Security Directory

A

ARD

ard.de

61

ARD is a major German public broadcasting organization providing a wide range of media services including news, sports, podcasts, and children's programming. The website serves as a portal linking to various ARD brands and partner broadcasters, reflecting a strong market position in the German media landscape. The business model is publicly funded broadcasting, targeting a general audience with diverse content offerings. Technically, the website uses modern web technologies such as React and is optimized for mobile devices, though some accessibility features could be improved. Security posture is moderate with no visible security headers or explicit policies, and privacy compliance is good with a comprehensive privacy policy but lacking a cookie consent mechanism. Overall, the site is professional and trustworthy, with strong business credibility but room for technical and security enhancements.

H

Hessischer Rundfunk

hr-rundfunkrat.de

59

The website hr-rundfunkrat.de represents the Rundfunkrat (Broadcasting Council) of the Hessischer Rundfunk, a public broadcasting entity in Germany. It serves as an oversight and governance body ensuring compliance with legal mandates and advising the broadcaster's management. The site provides comprehensive information on governance, meetings, committees, press releases, and contact options, targeting the general public and stakeholders interested in media oversight in Hessen. Technically, the site employs modern web technologies including Alpine.js, Modernizr, and Piano Analytics for analytics, with a CMS identified as hrcms-delivery 4.26.0. The hosting is managed via sec-provider.de, and the site is well-optimized for mobile and accessibility. Security measures include HTTPS, Content Security Policy, and polyfills for legacy browser support, though additional security headers could enhance protection. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is evident through a comprehensive privacy policy, cookie consent mechanisms, and GDPR adherence. Analytics usage is moderate with user privacy controls available. No incident response or vulnerability disclosure policies were found. Overall, the website is professional, trustworthy, and well-maintained, reflecting the public service nature of the organization. Strategic recommendations include enhancing security headers, maintaining up-to-date third-party libraries, and possibly publishing explicit security and incident response policies to further strengthen trust and compliance.

H

Hessischer Rundfunk

hr-bigband.de

59

The hr-bigband.de website represents the hr-Bigband, a prestigious jazz big band affiliated with Hessischer Rundfunk, a major German public broadcasting organization. The site provides comprehensive information about concerts, educational programs, media content, and news related to the band. It targets jazz enthusiasts and cultural audiences primarily in Germany. The business model focuses on cultural promotion and event organization within the public media sector. The website is professionally designed with consistent branding and rich content, reflecting a strong market position in the media and cultural domain.

H

Hessischer Rundfunk

hr-sinfonieorchester.de

59

The hr-sinfonieorchester.de website represents the official online presence of the hr-Sinfonieorchester, a classical symphony orchestra under the Hessischer Rundfunk media organization in Germany. The site offers comprehensive information about concerts, livestreams, educational programs, and media content, targeting classical music enthusiasts and cultural audiences. The business model focuses on cultural event promotion, education, and media dissemination, positioning the orchestra as a key regional cultural institution.

H

Hessischer Rundfunk

hr-fernsehen.de

57

Hessischer Rundfunk operates hr-fernsehen.de as a regional public broadcasting platform providing TV programming, video on demand, livestreams, recipes, and weather information primarily for the Hessen region in Germany. The website is professionally designed with excellent content quality and user experience, targeting a broad general audience. The technical infrastructure leverages modern JavaScript frameworks, analytics tools, and a custom CMS, hosted on secure servers with appropriate HTTPS and security headers. Privacy and cookie policies are comprehensive and GDPR compliant, reflecting a mature approach to data protection. Security posture is strong with no critical vulnerabilities detected, though some enhancements to security headers and explicit incident response policies could improve resilience. Overall, the website is trustworthy, well-maintained, and aligned with the organization's public service mission.

H

Hessischer Rundfunk

you-fm.de

63

YOU FM is a public radio station operated by Hessischer Rundfunk, serving a broad German audience with music, podcasts, events, and news. The website demonstrates a mature digital presence with modern technologies, responsive design, and rich multimedia content. It integrates social media and external news sources to enhance user engagement. The technical infrastructure is robust, leveraging custom CMS and advanced media players, ensuring good performance and accessibility. Security posture is solid with HTTPS and Content Security Policy, though some security headers could be improved. Privacy compliance is limited due to missing explicit privacy and cookie policies in the analyzed content. Overall, the site is trustworthy and professional, reflecting a reputable public broadcaster.

H

Hessischer Rundfunk

hr-inforadio.de

63

hr INFO is a professional public broadcasting information radio service operated by Hessischer Rundfunk, serving the Hessen region in Germany. The website offers news, analyses, opinions, podcasts, livestreams, and event information targeted at a general audience interested in regional and national current affairs. The site is well-branded and consistent with the parent organization's identity, reflecting a strong market position in regional media.

