

MaM multimedia, s.r.o.

mojmilacik.sk

39

MôjMiláčik.SK is a Slovak e-commerce website specializing in pet supplies including food, accessories, and veterinary products for dogs, cats, and other animals. Operated by MaM multimedia, s.r.o., the site offers a broad product catalog with detailed descriptions and a loyalty program to encourage repeat purchases. The business targets pet owners primarily in Slovakia and operates as a small retail e-commerce platform with a regional focus. Technically, the website uses a custom CMS platform (MaM SHOP system) with legacy technologies such as Flash and a non-UTF-8 charset, indicating some modernization opportunities. Security posture is solid with HTTPS, DNSSEC, and Google reCAPTCHA integration, but lacks advanced security headers and modern charset standards. Privacy and cookie policies are present and GDPR compliant, supporting regulatory adherence. Overall, the site is functional and trustworthy but could benefit from technical updates and enhanced security measures.

HugeDomains operates as a leading online marketplace specializing in the sale of brandable domain names. The website offers competitive pricing, flexible payment plans, and a 30-day money back guarantee, positioning itself as a trusted intermediary for domain buyers and entrepreneurs. The platform targets businesses and individuals seeking premium domain names with a straightforward purchasing process and secure payment options. Technically, the site employs modern web technologies including jQuery, Google Analytics, and Cloudflare services to ensure performance, security, and user tracking. The presence of cookie consent mechanisms and GDPR-compliant privacy policies reflects a mature approach to privacy and regulatory compliance. Security posture is strong with HTTPS enforced, bot management, and reCAPTCHA integration, although explicit security headers could be more visible. The absence of public WHOIS data is consistent with privacy protection practices common in domain reselling, and does not detract from the site's legitimacy. Overall, HugeDomains presents a professional, secure, and user-friendly platform for domain acquisition.

O

otris software AG

otris.software

62

otris software AG operates a professional customer portal at otris.software, providing access to software product documentation, update information, and product news primarily targeting their German-speaking customer base. The portal is built on a WordPress CMS with modern web technologies including jQuery, Google reCAPTCHA v3 for security, and WPBakery Page Builder for content management. The website demonstrates a good level of digital maturity with secure HTTPS implementation and user authentication mechanisms. Security posture is solid with no visible vulnerabilities or exposed sensitive data, although additional security headers and a formal vulnerability disclosure policy could enhance the security framework. Privacy compliance is generally good with a clear privacy policy and GDPR adherence, but the absence of a cookie consent mechanism is a minor compliance gap. Overall, the domain and website present a trustworthy and professional image consistent with a medium-sized technology company in Germany.

C

Codalex AB

n.nu

56

N.nu is a Swedish-based technology company operating a website builder platform that enables users to create professional websites quickly and easily. Established in 2009 and operated by Codalex AB, the platform boasts over 20,000 active sites and offers features such as SEO-friendly templates, mobile responsiveness, unlimited hosting space, and integrated tools like newsletters and blogs. The business model is subscription-based with a free trial period, targeting individuals and small businesses seeking simple yet powerful website creation tools. Technically, the site uses a combination of HTML5, Bootstrap, jQuery, and tracking services like Google Analytics and Redistats, hosted with Cloudflare DNS and registered via Loopia AB. The website is well designed, mobile optimized, and SEO friendly, providing a good user experience.

S

Spolkový dům a Muzeum Štěpánovska

spolkovydumtrhovystepanov.cz

45

Spolkový dům a Muzeum Štěpánovska is a small, local community cultural institution based in Trhový Štěpánov, Czech Republic. The organization operates a community house and museum that hosts cultural events, educational courses, exhibitions, and offers rental services. The website reflects a focus on local engagement and cultural preservation, targeting residents and visitors interested in regional history and community activities. The business model is non-profit and community-oriented, with a clear emphasis on cultural enrichment and education. Technically, the website is built on a CMS platform provided by Galileo Corporation, utilizing JavaScript libraries such as jQuery and MooTools, along with Highslide for image display. The site is moderately optimized for performance and accessibility, with basic mobile responsiveness and SEO features. Cookie consent is implemented, indicating some attention to privacy compliance, though no explicit privacy policy or terms of service pages are present. From a security perspective, the site uses HTTPS and includes a cookie consent mechanism but lacks visible security headers and formal security policies. No vulnerabilities or malicious content were detected, but the absence of WHOIS data for the domain raises concerns about domain registration transparency. Overall, the security posture is moderate but could be improved with enhanced headers, documented policies, and vulnerability disclosure mechanisms. The overall risk assessment suggests the website is legitimate and safe for general audiences but would benefit from improved transparency and security practices. Strategic recommendations include adding privacy and terms policies, implementing security headers, verifying domain registration details, and enhancing technical and privacy compliance to strengthen trust and security.

M

MŠ Trhový Štěpánov

mstrhovystepanov.cz

46

MŠ Trhový Štěpánov is a local kindergarten serving the community of Trhový Štěpánov in the Czech Republic. The website provides comprehensive information for parents including staff details, school history, daily schedules, event calendars, photo galleries, and downloadable forms. It targets parents and guardians of preschool children, offering a community-focused educational service. The business model is that of a public educational institution with a small local footprint. Technically, the website is built using a combination of jQuery, Bootstrap, Swiper, and other JavaScript libraries, likely managed through the Galileo CMS platform. The site is mobile optimized, accessible, and well-structured, though performance is moderate. SEO and navigation are well implemented, providing a good user experience. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers and published privacy or terms of service documents. No WHOIS data is available, which reduces domain trustworthiness. No advanced security policies or incident response contacts are found, indicating room for improvement in security maturity. Overall, the website is safe, professional, and trustworthy for its intended audience, but would benefit from enhanced transparency regarding privacy, security policies, and domain registration details to improve compliance and trust.

