Security Directory

R

RBTX

rbtx.my

53

RBTX operates a multilingual e-commerce platform specializing in affordable robotics components and automation solutions, targeting manufacturers and automation professionals primarily in Malaysia. The website emphasizes compatibility and cost-effectiveness, supported by a broad ecosystem of reputable partners and configurator tools. Technically, the site is built on modern frameworks such as Next.js and React, with integrations for analytics and user behavior tracking via Piwik PRO and Mouseflow. Security posture is strong with HTTPS and standard security headers, though privacy and cookie policies are absent, indicating room for compliance improvement. Contact is primarily via web forms, with no direct emails or phone numbers visible. Overall, the platform presents a professional and trustworthy marketplace for robotics solutions.

R

RBTX

rbtx.tw

51

RBTX is a specialized industrial automation and robotics platform offering cost-effective and compatible robotic components and solutions primarily targeting manufacturing businesses. The website is professionally designed with a focus on user experience and multilingual support, indicating a mature digital presence. The technical infrastructure leverages modern web technologies such as Next.js and React, with moderate performance and good mobile optimization. Security posture is moderate; while HTTPS is implied, no explicit security headers or policies are visible, and privacy compliance is limited due to the absence of privacy and cookie policies. The site integrates analytics and user tracking via piwik.pro and mouseflow, reflecting moderate user tracking practices. Overall, the business credibility is strong with clear market positioning and partner ecosystem, but improvements in security and privacy transparency are recommended.

I

igus GmbH

rbtx.vn

52

The website rbtx.vn is a professional e-commerce platform specializing in low-cost automation components and complete robot solutions, primarily targeting manufacturing and industrial clients in Vietnam. It is operated under the brand igus GmbH, a reputable company in the automation and manufacturing sector. The site offers a range of services including product sales, free expert video consultations, feasibility testing, and educational resources. The platform is well-branded and consistent with its parent company, featuring partnerships with major industrial brands such as Siemens, ABB, and Fanuc. Technically, the website leverages modern web technologies including React and Next.js, with integrations for analytics (Piwik PRO, Mouseflow) and scheduling (Calendly). The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is solid with HTTPS enforced, but lacks visible security headers and formal security policies. From a security and compliance perspective, the site currently lacks visible privacy, cookie, and terms of service policies, which impacts its privacy compliance score. No incident response or vulnerability disclosure information is present. No contact emails or phone numbers were found in the analyzed HTML snippet, which may affect user trust and support accessibility. No WAF or blocking mechanisms were detected, indicating full content accessibility. Overall, the website presents a trustworthy and professional front for its business, with room for improvement in privacy compliance and security best practices. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

R

RBTX

rbtx.in

53

RBTX operates as a robotics marketplace and consulting platform focused on providing affordable automation solutions primarily targeting businesses in India and internationally. The website offers robotic components from leading manufacturers with guaranteed compatibility, alongside expert consulting services such as free video calls and feasibility testing. The platform is positioned as a comprehensive source for robotic automation needs, emphasizing cost efficiency and ease of integration. Technically, the website is built using modern web technologies including React and Next.js, with analytics powered by Piwik PRO and Mouseflow, indicating a moderate level of digital maturity. The site is mobile optimized and presents a professional design with clear navigation, although some accessibility features could be improved. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks explicit security policies and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but would benefit from enhanced privacy and security disclosures to improve compliance and user trust.

R

RBTX

rbtx.es

49

RBTX operates a specialized marketplace focused on affordable and efficient robotic automation solutions, targeting businesses seeking to automate repetitive tasks. The platform offers a wide range of components from leading manufacturers, supported by expert consulting, configuration tools, and free feasibility testing. The website demonstrates a solid technical infrastructure built on modern web technologies such as React and Next.js, with good mobile optimization and performance. Security posture is strong with HTTPS and security headers implemented, though privacy compliance documentation is lacking. Overall, the site presents a professional and trustworthy front with a broad partner ecosystem, though improvements in privacy and incident response transparency are recommended.

R

RBTX

rbtx.dk

47

RBTX is a Danish-based technology company specializing in providing a marketplace for low cost robotics components and automation solutions. The website emphasizes compatibility and affordability, targeting industrial automation customers and manufacturers seeking efficient robotic solutions. The business model combines e-commerce with expert advisory services, including free video calls and feasibility testing, positioning RBTX as a comprehensive solution provider in the robotics sector. Technically, the website is built on modern frameworks such as Next.js and React, with integration of analytics (Piwik PRO) and scheduling tools (Calendly), reflecting a mature digital infrastructure. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit privacy or cookie policies, indicating room for improvement in compliance and security best practices. Overall, the domain registration data aligns well with the business claims, supporting legitimacy. Strategic recommendations include enhancing privacy compliance, implementing security headers, and publishing clear contact and incident response information to strengthen trust and security.

R

RBTX

rbtx.ch

55

RBTX is an industrial robotics marketplace and service platform based in Switzerland, offering low-cost robotic components and automation solutions. The company targets manufacturing and industrial clients seeking affordable and compatible robotic systems, supported by a strong partner ecosystem. Their services include product sales, consulting, feasibility testing, and educational resources. Technically, the website is built on modern frameworks like Next.js and React, with CMS support from Storyblok and analytics via Piwik PRO. The site is mobile-optimized and well-structured, providing a good user experience. Security posture is adequate with HTTPS and no visible sensitive data exposure, but lacks some security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, matching the business profile. The site content is safe and professional, with no adult or questionable material.

