Security Directory

M

Main-Echo

main-echo.de

60

Main-Echo is a regional news media company serving Aschaffenburg and surrounding areas in Germany. The website provides news, event information, and local announcements targeting a general audience interested in regional developments. The business model is focused on regional news publishing with digital services including newsletters and push notifications. Technically, the site uses a modern CMS (fidion fCMS), integrates Google Tag Manager, Facebook SDK, and other analytics and advertising technologies, and is optimized for mobile devices with good SEO practices. Security posture is adequate with HTTPS enforced and consent management implemented, but lacks explicit security headers and published security policies. Privacy compliance is basic, with no explicit privacy or cookie policy pages found in the provided content. Overall, the site is professional, trustworthy, and aligned with its business purpose, but could improve transparency and security documentation.

ASDA is a major UK-based supermarket and grocery retailer offering online shopping with home delivery and click-and-collect services. The website reflects a mature e-commerce platform with a strong market position in the retail sector. The digital infrastructure leverages modern technologies such as React, Google Tag Manager, and OneTrust for privacy compliance, indicating a high level of digital maturity. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response information are not publicly detailed. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting ASDA's enterprise-level retail operations.

S

Schauspiel Frankfurt

schauspielfrankfurt.de

56

Schauspiel Frankfurt is a cultural institution specializing in theatrical performances and related services such as guided tours, ticket sales, and subscriptions. The website presents a professional and consistent brand image targeting theater enthusiasts and the general public in Frankfurt, Germany. It maintains a digital magazine and active social media presence to engage its audience. The business model is focused on live cultural events and audience engagement through subscriptions and ticketing. Technically, the website is built on the spiritec WebCMS platform tailored for theaters and opera houses. It uses modern web technologies including JavaScript and CSS, with video integration for promotional content. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Hosting is provided by spiritec-server.de, indicating a specialized hosting environment. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is provided. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with a clear privacy policy and cookie banner. Overall, the website is trustworthy and professional with a solid digital presence. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance maturity.

B

BookGazette!

bookgazette.xyz

55

Book Gazette is a small independent media platform based in Germany focused on literary reviews, podcasts, and profiles of independent book publishers. The website offers curated content in German targeting readers interested in discovering books from independent publishers. Technically, the site uses modern web standards including HTTPS, JSON-LD structured data, and CDN-hosted assets, delivering a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally presented but could improve in security and privacy transparency.

R

Rotpunktverlag AG

rotpunktverlag.ch

67

Rotpunktverlag AG is a well-established Swiss publishing company specializing in politically engaged and culturally relevant literature, including fiction, political non-fiction, and travel guides. The company has a strong regional presence in Switzerland and a loyal target audience of literature enthusiasts. Their business model includes book publishing, event hosting, and community engagement through shareholder participation and project funding. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and uses Google Tag Manager for analytics. Hosting assets on Amazon AWS indicates a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and CSRF protections, but could be improved with explicit security headers and published incident response policies. Overall, the website demonstrates a high level of professionalism and trustworthiness, with transparent contact information and social media presence. Privacy compliance is adequate with a privacy policy and cookie policy present, though lacking an explicit cookie consent mechanism. No signs of malicious activity or content safety concerns were found. Strategically, the company should enhance its security and privacy posture by publishing a security policy, incident response contacts, and implementing a cookie consent mechanism to improve GDPR compliance and user trust.

N

Neptun Verlag

neptunverlag.ch

52

Neptun Verlag is a well-established Swiss publishing house founded in 1946, specializing in a diverse range of literary works including novels, biographies, children’s books, and regional literature. The company operates a professional website with an integrated webshop, targeting readers primarily in Switzerland and the German-speaking market. Their market position is that of a niche regional publisher with a strong historical presence and a focus on Swiss culture and literature. Technically, the website is built on a custom HESCOM Web Framework, featuring modern web technologies and good mobile optimization, though some improvements in accessibility and security headers are recommended. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks published security policies and cookie consent mechanisms, which are important for GDPR compliance. Overall, the site is professional, trustworthy, and content-rich, supporting the company’s credibility and business goals.