H

Hessischer Rundfunk

hr4.de

60

The website hr4.de is the official online presence of hr4, a radio station operated by Hessischer Rundfunk, a major public broadcaster in Germany. It targets the 50+ generation with positive lifestyle content, music, and community engagement. The site offers rich multimedia content including radio streaming, podcasts, recipes, and event information, reflecting a mature and well-established media entity. The branding and structured data confirm its authenticity and regional focus on Hessen, Germany. Technically, the site uses modern web technologies such as Alpine.js, Piano Analytics, and ARD Player, hosted on professional infrastructure with secure HTTPS connections and some security headers. However, explicit privacy and cookie policies are not detected in the provided content, which is a compliance gap. No security policy or incident response information is available, limiting transparency in security posture. Overall, the site is professionally designed, user-friendly, and trustworthy, but could improve privacy compliance and security disclosures.

H

Hessischer Rundfunk

hr3.de

64

The website hr3.de is the official online presence of hr3, a public radio station operated by Hessischer Rundfunk, serving the Hessen region in Germany. It offers a comprehensive range of services including music broadcasting, news updates, podcasts, event information, and traffic and weather reports. The site targets listeners in Hessen and provides rich multimedia content with a focus on regional relevance. The business model is that of a public broadcaster, supported by the parent organization Hessischer Rundfunk, with a strong market position in regional media.

H

Hessischer Rundfunk

hr2.de

52

The website hr2.de is the official online presence of Hessischer Rundfunk's hr2-kultur radio channel, a public cultural radio broadcaster in Hessen, Germany. It offers a rich variety of cultural programming including classical music, podcasts, audio on demand, and event information. The site is professionally designed with consistent branding and targets a general audience interested in cultural content. The business model is that of a public broadcaster, supported by the parent organization Hessischer Rundfunk.

H

Hessischer Rundfunk

hr1.de

68

The website www.hr1.de is the official online presence of hr1, a public radio program operated by Hessischer Rundfunk, a major public broadcaster in Hessen, Germany. The site offers a rich mix of content including radio programming, news, podcasts, events, and recipes, targeting the Hessen regional audience and German-speaking listeners. The business model is that of a public media service, focusing on providing entertainment and information with a strong regional identity. The website is professionally designed with consistent branding and high-quality content, reflecting a large and established media organization.

T

Tee & Gewürzecke Lux

tee-gewuerze-lux.de

46

Tee & Gewürzecke Lux is a small, well-established retail business based in Weißenburg, Germany, specializing in a diverse range of teas, spices, regional delicacies, and gift products. Founded in 1979, it enjoys a loyal local customer base and emphasizes personalized service and high-quality products. The website reflects this focus with clear product descriptions and social media integration but lacks advanced digital marketing or e-commerce features. Technically, the site is built with standard web technologies and hosted via a German provider, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled, but the absence of security headers and cookie consent mechanisms indicates room for improvement in compliance and protection. Overall, the business presents a trustworthy and professional image online, though enhancements in privacy compliance and security policies would strengthen its digital maturity.

The website stirlingmoss.de is a professionally designed informational site dedicated to the exclusive Mercedes-Benz SLR McLaren Stirling Moss (Z199) sports car. It targets enthusiasts and collectors interested in this limited edition vehicle, providing detailed descriptions, high-quality images, and downloadable manufacturer documentation. The site is hosted on German infrastructure and references Mercedes-Benz Group AG as the rights holder for images and content, lending credibility to the business representation. Technically, the site uses standard web technologies (HTML5, CSS3, JavaScript) with moderate performance and good mobile optimization. However, it lacks advanced security headers and visible privacy compliance mechanisms such as cookie consent banners. No contact or incident response information is provided, which limits user engagement and trust in security matters. Overall, the site is safe, free of adult or questionable content, and serves as a niche marketing and informational platform for a luxury automotive product.

OneTag operates an advertising system platform, targeting advertisers and businesses seeking advertising technology solutions. The website is minimalistic, providing basic information and links to a main homepage and privacy policy hosted on a related domain. The business appears small and focused on technology services related to advertising. The domain registration is consistent with the business age and purpose, indicating legitimacy. Technically, the website uses basic HTML and CSS without advanced frameworks or CMS detected. Hosting and DNS are managed via reputable providers, but the site lacks modern security features such as DNSSEC, security headers, and HTTPS enforcement visible in the provided data. The site is mobile responsive at a basic level but lacks SEO and accessibility optimizations. From a security perspective, the site does not expose sensitive data or use vulnerable libraries but lacks visible security best practices such as security headers and incident response information. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism or GDPR indicators. No contact or incident response information is provided, limiting trust and transparency. Overall, the website presents a low-risk profile but would benefit from enhanced security measures, improved privacy compliance, and richer business information to increase trustworthiness and professionalism.