B

BerlinerLuft. México S. De R.L. de C.V.

berlinerluft.mx

51

BerlinerLuft. México S. De R.L. de C.V. is a medium-sized manufacturing company specializing in HVAC equipment, components, and duct systems with a global footprint including production plants in Mexico and Brazil. The website presents a professional image with clear business descriptions, product portfolios, and case studies targeting B2B clients in the HVAC and industrial sectors. The digital infrastructure is built on WordPress with modern plugins and technologies, ensuring a responsive and user-friendly experience. Security posture is adequate with HTTPS and Google reCAPTCHA implemented, though it lacks advanced security headers and published security policies. Privacy compliance is limited due to absence of privacy and cookie policies. Overall, the website is trustworthy and functional but could improve in compliance and security transparency.

K

KORTS Immobilien GmbH

korts-immobilien.de

50

KORTS Immobilien GmbH is a Hamburg-based, owner-managed real estate consultancy specializing in commercial office properties with over 19 years of market experience. The company offers comprehensive brokerage and advisory services tailored to tenants and property owners in the Hamburg metropolitan area. Their business model focuses on personalized service, leveraging a broad network of market participants to provide exclusive access to properties and expert negotiation support. Technically, the website is built on WordPress with Elementor and Yoast SEO, hosted by Timme Hosting, and demonstrates good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though additional security headers and explicit security policies could enhance protection. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, making it a reliable digital presence for the business.

H

HostX

hostx.ro

63

HostX is a Romanian web hosting and domain registration provider offering a wide range of services including SSD web hosting, VPS servers, SSL certificates, and business email hosting. The company targets businesses and individuals in Romania seeking reliable and affordable hosting solutions. Their market position is that of a competitive local provider with a comprehensive service portfolio and attractive pricing. Technically, the website uses modern JavaScript libraries such as jQuery and OwlCarousel, integrates Google Tag Manager and Cookiebot for analytics and cookie compliance, and is optimized for mobile devices with good SEO practices. Security-wise, the site enforces HTTPS and provides a detailed cookie consent mechanism, but lacks visible advanced security headers and a published security policy or incident response contacts. The WHOIS data is privacy protected as per ROTLD policies, which is typical for Romanian domains, and no suspicious domain registration patterns were detected. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

Incom GmbH operates a specialized communication and collaboration platform tailored for higher education institutions, particularly targeting design and art universities in Germany. The platform facilitates modern teaching concepts, enabling seamless interaction between educators and students, and extends the scope of academic courses both temporally and spatially. The business model is based on a cost-effective SaaS offering with included support and consulting services, positioning Incom as a niche player in the educational technology sector. The company has been established since 2005, reflecting a mature presence in its market segment. Technically, the website employs a modern yet straightforward technology stack including Bootstrap, jQuery, Font Awesome, and Matomo for privacy-conscious analytics. The platform is custom-built without reliance on common CMS solutions, hosted under a reputable registrar with stable DNS configurations. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be enhanced. Performance is moderate, suitable for the target audience. From a security perspective, the website enforces HTTPS with AES 256-bit encryption, avoids third-party advertising and tracking services like Google Analytics, and respects user privacy by not profiling visitors. However, it lacks DNSSEC and important security headers such as Content-Security-Policy and HSTS, which are recommended to strengthen its security posture. No incident response or security policy information is published, which could be improved to enhance trust. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or questionable content. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Strategic recommendations include implementing DNSSEC, adding security headers, publishing security policies, and introducing cookie consent mechanisms to improve GDPR compliance and security maturity.

W

WIN Nordwest

wirtschaft-innovation-nordwest.de

64

WIN Nordwest is a small regional marketing and consulting agency based in Wietmarschen, Germany, specializing in event organization, media design, and publishing for municipalities and local businesses. The company organizes regional trade fairs and produces print media such as brochures and business cards. Their market position is focused on regional clients with a comprehensive service offering in marketing, PR, and project support. Technically, the website is built on the Jimdo CMS platform, leveraging standard web technologies including jQuery, Google Analytics, and POWr widgets. The site is mobile-optimized with moderate performance and basic SEO and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, but could benefit from enhanced security practices and more detailed policy disclosures.

C

CopeCart

copecart.com

70

CopeCart is a technology company founded in 2017, providing an all-in-one online sales platform targeted at digital entrepreneurs primarily in Germany. The website is professionally designed using WordPress and the Divi theme, with good SEO and mobile optimization. The technical infrastructure includes modern marketing and analytics tools such as Google Tag Manager, Hotjar, and Cookiebot for cookie consent management. Security posture is solid with HTTPS enforced and domain protections in place, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no explicit privacy policy or terms of service found. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the business.

W

wvnderlab

wvnderlab.com

52

wvnderlab is a Hamburg-based digital agency specializing in web design, SEO, online marketing, and e-commerce solutions. The company positions itself as a full-service provider offering tailored digital marketing strategies and professional website development to help businesses grow their online presence. Their website reflects a mature digital infrastructure with modern technologies such as WordPress, Yoast SEO, and cookie consent management, indicating a high level of digital maturity. Security measures include HTTPS enforcement and anti-spam protections, though there is room for improvement in HTTP security headers and formal security policies. Overall, the website is professional, well-structured, and GDPR compliant, supporting a trustworthy business image.

