Security Directory

M

Marburger Bund

marburger-bund.de

62

Marburger Bund is a prominent German professional association representing physicians, focusing on advocacy and support for medical professionals. The website serves as the federal association's online presence, targeting German-speaking physicians and healthcare stakeholders. The site is built on Drupal 11, reflecting a modern and maintainable technical infrastructure. It incorporates a consent management platform (Usercentrics), demonstrating compliance efforts with GDPR regulations. However, explicit privacy policies and terms of service were not detected in the provided content, indicating areas for improvement in transparency and compliance documentation. Security posture is moderate, with HTTPS likely enabled and consent management in place, but lacking visible security headers and vulnerability disclosure mechanisms. Overall, the website is professional, trustworthy, and well-targeted to its audience, with room to enhance privacy and security documentation.

M

med update GmbH

med-update.com

60

med update GmbH is a German-based company specializing in medical education, offering update seminars and digital learning solutions primarily for healthcare professionals. Established in 2004, it holds a solid market position within the German-speaking medical education sector, providing a range of seminar programs and cooperating with medical societies and partners. The website reflects a professional and consistent brand image with a focus on delivering relevant medical content and services to its target audience. Technically, the site is built on WordPress with a mature technology stack including popular plugins for SEO, analytics, and GDPR compliance. The infrastructure is moderate in performance with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is strong with clear privacy and cookie policies and GDPR-aligned consent management. Overall, the website is trustworthy and professionally maintained, with no critical security or content safety concerns detected.

T

Tourismus und Stadtmarketing Husum GmbH

nordsee-congress.de

49

Nordsee Congress is a regional event and tourism marketing organization focused on promoting Husum, Germany as a premier destination for conferences, trade fairs, and congresses. The website provides comprehensive information about venues, hotels, event planning services, and local attractions, targeting event organizers and business travelers. The organization appears established with over 25 years of experience in hosting large events, supported by professional content and a consistent brand presence. Technically, the website uses a modern tech stack including HTML5, CSS3, JavaScript, Google Analytics, and Google Tag Manager, with a CMS likely based on LIS CMS. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Cookie consent is implemented with an opt-in mechanism, reflecting good privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which could be improved to enhance trust and compliance. Contact information is clearly provided, including email, phone, and social media channels, supporting business credibility. Overall, the website is professional, trustworthy, and well-suited for its target audience, with room for improvement in security transparency and accessibility compliance.

P

PerfGrid

hosting4real.net

49

PerfGrid is a newly established web hosting provider specializing in high-performance shared hosting solutions tailored for small businesses and entrepreneurs. The company offers a range of hosting plans including Grid Hosting and cPanel Hosting, along with domain registration services. Their market position is focused on delivering reliable, secure, and affordable hosting with a strong emphasis on performance and ease of use. The website content is professionally designed, mobile-optimized, and provides clear pricing and feature information to its target audience. From a technical perspective, PerfGrid employs a modern technology stack including LiteSpeed Web Server, MariaDB, PHP 7.3+, Redis caching, and an in-house control panel, supplemented by cPanel for certain plans. The infrastructure supports HTTP/2 and HTTP/3 protocols, and the site uses Livewire and Tailwind CSS frameworks. Performance is fast, and the site is well-optimized for SEO and accessibility. Security posture is solid with HTTPS enforced, clientTransferProhibited domain status, multiple daily backups, spam filtering, and integration with Patchstack for WordPress vulnerability mitigation. However, the absence of DNSSEC, security headers, and explicit security or incident response policies indicates room for improvement. Privacy compliance is weak due to missing privacy and cookie policies and lack of GDPR indicators. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

D

danielvarberg.com

danielvarberg.com

56

DanielVarberg.com is a personal website and blog operated by an individual, providing content and insights primarily targeted at general internet users interested in the blog's topics. The website is built on WordPress with a child theme and hosted by Simply within the EU/EØS region, ensuring compliance with GDPR and data protection regulations. The site employs modern analytics and tracking tools such as Google Analytics, Amplitude, and Stape.io, alongside Cookiebot for consent management, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled. Privacy policies are comprehensive and clearly presented in Danish, demonstrating a commitment to regulatory compliance.

N

Norton Rose Fulbright

nortonrosefulbright.com

79

Norton Rose Fulbright is a globally recognized law firm offering comprehensive legal services across various sectors including energy, infrastructure, and financial institutions. The website reflects a professional and enterprise-level digital presence, targeting corporate clients and legal professionals. The firm leverages modern web technologies and third-party services such as Cookiebot for consent management and Google Analytics for visitor insights, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and cookie consent mechanisms, although explicit security headers and incident response contacts are not evident in the provided data. The absence of WHOIS registration details is a minor concern but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include enhancing transparency with clear privacy and security policies, publishing a security.txt file, and adding explicit security headers to further strengthen the security posture.