M

MAGNET Werkstatt für Verständigung

demoslam.org

59

demoSlam.org is a German-based educational non-profit organization focused on facilitating dialogue and understanding among people with differing opinions through their demoSlam dialog format. The website presents a professional and consistent brand with clear descriptions of their services, events, and educational offerings. Their market position is niche, targeting individuals and organizations interested in social cohesion and dialogue facilitation. Technically, the site is built on the Tilda CMS platform, leveraging modern web technologies and providing a mobile-optimized experience. Security posture is adequate with HTTPS enforced and cookie consent implemented, though additional security headers and DNSSEC could improve resilience. Privacy compliance is supported by GDPR-consistent consent mechanisms and a privacy policy, though terms of service and security policies are absent. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

C

Chemours Company

opteon.com

70

The Opteon website represents a professional and well-maintained digital presence for the Opteon brand, which is a part of the Chemours Company. The business focuses on providing sustainable, high-performance refrigerants and specialty fluids with low global warming potential, targeting industrial and commercial sectors such as refrigeration, air conditioning, automotive, electronics, and specialty chemical applications. The website supports multiple languages, indicating a global market reach and a B2B business model. The content is relevant, well-structured, and aligned with the brand's sustainability messaging. From a technical perspective, the website employs modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Microsoft Application Insights for analytics and monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with proper meta tags and structured navigation. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit CSP headers were not confirmed in the HTML. The site includes a cookie consent mechanism and privacy policy consistent with GDPR compliance. Security-wise, no critical vulnerabilities or exposed sensitive data were detected. However, the absence of a public security policy, incident response information, or vulnerability disclosure page suggests room for improvement in transparency and security communication. The WHOIS data for the domain www.opteon.com is missing or unavailable, which is unusual but does not appear to impact the legitimacy given the strong corporate branding and association with Chemours. Overall, the website scores well in content quality, technical implementation, security posture, privacy compliance, and business credibility. Strategic recommendations include publishing a security policy and vulnerability disclosure, enhancing security header implementation, and ensuring WHOIS data transparency to improve trust and compliance further.

FOSSGIS e.V. organizes the FOSSGIS-Konferenz 2026, a leading conference in the German-speaking region focused on Free and Open Source Software for Geoinformation Systems, Open Data, and OpenStreetMap. The event targets users, developers, researchers, and enthusiasts in the GIS and open data community, providing a platform for knowledge exchange and networking. The conference is supported by multiple sponsors and academic partners, including the University of Göttingen. Technically, the website is built with standard HTML5 and CSS3, uses FontAwesome for icons, and is hosted on Schlundtech infrastructure. The site is well-structured, mobile-optimized, and SEO-friendly but lacks advanced frameworks or CMS indications. Security posture is moderate with no visible security headers or incident response policies, and no cookie consent mechanism is implemented despite GDPR relevance. Contact information is limited to an email address for conference organization. Overall, the website is professional and trustworthy but could improve in security and privacy compliance aspects.

The website amzcon.de presents itself as a German-language deal aggregator offering discounted products across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. The business model appears to be affiliate marketing, leveraging Amazon product links to generate revenue. The domain is currently marked as for sale, and WHOIS data indicates the domain is unregistered or expired, which raises concerns about the legitimacy and continuity of the business. Technically, the site uses modern HTML5, CSS3, and JavaScript with Google Fonts integration and basic client-side search functionality. However, there is no evidence of HTTPS enforcement or security headers, and no privacy or cookie policies are present, indicating poor compliance with data protection regulations. Security best practices such as delayed activation of affiliate links to prevent bot clicks are observed, but overall security posture is weak due to missing HTTPS and security headers. The site contains no adult or explicit content and targets general consumers looking for deals. Overall, the site is functional but lacks critical trust and compliance elements, and the domain status undermines its credibility.

P

pretix GmbH

pretix.social

70

pretix GmbH operates pretix.social, a Mastodon-based decentralized social media server hosting official company accounts related to their open-source and SaaS projects such as pretix and venueless. The website serves as a communication and branding platform rather than a user registration portal, with accounts managed externally. The company is positioned as a niche technology provider focused on event management and decentralized social media solutions. Technically, the site uses Mastodon 4.4.5 with React and modern JavaScript modules, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS implied but lacking visible security headers and cookie consent mechanisms. Business credibility is strong due to clear company information and legal notices. Overall, the site is professional, trustworthy, and safe for general audiences.