B

bilgerverlag

bilgerverlag.ch

52

bilgerverlag.ch is the website of an independent Swiss publishing house specializing in world literatures and literary works. The site showcases a catalog of books, authors, and literary events, targeting readers, bookshops, and literary communities. The business model centers on publishing, sales, and cultural engagement through events and previews. The website is built on the eZ Publish CMS platform, utilizing modern JavaScript libraries such as jQuery and YUI. The technical infrastructure is moderately optimized with basic mobile responsiveness and accessibility features. Security posture is adequate with HTTPS usage but lacks explicit security headers and cookie consent mechanisms, which are recommended for compliance and enhanced protection. Contact information is primarily via email and a search form, with no phone numbers or physical addresses explicitly listed. The WHOIS data aligns well with the business profile, indicating legitimacy and consistency. Overall, the website is professional and trustworthy but could improve privacy compliance and security best practices.

C

Christoph Merian Verlag

merianverlag.ch

71

Christoph Merian Verlag is an independent Swiss publishing company specializing in books related to architecture, art, culture, society, and regional topics focused on Basel. The company has a well-established market presence since 1976 and operates an e-commerce platform for book sales alongside event hosting. The website is professionally designed with consistent branding and good content quality, targeting a general audience interested in cultural and architectural publications. Technically, the site uses Magnolia CMS and integrates Google Analytics and Tag Manager for tracking, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent banners. Overall, the site demonstrates high business credibility and trustworthiness.

A

Arisverlag

arisverlag.ch

64

Arisverlag is a small Swiss book publisher and online retailer founded in 2017, specializing in a curated selection of books and literary content targeting German-speaking audiences. The website serves as an e-commerce platform built on Shopify, offering a professional and well-branded user experience with integrated social media channels and a focus on literature and author engagement. Technically, the site is modern, mobile-optimized, and fast, leveraging Shopify's infrastructure and CDN services. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and incident response transparency. Overall, the website is trustworthy and professionally maintained, with no indications of malicious activity or content safety concerns.

K

Korbinian Verlag

korbinian-verlag.de

61

Korbinian Verlag is an independent book publisher based in Berlin, Germany, operating an e-commerce platform primarily through Shopify. The website showcases a curated selection of books and merchandise, targeting literature enthusiasts and general consumers interested in cultural and literary works. The business model focuses on direct online sales and brand building through social media and testimonials. Technically, the site leverages Shopify's robust e-commerce infrastructure, ensuring a modern, mobile-optimized, and accessible user experience with moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and formal security policies. Privacy compliance is basic with GDPR-related policies present. Overall, the site is professional, trustworthy, and safe for general audiences.

P

PROLIT Verlagsauslieferung GmbH

prolit.de

61

PROLIT Verlagsauslieferung GmbH is a medium-sized German service provider specializing in book distribution and publishing logistics. The company serves over 170 publishers and offers a broad catalog of approximately 41,000 titles. The website reflects a professional and content-rich platform targeting publishers and the book trade, with regular news updates and a partner program involving over 2,000 bookstores. Technically, the site is built using the Hugo static site generator, ensuring fast performance and good mobile optimization. Security posture is solid with HTTPS enabled, though some security headers and cookie consent mechanisms are missing. Contact information is clearly provided, enhancing trust and credibility.

B

Book2look International GmbH

book2look.de

46

Book2look International GmbH operates a specialized social media marketing platform focused on the book publishing industry. Their core offering is the creation of interactive book widgets called Biblets, which enable publishers, booksellers, and bloggers to showcase books with look inside features, multimedia content, and direct purchase links. The company has established a strong market presence with over 1,000 publishers worldwide, including major names, positioning itself as a key player in digital book marketing. Technically, the website is built on ASP.NET WebForms with modern JavaScript libraries and supports progressive web app features, hosted on Rackspace with HTTPS and monitoring via New Relic. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Overall, the site is professional, accessible, and trustworthy, serving a niche but global audience effectively.

F

Fondation Jan Michalski

fondation-janmichalski.com

57

Fondation Jan Michalski is a Swiss non-profit organization dedicated to literature and writing, offering writer residencies, a library, cultural events, and a literary prize. The foundation targets writers, literary professionals, and the general public interested in literature. The website reflects a niche cultural institution with a consistent brand and good content quality. Technically, the site uses modern JavaScript libraries such as GSAP and Barba.js for animations and page transitions, hosted behind Cloudflare DNS, but lacks DNSSEC and some security headers. The site is mobile-optimized and SEO-friendly but does not implement cookie consent mechanisms or publish detailed security or incident response policies. Social media integration is strong, enhancing outreach and trust.