CMS Legal Services EEIG operates an international law firm website focused on Germany, providing a wide range of legal and tax advisory services. The firm targets business clients requiring expertise in areas such as corporate law, banking, compliance, dispute resolution, and various industry sectors including automotive, energy, and healthcare. The website reflects a mature and professional market position with multiple offices in Germany and abroad, supporting a large enterprise scale. Technically, the website employs modern web technologies including Bootstrap for responsive design, Piwik PRO for analytics, and is hosted behind Cloudflare DNS services. The site demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers and DNSSEC are not enabled, indicating room for improvement in security hardening. From a security perspective, the site uses HTTPS and has domain transfer protections in place, but lacks visible security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or blocking mechanisms were detected, and the domain WHOIS data aligns well with the business identity, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence for CMS Legal Services EEIG, with recommendations to enhance privacy compliance, security policies, and DNS security to further strengthen its posture.

T

TAUW

tauw.com

57

TAUW is an established environmental consultancy firm focused on shaping a vital living environment through expert solutions and partnerships. The company targets businesses and organizations requiring environmental and sustainability consulting services, positioning itself as a reputable international player in the energy and environmental sectors. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive privacy and cookie compliance mechanisms. Technically, the site employs modern web technologies including Google Analytics, Google Tag Manager, Cookiebot for consent management, and Sooqr for search functionality, indicating a well-integrated digital infrastructure. Security posture is strong with HTTPS enforced and multiple security headers present, although the absence of a public security policy or incident response contact is noted. The lack of WHOIS data is unusual but does not detract significantly from the site's legitimacy given the professional content and compliance features. Overall, the website presents a trustworthy and professional image suitable for its business domain.

F

FAIR AUDIT GmbH Wirtschaftsprüfungsgesellschaft

fair-audit.de

61

FAIR AUDIT GmbH is a professional auditing and consultancy firm based in Hamburg, Germany, specializing in auditing, tax consultancy, reporting, and business consulting services for medium-sized companies across various industries. The company is positioned as a reliable and competent partner with a clear focus on client needs and transparency. Their affiliation with JPA International enhances their credibility and international reach. Technically, the website is built on a modern WordPress platform with popular plugins and frameworks, ensuring good performance and mobile optimization. Security measures include HTTPS, GDPR-compliant cookie consent, and Google reCAPTCHA integration, although explicit security policies and incident response contacts are not present. Overall, the website reflects a professional and trustworthy business with a solid digital presence.

N

Noerr

noerr.com

76

Noerr is a prominent European law firm specializing in corporate legal advisory services, including finance, M&A, regulatory compliance, and real estate. The website reflects a mature digital presence with professional design, clear navigation, and rich content such as legal insights, briefings, and press releases targeting corporate clients and legal professionals. The technical infrastructure leverages modern web technologies including React, Next.js, and Material-UI, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data introduces some uncertainty about domain registration transparency, but the overall website professionalism and content quality support the legitimacy of the business. Strategic recommendations include publishing a dedicated security policy, incident response information, and improving WHOIS transparency to enhance trust.

J

JLL

jll.de

75

JLL is a global leader in real estate services, offering a comprehensive portfolio of services including investment sales advisory, project management, asset management, and sustainability consulting. The company targets investors, property owners, and tenants across local, national, and international markets. Their website is professionally designed, localized for the German market, and demonstrates a strong commitment to privacy and compliance with GDPR. Technically, the site leverages Adobe Experience Manager as its CMS, integrates advanced analytics and consent management tools, and employs modern web technologies to ensure a responsive and accessible user experience. Security posture is robust with HTTPS enforcement, security headers, and cookie consent mechanisms, although explicit security policy and incident response information are not publicly detailed. The domain WHOIS data is unavailable, which reduces transparency but does not detract from the overall legitimacy given the brand's global presence. Strategic recommendations include publishing a dedicated security policy, incident response contacts, and a vulnerability disclosure program to enhance trust and compliance.

D

Deutschlandfunk Kultur

deutschlandfunkkultur.de

60

Deutschlandfunk Kultur is a prominent German cultural media platform providing high-quality journalism, cultural debates, and podcasts. It operates under the Deutschlandradio umbrella, serving a broad audience interested in culture, politics, music, and literature. The website demonstrates a professional and consistent brand presence with rich content and multimedia offerings. Technically, the site uses modern web technologies and is hosted on reputable infrastructure, ensuring reliable performance and accessibility. Security posture is strong with HTTPS enforcement and meta verification tags, although explicit security headers and privacy policies are lacking. The absence of visible privacy and cookie policies, as well as contact information, represents a compliance gap. Overall, the site is trustworthy and well-positioned in the media sector but should enhance privacy transparency and security disclosures.