pretixstatus.com serves as the official system status page for the pretix event ticketing platform, providing real-time operational status updates. The website is minimalistic, focusing on clear communication of system uptime and support contact information. The business operates in the technology sector, specifically targeting event organizers requiring ticketing solutions. The domain is newly registered in early 2024, consistent with a dedicated status subdomain for the pretix platform. Technically, the website employs standard web technologies including HTML5, CSS3, and JavaScript, with no detected CMS or complex frameworks. Hosting is likely provided by IONOS SE, the domain registrar. The site is mobile optimized with good navigation clarity but lacks advanced SEO and accessibility features. No analytics or advertising scripts are present, indicating a privacy-conscious approach. From a security perspective, the domain uses HTTPS (implied by modern web standards though SSL details are not explicit), has domain transfer protection enabled, but lacks DNSSEC and security headers. No forms or user input fields reduce attack surface. The absence of explicit security policies or incident response contacts suggests room for improvement in transparency and preparedness. Overall, pretixstatus.com is a trustworthy and professional status page with a good baseline security posture and privacy compliance. Strategic enhancements in security headers, DNSSEC, and published security policies would strengthen its resilience and user trust.

V

Venueless

venueless.org

69

Venueless is a technology company founded in 2020 that provides a SaaS platform for hosting digital, hybrid, and on-site events. Their platform supports live streaming, workshop rooms with chat, integrated scheduling, and a kiosk mode for hybrid events. The company targets event organizers and conference planners seeking versatile and scalable event solutions. The website demonstrates a strong market position with ISO 27001 certification and GDPR compliance, supported by client testimonials and open source transparency. Technically, the website uses modern web technologies including Bootstrap, FontAwesome, and Matomo analytics for privacy-conscious user tracking. The site is mobile optimized, well-structured, and performs moderately well. Hosting and domain registration are consistent and reputable, with no blocking or WAF interference detected. From a security perspective, Venueless shows maturity with ISO 27001 certification and GDPR compliance. HTTPS is enforced, forms are protected with CSRF tokens, and no obvious vulnerabilities or exposed sensitive data were found. However, DNSSEC is not enabled and security headers are not explicitly detected, representing areas for improvement. Incident response contact details and vulnerability disclosure mechanisms are not publicly available. Overall, Venueless presents a trustworthy, professional, and secure digital event platform with good privacy practices. Strategic recommendations include enabling DNSSEC, adding security headers, implementing cookie consent, and publishing incident response contacts to further enhance security and compliance posture.

R

rami.io GmbH

rami.io

65

rami.io GmbH is a small German software development company founded in 2013 by Raphael Michel, specializing in bespoke software projects and notably the pretix ticketing solution. The company is undergoing a rebranding to pretix GmbH in July 2025, reflecting its strategic focus on the ticketing market. The website content is professional, well-structured, and targeted at businesses and organizations requiring software and ticketing solutions. Technically, the site uses standard web technologies with moderate performance and good mobile optimization but lacks advanced frameworks or CMS. Security posture is moderate with domain transfer protections but missing DNSSEC and security headers. Privacy compliance is supported by a clear privacy policy and cookie consent mechanism, though no explicit security or incident response policies are published. Overall, the domain registration data aligns well with the website claims, supporting legitimacy and trustworthiness.

P

Petzoldt's OHG

petzoldts.de

61

Petzoldts OHG operates a specialized e-commerce platform focused on automotive care products, including polishes, waxes, cleaning clays, and microfiber cloths. With over 30 years of market presence, the company targets both automotive enthusiasts and professional users such as vehicle detailers and painters. The website is well-structured, professionally designed, and provides clear product information and contact details, supporting a trustworthy retail experience. Technically, the website employs standard web technologies including jQuery and Bootstrap, ensuring responsive design and moderate performance. The absence of a known CMS suggests a custom or proprietary platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though the lack of explicit security headers and incident response information indicates room for improvement. Overall, the site is accessible without WAF or blocking mechanisms, contains no adult or questionable content, and complies with GDPR through clear privacy and cookie policies. Contact information is transparent and consistent with WHOIS data, reinforcing legitimacy. The security score is good but could be enhanced by adding security headers and incident response details. Strategic recommendations include implementing security headers, publishing a security policy, and enhancing analytics transparency to further improve compliance and trustworthiness.

J

Jotform Inc.

jotform.co

66

Jotform Inc. is a well-established technology company specializing in online form building and related productivity tools. Founded in 2006 and headquartered in San Francisco, it serves a global audience with a comprehensive SaaS platform that includes form creation, surveys, e-signatures, PDF editing, and AI-powered agents. The company has a strong market presence with over 30 million users and a consistent brand identity. Technically, the website demonstrates modern web development practices, including the use of JavaScript frameworks, lazy loading, and structured data for SEO. It is optimized for performance, mobile responsiveness, and accessibility, with robust security measures such as HTTPS and security headers in place. The integration of Google Tag Manager and analytics indicates mature digital marketing and user tracking capabilities. From a security perspective, the site follows best practices with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response information are not publicly available, representing an area for improvement. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms aligned with GDPR requirements. Overall, Jotform presents a low-risk profile with a professional online presence, strong business credibility, and a secure technical foundation. The absence of WHOIS data is noted but does not detract significantly from the trustworthiness given the company's established reputation and transparent contact information.