M

morehotlist

morehotlist.com

59

morehotlist is a German-language online magazine dedicated to independent books and publishers, providing news, event information, and award announcements. The website targets readers and book enthusiasts interested in the independent literary scene. It operates as a niche media outlet with a small but consistent presence in the German market. The business model revolves around content publishing and community engagement through social media and subscriptions. The site is hosted on WordPress.com, leveraging Jetpack and other WordPress plugins for functionality and performance.

D

Deutscher Handwerkskammertag e.V.

handwerk-macht-schule.de

58

Handwerk macht Schule is an educational initiative operated by Deutscher Handwerkskammertag e.V., providing curriculum-aligned, free teaching materials that integrate handwerk themes into general school subjects. The website serves primarily German school teachers from primary to secondary levels, aiming to promote the handwerk sector and its relevance to modern education and career orientation. The platform enjoys recognition through prestigious awards such as the Comenius-EduMedia Medaille and Seal, underscoring its quality and impact. Technically, the site is built on TYPO3 CMS, employs privacy-conscious analytics (Matomo), and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and privacy-respecting analytics, though it lacks some security headers and explicit incident response information. Overall, the site is trustworthy, professional, and well-positioned within the German educational and handwerk ecosystem.

The website www.paintingsofsungminkim.at is currently inaccessible beyond a Cloudflare security challenge page that requires human verification. Due to this, no actual business content, contact information, or policies are available for analysis. The site appears to be protected by Cloudflare's Turnstile captcha mechanism, indicating a security posture that includes bot mitigation but also limits external analysis. Without access to the underlying content, it is not possible to assess the company's market position, services, or compliance status. The lack of visible metadata, forms, or external business links further restricts insight into the site's operations. Technically, the site is hosted behind Cloudflare, leveraging their security and performance services. However, no CMS, frameworks, or additional technologies are detectable from the challenge page. The security posture cannot be fully evaluated due to the lack of accessible content and headers. No privacy or cookie policies are found, and no contact or incident response information is available. Overall, the site is currently in a blocked state for analysis, resulting in a low AI score and limited insights. For a comprehensive evaluation, access beyond the Cloudflare challenge is necessary. The current security setup suggests a focus on preventing automated access, but it also impedes transparency and trust assessment.

P

Pädagogische Hochschule Weingarten

ph-weingarten.de

58

Pädagogische Hochschule Weingarten is a well-established public university in Germany specializing in educational sciences and teacher training. Founded in 1949, it offers a broad range of bachelor and master programs, emphasizing research-based and practice-oriented education. The institution maintains a strong regional presence and actively engages in knowledge transfer to society. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to students, educators, and researchers. Technically, the site uses modern web standards and privacy-conscious analytics (Matomo), hosted likely on a regional academic network (BelWü). Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally managed.

H

Domain Default page

hdw.dev

41

The website hdw.dev currently serves as a default placeholder page generated by Plesk, a hosting control panel platform. It does not represent an active business or service but provides informational content about Plesk and related tools such as Sitejet Builder and WP Guardian. The site targets web professionals and site owners interested in hosting management solutions. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting environment is likely managed via Plesk. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. The domain WHOIS data is privacy protected, limiting trust assessment. Overall, the site is functional as a placeholder but lacks business and security maturity.

Y

YoSushi

yosushi.com

70

YoSushi is a well-established UK-based sushi restaurant chain founded in 1999, offering a variety of Japanese-inspired dishes, dine-in services, takeaway, and sushi school classes. The website reflects a professional and consistent brand presence with a focus on fresh, sustainably sourced ingredients. The company maintains an active social media presence and employs modern digital marketing and analytics tools. Technically, the website uses Kentico CMS and integrates multiple tracking and consent management technologies, ensuring compliance with privacy regulations such as GDPR. Security posture is strong with HTTPS enforced, domain lock statuses, and cookie consent mechanisms, though DNSSEC is not enabled. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is user-friendly, mobile-optimized, and trustworthy, supporting the company's market position as a leading sushi restaurant chain in the UK.