Danacord is a specialized classical music record label and e-commerce platform focusing on Danish and other classical composers. The website offers a webshop for purchasing physical and digital music products, supported by a WordPress WooCommerce infrastructure. The site is functional but marked as under construction, with a recommendation to visit their Danish catalogue site for full listings. Technically, the site uses modern CMS and e-commerce frameworks but lacks some advanced security headers and cookie consent mechanisms. The domain registration is consistent and legitimate, supporting the business's credibility. Security posture is moderate with room for improvement in DNSSEC and security policies. Overall, the site presents a niche, small-sized business with a focused target audience and moderate digital maturity.

D

Designers Inn | Premium WordPress Themes

designers-inn.de

9

Designers Inn is a small German-based business specializing in premium WordPress themes and providing German-language support, workshops, and SEO/online marketing tips targeted primarily at self-employed professionals and small businesses. The website is built on WordPress using the Divi theme and several plugins to enhance functionality, including video optimization and advanced tab modules. The technical infrastructure is modern and includes CDN usage and analytics integration, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks comprehensive privacy and security policies, which are critical for GDPR compliance. No blocking or WAF mechanisms interfere with content accessibility, allowing full analysis.

T

Tourismus und Stadtmarketing Husum GmbH

husum-tourismus.de

10

The website www.husum-tourismus.de serves as the official tourism portal for Husum and the Husumer Bucht region in Germany. It provides comprehensive information on accommodations, events, cultural activities, and travel services, targeting tourists and visitors interested in the North Sea area. The business operates as a regional tourism marketing organization, facilitating bookings and promoting local attractions. The site demonstrates a consistent brand presence and professional content quality, supported by active social media channels and clear contact information. Technically, the website employs a modern JavaScript stack including Matomo Tag Manager for analytics and Consentmanager.net for GDPR-compliant cookie management. It is built on the LIS CMS platform and hosted with domain control services linked to GoDaddy. The site is mobile-optimized, accessible, and SEO-friendly, with moderate performance. However, security headers are not explicitly detected, suggesting room for improvement in security hardening. From a security perspective, the site uses HTTPS and implements a consent mechanism for cookies, reflecting good privacy compliance. No critical vulnerabilities or exposed sensitive data were found. However, the absence of a published security policy or incident response contact limits transparency. The WHOIS data aligns with a legitimate regional tourism entity, with no suspicious registration patterns. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security posture.

A

Advantic Systemhaus GmbH

husum.org

45

The website www.husum.org serves as the official municipal portal for the city of Husum, Germany. It provides information on tourism, local economy, municipal services, and community resources. The site is primarily targeted at residents, tourists, and local businesses, offering essential public information and links to city services. The business model is that of a government entity providing public service information, with Advantic Systemhaus GmbH credited as the author and publisher of the site content. From a technical perspective, the site employs a modest technology stack including jQuery 1.10.2, Flexslider, and Slicknav for UI components, with a likely proprietary CMS (IKISS). The site shows basic mobile optimization and SEO practices but uses somewhat outdated libraries and lacks advanced accessibility features. Performance is moderate, with no evident advanced hosting or platform details. Security posture is limited based on the provided data. There is no explicit evidence of HTTPS enforcement or security headers, and no visible cookie consent mechanism despite GDPR applicability. The WHOIS data is unavailable due to a malformed query response, which reduces trust in domain registration transparency. No contact emails or phone numbers are listed on the homepage, and no incident response or security policies are published. Overall, the site is functional and trustworthy as a government information portal but would benefit from improved security practices, updated technical components, and enhanced privacy compliance measures. The lack of WHOIS data and security headers are notable gaps that should be addressed to improve trust and security posture.

K

Kassenärztliche Vereinigung Schleswig-Holstein

ekvsh.de

56

The website ekvsh.de serves as a secure member login portal for the Kassenärztliche Vereinigung Schleswig-Holstein, a regional healthcare association in Germany. It provides access to various healthcare-related services and applications, primarily targeting medical practitioners and their staff. The portal integrates with official KBV and KV-SafeNet services and offers remote support via TeamViewer Quicksupport. The site is built using JavaServer Faces with PrimeFaces and jQuery, reflecting a moderately modern technical infrastructure with responsive design for mobile devices. However, it lacks visible privacy and cookie policies, and no security headers are detected in the HTML content, indicating room for improvement in security and privacy compliance. Contact information is limited to a telephone hotline for technical support, with no email or social media contacts provided. Overall, the site appears legitimate and professionally maintained, but enhancements in privacy transparency and security hardening are recommended.

S

schweitzer media gmbh

wir-lieben-recycling.de

48

Wir lieben Recycling is a German regional environmental campaign website focused on educating the public about proper waste separation and recycling processes. It provides educational materials, news updates, and organizes events such as a video contest to engage the community. The website is professionally designed, mobile-optimized, and uses WordPress CMS with modern front-end technologies including jQuery and slick sliders. It integrates Usercentrics for GDPR-compliant consent management and uses Google Analytics with IP anonymization to track user engagement minimally. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response contacts are not published. The domain is hosted by Timme Hosting and WHOIS data shows no suspicious patterns, indicating legitimacy. Overall, the site is a trustworthy, well-maintained resource for environmental education in Schleswig-Holstein, Germany.