W

WasSchBer CORE – ERP für Gebäudereinigung & Facility

wasschber.de

58

WasSchBer CORE is a specialized ERP software solution tailored for the building cleaning and facility management sector in Germany. The website presents a professional business offering flexible, automated, and practical ERP tools designed to improve operational efficiency and customer satisfaction for small to medium-sized cleaning service providers. The market positioning is niche, focusing on digital process optimization within the German cleaning industry. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on UI-DNS infrastructure. Mobile optimization and SEO appear adequate, though accessibility features are basic. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, which are critical for GDPR compliance. No contact or incident response information is provided, limiting transparency and trust. Overall, the domain and website appear legitimate but would benefit from enhanced security and compliance disclosures.

M

Messe Friedrichshafen GmbH

cleanpro-expo.de

64

The CLEAN PRO EXPO website represents a professional trade fair platform organized by Messe Friedrichshafen GmbH, focusing on cleaning technologies and facility management for the DACH region and neighboring markets. The site effectively communicates the event's purpose, target audience, and key services, positioning itself as an innovative marketplace launching in 2026. Technically, the website employs modern web technologies including Bootstrap, Algolia Autocomplete, and Usercentrics for consent management, ensuring a responsive and user-friendly experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy, professional, and compliant with privacy standards, though explicit privacy and terms of service pages were not found in the provided content.

N

Newsload

newsload.com

62

Newsload is a German-based digital visibility platform founded in 2016, offering content creation, distribution, and networking services primarily targeting businesses, associations, cities, and organizations. The website is professionally designed with good content relevance and clear navigation, supporting a medium-sized business profile. Technically, the site employs modern JavaScript modules, uses Cookiebot for consent management, and integrates analytics via Posthog, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and some security headers are not evident. Privacy compliance is well addressed through comprehensive cookie consent and GDPR-aligned privacy policies. However, explicit terms of service and direct contact information are not readily found, which could be improved to enhance trust and compliance. Overall, the site is safe, business-focused, and trustworthy with room for technical and policy enhancements.

W

Weser-Ems Halle Oldenburg GmbH & Co. KG

motorradshow-oldenburg.de

62

MOTORRAD SHOW Oldenburg is a well-established regional motorcycle trade fair organized by Weser-Ems Halle Oldenburg GmbH & Co. KG, targeting motorcycle enthusiasts and industry stakeholders in the Oldenburg region of Germany. The event showcases new motorcycle models, accessories, and offers an engaging program including contests and social spaces. The website is professionally designed with good content quality and consistent branding, supporting a positive market position as a leading regional event. Technically, the site uses modern web technologies and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS and cookie consent mechanisms, but lacks advanced security headers and explicit privacy and terms policies. Overall, the site is trustworthy and functional but could improve compliance and security transparency.

D

daisys-diner.click

daisys-diner.click

62

The website daisys-diner.click serves as a branded short domain landing page associated with the Rebrandly URL shortening service. It does not provide any direct business information, contact details, or user engagement content beyond redirecting users to Rebrandly's main site. The domain WHOIS data is suspicious due to a creation date set in the future (June 2025), which undermines trust and legitimacy. The site uses minimal technical infrastructure with basic HTML, CSS, and JavaScript, and lacks modern security features such as DNSSEC or security headers. No privacy or cookie policies are present, and no contact or incident response information is provided, indicating low compliance with privacy and security best practices.

T

Toni-Garten und Landschaftsbau

toni-garten-und-landschaftsbau.de

49

Toni-Garten und Landschaftsbau is a small, local landscaping and garden care business based in Delmenhorst, Germany. The company offers a range of services including hedge trimming, lawn mowing, and complete garden redesigns, emphasizing quality workmanship and customer satisfaction. Their website is professionally designed with clear navigation and provides comprehensive contact options including phone numbers, email, physical address, and a secure contact form with CAPTCHA. Social media presence on Facebook and Instagram supports their local marketing efforts. Technically, the website is built using the MyWebsite NOW platform, employing modern web standards such as HTML5, CSS3, and JavaScript. The site is mobile-optimized and includes basic SEO and accessibility features. Hosting is managed via UI-DNS name servers, indicating a professional DNS setup. Privacy compliance is addressed through a GDPR-compliant privacy policy and cookie consent banner, although no explicit security policy or incident response information is provided. Security posture is moderate, with secure form handling and consent mechanisms in place, but lacking visible security headers and detailed security documentation. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is consistent with the website's business claims, supporting legitimacy. Overall, the site presents a trustworthy and professional image suitable for its local service market. Recommendations include enhancing security headers, verifying SSL/TLS configurations, adding explicit security and incident response policies, and improving accessibility features to strengthen compliance and user trust.