R

RBTX

rbtx.at

51

RBTX operates as a specialized marketplace and consulting platform focused on providing low-cost robotic automation solutions primarily targeting manufacturing and industrial sectors in Austria and surrounding regions. The website emphasizes compatibility guarantees and offers services such as free video consultations, feasibility testing, and integration support. The platform leverages modern web technologies including React and Next.js, with content managed via a headless CMS (Storyblok). Analytics are implemented using Piwik PRO, indicating a moderate level of digital maturity. Security posture is generally sound with HTTPS enabled and no exposed sensitive data; however, the absence of security headers and privacy/cookie policies suggests room for improvement in compliance and security best practices. Overall, the website presents a professional and trustworthy front for its business, supported by a broad partner ecosystem of reputable industrial and robotics companies.

R

RBTX

rbtx.co.uk

56

RBTX is a UK-based robotics marketplace specializing in affordable and compatible automation components sourced from leading manufacturers. Founded in 2020, the company targets manufacturing and industrial clients seeking cost-effective automation solutions. Their offerings include product sales, free expert consultations via video calls, feasibility testing, and educational resources through their academy. The website is built on modern web technologies such as Next.js and React, indicating a mature digital infrastructure. However, some gaps exist in privacy and security policies, with no explicit privacy or cookie policies detected in the analyzed content. The security posture is moderate, lacking visible security headers and formal incident response information. Overall, the business appears legitimate and professionally presented, with a moderate risk profile due to incomplete privacy compliance and security best practices.

T

BLOCK: 0

timechaincalendar.com

54

Timechaincalendar.com is a niche technology website providing live data from the Bitcoin blockchain (referred to as the timechain) along with past block lookup and calendar features. The site targets general users interested in blockchain data and cryptocurrency enthusiasts. It operates a lightweight information service model without visible monetization or advertising. The domain is relatively new, registered in 2022, and hosted on Amazon AWS infrastructure, indicating a modern and scalable technical foundation. The site uses React and Chakra UI frameworks, with a focus on a dark theme and mobile optimization. Security posture is moderate with HTTPS enforced and a Content Security Policy in place, but lacks DNSSEC and additional security headers. Privacy and cookie policies are absent, and no contact or business identity information is provided, which limits trust and compliance. Analytics usage is minimal via Fathom Analytics, respecting user privacy to some extent. Overall, the site is functional and moderately professional but would benefit from enhanced transparency and security practices.

BNP Paribas is a leading European banking group with a strong international presence, offering a wide range of financial services including retail banking, corporate banking, asset management, and investor relations. The website serves as a comprehensive investor relations portal providing financial results, regulatory disclosures, shareholder communications, and governance information targeted at individual shareholders, analysts, and institutional investors. The site is professionally designed with consistent branding and high-quality content, reflecting the bank's market position and commitment to transparency. Technically, the website uses modern JavaScript frameworks and analytics tools like Matomo, ensuring good mobile optimization and user experience. Security posture is solid with HTTPS enforced and domain protections in place, though improvements such as enabling DNSSEC and publishing security policies could enhance trust further. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy, professional, and aligns well with BNP Paribas's corporate identity and business objectives.

I

ifm electronic gmbh

ifm.com

69

ifm electronic gmbh is a well-established German company specializing in automation technology, offering quality products and services with a global presence through subsidiaries and trade partners. The website reflects a professional and consistent brand image targeting industrial automation customers worldwide. The technical infrastructure is modern, leveraging standard web technologies such as HTML5, CSS, SVG, and jQuery, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements in security headers and explicit security policies are recommended. Privacy compliance is supported by a comprehensive privacy policy, but cookie consent mechanisms are absent. Overall, the website is trustworthy and business credible, though WHOIS data is missing, which slightly impacts domain trust assessment.

S

Sonatus

sonatus.com

75

Sonatus is a technology company focused on enabling the automotive industry's transition to software-defined vehicles (SDVs). Their offerings include middleware and infrastructure services that facilitate vehicle connectivity, data collection, AI deployment, and over-the-air software updates. The company positions itself as a leader in SDV technologies, collaborating with major automotive and technology partners such as NXP, Broadcom, AWS, and Arm. The website content is rich with technical videos, podcasts, and product explanations targeting automotive OEMs and suppliers. Technically, the website employs modern web standards including JSON-LD structured data and Wistia video embeds, providing a good user experience with mobile optimization and accessibility. However, there is a lack of visible privacy, cookie, and terms of service policies, which impacts privacy compliance scores. Security headers and SSL configuration details are not evident from the provided data, suggesting room for improvement in security posture. The WHOIS data is missing or unavailable, which raises concerns about domain registration transparency. Despite this, the website content and partner references indicate a legitimate and established business. No contact emails, phone numbers, or social media links are found, limiting direct communication channels. Overall, Sonatus presents a professional and technically advanced platform for SDV innovation, but should enhance transparency in privacy, security policies, and contact information to improve trust and compliance.