Z

Zizzi

zizzi.co.uk

72

Zizzi is a well-established Italian restaurant group operating in the UK and Ireland, offering Italian dining experiences in uniquely designed restaurants. The website reflects a mature digital presence with strong SEO and marketing integrations, including Google Analytics, Tag Manager, and social media connectivity. The technical infrastructure is modern, leveraging WordPress with Yoast SEO and custom Propeller CMS assets, hosted likely on AWS, ensuring good performance and mobile optimization. Security posture is strong with HTTPS enforced and appropriate security headers, though explicit security policies and incident response information are not publicly available. Privacy compliance is robust with clear privacy and cookie policies and consent mechanisms. The WHOIS data is incomplete due to domain naming rules issues, which slightly impacts trust analysis but does not detract from the professional presentation and business credibility. Overall, the website is secure, professional, and trustworthy, serving a general audience with safe content.

B

Black Sheep Coffee

blacksheepcoffee.co.uk

72

Black Sheep Coffee is a specialty coffee brand established in 2013, offering specialty grade Robusta coffee beans and operating cafes, kiosks, and cocktail bars globally. The company leverages a Shopify-based e-commerce platform to sell coffee products and subscriptions, integrating third-party services such as Trustpilot for reviews, Recharge for subscriptions, and Weglot for translations. The website demonstrates a good level of digital maturity with responsive design, GDPR-compliant cookie consent, and performance optimizations. Security posture is strong with HTTPS enforcement and standard security headers, though explicit security policies and incident response contacts are not publicly available. Overall, the site is professional, trustworthy, and well-positioned in the specialty coffee e-commerce market.

I

Ionic

ionicons.com

62

Ionic's Ionicons website offers a premium open-source icon pack designed primarily for developers and designers working with the Ionic Framework and other platforms. The company, founded in 2014 and headquartered in Portugal, is a subsidiary of OutSystems, a recognized player in the technology sector. The website showcases a comprehensive and well-designed icon set with strong branding and a professional user experience. Technically, the site leverages modern web technologies such as StencilJS and Web Components, hosted behind Cloudflare, ensuring fast performance and mobile optimization. Security posture is solid with HTTPS enforced, though improvements like enabling DNSSEC and adding security headers are recommended. Privacy compliance is moderate, with cookie consent implemented but lacking explicit privacy and terms of service pages. Overall, the domain registration and business information are consistent and trustworthy, supporting a high legitimacy score.

S

S optic spol. s r. o.

soptic.cz

49

S optic spol. s r. o. operates a well-established private optical retail business in Prague, Czech Republic, with over 30 years of tradition. The company offers comprehensive eye care services including eyeglasses, contact lenses, eye examinations, and repairs, targeting consumers seeking professional and personalized optical solutions. The website reflects a mature digital presence with modern technologies such as Cookiebot for consent management, Google Tag Manager for analytics, and slick interactive UI components. The business demonstrates strong customer trust through detailed team profiles and positive customer reviews. Security posture is solid with HTTPS and consent mechanisms, though explicit security headers and formal privacy policies are missing, representing areas for compliance improvement. Overall, the website is professional, user-friendly, and trustworthy, supporting the company’s market position as a leading local optical retailer.

B

Bundesamt für Migration und Flüchtlinge

bamf.de

67

The Bundesamt für Migration und Flüchtlinge (BAMF) is a German federal government agency responsible for migration, asylum, refugee protection, integration, and voluntary return programs. The website serves as an official information and service portal targeting migrants, refugees, government entities, and the general public interested in migration-related topics in Germany. It offers comprehensive content, including thematic areas, news, publications, and service center information. The site is well-branded, professionally designed, and provides multi-language support to cater to diverse audiences. Technically, the website is built on the Government Site Builder CMS, a platform tailored for German federal administration websites. It uses modern web standards including HTML5, CSS, JavaScript, and structured data (JSON-LD) for enhanced SEO and accessibility. The site is mobile-optimized and accessible, with a moderate performance profile. Hosting is managed within the German federal infrastructure, ensuring reliability and compliance with government standards. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with opt-in for statistical tracking via Matomo. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a public security policy or incident response contact are not present, representing areas for improvement. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration and hosting details. Overall, the BAMF website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It effectively supports its mission to provide migration-related information and services to its target audience while maintaining a secure and user-friendly online presence.

L

Lehrer-Online

lehrer-online.de

67

Lehrer-Online is a well-established German educational platform providing over 20,000 quality-assured teaching materials, self-learning courses, and tools targeted at teachers and educators. The platform is built on TYPO3 CMS and integrates privacy-conscious analytics (Matomo) and advertising (AdSpirit) with a robust cookie consent mechanism. The website demonstrates a high level of professionalism, excellent content quality, and good technical infrastructure with modern security practices such as HTTPS and Content-Security-Policy headers. However, explicit contact information and formal security policies are not prominently published, which could be improved to enhance trust and compliance. Overall, Lehrer-Online presents a secure, privacy-aware, and user-friendly environment for its educational audience.