G

Google LLC

fuenfkommasechs.de

73

This website is a consent management page for YouTube, a service operated by Google LLC. It facilitates user consent for data processing and cookie usage in compliance with privacy regulations such as GDPR. The site is part of the youtube.com domain, which is a well-established and reputable platform in the online video streaming industry. The page is technically sophisticated, leveraging modern web technologies and Google’s cloud infrastructure to deliver a fast, responsive, and accessible user experience. Security is robust, with HTTPS enforced and multiple security headers present, reflecting Google's strong security posture. However, explicit privacy and cookie policy links are not directly present on this subdomain page, which slightly impacts privacy compliance scoring. Overall, the site is trustworthy, professional, and safe for general audiences.

M

Mitsubishi Electric Living Environment Systems

mitsubishi-les.com

68

Mitsubishi Electric Living Environment Systems (LES) is a division of Mitsubishi Electric, specializing in manufacturing and distributing advanced HVAC solutions including climate control, heating, ventilation, and cooling systems. The company has a strong market presence in Germany since 1991, offering a wide range of products and services tailored to professional installers, commercial customers, planners, and private consumers. Their business model combines product sales, rental services, training, and digital customer portals, positioning them as a comprehensive HVAC solutions provider. The website reflects a mature digital presence with professional design, multilingual support, and extensive product and service information.

Museen.de is a German-language media portal focused on providing comprehensive information about museums, exhibitions, and cultural topics within Germany. The site offers a full-text search feature, regional and thematic navigation, and articles related to museum events and cultural heritage. The target audience is the general public interested in museums and cultural activities. The business operates as a small media content provider under the Webmuseen Verlag brand. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript, with Leaflet.js for interactive maps. The hosting appears to be managed via DomainControl (GoDaddy). The site shows basic mobile optimization and SEO practices but lacks advanced technical features or CMS identification. Performance is moderate with no evident critical technical issues. From a security perspective, the site uses HTTPS as implied by canonical URLs but lacks visible security headers such as CSP or HSTS. Forms do not show anti-CSRF tokens, and no security or incident response policies are published. Privacy compliance is weak, with no privacy or cookie policies detected, which is a significant gap given GDPR requirements. Contact information is limited to email addresses without phone or physical addresses. Overall, the website is functional and provides relevant cultural content but requires improvements in privacy compliance, security hardening, and transparency to enhance trustworthiness and regulatory adherence.

KABINETT Verlag is a small German media publishing company with a focus on motor journalism and related media content. The website kabinett-online.de is currently under maintenance and provides detailed contact information and company background but lacks privacy, cookie, and security policies. The technical infrastructure is basic, relying on standard HTML, CSS, and JavaScript, hosted on servers indicated by the nameservers. No advanced CMS or analytics tools are detected. Security posture is moderate but could be improved by implementing HTTPS, security headers, and privacy compliance measures. Overall, the website presents a legitimate and consistent business presence but requires modernization and enhanced security and privacy practices to meet current standards.

S

Seeberger

seeberger.cz

10

Seeberger.cz is an e-commerce website representing the Seeberger brand, a well-established company in the snack food industry since 1844. The website offers a wide range of natural and premium snack products including nuts, dried fruits, mixes, coffee, and related items, targeting Czech consumers. The site is part of a broader multinational presence with multiple language-specific domains. Technically, the site is built on the Shopify platform, leveraging modern web technologies and standard e-commerce features. It demonstrates good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS, security headers, and captcha protections, although explicit security and incident response policies are not publicly available. Privacy compliance is well addressed with GDPR-aligned privacy and cookie policies. Overall, the website is professional, trustworthy, and suitable for general audiences with no adult or explicit content.

S

Seeberger

seeberger-snacks.ch

68

Seeberger is a well-established premium snack brand operating an e-commerce platform primarily targeting the Swiss market with multi-language support for neighboring countries. The website offers a broad range of natural snack products including nuts, dried fruits, and coffee. The business model focuses on direct online retail with a professional and consistent brand presentation. Technically, the site is built on Shopify, leveraging modern web technologies and optimized for performance and mobile use. Security posture is strong with HTTPS, security headers, and form protections, though explicit security policies and incident response contacts are absent. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site presents a trustworthy and professional online retail experience.