E

Exxeta AG

exxeta.com

70

Exxeta AG is a well-established German technology and consulting company founded in 2005, specializing in digital transformation, AI, cloud services, and sustainability consulting. The company targets corporate clients primarily in the energy, mobility, finance, and public sectors. Their website reflects a professional and modern digital presence with comprehensive service offerings and a strong brand identity. Technically, the site uses modern JavaScript frameworks and includes a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and some security headers could be improved. No direct contact emails or phone numbers are exposed on the homepage, which may be by design to reduce spam. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations.

M

MMCAGENTUR Digitale Lead Agentur #respectinside

mmcagentur.at

66

MMCAGENTUR is a well-established digital full-service agency based in Austria, specializing in web design, online campaigns, social media marketing, content creation, and digital strategy. Founded in 1997, the company serves both B2B and B2C clients with a strong emphasis on respect and digital engagement. Their market position is solid, supported by a professional website showcasing client references and a consistent brand message. Technically, the website is built using modern frameworks such as Vue.js and Nuxt.js, optimized for performance and mobile responsiveness. The use of WebP images and responsive design indicates a mature digital infrastructure. However, no explicit CMS is detected, though the agency references popular CMS platforms in their content. From a security perspective, the site enforces HTTPS and shows no exposed sensitive data or vulnerabilities in the analyzed content. However, it lacks explicit security headers, privacy policies, cookie consent mechanisms, and incident response information, which are important for compliance and trust. Overall, the website is professional and trustworthy with excellent content quality and business credibility. The main gaps lie in privacy compliance and security transparency, which should be addressed to enhance user trust and regulatory adherence.

D

Deutsche Adipositas-Gesellschaft (DAG) and Deutsche Diabetes Gesellschaft (DDG)

adipositasfortbildung.de

56

The website adipositasfortbildung.de serves as a specialized educational platform offering training and certification in obesity treatment for healthcare professionals in Germany. It is affiliated with reputable organizations such as the Deutsche Adipositas-Gesellschaft (DAG) and Deutsche Diabetes Gesellschaft (DDG), positioning it as a niche provider in the healthcare education sector. The content is professionally presented in German, targeting physicians, academics, and other health-related professions. The site provides clear navigation and relevant information about courses and certifications, supported by testimonials and partner logos that enhance trustworthiness. Technically, the website is built on WordPress 6.8.1, utilizing modern web technologies including lazy loading for images and a carousel for testimonials. The site is mobile optimized and performs moderately well, though there is room for improvement in accessibility and SEO optimization. Security-wise, the site enforces HTTPS with a valid SSL certificate and does not expose sensitive data or use vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. Overall, the security posture is solid but could be improved by implementing additional headers and formal security policies. The absence of explicit contact emails and phone numbers on the homepage suggests reliance on a contact form for communication. No signs of WAF blocking or malicious content were detected, and the site is safe for general audiences. Strategic recommendations include adding cookie consent, security headers, terms of service, and a security policy page to strengthen compliance and trust.

G

Get On The Web Limited

diit.com

50

DIIT.COM is a long-registered generic domain name currently offered for sale by Get On The Web Limited, a domain reseller company. The website is a simple landing page advertising the domain with a fixed price and references to other high-value domain sales to justify the asking price. The technical infrastructure is minimal, consisting of basic HTML and CSS without advanced frameworks or CMS. There is no evidence of HTTPS or advanced security configurations, and no direct contact information is provided on the page, only links to external forms hosted on gotw.com. Security posture is weak due to lack of HTTPS and security headers, and privacy compliance is minimal with only a basic privacy policy linked externally. Overall, the site serves its purpose as a domain sales landing page but lacks modern web and security best practices.

S

SKA Elektrotechnik - Ihr Partner in Reutlingen und Umgebung

ska-elektrotechnik.de

60

SKA Elektrotechnik is a specialized electrical services provider operating primarily in the German regions of Reutlingen, Stuttgart, Tübingen, and Esslingen. The company offers a broad range of services including photovoltaic system installation, electric vehicle charging stations (Wallbox), industrial electrical installations, and smart home solutions. Positioned as a regional expert with a strong customer focus, SKA Elektrotechnik benefits from positive customer reviews and a professional online presence. The business operates under the parent company SKATechnologie GmbH, indicating a structured corporate backing. Technically, the website is built on the Shopify platform, leveraging modern web technologies and best practices for performance, SEO, and accessibility. The site is mobile-optimized and integrates various Shopify apps for enhanced customer engagement such as Google Reviews and chat support. Security measures include HTTPS enforcement and standard security headers, with no detected vulnerabilities or exposed sensitive data. From a security and compliance perspective, the website demonstrates good privacy practices with a comprehensive privacy policy and cookie consent mechanism aligned with GDPR requirements. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. The domain registration data is consistent with the website content and business claims, supporting the legitimacy of the entity. Overall, SKA Elektrotechnik presents a trustworthy and professional digital footprint with solid technical infrastructure and compliance posture. Strategic enhancements in security transparency and formal policies would further strengthen its risk profile and customer trust.