Campus GmbH is a specialized event management company founded in 2003, focusing on organizing national and international medical congresses and webinars. The company targets medical professional societies and healthcare event organizers, offering tailored organizational solutions and technical webinar support. Their market position is that of a niche provider with a strong reputation in the Austrian healthcare event sector. The website reflects a professional and consistent brand image with clear service descriptions and contact information. Technically, the site is built on Joomla! CMS with modern libraries such as Bootstrap 5, jQuery, and integrates Google reCAPTCHA Enterprise for form security. Performance and mobile optimization are good, though accessibility is basic. Security posture is solid with HTTPS and reCAPTCHA but lacks some security headers and explicit security policies. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. Overall, the site is trustworthy, safe, and professionally maintained.

M

med update GmbH

intensiv-update.com

55

The website intensiv-update.com represents med update GmbH, an established German company specializing in organizing annual intensive care medicine update seminars. The platform targets medical professionals seeking the latest clinical research insights in intensive care. The business is well-positioned with recognized scientific leadership and partnerships with reputable medical societies. Technically, the site is built on WordPress with modern plugins for SEO, analytics, and GDPR compliance, delivering a professional and user-friendly experience. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and DNSSEC are recommended. Overall, the site demonstrates a mature digital presence with good privacy compliance and trustworthy business information.

V

vermed G.m.b.H.

vermed.at

54

vermed G.m.b.H. is a specialized Austrian company established in 1993, focusing on organizing and managing medical conferences, congresses, and educational events. With over 30 years of experience, the company positions itself as a professional and innovative partner in the healthcare event sector, offering end-to-end services from planning to execution and supporting medical publications. The website reflects a mature digital presence built on WordPress, enhanced with SEO and GDPR compliance plugins, indicating a solid technical foundation. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, although additional security policies and headers could improve resilience. Overall, the site is trustworthy, professionally designed, and compliant with relevant privacy regulations, supporting the company's credibility in its niche market.

The website www.wit-kongress.at is currently inaccessible due to a Cloudflare security challenge page employing Turnstile captcha verification. This prevents access to any meaningful content, metadata, or business information. Consequently, no business overview, market position, or key services can be determined. The technical infrastructure is limited to Cloudflare's security platform, with no visible CMS or additional technologies. Security posture cannot be assessed beyond the presence of Cloudflare's WAF protection. Overall, the site is effectively blocked from analysis, resulting in a low AI score and unknown compliance or trustworthiness.

Ably is a mature and well-established realtime platform founded in 2002, specializing in streaming data instantly between services and end-user devices. It offers a suite of developer-focused products such as Ably Pub/Sub, Chat, LiveObjects, and LiveSync, targeting businesses that require scalable, reliable, and low-latency realtime messaging infrastructure. The company positions itself as a leader in the realtime messaging market, supporting over 2 billion connected devices monthly with a strong uptime record. Technically, the website is built on modern frameworks like Gatsby and React, hosted with Cloudflare DNS and Amazon Registrar, and integrates various marketing and analytics tools including Google Tag Manager, Intercom, and HubSpot. The site is fast, mobile-optimized, and accessible with a professional design and clear navigation. Security-wise, the site enforces HTTPS, implements security headers, and uses domain status locks to prevent unauthorized changes. However, DNSSEC is not enabled, and no explicit privacy policy or terms of service pages were found, which are areas for improvement. Contact information is limited to a contact form without direct emails or phone numbers. Overall, Ably demonstrates a strong security posture and business credibility, but could enhance privacy compliance and transparency to further build trust.

8

8devs

aiddevs.com

69

8devs is a small German company specializing in app development for the healthcare sector, rescue services, and occupational safety. Their business focuses on delivering native mobile applications designed to improve health and well-being, with notable products such as NeoDiary, HeroShift, and Verbandbuch. The company presents itself professionally with a well-structured website and clear contact information, targeting healthcare professionals and related audiences. Technically, the website is built on WordPress using Elementor and Bootstrap, hosted by HTTP.NET INTERNET GMBH, and shows moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced DNS security and comprehensive HTTP security headers. Privacy compliance is weak due to missing privacy and cookie policies, and no incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professional but would benefit from enhanced compliance and security transparency.

S

Siegerland-Flughafen GmbH

siegerland-airport.de

47

Siegerland-Flughafen GmbH operates a regional airport in Germany, providing aviation services including pilot training, charter flights, business facilities, and community engagement. The website targets pilots, business partners, and local travelers, positioning itself as a key regional transportation hub. The digital infrastructure is built on WordPress with modern plugins and themes, offering a good user experience with mobile optimization and clear navigation. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking a dedicated security policy or incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR regulations.