G

greenants. Mosbach, Mosbach GbR

greenants.de

46

greenants. Mosbach, Mosbach GbR is a small-sized full-service internet agency based in Germany, specializing in digital transformation consulting, TYPO3 CMS development, e-commerce solutions, and online marketing services. The company targets businesses seeking to leverage digital opportunities and improve their online presence through tailored strategies and technical implementations. Their website demonstrates a professional and consistent brand image with comprehensive service descriptions and client references, positioning them as a trusted regional player in the technology sector. Technically, the website is built on TYPO3 CMS, integrates modern marketing and analytics tools such as Google Analytics and Facebook Pixel, and employs Cookiebot for GDPR-compliant cookie management. Hosting appears to be provided by a reputable provider (kasserver.com). The site is mobile-optimized with good SEO practices, though accessibility features are basic. Performance is moderate, with room for improvement in security headers and explicit incident response policies. From a security perspective, the site uses HTTPS with anonymized IP tracking for analytics and enforces cookie consent. However, no explicit security policies or incident response contacts are published. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the website's business identity, supporting legitimacy and trustworthiness. Overall, greenants.de presents a secure, professional, and GDPR-compliant digital presence suitable for its business model. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance its posture and trustworthiness.

D

Der faire Credit

derfairecredit.at

67

Der faire Credit is an Austrian online consumer credit provider offering fast, paperless loan applications with instant decisions and quick payouts. The website is professionally designed using WordPress and optimized for the Austrian market, targeting consumers seeking convenient financing solutions. The technical infrastructure includes modern web technologies and SEO optimization via Yoast plugin, but lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled, but missing security headers and contact information reduce trust. Overall, the site is legitimate and safe but requires improvements in privacy compliance and security transparency.

H

Happyworm Ltd

jplayer.org

52

jPlayer.org is the official website for jPlayer, a free and open source HTML5 audio and video media player plugin for jQuery and Zepto. Operated by Happyworm Ltd, the site serves a developer audience seeking cross-platform media playback solutions. The project is well-established since 2010 with an active community and GitHub presence, positioning it as a reputable player in the web media technology space. Technically, the site uses a modern JavaScript stack with jQuery, Zepto, and HTML5, supported by Cloudflare DNS and external analytics and social media integrations. However, some technical debt is evident in the lack of modern security headers and partial use of HTTP resources. Security posture is moderate with no critical vulnerabilities detected but lacking in privacy and cookie policy compliance. The domain registration is consistent and legitimate, with no privacy protection masking ownership, supporting trustworthiness. Overall, the site is professional and functional but would benefit from improved privacy compliance and security hardening.

T

Themes Camp

themescamp.com

49

Themes Camp is a small technology business specializing in the development and sale of professional WordPress themes and web templates. Their website targets website managers and developers seeking easy-to-use, customizable themes without coding. The company has a moderate market presence with over 12,500 users and partnerships with major platforms like Elementor and ThemeForest. Technically, the website is built on WordPress using Elementor and several plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and asynchronous loading of analytics scripts, but lacks some security headers and published policies. The absence of WHOIS data raises legitimacy concerns, though the website content and branding appear professional. Contact is available via a form but lacks direct emails or phone numbers. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

M

Münchener Hypothekenbank eG

muenchenerhyp-karriere.de

56

Münchener Hypothekenbank eG operates a professional career portal showcasing a wide range of job opportunities primarily in banking, IT, real estate valuation, compliance, and risk management. The company holds a solid market position as a regional mortgage bank in Germany, supported by its subsidiary M-Wert GmbH specializing in real estate valuation. The website demonstrates a moderate level of digital maturity, utilizing AngularJS and a specialized job widget for dynamic content delivery. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the domain and website appear legitimate and trustworthy, with clear business credibility and professional presentation.