M

momac Robotics

momac-robotics.de

66

momac Robotics is a specialized integrator of industrial robots, focusing on ABB, KUKA, and FANUC brands. The company targets manufacturing and industrial automation sectors, providing robotic cell design and integration services. The website is built on WordPress with modern plugins such as WP Rocket and Yoast SEO, indicating a moderate level of digital maturity. The site is mobile-optimized and presents professional content relevant to its niche. Security posture is basic with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is minimal with no visible privacy or cookie policies. Overall, the website is functional and professional but would benefit from enhanced security and compliance features.

P

Papoo Software & Media GmbH

beyond-cookiebanner.de

49

The website beyond-cookiebanner.de/login is a login portal for CCM19, a cookie consent management software product developed by Papoo Software & Media GmbH, a German technology company. The site targets businesses and website operators who require tools to manage cookie consent in compliance with privacy regulations. The platform supports multiple languages, indicating an international user base. The business model appears to be software licensing or SaaS focused on privacy compliance solutions. Technically, the site uses a modern JavaScript stack including jQuery and jQuery UI, with custom scripts for UI and form handling. The site is moderately optimized for mobile and accessibility but lacks advanced SEO metadata and structured data. Performance is moderate with no evident critical technical issues. However, no CMS or hosting provider details are discernible from the data. From a security perspective, the site uses HTTPS and secure form submission methods but lacks visible security headers and explicit privacy or cookie policies on the login page. There is no evidence of vulnerability disclosures or incident response contacts. The absence of contact information and policies reduces privacy compliance confidence. No WAF or blocking mechanisms were detected, and the domain WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website is professionally designed and functional but would benefit from enhanced privacy compliance documentation, improved security headers, and visible contact information to increase trust and regulatory adherence.

H

HEUTE Maschinenfabrik GmbH & Co. KG

profilgate.com

68

ProfilGate® is a German-based company specializing in mechanical clean walk zones designed for production and logistics halls to reduce contamination and support hygiene standards across various industries. The company serves a broad industrial audience, including automotive, pharmaceutical, food, and logistics sectors, with a strong market presence evidenced by partnerships with major corporations such as Volkswagen, P&G, and Siemens. Their solutions focus on improving product quality, reducing cleaning costs, and enabling compliance with hygiene certifications like HACCP and ISO 22000. Technically, the website is built on modern frameworks such as Next.js and React, offering a responsive and well-structured user experience with good SEO and accessibility features. Security posture is strong with HTTPS and standard security headers, though explicit security policies and incident response contacts are not publicly available. The absence of WHOIS data reduces domain trust slightly but does not detract from the professional presentation and business credibility. Overall, the site is well-designed, content-rich, and trustworthy for its target industrial audience.

D

Deutsche Diabetes Gesellschaft e.V.

ddg.info

63

The Deutsche Diabetes Gesellschaft e.V. (DDG) is a prominent medical-scientific professional society in Germany focused on diabetes research, therapy, and prevention. The organization provides education, certification, advisory services, and organizes events targeting medical professionals, healthcare workers, and policy makers. The website is well-structured, professionally designed, and primarily in German, reflecting its target audience. Technically, the site is built on TYPO3 CMS and employs Matomo analytics configured with privacy-conscious settings. Security posture is good with HTTPS enforced and some security best practices observed, though additional security headers could enhance protection. WHOIS data is unavailable due to privacy restrictions, but the website's content and structure indicate legitimacy. Overall, the site is safe, compliant with GDPR, and serves as a trustworthy resource in the healthcare domain.

W

Wittenstein Stiftung e. S.

wittenstein-stiftung.de

56

The Wittenstein Stiftung is a small non-profit foundation based in Germany focused on promoting education, science, and research, particularly exploring the interrelations between humans, technology, nature, and society. The website is professionally designed using the Wix platform, reflecting a moderate level of digital maturity with good mobile optimization and basic SEO. Security posture is adequate with HTTPS enabled and some security hardening scripts, but lacks advanced security headers and incident response information. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is trustworthy and serves its informational purpose well but would benefit from enhanced privacy and security disclosures.

PTC Inc. is a global leader in Product Lifecycle Management (PLM) software and digital transformation technologies, serving manufacturers, engineers, and enterprises worldwide. The company provides advanced software solutions that enable engineering, manufacturing, and service operations to be more efficient and innovative. Their market position is strong, supported by a comprehensive portfolio of services and a global enterprise presence. The website reflects this leadership with professional design, clear messaging, and extensive content tailored to their B2B audience. Technically, the website employs a modern technology stack including JavaScript frameworks, marketing automation tools like Eloqua, analytics platforms such as Google Analytics and Dreamdata, and performance monitoring via Boomerang. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Hosting and CMS technologies suggest enterprise-grade content management. From a security perspective, the site enforces HTTPS, uses multiple security headers, and implements cookie consent mechanisms aligned with GDPR. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not publicly available, representing areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, trustworthy, and well-maintained, though the absence of WHOIS data and some security transparency slightly reduce trust scores. Strategic recommendations include publishing detailed security policies, incident response information, and vulnerability disclosure to enhance stakeholder confidence and compliance posture.