S

Signal

signal.me

61

Signal is a well-established nonprofit organization providing a secure, privacy-focused messaging platform widely recognized for its strong encryption and open-source approach. The website signal.me serves as a contact and redirect landing page, linking users to the main signal.org domain and app download resources. The business is positioned as a leader in secure communications, targeting privacy-conscious users globally. The domain and website content align with the organization's mission and market presence. Technically, the site uses modern CSS frameworks like Bulma and JavaScript, hosted behind Cloudflare DNS services. The site is mobile optimized with responsive navigation and basic accessibility features. However, some security best practices such as DNSSEC and security headers are not implemented on this domain. The site uses HTTPS with good SSL configuration, ensuring secure connections. From a security perspective, the website shows good domain registration protections and no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong on the main domain, though this subdomain lacks explicit cookie consent mechanisms. No forms or tracking scripts are present, minimizing data collection risks. Contact information is limited to a media inquiry email, with no phone or physical address listed. Overall, the website is trustworthy, professional, and safe for general audiences. Recommendations include enabling DNSSEC, adding security headers, and publishing a vulnerability disclosure policy to enhance security posture and transparency.

S

SG Flensburg-Handewitt

sg-flensburg-handewitt.de

50

SG Flensburg-Handewitt operates as a professional handball club based in Germany, providing comprehensive team, fan, and business engagement services through their website. The site serves as a hub for fans, sponsors, and the local community, offering schedules, news, fan club information, and ticketing options. Their market position is that of an established sports entity with a medium-sized operational scale. Technically, the website is built on TYPO3 CMS, integrates modern cookie consent management via Cookiebot, and uses Google Tag Manager for analytics and marketing. Hosting is provided by SchlundTech, a reputable provider. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers could be improved. Privacy compliance is strong, with clear GDPR adherence and user consent controls. Overall, the website is professional, trustworthy, and well-structured, supporting a positive user experience and business credibility.

M

Marina Flensburg GmbH & Co. KG

marinaflensburg.de

48

Marina Flensburg GmbH & Co. KG operates a marina located in Flensburg, Germany, providing essential yachting services such as berth rental, winter storage, boat fueling, crane access, and harbor amenities. The website positions itself as a local, customer-focused marina with a strong emphasis on comfort and convenience for boat owners. The target audience includes yachting enthusiasts and visitors to the Flensburg harbor area. The business model revolves around providing marina infrastructure and services to boat owners and seasonal residents. Technically, the website is built on Joomla CMS with Yootheme Pro and UIkit frameworks, leveraging Leaflet.js for interactive maps and Google reCAPTCHA for form security. The site demonstrates good digital maturity with responsive design, accessibility features, and SEO optimization. Performance is moderate, with modern technologies and proper meta tags implemented. From a security perspective, the site enforces HTTPS, includes security headers, and uses reCAPTCHA to protect forms from spam. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy and cookie consent mechanism. However, explicit security policies and incident response contacts are absent. Overall, the website is professional, trustworthy, and well-maintained, reflecting a legitimate and customer-oriented business. Strategic recommendations include adding explicit security and incident response policies, publishing a vulnerability disclosure statement, and providing data protection officer contact details if applicable.

M

Mädchenzentrum Osnabrück

maedchenzentrum-os.de

47

Mädchenzentrum Osnabrück is a German non-profit organization dedicated to supporting girls and young women through various counseling and community programs. Their website reflects a clear focus on youth empowerment and social support, offering services such as open meetings, counseling on sensitive topics, and projects aimed at girls' perspectives. The organization maintains a local presence in Osnabrück and partners with related entities such as Haus Neuer Kamp e.V. and the Diakonisches Werk evangelischer Kirchen in Niedersachsen for data protection and operational support. Technically, the website is built on Joomla CMS with modern UI frameworks like UIkit and Yootheme, ensuring a responsive and user-friendly experience. The site employs standard privacy and cookie consent mechanisms compliant with GDPR, including detailed privacy policies and explicit user consent for cookies. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in implementing security headers and formal incident response disclosures. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission, with no indications of malicious activity or content safety concerns.

M

Meerzeit Immobilien

meerzeit-immobilien.de

46

Meerzeit Immobilien operates as a specialized real estate brokerage focusing on exclusive and luxury properties in the Ostseeresort Olpenitz and surrounding Baltic Sea region. Their website showcases a portfolio of high-end villas, apartments, and holiday homes, targeting affluent buyers and sellers seeking premium maritime real estate. The business model centers on exclusivity, discretion, and personalized service, positioning them as a niche player in the regional luxury real estate market. Technically, the website is built on Joomla CMS with Yootheme templates and UIkit framework, delivering a modern and responsive user experience with good SEO and mobile optimization. Security posture is adequate with HTTPS enabled and CSRF protections, but lacks advanced security headers and explicit policies. Privacy compliance is weak due to missing privacy and cookie policies, and contact information is limited to a newsletter subscription form without direct emails or phone numbers. Overall, the site is professional and trustworthy but would benefit from enhanced compliance and security transparency.