D

DZ BANK AG

dzbank.com

66

DZ BANK AG is a leading German corporate and investment bank serving cooperative banks and their clients. The website demonstrates a mature digital presence with comprehensive information on corporate governance, compliance, sustainability, investor relations, and client services. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and privacy-conscious analytics tools such as Matomo and Usercentrics. Security posture is strong with HTTPS enforcement, security headers, and consent management, though the absence of a public security.txt and incident response contacts suggests room for improvement. The missing WHOIS data is a notable anomaly but does not detract from the professional and trustworthy nature of the website content. Overall, DZ BANK's website reflects a well-established financial institution with a strong emphasis on compliance and sustainability.

IPConcept is a specialized financial services company focused on fund administration and management solutions, operating primarily in Germany, Luxembourg, and Switzerland. It is a 100% subsidiary of DZ PRIVATBANK, providing services such as private label funds, alternative investment funds, risk management, order management, performance analysis, and reporting. The company targets asset managers, institutional clients, and banks, positioning itself as a reliable partner with a strong backing from a major bank. The website content is professional, well-structured, and GDPR compliant, reflecting a mature digital presence.

S

Sparkasse Göttingen

spk-goettingen.de

67

Sparkasse Göttingen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, credit cards, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong emphasis on secure and user-friendly online banking experiences. The bank maintains a solid market position within the Göttingen region, supported by comprehensive service offerings and a professional digital presence. Technically, the website is built on a modern infrastructure likely powered by Adobe Experience Manager CMS, utilizing JavaScript, CSS, and React components for dynamic content. The site is well-optimized for mobile devices and accessibility, featuring clear navigation and SEO best practices. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to data protection and compliance. From a security perspective, the website enforces HTTPS and includes session management features such as session timeout warnings. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It demonstrates a high level of digital maturity suitable for a financial institution, with recommendations focusing on enhancing security disclosures and incident response transparency.

G

Göttinger Kulturstiftung

kulturstiftung-goettingen.de

57

The Göttinger Kulturstiftung is a small non-profit cultural foundation affiliated with the city of Göttingen, Germany. It focuses on supporting cultural activities through funding and public information. The website serves as an informational portal for cultural funding opportunities and donation options, targeting local cultural organizations and citizens. The business model is centered on non-profit cultural promotion with a clear local focus. Technically, the website is built on a custom CMS platform (NOLIS) using standard web technologies such as JavaScript and CSS. It features a responsive design with accessibility options like font resizing and contrast toggling. The site is well-structured with clear navigation and SEO-friendly metadata. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

S

Stiftung Niedersachsen

stnds.de

54

Stiftung Niedersachsen is a regional cultural foundation dedicated to promoting and funding cultural projects throughout the German state of Niedersachsen. The foundation operates as a non-profit entity, supporting a wide range of cultural sectors including music, theater, museums, literature, and social culture. Their website reflects a professional and well-structured digital presence, targeting cultural institutions, artists, and non-profit projects within the region. The foundation's market position is that of a key regional cultural supporter with a clear focus on fostering cultural diversity and sustainability.

D

Access to this page has been denied

dreamstime.com

50

The website www.dreamstime.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) security challenge page requiring human verification. This prevents access to any meaningful content, metadata, or business information. The WHOIS query for the domain returned no match, indicating either a WHOIS server issue or domain registration anomaly, which limits the ability to verify domain ownership and legitimacy. The site uses modern web technologies such as JavaScript and Google Fonts but lacks visible security headers or privacy compliance information in the accessible content. Overall, the security posture and compliance status cannot be fully assessed due to the blocked content. The domain appears legitimate but lacks publicly available registration data and accessible website content for full evaluation.

A

Antares Project GmbH

antares.net

55

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

The website www.lernsax.de/wws/9.php appears to be a minimal content page primarily embedding an iframe with a session-based PHP URL. There is no visible business branding, metadata, or descriptive content to ascertain the company's market position or services. The technical infrastructure includes basic JavaScript libraries such as jQuery and local scripts, hosted on nameservers associated with bringe.net. The site lacks HTTPS information and security headers, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, limiting trust and compliance evaluation. Overall, the site appears to be an internal or restricted access portal rather than a public-facing business website.

M

Medienberatung NRW

bildungsmediathek-nrw.de

59

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

M

Meine Kirchenzeitung

tirolersonntag.at

66

Meine Kirchenzeitung is a regional media outlet focused on church and community news in Tirol, Austria, providing current news, reports, opinions, and images primarily related to religious and local topics. The website offers services such as news articles, ePaper subscriptions, event listings, and community photo sharing, targeting readers interested in faith and regional affairs. The business model is based on media publishing with advertising and subscription revenue streams. The site maintains consistent branding and professional editorial content, supported by author profiles and clear privacy policies.