C

CRH

crh.com

72

CRH is a leading global diversified building materials company, manufacturing and distributing a wide range of superior building materials used worldwide in construction projects. The website presents a professional corporate image with detailed descriptions of their business scope and global presence. Technically, the website employs standard web technologies including jQuery and custom JavaScript bundles, with moderate performance and good mobile optimization. However, the absence of WHOIS data and lack of visible privacy and cookie policies indicate gaps in transparency and compliance. Security posture is moderate with no explicit security headers or SSL configuration details available, suggesting room for improvement in security best practices. Overall, the website is functional and professional but would benefit from enhanced security measures and clearer privacy compliance to strengthen trust and regulatory adherence.

C

Cryptoticker.io GmbH

cryptoticker.io

70

CryptoTicker.io GmbH operates a comprehensive Web3 and cryptocurrency news platform that offers a wide range of services including news, guides, exchange and hardware wallet comparisons, podcasts, and educational content. The company targets crypto traders, investors, beginners, and enthusiasts, positioning itself as a trusted source with a strong community presence and over 300,000 readers. The business model is primarily content-driven with premium memberships and affiliate marketing. Technically, the website is built on modern frameworks such as Next.js and React, hosted likely on AWS Cloudfront, and optimized for performance and mobile use. Security posture is solid with HTTPS, clientTransferProhibited domain status, and cookie consent mechanisms, though there is room for improvement in explicit security headers and published security policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with no signs of blocking or WAF interference.

B

Blockster, Ltd.

blockster.com

64

Blockster is a niche Web3 media platform established in 2003, focusing on the culture, lifestyle, and technology aspects of the blockchain and crypto space. It offers a variety of content including news, interviews, and features related to NFTs, metaverse, gaming, and Web3 technology. The platform targets Web3 enthusiasts, crypto professionals, and NFT collectors, positioning itself as a specialized media outlet within the blockchain ecosystem. Technically, the website leverages modern technologies such as the Elixir Phoenix framework with LiveView for dynamic content, ImageKit for image optimization, and Google Analytics for user tracking. The site is hosted behind Cloudflare DNS but does not use DNSSEC, and it employs HTTPS with a good SSL configuration. Security posture is moderate with room for improvement, particularly in implementing security headers and privacy compliance mechanisms such as cookie consent. No explicit contact emails or phone numbers are provided, with contact facilitated via a web form. Overall, the website is professional, well-branded, and trustworthy with a solid domain history and consistent WHOIS data.

A

Latest News About Cryptocurrency, Bitcoin, Altcoin - AMBCrypto

ambcrypto.com

59

AMBCrypto is a cryptocurrency-focused media website providing news and updates on Bitcoin, altcoins, and the broader crypto market. Established in 2017, it serves a niche audience of crypto enthusiasts and investors. The website operates on WordPress CMS, leveraging Cloudflare for DNS and GoDaddy as the domain registrar. The technical infrastructure is modern with use of Google Fonts and FontAwesome, and the site appears to be mobile optimized with good SEO practices. Security posture is adequate with HTTPS enabled and domain protections in place, but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to absence of explicit privacy and cookie policies. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

A

Arbeitsgemeinschaft der öffentlich-rechtlichen Rundfunkanstalten der Bundesrepublik Deutschland (ARD)

ard.social

67

ARD.social is the official Mastodon instance operated by the Arbeitsgemeinschaft der öffentlich-rechtlichen Rundfunkanstalten der Bundesrepublik Deutschland (ARD), a major German public broadcasting consortium. The platform serves as a decentralized social network primarily for ARD's editorial content and German-speaking audiences. The website leverages the open-source Mastodon platform (version 4.2.18) and is hosted on Google Cloud infrastructure, ensuring modern technology adoption and reliable performance. The domain was registered in 2022, aligning with the platform's recent launch. Technically, the site employs React and JavaScript frameworks, with media assets hosted on Google Cloud Storage. The website is mobile-optimized and provides a good user experience with clear navigation and consistent branding. Security posture is solid with HTTPS enforced and domain status protections in place; however, DNSSEC is not enabled, and security headers are not explicitly detected, representing areas for improvement. Privacy compliance is generally good, with a comprehensive privacy policy present, but lacks a cookie consent mechanism. Overall, ARD.social demonstrates a trustworthy and professional presence as a public media social platform. The absence of contact information and incident response details limits transparency in security and support channels. Strategic enhancements in DNS security, security headers, and privacy consent mechanisms would strengthen the platform's security and compliance posture.

U

Ultima Media Germany GmbH

automotiveit-kongress.eu

60

The automotiveIT Kongress website represents a well-established industry event organized by Ultima Media Germany GmbH, focusing on the automotive IT sector. It offers a comprehensive platform for professionals to engage in knowledge sharing, networking, and recognition through awards. The site is professionally designed, content-rich, and targets experts and stakeholders in automotive and IT industries primarily in Germany. Technically, the site is built on TYPO3 CMS with modern web technologies and integrates Google Tag Manager for analytics and marketing, ensuring a good digital maturity level. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response details are absent. Overall, the site demonstrates high professionalism and trustworthiness, with minor gaps in direct contact information and security transparency.