N

NIRO Petersen

niro-petersen.de

55

NIRO Petersen is a specialized German manufacturer of high-quality stainless steel boat fittings and accessories, operating since 1965. The company targets yacht and boat owners, maritime industry professionals, and ship outfitters, offering custom-made and contract manufacturing services. The website reflects a mature market position with clear branding, comprehensive product and company information, and certifications that enhance trust. Technically, the site is built on Joomla CMS with modern UIkit and Yootheme frameworks, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS and CSRF protections, though some security headers and explicit policies could be improved. Privacy compliance is well addressed with clear cookie and privacy policies. Overall, the website is professional, trustworthy, and well-aligned with the company's business model and market presence.

R

Reha Zentrum Flensburg

rehaflensburg.de

57

Reha Zentrum Flensburg is a well-established ambulatory rehabilitation and physiotherapy center located in Flensburg, Germany, with a history dating back to 1993. The website clearly targets patients seeking rehabilitation services, emphasizing local accessibility and professional care. The business positions itself as one of the oldest and northernmost EAP centers in Germany, highlighting its experience and competence. Technically, the website is built on Joomla CMS with modern UIkit and Yootheme frameworks, incorporating Leaflet.js for map functionality. The site is mobile-optimized and presents content in a clear, professional manner. Performance is moderate with good SEO practices but lacks some advanced accessibility features. From a security perspective, the site uses HTTPS with a good SSL configuration and employs CSRF tokens in forms, but lacks important security headers and a cookie consent mechanism. No vulnerability disclosure or incident response information is provided, which could be improved to enhance trust and compliance. WHOIS data aligns well with the business claims, showing a consistent and legitimate domain registration. Overall, the website is professional, trustworthy, and suitable for its healthcare audience, but could benefit from enhanced privacy compliance and security best practices to further strengthen its posture.

D

Dainat GmbH

dainat.de

48

Dainat GmbH is a small German company specializing in roofing and facade services, including roof renovation, insulation, metalwork, solar installations, and roof windows. The company positions itself as a regional expert with a focus on quality, experience, and customer service. Their website is built on Joomla CMS with a modern UIkit framework and Yootheme template, providing a professional and mobile-optimized user experience. The site uses HTTPS and includes structured data for SEO but lacks some advanced security headers and cookie consent mechanisms. Contact information is clearly presented, enhancing business credibility. Overall, the website reflects a mature digital presence suitable for a small regional service provider.

L

Ljiljana Lončarić Peharda

ljiljanaloncaricpeharda.com

43

The website ljiljanaloncaricpeharda.com serves as a personal portfolio for the artist Ljiljana Lončarić Peharda, showcasing her paintings, illustrations, music, and blog content. It targets art enthusiasts and potential clients interested in her creative work. The business model is primarily personal branding and portfolio presentation, with a niche market position in the art domain. The website is small scale, founded around 2017, and primarily serves a Croatian audience with multilingual support via WPML.

D

DAR BLUE d.o.o.

darblue.hr

41

Darblue.hr is the online presence of DAR BLUE d.o.o., a Croatian company specializing in the cultivation and sale of fresh blueberries and other berries. The company operates a 12-hectare plantation with 80,000 plants, focusing on high-quality domestic blueberry production with extended harvest seasons through selected varieties. Their business model centers on retail and wholesale distribution of fresh and packaged berries, maintaining cold chain logistics to ensure product quality. The website reflects a professional and consistent brand image, with clear contact information and compliance with GDPR regulations. Technically, the site is built on WordPress with popular plugins like WPBakery and Slider Revolution, and uses Google Analytics for visitor tracking. While the site is generally well-implemented, some outdated JavaScript libraries and lack of explicit security headers present moderate security concerns. No blocking or WAF mechanisms interfere with content access. The domain registration data aligns well with the business claims, supporting legitimacy. Overall, the site demonstrates a solid digital presence for a small agricultural business with good trust indicators and compliance practices.

P

Pro Integris

prointegris.hr

52

Pro Integris is a specialized engineering company established in 2007, focusing on power plants, substation automation, and renewable energy sectors. The company positions itself as a contributor to sustainable electrical engineering solutions, offering a range of services including design, relay protection, ICT, power facilities, training, and cyber security tools. Their market presence is supported by ISO certifications and EU financing, indicating a credible and quality-driven business model. Technically, the website is built on WordPress with modern plugins and themes, supporting multilingual content and GDPR compliance. The infrastructure is moderate in performance with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are absent. Overall, the security posture is solid with no visible vulnerabilities or exposed sensitive data. The business credibility is high, supported by clear contact information, certifications, and professional content. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further strengthen trust and compliance. The website content is safe for general audiences, with no adult or questionable content detected. The domain registration data aligns well with the business claims, reinforcing legitimacy and trustworthiness.