Emmaus Innsbruck is a small non-profit organization affiliated with Caritas der Diözese Innsbruck, focused on supporting homeless and unemployed individuals with prior addiction issues. Their services include various labor and integration assistance programs, psychotherapeutic support, and a solidarity-based agricultural project. The website is professionally designed with clear navigation and relevant content tailored to their target audience. Technically, the site uses basic web technologies including an outdated jQuery version, lacks advanced security headers, and does not implement cookie consent mechanisms, indicating room for improvement in security and privacy compliance. Security posture is moderate with HTTPS usage but missing modern security best practices. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

Helium Development is a specialized technology company focused on building Shopify apps and providing website design services tailored to e-commerce merchants. Established in 2015, the company positions itself as a Shopify Expert, delivering reliable and customer-centric software solutions that enhance online business operations. Their website reflects a professional and consistent brand image, targeting Shopify merchants seeking custom app development and improved user experience. Technically, the website employs modern JavaScript technologies, integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar, and maintains good mobile optimization and SEO practices. Hosting and DNS configurations are standard, with domain registration secured through GoDaddy and DNS managed via NS1, although DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and domain registration locks, indicating good domain security hygiene. However, the absence of DNSSEC, security headers, and a public incident response contact or vulnerability disclosure page suggests areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Helium Development presents a trustworthy and professional online presence with moderate to strong security posture and compliance. Strategic enhancements in DNS security and security policy transparency would further strengthen their risk profile and customer trust.

T

troet.cafe

troet.cafe

73

troet.cafe operates as the largest German-speaking Mastodon instance, providing a federated social networking platform for users to connect, share, and explore content within the Fediverse. The platform emphasizes community engagement and social interaction without advertising or algorithmic interference. Technically, the site is built on Mastodon version 4.3.8, leveraging modern web technologies including React and WebSockets for real-time communication. The site is mobile-optimized and presents a consistent, professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses script integrity attributes, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the domain is privacy protected in WHOIS, which is typical for such platforms, and the site shows no signs of blocking or WAF interference, indicating good accessibility and trustworthiness.

S

sinma GmbH

sinma.de

60

sinma GmbH is a small German telecommunications company specializing in providing full-service internet solutions tailored for business customers. Their offerings include fiber optic leased lines, DSL with fixed IPs, web hosting, server housing, virtual servers, backup solutions, VPN networks, and related services such as domain management and firewalls. The company emphasizes high availability and security in their network solutions and has been operating since 1991, indicating a long-standing presence in the market. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting German business clients. From a technical perspective, the website employs basic web technologies including JavaScript and CSS without modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile optimization. There is no evidence of analytics or tracking scripts, which suggests minimal user tracking. However, the absence of security headers and explicit SSL/TLS information indicates room for improvement in technical security measures. Security posture evaluation reveals gaps such as missing privacy and cookie policies, lack of security headers, and limited contact information. No incident response or vulnerability disclosure information is provided, which could impact trust and compliance. The WHOIS data shows partial consistency with the website's claims but lacks detailed registrant information, limiting full legitimacy verification. Overall, the site is accessible without WAF or blocking mechanisms, and content safety is rated safe with no adult or questionable content. The overall risk assessment suggests the company maintains a moderate security and compliance posture suitable for its business scale but should prioritize implementing privacy policies, enhancing security headers, and expanding contact information to improve trust and regulatory compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enforcing HTTPS with proper security headers, and establishing clear incident response and vulnerability disclosure channels.

J

Juniper Square

junipersquare.com

10

Juniper Square is a leading provider of connected software and fund administration services tailored for private markets, including private equity, venture capital, and commercial real estate. The company offers a unified platform that streamlines fundraising, onboarding, investor relations, treasury, and reporting, serving over 2,000 general partners and managing over $1 trillion in investor equity. Their business model combines SaaS technology with fund administration services, targeting investment managers and their limited partners. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content relevant to their target audience. Technically, the website employs modern JavaScript frameworks such as Alpine.js and HTMX, integrates marketing and analytics tools like Marketo and Google Tag Manager, and uses tracking pixels including Reddit Ads. The site is mobile-optimized, fast-loading, and accessible, though it lacks explicit cookie consent mechanisms and some security headers. The SSL configuration is excellent, ensuring secure HTTPS connections. From a security perspective, the site demonstrates good practices such as HTTPS enforcement and no visible sensitive data exposure. However, the absence of security headers and a published security policy or incident response contact are areas for improvement. The WHOIS data for the domain is unavailable, which raises concerns about domain registration transparency and legitimacy, though the website content and business presence are professional and credible. Overall, Juniper Square's website presents a strong business and technical profile with minor gaps in privacy compliance and security transparency. Addressing these gaps would enhance trust and compliance posture.