The website om-zeichen.de operates as a certification and database platform under the brand Offensive Mittelstand, targeting small and medium-sized enterprises in Germany. It focuses on providing verified sustainability and occupational safety certifications (OM-Zeichen) to companies, enabling them to demonstrate compliance to customers, suppliers, and regulatory bodies. The platform offers self-assessment tools and a searchable database of certified companies, positioning itself as a niche player in the German Mittelstand market. The website content is professional, well-structured, and consistent with its business purpose. Technically, the site uses standard web technologies including HTML5, CSS, JavaScript, and the Swiper.js library for interactive content. It employs Matomo analytics with cookies disabled to respect user privacy. The site appears to be built on TYPO3 CMS, inferred from file paths. Performance and mobile optimization are moderate, with room for improvement in accessibility and SEO. Security posture is good with HTTPS enforced, but lacks advanced security headers and explicit cookie consent mechanisms. From a security perspective, the website does not expose sensitive data and uses privacy-conscious analytics. However, it lacks published security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms were detected, and the site is fully accessible. WHOIS data is limited but does not raise suspicion, though registrant details are not fully disclosed. Overall, the website presents a trustworthy and professional front for its certification services, with moderate technical maturity and a good security baseline. Strategic improvements in privacy compliance, security headers, and contact transparency would enhance its security posture and user trust.

D

Deutscher Tourismusverband e.V.

deutschertourismuspreis.de

54

The Deutscher Tourismuspreis website is a professionally maintained platform operated by the Deutscher Tourismusverband e.V., a non-profit organization dedicated to promoting innovation in the German tourism sector. The site serves as the official portal for the annual tourism award, providing information on competition criteria, current news, and partner organizations. It targets tourism professionals and stakeholders interested in innovative tourism projects within Germany. The business model revolves around organizing and promoting the award to foster sustainable and creative tourism solutions. Technically, the website is built on the Tramino CMS platform, utilizing standard web technologies such as jQuery, CSS, and JavaScript. It is hosted on Schlund Technologies servers and employs HTTPS with a consent management system for GDPR compliance. The site demonstrates moderate performance and good mobile optimization, with clear navigation and consistent branding. SEO practices are adequately implemented, and social media integration supports marketing efforts. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism, but lacks visible security headers in the HTML source. No direct security policies or incident response contacts are published, and no vulnerability disclosure mechanisms are evident. The site does not expose sensitive data and appears free from obvious vulnerabilities. Overall, the security posture is moderate but could be improved by adding security headers and explicit policies. The overall risk assessment is low, with the site presenting a trustworthy and professional image aligned with its non-profit mission. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to ensure ongoing compliance and security.

Planet Schule is an educational website operated by SWR, a German public broadcaster. It provides a wide range of educational content including films, learning games, worksheets, and teaching materials targeted primarily at students and educators in Germany. The platform is well-established and positioned as a trusted source of educational media, leveraging the reputation and resources of a public institution.

D

Die Seier Gruppe

seier-gruppe.de

59

Die Seier Gruppe is a German infrastructure and construction group that operates multiple subsidiaries specializing in various infrastructure services such as broadband expansion, waste disposal, district heating, and civil engineering. The website reflects a mature digital presence built on TYPO3 CMS, with good SEO and mobile optimization. The company demonstrates compliance with GDPR through a comprehensive privacy policy and cookie consent management via Cookiebot. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and incident response contacts are not published. The website integrates major analytics and advertising platforms with user consent, indicating a balanced approach to marketing and privacy. Overall, the site is professional, trustworthy, and well-structured, supporting the company's market position as a significant regional player in infrastructure services.

F

Fondshafen

fondshafen.de

57

Fondshafen is a specialized asset servicing initiative within the cooperative financial group Volksbanken Raiffeisenbanken, offering custody, fund services, and depot management primarily in Germany, Luxembourg, and Switzerland. The website reflects a mature business with a strong market position supported by the DZ BANK group. Technically, the site is built on Adobe Experience Manager, indicating enterprise-level infrastructure, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. The domain registration and DNS settings align well with the business, supporting legitimacy. Overall, the website is professional and trustworthy but could enhance privacy compliance and security transparency.

S

SwanCap

swancap.eu

46

SwanCap is a specialized private equity investment boutique with over 20 years of experience, managing over €5 billion in assets across multiple fund generations. The company targets institutional investors and large family offices, offering diversified investment strategies including primary fund commitments, direct co-investments, and secondaries. The website reflects a professional and consistent brand image with detailed business descriptions and a clear market position in the finance sector. Technically, the site is built on TYPO3 CMS, with good mobile optimization and SEO practices, though some improvements in accessibility and security headers are recommended. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but the absence of security policies and incident response information suggests room for maturity. Privacy compliance is partially met with a comprehensive privacy policy but lacks cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, though transparency could be enhanced by publishing contact details and security-related policies.

N

Niedersächsische Landeszentrale für politische Bildung

politische-medienkompetenz.de

40

The website politische-medienkompetenz.de is an educational platform operated by the Niedersächsische Landeszentrale für politische Bildung, a governmental institution in Germany focused on political media literacy. It provides free educational materials, tools, and thematic content aimed at educators, youth, and individuals interested in political media competence. The platform holds a strong regional position as an authoritative source for political education in Lower Saxony. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, hosted on servers managed by agenturserver. The site demonstrates good mobile optimization, accessibility, and SEO practices, with structured navigation and meta tags for social sharing. Performance is moderate, with no evident technical debt or vulnerabilities in the visible code. From a security perspective, the site uses HTTPS and implements secure forms with CSRF protections. However, it lacks explicit security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No incident response or vulnerability disclosure policies are published, which could improve trust and security posture. Overall, the website is professional, trustworthy, and safe, with a strong focus on educational content. Strategic improvements in security headers, cookie consent, and transparency around security policies would further enhance its compliance and security maturity.