M

Město Pyšely

pysely.cz

47

Město Pyšely operates an official municipal website serving the residents and visitors of the town of Pyšely in the Czech Republic. The site provides comprehensive information about the city, including news, events, public notices, practical information such as waste management and water services, and contact details for municipal offices. The website targets local citizens and stakeholders interested in municipal affairs and community activities. The business model is that of a government entity providing public services and information digitally. Technically, the website uses a custom CMS platform with modern JavaScript libraries such as jQuery, Bootstrap, Swiper.js, and mmenu.js to deliver a responsive and user-friendly experience. The site is mobile optimized and structured with clear navigation, although some accessibility features are basic. Performance is moderate, with no major technical issues detected. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, indicating some attention to privacy compliance. However, no explicit privacy policy page or security policy is found, and no security headers were detected in the provided data. The WHOIS data for the domain is unavailable, which limits the ability to fully verify domain legitimacy and ownership. No vulnerabilities or exposed sensitive data were identified. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. The main risks relate to the lack of WHOIS transparency and incomplete privacy documentation. Strategic recommendations include publishing a privacy policy, enhancing security headers, and providing incident response contacts to improve trust and compliance.

O

Obec Lštění

lsteni-zlenice.cz

47

Obec Lštění operates an official municipal website serving the local community in the Czech Republic. The site provides comprehensive information about local government activities, official notices, event calendars, contact details, and integrated services such as payment portals and environmental monitoring. The website targets residents and visitors seeking municipal services and updates. Technically, the site uses a variety of JavaScript libraries including jQuery, Highcharts, and Bootstrap, indicating a moderately modern infrastructure with good mobile optimization and user experience. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit incident response information. The absence of WHOIS registration data reduces transparency and trustworthiness from a domain registration perspective. Overall, the site is functional, trustworthy for its purpose, but could improve in security and registration transparency.

The website www.mestocernosice.cz serves as the official online presence for the town of Černošice, Czech Republic. It provides comprehensive information about the municipality, including governance, public services, cultural events, and practical information for residents and visitors. The site is well-structured with clear navigation and a professional design consistent with government standards. The primary audience includes local citizens and stakeholders interested in municipal affairs. Technically, the website employs a range of established front-end libraries such as jQuery, Bootstrap, and Swiper, ensuring a responsive and user-friendly experience across devices. The site uses external CDNs for fonts and icons, contributing to moderate performance. However, no CMS or hosting provider details were identified, and no advanced frameworks appear in use. From a security perspective, the site uses HTTPS (assumed from the URL), but no explicit security headers were detected in the provided data. A cookie consent banner is implemented, indicating some level of privacy compliance, though no dedicated privacy policy or terms of service pages were found. The absence of WHOIS data for the domain is a notable concern, as it limits verification of domain legitimacy and ownership, which is unusual for an official government domain. Overall, the site is functional and professional but would benefit from enhanced transparency regarding privacy policies, security headers, and domain registration details to improve trustworthiness and compliance with modern standards.

The Asociace DSO České republiky is a non-profit association representing voluntary municipal unions in the Czech Republic, focusing on fostering inter-municipal cooperation and supporting functional microregions. The organization aims to promote financial stability and recognition of public administration performance by municipalities, the Czech Republic, and regional authorities. Their website serves as an official platform providing strategic documents, project examples, news updates, and contact information for stakeholders. Technically, the website employs a custom CMS with a modern frontend stack including jQuery, Bootstrap, Swiper.js, and other UI libraries. The site is mobile-optimized with a clear navigation structure and cookie consent mechanisms, reflecting a moderate level of digital maturity. However, no advanced analytics or tracking tools are detected, indicating a privacy-conscious approach. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible security headers and explicit security policies. No vulnerabilities or exposed sensitive data were found in the analysis. The absence of WHOIS data limits domain registration insights, but the website's professional presentation and partner references support its legitimacy. Overall, the site is well-structured, content-rich, and trustworthy, serving its target audience effectively. Strategic recommendations include enhancing security headers, improving accessibility, and publishing detailed security and incident response policies to strengthen trust and compliance.

M

MŠ Petrov

mspetrov.cz

46

MŠ Petrov operates as a small local kindergarten located in Petrov, Czech Republic, providing preschool education and childcare services. The website presents a clear and consistent brand image with detailed descriptions of its educational offerings and community engagement. The institution targets parents and guardians of young children in the local area, emphasizing a nurturing and creative learning environment. Technically, the website employs modern JavaScript libraries such as jQuery, Bootstrap, and Swiper.js, and is built on a CMS platform likely provided by Galileo Corporation. The site is mobile optimized and accessible, though performance is moderate. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but lacks advanced security headers and formal privacy documentation. The absence of WHOIS data reduces domain trustworthiness, though the website content and contact information appear legitimate and professional. Overall, the site scores well on content quality and business credibility but should improve privacy compliance and security best practices.

T

TJ Sokol Nespeky

sokolnespeky.cz

56

TJ Sokol Nespeky operates as a local amateur football club in the Czech Republic, providing community sports engagement through multiple football teams across various age groups. The website serves as a hub for match reports, schedules, league standings, and club news, targeting local players, fans, and community members. The club's market position is that of a small, community-focused sports organization competing in regional leagues. Technically, the website is built on WordPress with the SportsPress Pro plugin, leveraging common web technologies such as jQuery and Google Fonts. The site is moderately optimized for mobile and performance, with basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and explicit incident response contacts. The absence of WHOIS data limits domain trust assessment, but the website content and structure indicate a legitimate local sports club. Overall, the site is functional, informative, and safe for general audiences.