L

Livens

livens.co

61

Livens is a Croatia-based digital solutions provider specializing in web development, booking systems, CMS, and dashboards. The company targets businesses seeking to establish or enhance their digital presence with innovative and engaging digital experiences. Their portfolio includes projects in luxury sailing, vacation rentals, and financial services, positioning them as a niche player in the technology sector. The website demonstrates a modern technical infrastructure built on Next.js and React, hosted likely on Vercel, ensuring fast performance and mobile optimization. Security posture is strong with HTTPS, security headers, and privacy compliance mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, Livens presents a professional and trustworthy digital presence with room for enhanced security transparency.

T

Turistička zajednica Zagrebačke županije

visitzagrebcounty.hr

44

Visit Zagreb County is the official tourism board for Zagreb County, Croatia, promoting the region's cultural, natural, and gastronomic attractions. The website serves as a comprehensive portal for tourists, offering information on events, active holidays, health tourism, and sustainable tourism initiatives. The organization positions itself as a regional authority with a focus on enhancing visitor experience and promoting local heritage. Technically, the website is built on WordPress using the Elementor page builder, with multilingual support via TranslatePress. It employs modern web technologies and includes spam protection mechanisms. The site is hosted by Plus Hosting Grupa d.o.o., a Croatian hosting provider, and uses HTTPS to secure communications. Performance and mobile optimization are good, though there is room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses spam protection but lacks explicit security headers and a cookie consent mechanism, which are important for GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with the website's Croatian origin and business purpose, indicating legitimacy. Overall, the website is professional, trustworthy, and well-positioned to serve its audience. Strategic improvements in privacy compliance and security hardening would enhance its posture and user trust.

F

Frutiko

frutiko.cz

48

Frutiko.cz is a Czech Republic-based e-commerce retailer specializing in edible flower bouquets, classic flowers, cakes, and gift baskets. The company targets general consumers seeking unique and fresh gift options with delivery services across Prague, Brno, and the wider Czech Republic. The website is professionally designed, multilingual, and offers a seamless shopping experience with clear navigation and mobile optimization. Technically, the site leverages modern web technologies including jQuery, Bootstrap, and multiple analytics and marketing tools such as Google Analytics, Facebook Pixel, and Hotjar, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though the absence of a published security policy and incident response contact suggests room for improvement. The lack of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional presentation and comprehensive privacy and cookie policies. Overall, Frutiko.cz presents a trustworthy and well-managed online retail platform with good compliance and security practices.

C

CompanyWall business

companywall.com

47

CompanyWall business operates a financial assistant platform providing innovative classification and analysis of business and financial data to empower companies in multiple European countries. The company offers credit ratings, credit reports, and custom financial data services, supported by regional and local platforms and a Web API for data access. The business is positioned as a trusted regional player with over a decade of experience and multiple offices across Europe. Technically, the website is built on WordPress with Elementor, uses HTTPS and Google reCAPTCHA for security, and demonstrates good mobile optimization and SEO practices. Security posture is solid but could be improved with additional security headers and cookie consent mechanisms. Overall, the domain registration and WHOIS data align well with the business claims, supporting legitimacy and trustworthiness.

M

medixum.de

medixum.de

11

medixum.de is a professional online and offline medical education platform operated by the Akademie des Deutschen Ärzteverlages, targeting physicians and medical assistants in Germany. It offers CME-certified courses across multiple medical specialties with flexible learning formats including e-learning, blended learning, and in-person seminars. The platform is well-integrated with German medical associations, ensuring high-quality and relevant content. Technically, the website is built on WordPress with WooCommerce and uses modern plugins for SEO, payment processing, and consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, Content-Security-Policy headers, and cookie consent mechanisms, though additional security headers and incident response disclosures could enhance trust. Overall, the site is professional, trustworthy, and compliant with GDPR, serving a specialized healthcare education market effectively.

D

Deutscher Ärzteverlag

aerzteverlag.de

38

Deutscher Ärzteverlag GmbH operates as a leading medical specialist publisher in Germany, providing a wide range of medical, dental, and healthcare publications and services. The company targets healthcare professionals and institutions, offering products such as journals, job market platforms, and continuing education programs. Their market position is strong within the German healthcare publishing sector, supported by a consistent brand presence and a professional website. Technically, the website is built on WordPress with modern technologies including jQuery, Bootstrap, and Font Awesome, and integrates Cookiebot for GDPR-compliant cookie consent management. The site demonstrates good SEO and accessibility practices, with a responsive design suitable for mobile users. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. However, explicit contact emails and phone numbers are not directly visible, and no terms of service or security policies are published. Overall, the website reflects a mature digital presence with room for enhanced transparency in security and incident response policies.