The Bundesverband Alternative Investments e.V. (BAI) is a German association representing the interests of the alternative investments sector. The website serves as a professional platform offering advocacy, publications, events, and member services targeted at professionals and organizations involved in alternative investments within Germany. The association holds a strong market position as a leading industry body in this niche. Technically, the website is built on TYPO3 CMS, featuring a modern and responsive design with good SEO and mobile optimization. Security posture is solid with HTTPS enforced, though some improvements are recommended such as adding cookie consent mechanisms and security headers. Overall, the site reflects a credible and professional organization with active engagement through events and publications.

VR Bank Heilbronn Schwäbisch Hall eG is a regional cooperative bank serving customers primarily in the Heilbronn and Schwäbisch Hall regions of Germany. The website provides information about the bank's services and local presence, targeting local customers seeking banking and financial products. The business model is cooperative banking with a focus on community and local support. The site uses modern web technologies including Angular and Angular Material, with Dynatrace monitoring for performance insights. However, the website lacks visible privacy and cookie policies, contact information, and explicit security headers, which are important for compliance and trust. The security posture is basic with room for improvement in policy transparency and technical security measures. Overall, the site is functional and moderately professional but would benefit from enhanced privacy compliance and security practices.

The website putevirs.com represents the official online presence of Јавно предузеће Путеви Републике Српске, a government-owned public enterprise responsible for managing, constructing, maintaining, and protecting the road network in Republika Srpska, Bosnia and Herzegovina. The site provides detailed news, updates, and information about road infrastructure projects and public procurement plans, targeting residents and stakeholders within the region. The business model is focused on public sector infrastructure services, positioning the company as a key entity in transportation within Republika Srpska. From a technical perspective, the website employs legacy JavaScript libraries such as MooTools 1.2.1 and custom scripts, with CSS-based styling. The platform appears to be custom-built or uses an unknown CMS, with basic mobile optimization and accessibility features. Performance is moderate, and SEO optimization is basic, with proper meta tags but no advanced structured data or Open Graph tags detected. Security posture is moderate but shows room for improvement. The domain lacks DNSSEC, modern security headers, and there is no visible enforcement of HTTPS or HSTS. The use of outdated JavaScript libraries may expose the site to vulnerabilities. Privacy and cookie policies are absent, indicating non-compliance with GDPR and related regulations. No incident response or security contact information is provided. Overall, the website is functional and provides relevant content for its audience but lacks modern security and privacy compliance features. The domain registration is consistent and appropriate for the business history, enhancing trustworthiness. Strategic improvements in security headers, privacy policies, and technology modernization are recommended to enhance the site's security and compliance posture.

VR Bank Heilbronn Schwäbisch Hall eG operates as a regional cooperative bank in Germany, providing banking and financial services primarily to local customers in the Heilbronn and Schwäbisch Hall regions. The website reflects a professional and consistent brand presence, targeting local retail banking clients with a focus on community and cooperative values. The business model centers on cooperative banking, offering a range of financial products and services tailored to its members and customers. The market position is that of a trusted regional bank with a medium-sized operational footprint.

S

Sparkasse Schwäbisch Hall - Crailsheim

sparkasse-sha.de

70

Sparkasse Schwäbisch Hall - Crailsheim operates as a regional savings bank in Germany, providing a broad range of financial services including retail banking, loans, investments, insurance, and real estate financing. The website targets both private and corporate customers with a comprehensive digital presence that supports online banking and customer engagement. The bank maintains a strong local market position with a focus on customer service and digital accessibility. Technically, the website is built on a modern CMS platform (likely Adobe Experience Manager) with a well-structured front-end using JavaScript and CSS. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. The presence of cookie consent mechanisms and privacy policies indicates compliance with GDPR and related regulations. From a security perspective, the site enforces HTTPS and employs session management features such as session timeout warnings. While explicit security headers are not visible in the provided data, the overall posture appears strong with no evident vulnerabilities or exposed sensitive data. However, the site could improve transparency by publishing explicit security policies and incident response procedures. Overall, the website is professional, trustworthy, and well-aligned with the business goals of a regional financial institution. It demonstrates good digital maturity and compliance, with minor recommendations for enhanced security documentation and header implementation.

A

Agencija WEB Studio

webstudio.ba

49

Agencija WEB Studio is a full service digital marketing agency based in Bosnia and Herzegovina, positioning itself as the first such agency in the country. The website presents a professional digital marketing service offering focused on business growth and client acquisition. The technical infrastructure is built on WordPress CMS, utilizing the All in One SEO plugin and a custom theme, indicating a moderate level of digital maturity. The website is mobile optimized and has good SEO practices but lacks comprehensive privacy and cookie policies. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Overall, the website is functional and professional but could improve in privacy compliance and security best practices to enhance trust and regulatory adherence.