M

Mateřská škola Nespeky

msnespeky.cz

46

Mateřská škola Nespeky operates as a local preschool educational institution in the Czech Republic, providing early childhood education and various extracurricular activities. The website serves as an official information portal for parents and the community, featuring details about classes, projects, events, and contact information. It maintains partnerships with reputable organizations such as Mensa ČR and is involved in EU co-financed projects, indicating a stable community presence and funding support. Technically, the website employs a modern technology stack including jQuery, Bootstrap, Swiper.js, and custom CMS components, delivering a responsive and accessible user experience. The site includes cookie consent mechanisms and GDPR-compliant privacy information, reflecting awareness of privacy regulations. Performance is moderate with good mobile optimization and SEO practices. From a security perspective, the site uses HTTPS and implements cookie consent but lacks visible advanced security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of WHOIS data reduces domain trustworthiness, but the website content and external partnerships support legitimacy. Overall, the website presents a trustworthy, well-maintained educational resource with good privacy compliance and moderate security posture. Strategic improvements in security headers and domain registration transparency would enhance trust and resilience.

S

Systempartner IT-Vertriebs GmbH & Co. KG

systempartner-it.de

51

Systempartner IT-Vertriebs GmbH & Co. KG is a well-established IT service provider based in Lüneburg, Germany, with over 25 years of experience. The company specializes in delivering tailored IT infrastructure, security, analysis, telephony solutions (notably 3CX VoIP), refurbished hardware, and cloud services primarily targeting businesses and institutions in Northern Germany. Their strong partnerships with leading technology vendors such as Sophos, Lenovo, Microsoft, and others position them as a trusted regional player with a comprehensive service portfolio. The website reflects a professional and modern digital presence with active content updates and clear business information. Technically, the website is built on WordPress with WooCommerce and uses reputable plugins like Yoast SEO and Borlabs Cookie for SEO and privacy compliance. The hosting appears stable with nameservers linked to Kasserver. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be enhanced. No vulnerabilities or exposed sensitive data were detected. Overall, the security posture is good, with room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is strong, with GDPR-aligned policies and cookie consent. The domain WHOIS data aligns well with the business claims, supporting legitimacy. No WAF or blocking mechanisms interfere with content access. Strategic recommendations include enhancing security headers, publishing a security policy and security.txt file, and maintaining regular updates to plugins and themes to sustain security and compliance.

S

Selmatec Systems GmbH

selmatec.de

62

Selmatec Systems GmbH is a specialized German company providing advanced industrial machine vision and infrared temperature measurement systems. Their offerings include a broad range of infrared sensors, imaging systems, and customized engineering solutions tailored for industries such as automotive, steel, energy, and cement production. The company positions itself as a niche provider focusing on quality assurance and integration of IR and vision technologies into production lines. Technically, the website is built on the Contao CMS platform using modern JavaScript libraries like jQuery and Swipe.js, delivering a professional and responsive user experience. Security posture is adequate with HTTPS and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the domain and website content appear legitimate and trustworthy with clear contact information and social media presence. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to improve trust and compliance.

SAFETEC IT-SYSTEME Vertriebsgesellschaft mbH is a German-based company specializing in the sales, maintenance, and support of high-performance scanners and related hardware and software solutions. Established in 1999, the company emphasizes a strong customer service culture with nationwide support technicians and flexible maintenance contracts. Their business model focuses on B2B sales and after-sales services including repairs, training, and test device loans. The website reflects a professional and consistent brand presence targeting business customers in Germany. Technically, the website is built on the Contao Open Source CMS platform, utilizing modern JavaScript libraries such as jQuery and MediaElement.js for enhanced user experience. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with no major technical issues detected. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. From a security perspective, the site enforces HTTPS and uses secure forms with CSRF tokens. However, explicit HTTP security headers are not detected, and no public security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the content. The domain WHOIS data is minimal but consistent with the business claims, though lacking detailed registrant information. Overall, SAFETEC presents a trustworthy and professional online presence with solid privacy and security foundations. Strategic improvements could include publishing explicit security policies, adding security headers, and implementing a vulnerability disclosure process to further enhance trust and compliance.

K

Kenda Elektrotechnik

kenda.de

43

Kenda Elektrotechnik is a small, locally focused electrical service provider operating in the Köln-Bonn region of Germany. With approximately 40 years of experience, the company offers a range of services including smart home automation, photovoltaic installations, electric vehicle charging solutions, lighting, and general electrical installations. The website is built on WordPress using the Avada theme and integrates modern technologies such as LayerSlider and Leaflet for maps. The site is well-structured, mobile-optimized, and presents a professional image with partner logos from recognized brands. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the website reflects a credible and trustworthy small business with room for improvement in security and privacy transparency.

H

Happy-Beton GmbH & Co. KG

happy-beton.de

62

Happy-Beton GmbH & Co. KG is a well-established German company specializing in the production and distribution of ready-mixed concrete and construction materials, serving the northern German market with over 40 locations. Their services include transport concrete, rental of concrete pumps, and supply of natural building materials such as sand and gravel, supported by a strong regional presence and certifications like CSC. The website is professionally designed, mobile-optimized, and built on the Contao CMS platform, integrating modern JavaScript libraries and a comprehensive cookie consent mechanism. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Contact information is transparent and comprehensive, supporting business credibility. Overall, the digital infrastructure supports their business model effectively with room for enhanced security policies and incident response disclosures.