T

Themegraphy

themegraphy.com

44

Themegraphy is a niche website focused on curating and distributing high-quality free and premium WordPress themes. Established in 2013, it targets WordPress users seeking well-designed themes for blogs, portfolios, e-commerce, and business sites. The site offers theme demos and downloads, positioning itself as a trusted resource within the WordPress theme ecosystem. Technically, the site runs on WordPress 6.6.4 with common plugins such as All in One SEO, Jetpack, Contact Form 7, and qTranslate-XT for multilingual support. Hosting and domain registration are consistent with a Japanese-based small technology content provider. The website demonstrates good content quality, mobile optimization, and SEO practices, though performance is moderate.

M

mêtis

metis.fr

10

mêtis is a French communication agency specializing in supporting enterprises undergoing transformation with services including strategy, branding, campaigns, and digital solutions. The website presents a professional and modern digital presence built on WordPress with SEO and page builder plugins, indicating a mature digital infrastructure. Security posture is adequate with HTTPS enabled but lacks advanced security headers and visible privacy or cookie policies, which are areas for improvement. The absence of WHOIS data for the domain raises some concerns about domain legitimacy, though the website content and contact information suggest a legitimate business. Overall, the site is well-designed and user-friendly but would benefit from enhanced privacy compliance and security transparency.

D

Dobrovolnické centrum, z.s.

dcul.eu

41

Dobrovolnické centrum, z.s. is a Czech non-profit organization with a 25-year history dedicated to connecting volunteers with those in need across various social sectors. The organization operates volunteer programs supporting children, youth, seniors, and disabled persons, and maintains international partnerships to foster volunteering in Europe. Their key services include mentoring programs, youth clubs, and cultural initiatives, positioning them as a trusted regional non-profit with accreditation in sports and cultural volunteering. Technically, the website is built on WordPress with modern plugins and good mobile optimization, hosted by WEDOS Internet, a.s. Security posture is solid with HTTPS enabled, though lacking security headers and formal privacy/cookie policies, indicating areas for compliance improvement. Overall, the site is professional and trustworthy, with clear contact information and active social media presence.

M

mediaform, s.r.o.

mediaform.cz

45

mediaform, s.r.o. is a boutique marketing, UX, and design studio based in Prague, Czech Republic, founded in 2011. The company specializes in creating technologically advanced and aesthetically pleasing digital applications and presentations, focusing on effective user experience and attention to detail. Their client portfolio includes notable brands such as L'Oréal, Marks & Spencer, and the Ministry of Interior of the Czech Republic, indicating a strong market position within the media and marketing sector. The website reflects a professional and consistent brand image targeting businesses seeking specialized marketing and design services. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and integrates analytics tools like Google Analytics and Facebook Pixel. Hosting is provided by VAS Hosting, with domain registration dating back to 2011, consistent with the company's founding year. The site is mobile optimized and provides a good user experience, though accessibility features are basic. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks important security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies and consent mechanisms. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security practices.

E

:: ERLEBE DEINEN MARKT ::

erlebedeinenmarkt.org

44

The website erlebedeinenmarkt.org serves as a promotional platform for the "Erlebe Deinen Markt" campaign, which supports and celebrates local weekly markets primarily in Germany and Europe. The campaign emphasizes fresh produce, community engagement, and cultural experiences, involving around 400 markets and international participation. The site content is informative and targeted at consumers interested in local market culture and events. Technically, the website is built with basic HTML, CSS, and JavaScript without modern frameworks or CMS, resulting in moderate performance and poor mobile optimization. Security posture is weak due to lack of DNSSEC, security headers, and no visible HTTPS enforcement details. Privacy compliance is minimal as no privacy or cookie policies are present. Business credibility is moderate, supported by the campaign's longevity and partnerships, but contact information is not explicitly provided. Overall, the site is functional but requires improvements in security, privacy compliance, and technical modernization.

C

Consulting Service Sp. z o.o.

all-can.pl

40

All.Can Polska is a national non-profit initiative dedicated to improving oncology and hematology care efficiency in Poland. It operates as part of a global network aiming to influence healthcare policy and patient outcomes through expert collaboration and evidence-based recommendations. The website serves as an information and engagement platform targeting healthcare professionals, policymakers, and patient organizations. Technically, the site is built on WordPress with Elementor, employing modern web technologies and performance optimizations. Security posture is adequate with HTTPS and cookie consent mechanisms, though security headers and vulnerability disclosures are absent. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, though it lacks explicit privacy policy documentation and direct contact information.

W

World Patients Alliance

worldpatientsalliance.org

10

World Patients Alliance is a global non-profit umbrella organization advocating for patient rights, safety, and access to quality healthcare worldwide. The organization hosts educational events, webinars, and campaigns to empower patients and patient organizations globally. Their website reflects a professional digital presence built on WordPress, leveraging modern plugins and SEO tools to engage their audience effectively. The technical infrastructure is solid with HTTPS, domain locking, and integration of analytics and event management tools. Security posture is good but could be improved by enabling DNSSEC and adding advanced security headers. Privacy compliance is basic, lacking cookie consent mechanisms and explicit terms of service. Overall, the website is trustworthy, well-branded, and serves its mission effectively.