The website wme-expo.com is currently inaccessible due to a security robot challenge screen implementing a proof-of-work CAPTCHA. This indicates the presence of a Web Application Firewall (WAF) or similar security mechanism blocking direct access to the site content. As a result, no meaningful business or contact information is available on the page. The domain is registered with Register SPA since 2021, with no privacy protection and no DNSSEC enabled. The site uses AWS Cloudfront CDN for hosting some assets. The technical infrastructure includes modern JavaScript features and Web Workers for the CAPTCHA challenge, but no CMS or frameworks are detected. Security posture is minimal but includes a custom CAPTCHA challenge to mitigate automated access. Privacy and cookie policies are absent, and no contact or incident response information is provided. Overall, the site is not currently accessible for full analysis, limiting the ability to assess business credibility or compliance.

ECV International operates as a prominent organizer of high-end international events, focusing on diverse sectors such as automotive, energy, manufacturing, and sustainability. The company hosts numerous conferences annually across multiple countries, targeting corporate executives, senior management, and industry experts. Their business model centers on delivering personalized event planning and management services, leveraging over 100 experts and a decade of experience. The website reflects a professional and consistent brand image with detailed event listings and global reach. Technically, the website employs modern JavaScript frameworks (Vue.js) and integrates major analytics platforms like Google Analytics and Baidu Analytics. Hosting is provided by Alibaba Cloud, ensuring reliable infrastructure. The site is mobile-optimized and demonstrates good SEO practices, though accessibility features are basic. Performance is moderate with asynchronous script loading. From a security perspective, the site uses HTTPS and implements consent management for tracking cookies, but lacks DNSSEC and explicit security headers. There is no published privacy policy or terms of service, which presents compliance risks. Contact information is limited to emails without phone or physical addresses. No incident response or security policy details are provided, indicating room for improvement in security posture. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy compliance, security hardening, and more comprehensive contact information to improve user trust and regulatory adherence.

T

Just a moment...

thepeopleevents.com

56

The website thepeopleevents.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which prevents direct content analysis. The domain is registered with GoDaddy.com, LLC since 2020 and uses Cloudflare DNS servers, indicating a legitimate setup. However, no business information, privacy policies, contact details, or content are publicly visible. The technical infrastructure relies on Cloudflare for security and DNS, but the lack of accessible content and metadata limits the ability to assess the website's business model, services, or compliance posture. Security posture is minimal from the public perspective, with no visible security headers or policies. Overall, the site appears to be protected by a WAF but lacks publicly accessible content for further evaluation.

D

Daitem

daitem.it

64

Daitem is a European leader in security and protection systems, specializing in wireless alarm and fire detection technologies. The company offers tailored solutions for private and tertiary sectors, emphasizing innovation with over 50 patents and a strong R&D team. Their products are manufactured in Europe, with a history dating back to 1977, positioning them as pioneers in wireless security technology. The website reflects a mature digital presence with modern JavaScript frameworks, mobile optimization, and integration of tracking tools like Google Tag Manager and FingerprintJS for client identification. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security and incident response policies are not published. Privacy compliance is addressed with comprehensive privacy and cookie policies, albeit lacking a cookie consent mechanism. Overall, the site is professional, trustworthy, and well-branded, targeting European private and business customers seeking advanced security solutions.

The website bettinivideo.com is currently inaccessible beyond a security check page that performs a browser integrity test and automatic redirect. The visible content is minimal and primarily serves as a gatekeeper, indicating the presence of a Web Application Firewall or similar security mechanism, likely BitNinja as referenced by the external link. The site appears to be running outdated CMS platforms (Joomla 1.5 and WordPress 2.5), which are no longer supported and pose significant security risks. No business, contact, or policy information is available on the accessible page, limiting the ability to assess the company's market position or services. The technical infrastructure shows signs of legacy technology with poor mobile optimization and accessibility.