D

DE-VAU-GE Gesundkostwerk Deutschland GmbH

de-vau-ge.de

51

DE-VAU-GE Gesundkostwerk Deutschland GmbH is a well-established German manufacturer specializing in breakfast cereals, muesli bars, plant-based drinks, and snacks. Founded in 1899, it holds a strong market position as one of Europe's largest producers in its sector, primarily serving the European food retail market including private label partnerships. The website reflects a mature digital presence with comprehensive product information, sustainability initiatives, and career opportunities. Technically, the site is built on WordPress with modern plugins and analytics tools, optimized for SEO and mobile use. Security posture is solid with HTTPS, anti-spam measures, and cookie consent mechanisms, though additional security headers and explicit security policies could enhance protection. Overall, the site demonstrates high professionalism, compliance with GDPR, and trustworthy business practices.

B

borowiakziehe KG

borowiakziehe.de

46

borowiakziehe KG is a small, established marketing and communication agency based in Lüneburg, Germany, with over 25 years of experience. The company offers a range of services including marketing, advertising, website development, online marketing, corporate design, and social media concepts. Their website showcases client projects and highlights their expertise and local market presence. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Colorbox for enhanced user experience. The site is mobile-optimized and provides clear navigation and professional design. Security posture is moderate; while no critical vulnerabilities or exposed sensitive data are evident, the absence of security headers and cookie consent mechanisms indicates room for improvement. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the company.

N

next Startup Day

next-startup-day.de

42

The next Startup Day website serves as the central platform for a major startup event in Niedersachsen, Germany, focusing on innovation, entrepreneurship, and networking among startups, investors, and companies. The event is supported by regional government entities, positioning it as a key regional initiative to foster startup ecosystem growth. The website provides detailed event information, speaker highlights, and partner collaborations, targeting startups, investors, and corporate participants. Technically, the site is built on WordPress with modern plugins such as Elementor and WooCommerce, ensuring a flexible and visually appealing user experience. SEO and structured data are well implemented, enhancing discoverability. Security posture is adequate with HTTPS and nonce usage, but lacks explicit security headers and documented policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

C

Creatomatic

creatomatic.co.uk

68

Creatomatic is a Scotland-based digital agency specializing in web design, branding, and digital transformation services, with a focus on WordPress development and digital marketing. The company positions itself as a professional and trusted partner for businesses seeking to build and enhance their digital presence. The website reflects a small-sized agency with a solid reputation, supported by positive user ratings and active social media engagement. Technically, the site is built on WordPress, leveraging modern JavaScript libraries and analytics tools such as Google Tag Manager, Google Analytics, Hotjar, and Facebook Pixel, indicating a mature digital infrastructure. The website is served securely over HTTPS with CDN support, ensuring good performance and availability. Security posture is generally good with HTTPS and privacy consent mechanisms implemented, though explicit security headers and detailed privacy or cookie policies are not detected in the provided content. The absence of WHOIS data for the subdomain queried is expected and does not detract significantly from the domain's legitimacy. Overall, Creatomatic demonstrates a professional online presence with moderate technical sophistication and a good security baseline, suitable for its business model and market segment.

M

Muthesius Kunsthochschule

muthesius.de

54

Muthesius Kunsthochschule is a specialized art university in Schleswig-Holstein, Germany, offering a range of Bachelor and Master programs in art, design, and spatial strategies. The institution emphasizes artistic freedom, interdisciplinary research, and international collaboration, serving a diverse student body including international students. The website reflects a mature digital presence built on WordPress, integrating accessibility and privacy compliance features such as cookie consent and GDPR-aligned policies. Social media and event information enhance community engagement. Security posture is solid with HTTPS and cookie management, though explicit security policies and incident response details are absent. Overall, the site is professional, trustworthy, and well-structured, supporting the institution's educational mission effectively.

J

JessenLenz GmbH

jledu.de

44

JessenLenz GmbH operates the website jledu.de, providing educational technology solutions primarily targeting schools in Germany. The company offers services under the brand eduXpert, focusing on collaboration with schools and providing support through a service center. The website is professionally designed using WordPress with the Divi theme and includes essential legal and contact information, indicating a legitimate and business-focused online presence. Technical infrastructure is modern and includes SEO optimization and cookie consent mechanisms, reflecting a good level of digital maturity. Security posture is adequate with HTTPS enforced and anti-spam measures in place, though there is room for improvement in security headers and explicit security policies. Overall, the website presents a low-risk profile with no signs of malicious activity or content safety concerns.

J

JessenLenz GmbH

jessenlenz.eu

49

JessenLenz GmbH is an established IT system house based in Lübeck, Germany, offering comprehensive IT services with over 40 years of experience. The company targets businesses seeking reliable IT solutions and positions itself as a trusted provider in the technology sector. The website is built on WordPress using the Divi theme and incorporates SEO best practices via the Yoast SEO plugin. Social media presence on Facebook and Instagram supports brand visibility. Technically, the site is moderately performant and mobile-optimized, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no evident vulnerabilities, but lacks explicit security policies or incident response information. Privacy compliance is limited due to the absence of a privacy policy and terms of service. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

Universitätsklinikum Frankfurt is a leading university hospital in Germany providing comprehensive patient care, medical research, and education. The website serves multiple audiences including patients, healthcare professionals, researchers, and students, offering detailed information about clinical services, research initiatives, and educational programs. The institution is well-positioned in the healthcare sector with a strong reputation supported by certifications such as ISO 9001:2015. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies like jQuery and Slick Slider for interactive content. The site demonstrates good performance, mobile optimization, and accessibility standards. Hosting appears to be managed by the university or German academic networks, ensuring reliability and security. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident with clear privacy and cookie policies, GDPR adherence, and minimal user tracking. However, explicit security policy and incident response contact information are not prominently provided. Overall, the website is professional, trustworthy, and well-maintained, reflecting the institution's credibility. Recommendations include publishing a dedicated security policy, adding vulnerability disclosure information, and providing incident response contacts to enhance transparency and security readiness.