Ö

Österreichischer Alpenverein

alpenverein.at

72

The Österreichischer Alpenverein is a well-established non-profit organization dedicated to alpine sports, nature conservation, and community engagement in Austria. The website serves as a comprehensive portal for members and the public, offering information on membership benefits, mountain huts, environmental initiatives, and educational programs. It maintains a strong market position as Austria's leading alpine association with a large member base and extensive regional presence. Technically, the website employs standard web technologies including JavaScript, jQuery, and Matomo analytics, with a focus on accessibility and mobile optimization. The site is well-structured, professionally designed, and provides clear navigation and relevant content. Privacy compliance is robust, featuring a detailed privacy policy and cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site uses HTTPS and implements cookie consent but lacks some advanced security headers and explicit vulnerability disclosure mechanisms. No critical vulnerabilities or suspicious content were detected. The WHOIS data is unavailable, likely due to privacy protection, which is justified for this type of organization. Overall, the website demonstrates a strong security posture, high content quality, and good privacy compliance, making it a trustworthy and professional digital presence for the Österreichischer Alpenverein.

C

September 15 - 17, 2026 | CLEAN PRO EXPO

cleanpro-expo.com

64

CLEAN PRO EXPO is a newly launched trade fair scheduled for September 2026, focusing on professional cleaning and facility management in southern Germany and neighboring regions. The website presents a professional and well-structured platform aimed at exhibitors and visitors in the cleaning industry, highlighting future trends such as robotics, digitalization, and sustainability. The business model centers on organizing and hosting trade fairs to facilitate industry networking and product showcasing. Technically, the site uses modern web technologies including Bootstrap and Algolia for search, with a consent management platform (Usercentrics) implemented for privacy compliance. Security posture is solid with HTTPS and some security best practices, though explicit security policies and incident response information are lacking. WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy. Overall, the site is content-rich and professionally presented but would benefit from clearer privacy, contact, and security disclosures.

H

Hengst Filtration

hengst.shop

51

Hengst Filtration operates a professional e-commerce platform focused on filtration products and personal protective equipment, targeting industrial and commercial customers primarily in Germany. The company is a large, family-owned manufacturer with a global presence, emphasizing sustainability and innovation. The website is built on the Shopware platform with a modern theme, integrating standard marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight. Security posture is solid with HTTPS, CSRF protection, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site reflects a mature digital presence aligned with the company's business model and market position.

The website storochliten.se is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which blocks direct access to its content. The domain is registered since 2001 and uses Cloudflare for DNS and security services, indicating a mature technical infrastructure. However, no business-related content, contact information, or policies are visible on the landing page, limiting the ability to assess the company's market position or services. The security posture benefits from HTTPS and Cloudflare's WAF, but lacks visible security headers and published policies. Overall, the site presents a low trust profile due to lack of accessible content and transparency.

C

CLEANPRODUCTS

cleanproducts.de

29

CLEANPRODUCTS is a specialized German e-commerce retailer offering professional-grade automotive care products, targeting commercial vehicle detailing and maintenance professionals. With over 35 years of industry experience, the company positions itself as a trusted manufacturer-direct supplier of high-quality car cleaning and care solutions. The website is built on the Shopify platform, leveraging modern e-commerce technologies and integrations such as Trustpilot for customer reviews and multiple social media channels for brand engagement. The technical infrastructure is robust, featuring HTTPS, cookie consent mechanisms, and optimized performance for desktop and mobile users. Security posture is strong with standard best practices observed, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site presents a professional and trustworthy online presence suitable for its niche market.

B

B. Braun SE

renal-experience-bbraun.com

54

B. Braun SE operates a specialized virtual platform showcasing its renal care product portfolio, targeting healthcare professionals and stakeholders. The website offers a virtual exhibition experience, document downloads, and direct contact options, positioning B. Braun as a leading healthcare provider in renal care. Technically, the site uses modern web standards with JavaScript and CSS, integrates a reputable cookie consent platform (Iubenda), and employs Adobe Dynamic Tag Manager for analytics. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS with SSL encryption, has a cookie consent mechanism, and follows GDPR compliance with a comprehensive privacy policy. However, it lacks DNSSEC and explicit security headers, and no incident response or vulnerability disclosure information is published. Overall, the site is trustworthy, professional, and compliant, with minor technical security improvements recommended.

M

Mips

mipsprotection.com

67

Mips is a Swedish company specializing in helmet safety technology, providing a patented low-friction layer system designed to reduce rotational forces on the brain during impacts. The company partners with over 150 helmet brands across various sports and industries, positioning itself as a leading innovator in helmet safety. The website is built on WordPress with modern SEO and tracking tools, offering good content quality and user experience. However, it lacks visible privacy, cookie, and security policies, which impacts its privacy compliance score. Security posture is generally good with HTTPS enabled but could be improved by adding DNSSEC and security headers. Overall, the domain registration is consistent and legitimate, supporting the company's credibility.