S

Sparkasse KölnBonn

sparkasse-koelnbonn.de

73

Sparkasse KölnBonn is a prominent regional savings bank serving the Cologne and Bonn area in Germany. The institution offers a comprehensive range of financial services including checking accounts, investment products, securities trading, loans, and retirement planning. The website reflects a strong regional focus and commitment to customer service, supported by multiple contact channels and a chatbot feature. The bank is part of the larger Sparkassen-Finanzgruppe, reinforcing its market position and credibility. Technically, the website is built on Adobe Experience Manager (AEM), indicating a mature digital infrastructure. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Security measures such as HTTPS, strict security headers, and secure form handling are implemented, demonstrating a solid security posture. However, explicit security policies and incident response information are not prominently published, which could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, including clear privacy and cookie policies. The domain registration data aligns well with the business identity, supporting legitimacy. No suspicious or malicious indicators were found, and the content is safe for general audiences. Strategic recommendations include publishing a dedicated security policy and incident response page, implementing a vulnerability disclosure policy, and continuing to monitor third-party scripts for security risks to enhance trust and compliance further.

F

FiXiT d.o.o.

fixitweb.studio

47

FiXiT d.o.o. operates as a small web design studio presenting its portfolio through the Fixit Design Studio website. The company focuses on delivering web design and development services, targeting businesses and individuals seeking digital solutions. The website showcases a professional design with clear branding and a portfolio emphasis, positioning itself as a niche player in the technology sector. Technically, the site is built on WordPress using the Elementor page builder, leveraging modern web technologies such as jQuery and PHP. The site is moderately optimized for performance and mobile responsiveness, with basic accessibility features and good SEO practices. Security-wise, the website benefits from HTTPS and domain transfer protection but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is minimal, with no visible privacy or cookie policies, which could pose compliance risks. Overall, the site is professional and safe but would benefit from enhanced security and privacy measures to strengthen trust and compliance.

The Volkshochschule Südlicher Breisgau operates as a regional adult education provider in Germany, offering a broad range of courses across multiple program areas including languages, health, culture, and professional development. The institution targets local citizens of all ages, emphasizing inclusivity and accessibility. Their website reflects a well-structured educational platform with clear course offerings and community engagement. Technically, the site is built on a proprietary CMS (CMX), uses modern web technologies, and is mobile-optimized with good accessibility features. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and explicit incident response information. Privacy compliance is partially met with a comprehensive privacy policy but missing cookie consent mechanisms. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

Volkshochschule Bodenseekreis is a regional adult education provider in Germany offering a broad range of courses and events across multiple disciplines including culture, health, languages, and digital skills. The website is well-structured, content-rich, and targets a general audience interested in lifelong learning. Technically, the site uses a proprietary CMS (CMX) with modern JavaScript and CSS, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some improvements in security headers and explicit policies could enhance trust. Privacy compliance is mostly met with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. Overall, the site is professional, trustworthy, and serves its educational mission effectively.

V

vhs Filderstadt

vhs-filderstadt.de

44

vhs Filderstadt is a medium-sized non-profit educational institution based in Germany, providing a wide range of adult education and cultural programs including language courses, art school offerings, health and fitness classes, and integration projects. The website is professionally designed using TYPO3 CMS, with good content quality and clear navigation targeting the general public interested in lifelong learning and cultural enrichment. The institution maintains an active social media presence and offers both in-person and online courses, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage and secure login forms, though improvements in security headers and cookie consent mechanisms are recommended. Overall, the website is trustworthy, compliant with GDPR, and well-aligned with the organization's mission and community role.

V

Volkshochschule Freiburg e.V.

vhs-freiburg.de

49

Volkshochschule Freiburg e.V. is a well-established adult education provider based in Freiburg, Germany, offering a broad spectrum of courses including languages, culture, health, and professional development. The organization targets adults seeking lifelong learning and integration support, positioning itself as a key regional educational institution with recognized certifications such as AZAV-Quacert and the Alpha-Siegel for accessibility. The website reflects a professional and accessible platform with clear navigation and comprehensive course offerings. Technically, the website is built on TYPO3 CMS, leveraging modern web technologies and accessibility tools like Eye-Able. It is hosted on a stable provider with secure HTTPS configuration and demonstrates good mobile optimization and SEO practices. The presence of cookie consent mechanisms and privacy policy pages indicates a strong commitment to GDPR compliance. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security policy and incident response contact information. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's identity, showing no suspicious registration patterns, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic improvements could include publishing a dedicated security policy and incident response details to further enhance transparency and trust.

The website 'Reden bewegen – WOHIN?' is a cultural and educational initiative by the Jüdisches Museum Frankfurt in cooperation with the Bundeszentrale für politische Bildung. It focuses on democratic education and remembrance culture through a mobile sound installation and workshops targeted at secondary school students and teachers. The project is positioned as a non-profit educational offering with municipal support, emphasizing political education and democratic awareness. Technically, the website uses standard web technologies including HTML5, CSS, and JavaScript with jQuery 1.12.3. The site is accessible, well-structured, and mobile-optimized but lacks advanced security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by updating libraries and implementing security best practices. Overall, the site is trustworthy, professional, and serves its educational mission effectively.