N

National Shooting Sports Foundation

gunvote.org

52

GunVote is an advocacy and voter mobilization platform operated by the National Shooting Sports Foundation (NSSF), focused on protecting Second Amendment rights in the United States. The website provides resources such as candidate report cards and encourages gun owners and supporters to vote in elections. The platform targets a niche audience of firearm owners, hunters, and industry members, positioning itself as a key player in political advocacy within this sector. Technically, the site is built on WordPress using the Divi theme, leveraging modern JavaScript libraries and multiple third-party tracking and advertising services. While the site is mobile-optimized and has good design quality, it lacks comprehensive privacy and cookie policies, and does not implement DNSSEC or advanced security headers, which are areas for improvement. Security posture is moderate with HTTPS enforced and domain transfer protections in place. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the platform.

eTwinning România is a national educational project co-funded by the European Commission under the Erasmus+ program. It facilitates inter-school collaborative projects for teachers and students across Europe using the European School Education Platform. The website serves as the official Romanian portal, coordinated by the Agenția Națională pentru Programe Comunitare în Domeniul Educației și Formării Profesionale (ANPCDEFP). It provides resources, news, professional development courses, and contact information for stakeholders. The site is well-branded, consistent, and targets educators and schools in Romania and Europe. Technically, it is built on WordPress with common plugins and integrates Google services such as Maps and Analytics. Hosting is provided by HostX, and the site uses HTTPS with a moderate security posture. However, DNSSEC is not enabled, and some security headers are missing. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Contact details are clearly provided, enhancing business credibility.

N

NSSF Real Solutions®

nssfrealsolutions.org

63

NSSF Real Solutions® is a non-profit organization focused on firearm safety and community partnerships. The website highlights their collaboration with law enforcement, elected officials, and other organizations to promote safer communities through various programs such as Project ChildSafe and suicide prevention initiatives. The organization appears well-established with a clear mission and multiple partnerships, positioning itself as a trusted advocate in the firearm safety sector. Technically, the website is built on WordPress using modern technologies including jQuery, Bootstrap, and Gravity Forms. It employs multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Twitter tracking, indicating a mature digital presence. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with a good SSL configuration and has domain protections like clientTransferProhibited status. However, DNSSEC is not enabled, and some security headers like Content-Security-Policy are missing. There is no published security policy or incident response contact, and no cookie consent mechanism despite tracking scripts, which are areas for improvement. Overall, the website is professional, trustworthy, and content-rich, serving its target audience effectively. The security posture is solid but could be enhanced with additional measures. Privacy compliance is basic and should be improved to meet GDPR standards fully.

N

National Shooting Sports Foundation, Inc.

shootingsportsmonth.org

58

The National Shooting Sports Month website serves as a promotional platform for the National Shooting Sports Foundation, Inc., a well-established non-profit organization dedicated to growing participation in shooting sports across the United States. The site effectively targets gun owners, shooting ranges, retailers, manufacturers, and organizations by providing event information, promotional toolkits, and opportunities to get involved. The website's market position is strong within its niche, leveraging official branding and partnerships to maintain credibility and industry leadership. Technically, the site is built on WordPress with modern plugins and frameworks, offering a good user experience with mobile responsiveness and SEO optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though some security headers are missing and could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the site demonstrates high business credibility with clear contact information and trust indicators such as testimonials and social media presence. The WHOIS data is unavailable due to privacy protection or query issues, but the domain age and content consistency support legitimacy. Strategic recommendations include enhancing security headers, expanding incident response information, and improving accessibility features to further strengthen the site's security and compliance stance.

Universitätsklinikum Frankfurt is a leading university hospital in Germany providing comprehensive patient care, medical research, and education. The website serves multiple audiences including patients, healthcare professionals, researchers, and students, offering detailed information about clinical services, research initiatives, and career opportunities. The institution holds recognized certifications such as ISO 9001:2015, reinforcing its commitment to quality and trust. Technically, the website is built on TYPO3 CMS with modern frontend technologies like jQuery and Slick Carousel, delivering a responsive and well-structured user experience. Security measures include HTTPS enforcement and appropriate security headers, contributing to a strong security posture. Privacy compliance is evident with accessible privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. The security posture is solid with no detected vulnerabilities or exposed sensitive data. However, the site lacks a dedicated security policy and incident response contact details, which could enhance transparency and preparedness. Overall, the domain registration and WHOIS data align well with the university's infrastructure, confirming legitimacy and trustworthiness. Strategic recommendations include publishing a formal security policy, establishing a vulnerability disclosure program, and enhancing accessibility features to further improve user experience and compliance.