B

Bauverlag

bauverlag.de

63

Bauverlag is a well-established German media company specializing in professional publications and services for the architecture and construction industries. With a history spanning over 100 years, it holds a leading market position in its sector, offering specialist magazines, marketing consulting, and event organization. The website reflects a professional and consistent brand image targeting architects, engineers, and construction professionals. Technically, the site uses modern web technologies including Alpine.js, Swiper.js, and Usercentrics for cookie consent, hosted on Arvato Systems infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not found in the provided content. Overall, the site is accessible, well-structured, and trustworthy, but could improve compliance transparency by publishing privacy and terms of service pages.

M

Messe Friedrichshafen

messe-friedrichshafen.com

61

Messe Friedrichshafen is a prominent German exhibition company specializing in leisure-themed trade fairs and events, holding a leading position in Europe. The website reflects a professional and well-structured digital presence, targeting exhibitors, visitors, and event organizers. The company offers venue services, ticketing, accommodation, and event calendars, supporting a comprehensive event hosting business model. Technically, the site employs modern web technologies including Bootstrap, Algolia Autocomplete, and integrates Google Tag Manager and Usercentrics for analytics and consent management, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response details are absent. The absence of WHOIS registration data is a notable concern but is mitigated by the professional site and external references. Overall, the site demonstrates good content quality, privacy compliance, and business credibility with room for improvement in transparency and contact information.

W

W+R INDUSTRY GmbH

wr-industry.de

51

W+R INDUSTRY GmbH is a well-established German manufacturer specializing in industrial and protective gloves, serving the industrial and craft sectors. With approximately 90 years of experience, the company offers a broad product range including specialized gloves for welding, chemical protection, and cut resistance, complemented by glove cleaning and rental services under their Glove Care brand. The company positions itself as a quality-driven and environmentally conscious service provider with ISO 9001 and ISO 14001 certifications. Technically, the website is built on the Shopware CMS platform, employs modern web technologies, and integrates Google Tag Manager for analytics and marketing. Security posture is strong with HTTPS, CSRF protection, and a comprehensive cookie consent mechanism, though some security headers could be improved. Overall, the site is professional, user-friendly, and compliant with GDPR requirements. No critical vulnerabilities or suspicious content were detected, indicating a trustworthy online presence.

M

Messe Frankfurt (HK) Ltd and Zhuhai Airshow Group Co Ltd

aero-asia.com

64

AERO Asia is a professional trade fair platform focused on the general aviation industry in the Asia-Pacific region, jointly organized by Messe Frankfurt (HK) Ltd and Zhuhai Airshow Group Co Ltd. The website presents detailed event information, product ranges, and multimedia content, reflecting a mature digital presence. The technical infrastructure leverages modern web technologies including Adobe Experience Manager CMS, video streaming via Brightcove, and analytics through Google Tag Manager and LinkedIn Insight. Security posture is adequate with HTTPS enabled, but lacks explicit security headers and privacy compliance documentation. No WHOIS data is available for the subdomain, but the domain is a subdomain of the reputable messefrankfurt.com, supporting legitimacy. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

D

DAV Summit Club

dav-summit-club.de

54

DAV Summit Club is a German-based travel company specializing in guided hiking, mountaineering, winter sports, and adventure tours worldwide. The website presents a broad portfolio of over 600 trips across 100 countries, targeting outdoor enthusiasts and adventure travelers. The business model focuses on experiential travel with expert guides and diverse travel types including training and safety courses. The company appears established with a medium-sized market presence in the hospitality sector.

S

Seeberger

seeberger.de

61

Seeberger operates a professional e-commerce platform focused on selling natural snacks such as nuts, dried fruits, and coffee products primarily targeting the German and broader European market. The website is built on the Shopify platform, leveraging modern web technologies and providing a seamless user experience with mobile optimization and accessibility features. The company maintains a strong brand presence with consistent branding and comprehensive content quality. Security posture is robust with HTTPS enforced, standard Shopify security headers, and privacy compliance including GDPR-aligned policies and cookie consent mechanisms. However, explicit security policies and incident response information are not publicly available, which could be improved to enhance trust. Overall, the site is trustworthy, well-maintained, and suitable for general consumers seeking premium snack products.

D

Downdetector

downdetectorapi.com

56

Downdetector API provides a RESTful interface for enterprises to integrate outage and incident data into their systems. The service is well documented with clear endpoint descriptions, authentication mechanisms, and usage guidelines. The technical infrastructure leverages modern web technologies and Cloudflare DNS for reliability. Security posture is solid with HTTPS and token-based authentication, though the site lacks published privacy and security policies. Overall, the platform is suitable for developers and businesses requiring real-time status monitoring data, with room for improvement in compliance transparency and security documentation.