R

Rettungsdienst-Akademie Bonn

rdakademiebonn.de

46

Rettungsdienst-Akademie Bonn is a specialized educational institution based in Germany offering state-recognized training programs for emergency medical personnel including rescue helpers, paramedics, emergency paramedics, and emergency physicians. The website serves as a comprehensive platform for course information, scheduling, and contact, targeting individuals seeking professional certification in emergency medical services. The business operates in the healthcare and education sectors with a small organizational size and a founding year of 2021, aligning with the domain registration date. Technically, the website is built on WordPress using Elementor and several reputable plugins such as Yoast SEO and Complianz GDPR for SEO and privacy compliance. The site demonstrates good mobile optimization, clear navigation, and a professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers and incident response policies are not publicly documented. Overall, the website shows a mature digital presence with compliance to GDPR through privacy and cookie policies, social media integration, and structured data for SEO. No critical vulnerabilities or suspicious content were detected. The WHOIS data supports the legitimacy of the domain with consistent registration information and appropriate domain age. Strategic recommendations include enhancing security headers, publishing explicit security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and security posture.

A

ANPCDEFP

eea4edu.ro

40

The website www.eea4edu.ro represents the official Romanian national operator ANPCDEFP for the EEA Grants education program. It provides information about education grants, scholarships, apprenticeships, and youth entrepreneurship funded by Norway, Iceland, and Liechtenstein. The site targets educational institutions, universities, vocational schools, and youth organizations in Romania and donor states. The business model is governmental/non-profit, managing EU and EEA grant programs. The website is well-branded, consistent, and professional, reflecting its official status. Technically, the site is built on WordPress using the Divi theme and several plugins including WPML for multilingual support, Google Analytics for tracking, and Popup Maker for UI elements. The site is mobile optimized and uses HTTPS, but lacks some advanced security headers and explicit privacy/cookie policies. Performance is moderate with good SEO and accessibility basics. Security posture is adequate with HTTPS and no visible vulnerabilities, but could be improved by adding security headers and a security.txt file. Privacy compliance is limited due to missing explicit privacy and cookie policies. Contact information is clearly provided, enhancing business credibility. Overall, the site is trustworthy and legitimate, with no WAF or blocking detected. WHOIS data is privacy protected as per ROTLD policy, which is standard for Romanian domains. The domain and website content align well, supporting legitimacy. Strategic improvements in privacy compliance and security headers would enhance trust and compliance.

G

Glashaus e.V.

glashaus.org

54

Glashaus e.V. is a small non-profit cultural organization based in Bayreuth, Germany, focused on hosting a variety of cultural events including concerts, art programs, and community gatherings primarily on the University of Bayreuth campus. The organization engages local students and the wider community, offering a café service and volunteer opportunities, positioning itself as a key cultural hub in the region. The website reflects this mission with event listings, membership information, and active social media channels. Technically, the site is built on an older WordPress platform with common JavaScript libraries like jQuery, bxSlider, and Slicknav, providing a moderate level of performance and mobile optimization. However, the use of outdated software versions and lack of modern security headers indicate technical debt and potential security risks. Security posture is basic with HTTPS enabled but missing advanced headers and no visible incident response or security policy documentation. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism despite Google Analytics usage. WHOIS data is unavailable, limiting domain trust verification, but the website content and social presence support legitimacy. Overall, the site is functional and trustworthy for its community audience but would benefit from technical and security modernization.

S

Soulfood Cafe Simonz

cafe-simonz.de

9

Soulfood Cafe Simonz is a small hospitality business located in Wuppertal-Arrenberg, Germany, offering food, drinks, and cultural events including live music and private event hosting. The website provides clear contact information and event announcements, targeting local community members and visitors interested in dining and cultural experiences. Technically, the site is built on the IONOS MyWebsite platform, utilizing standard web technologies such as HTML5, CSS, JavaScript, and Facebook SDK for social integration. The site is served over HTTPS, ensuring secure connections, but lacks advanced security headers and formal privacy or cookie policies. Security posture is moderate with room for improvement in compliance and best practices. Overall, the website is functional, moderately optimized, and trustworthy for its business purpose.

W

World Music Festival der Klangfreunde e.V.

worldmusicfestival.de

54

World Music Festival der Klangfreunde e.V. is a small, regionally focused cultural event organizer based in Germany, specializing in hosting an annual world music festival in Loshausen. The website provides comprehensive information about the festival, including event dates, ticket sales, workshops, and community involvement. The organization targets music enthusiasts and cultural participants, leveraging partnerships with ticketing platforms and regional cultural magazines to enhance reach. Technically, the website is built on a modern WordPress infrastructure with popular plugins such as Elementor and caching mechanisms to optimize performance. The site is mobile-optimized and includes accessibility features, structured data for SEO, and GDPR-compliant privacy and cookie policies. Hosting is provided by Goneo, a German hosting provider, consistent with the domain's WHOIS data. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers and dedicated security or incident response policies. No vulnerabilities or malicious content were detected. Privacy compliance is strong, with clear policies and user consent mechanisms in place. Overall, the website is trustworthy, professionally maintained, and compliant with relevant regulations. It effectively supports the festival's business model and community engagement goals.

E

Elmores

elmores.de

51

Elmores is a small hospitality business operating a beer garden and lounge located at the Siegwasserfall waterfall in Germany. The website highlights their offerings including food, drinks, and hosting various cultural and entertainment events such as concerts, festivals, and flea markets. The business targets local visitors and event attendees, positioning itself as a community-focused venue with a vibrant atmosphere. Technically, the website is built on WordPress using the Enfold theme, hosted likely by 1blu based on nameserver information. The site employs modern web technologies including jQuery and integrates CookieYes for cookie consent management, demonstrating awareness of privacy compliance. Performance is moderate with good mobile optimization and basic accessibility features. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism with detailed categories, but lacks advanced security headers and does not provide a security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is good with a clear privacy policy and cookie banner. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The absence of a terms of service page and incident response details are minor gaps. The site is safe for general audiences with no adult content. Strategic recommendations include enhancing security headers, adding a security.txt file, and improving accessibility and incident response transparency.

R

Rescuetrade OHG

rescuetrade.com

54

Rescue Trade OHG is a German-based manufacturer and global distributor specializing in disposable medical bedding products such as blankets, pillows, sheets, and transport sheets. Established in 2004, the company positions itself as a pioneer in the disposable bedding market with a strong focus on hygiene and patient safety. Their products serve a broad audience including hospitals, emergency medical services, ambulances, fire departments, and other public institutions. The company emphasizes compliance with international medical device regulations, holding ISO 13485 certification and FDA registration, which underscores their commitment to quality and regulatory adherence. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI plugins to deliver a responsive and user-friendly experience. The site is well-structured with clear navigation and professional design, although some accessibility features could be enhanced. Performance is moderate with no major issues detected. However, the absence of explicit security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data in its HTML content. The contact form redirects users to a contact page rather than processing data directly, reducing immediate risk. Nevertheless, the lack of published incident response policies, vulnerability disclosure mechanisms, and security.txt files suggests limited transparency in security operations. The WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy and consistency with the business claims. This discrepancy warrants further investigation to confirm domain ownership and trustworthiness. Overall, Rescue Trade OHG presents a professional and credible online presence with strong business and regulatory credentials. The main risks lie in the missing WHOIS data and some gaps in security best practices. Addressing these issues would enhance trust and compliance, supporting the company’s market position as a reliable medical device manufacturer.

M

Medicom VerlagsgmbH

medicom.cc

52

Medicom VerlagsgmbH operates a professional medical publishing website targeting healthcare professionals in German-speaking countries, primarily Austria, Germany, and Switzerland. The site offers multiple specialized medical publications, video lectures, and congress information, supporting continuing education for physicians and nurses. The business is positioned as a niche medical media provider with a long-standing domain since 2000, indicating stability and market presence. Technically, the website is built on Weblication CMS, uses jQuery, and integrates Google Analytics and Google Tag Manager with IP anonymization for user tracking. Hosting is provided by Hetzner, a reputable provider. The site is mobile-optimized and has good SEO practices, though accessibility features are basic. Performance is moderate. Security posture is adequate with HTTPS enforced and cookie consent implemented. However, DNSSEC is not enabled, and no advanced security headers were detected. There is no publicly available security policy or incident response contact, which could be improved. Privacy compliance is basic but present, with GDPR-relevant policies and cookie banners. Overall, the website is professional, trustworthy, and safe for its target audience. Strategic improvements in security headers, DNSSEC, and transparency around security policies would enhance its security maturity and trustworthiness.

D

DGINA Services UG

notfall-campus.de

47

DGINA Services UG operates the DGINA Notfallcampus website, providing specialized training and continuing education in clinical emergency and acute medicine. The company targets healthcare professionals, offering a variety of courses including the DGINA 80h course, expert forums, refresher courses, and advanced life support training. The business model centers on educational services with integrated online booking and e-learning platforms, positioning itself as a niche leader in emergency medicine education within Germany. Technically, the website is built on a modern WordPress CMS with WooCommerce for e-commerce functionality and Elementor for page building. It integrates third-party widgets for seminar management and uses Borlabs Cookie for GDPR-compliant cookie consent. Hosting is provided via rzone.de, with secure HTTPS connections and moderate performance. The site is mobile-optimized and features good SEO and accessibility practices. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms, but lacks explicit security headers such as Content-Security-Policy and X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the business, showing no privacy protection or suspicious registration patterns, indicating a trustworthy domain. Overall, the website presents a professional, secure, and GDPR-compliant platform for emergency medicine education. Strategic recommendations include enhancing security headers, conducting regular security audits, and improving accessibility features to further strengthen the security posture and user experience.

R

Rescuetrade OHG

rescuetrade.de

53

Rescue Trade OHG is a German-based manufacturer and distributor specializing in medical disposable products, particularly single-use bedding sets, transfer sheets, and transport cloths for patient care. Established in 2004, the company serves a broad clientele including emergency services, hospitals, care facilities, and governmental agencies worldwide. Their products are certified under ISO 13485 and comply with FDA and MDR regulations, positioning them as a trusted provider in the healthcare sector. The website reflects a professional and consistent brand image with clear business information and downloadable resources for customers. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience. While performance is moderate, the site is well-structured with good SEO practices and mobile optimization. However, no CMS or hosting provider details are explicitly detected. Security-wise, HTTPS is implied, and forms use validation scripts, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and security hardening. Overall, the security posture is adequate but could benefit from enhanced HTTP security headers and explicit privacy controls. The lack of an incident response contact or vulnerability disclosure reduces transparency. The domain WHOIS data is minimal but consistent with the business claims, supporting legitimacy. No WAF or blocking mechanisms were detected, allowing full content access and analysis.

G

GR Holding GmbH

gr-holding.de

61

GR Holding GmbH is a German holding company specializing in healthcare and digital solutions, managing six subsidiaries that provide emergency medical services, personnel management, training, and software development. The company emphasizes a leadership philosophy centered on motivation, culture, and administrative efficiency. Their website reflects a professional and consistent brand image, targeting healthcare professionals and partner organizations primarily in Baden-Württemberg. Technically, the site is built on WordPress with a modern theme and plugins, offering good mobile optimization and GDPR-compliant privacy and cookie policies. Security posture is solid with HTTPS and cookie consent but lacks explicit security headers and incident response disclosures. Overall, the website is trustworthy and well-maintained, with clear contact information and subsidiary links.