Security Directory

B

Busch-Jaeger

busch-jaeger.nl

55

Busch-Jaeger is a well-established market leader in electrical installation and smart home products, with a history spanning over 140 years. The website reflects a mature business with a strong brand presence, supported by its parent company ABB Group. The site offers comprehensive product information, training, and support resources targeting both consumers and professionals in the energy and smart home sectors. Technically, the website is built on TYPO3 CMS, employs modern JavaScript modules, and integrates consent management via Usercentrics, indicating a good level of digital maturity. Security posture is strong with HTTPS enforced and consent defaults denying tracking until user approval, though explicit security headers and policies are not publicly visible. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, but could improve transparency by publishing privacy policies and security incident response information.

R

Rasch

rasch.de

63

Rasch is a well-established German company specializing in wallpaper products, with a history dating back to 1861. The website serves as an e-commerce platform offering a wide range of wallpaper collections, including self-adhesive and photo wallpapers, targeting general consumers interested in home decoration. The site is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Mouseflow for analytics and user behavior tracking, hosted on Manitu servers. Security posture is solid with HTTPS enabled and domain verification via Google and Facebook, but lacks explicit security headers and incident response information. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

L

Land Tirol, p.A. DVT-Daten-Verarbeitung-Tirol GmbH

meteo.report

45

Meteo.report is a regional weather information service operated by Land Tirol, p.A. DVT-Daten-Verarbeitung-Tirol GmbH, providing weather station data, precipitation, webcams, mountain weather, and model forecasts for the Euregio region. The website targets the general public interested in accurate and localized weather information. The technical infrastructure is based on the Hugo static site generator, Bootstrap for styling, and Leaflet.js for interactive maps, indicating a modern and maintainable digital platform. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is professional, trustworthy, and serves its informational purpose well, but could improve in privacy compliance and security best practices.

F

Freundeskreis des Deutschen Handballs e.V.

fddh.de

36

Freundeskreis des Deutschen Handballs e.V. is a small non-profit organization dedicated to supporting German handball through funding, event support, and promotion of inclusion, particularly for deaf athletes. The website serves as an information hub with news, newsletters, and downloadable resources targeting handball enthusiasts and community members. Technically, the site is built on WordPress 6.8.2, hosted on a German hosting provider, and demonstrates good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced but lacks security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

S

Stadt Offenbach am Main

offenbach.de

62

Stadt Offenbach am Main operates an official municipal website providing comprehensive information and services to its citizens, businesses, and visitors. The site features news, event listings, online services, and resources related to city governance and community engagement. It maintains a strong market position as the authoritative digital presence of the city government. The website is well-branded, professionally designed, and targets a broad audience including residents and tourists. The business model is focused on public service and information dissemination.

B

Bundesinstitut für Öffentliche Gesundheit

rauchfrei-info.de

64

The website www.rauchfrei-info.de is a professionally maintained, government-affiliated public health portal focused on tobacco cessation and related health education. It offers a variety of support services including forums, chat, telephone counseling, and educational resources, targeting smokers and individuals seeking to quit smoking in Germany. The site is well-positioned as a trusted source in the healthcare and non-profit sector with consistent branding and high-quality content. Technically, it is built on TYPO3 CMS with Matomo analytics, indicating a modern and privacy-conscious infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and secure forms, though some security headers and explicit security policies are not evident. Overall, the site is safe, mature content-wise, and trustworthy with no signs of blocking or WAF interference.

S

Survser

survser.com

63

Survser is a technology company specializing in customer feedback solutions through microsurveys tailored for E-Commerce and SaaS businesses. Their platform offers popup surveys, insightful reporting, sentiment tracking, and integrations to help businesses collect actionable customer insights in real-time. The website is professionally designed using modern web technologies such as React and Next.js, providing a responsive and user-friendly experience. The business model appears to be SaaS with a free trial to attract users. Technically, the site is well-implemented with good performance, mobile optimization, and SEO practices. Security posture is strong with HTTPS and standard security headers, though there is room for improvement in privacy compliance, particularly regarding cookie consent mechanisms. The absence of WHOIS data for the domain raises concerns about domain registration legitimacy, but the website content and structure suggest a legitimate business operation. Overall, Survser presents a solid digital presence with a focus on customer feedback solutions. Security and privacy practices are adequate but could be enhanced with explicit policies and disclosures. The lack of domain registration data should be investigated further to confirm legitimacy and reduce risk.

F

FrankfurtRheinMain International Office

find-it-in-frm.de

42

The website 'Find it in FRM' is operated by the FrankfurtRheinMain International Office, serving as a central information and contact point for international professionals and students relocating to the Frankfurt RheinMain region. It provides comprehensive guidance on immigration, employment, education, housing, and integration services, with multilingual support primarily in German and English. The platform is positioned as a regional government-affiliated service, offering free assistance and connecting users to relevant authorities and service providers. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates Google Tag Manager and Cookiebot for analytics and consent management. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Contact information is clearly presented, enhancing business credibility. No privacy policy or terms of service were detected, which is a compliance gap. Overall, the site is professional, trustworthy, and well-suited for its target audience, with moderate technical performance and good user experience.

J

JOBS IM SÜDWESTEN

jobs-im-suedwesten.de

61

JOBS IM SÜDWESTEN operates a regional job board targeting job seekers and employers in the Baden-Württemberg region of Germany, including areas such as Bodenseekreis, Schwarzwald, Hochrhein, and Karlsruhe. The platform aggregates job listings from local companies and other job portals, providing a comprehensive and user-friendly service for regional employment opportunities. The website features career advice content and tools for resume creation and job application management, positioning itself as a key regional employment resource. Technically, the website is built using modern web technologies including React and Next.js, hosted likely by the Suedkurier media group. It employs a consent management platform (Usercentrics) for GDPR compliance and integrates third-party services such as Tinypass for monetization or advertising. The site is mobile-optimized and SEO-friendly, with structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and uses privacy and cookie consent mechanisms, but lacks explicit security policies or incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness. Overall, JOBS IM SÜDWESTEN presents a professional, secure, and privacy-compliant platform with strong regional focus and good technical implementation. Strategic improvements could include publishing explicit security policies and enhancing security headers to further strengthen the security posture.

J

Jobs-im-Allgäu

jobs-im-allgaeu.de

66

Jobs-im-Allgäu is a regional online job portal serving the Allgäu region in Germany, providing job listings, employer profiles, and career advice to job seekers and employers. The platform is professionally designed, mobile-optimized, and integrates modern web technologies such as Next.js and React. It is supported by the Mediengruppe Allgäuer Zeitung, a regional media group, which enhances its market credibility. The website includes GDPR-compliant privacy and cookie policies with a consent mechanism, ensuring compliance with European data protection regulations. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. The site uses third-party scripts for consent management and paywall services but maintains a good balance between functionality and privacy. Overall, the platform is trustworthy, well-maintained, and serves a clear regional niche effectively.

P

PORR

worldofporr.com

55

The website worldofporr.com serves as a professional construction industry magazine for PORR, a well-established construction and infrastructure company. It provides blog articles and technical insights on various construction projects, targeting professionals and stakeholders in the construction and engineering sectors. The site uses TYPO3 CMS and modern web technologies, with a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to missing privacy and cookie policies. No direct contact information or incident response details are provided, which limits user trust and compliance. Overall, the site is professional and trustworthy but requires improvements in privacy and security transparency.

igus® GmbH is a global leader in manufacturing high-performance polymer components for motion applications, including energy chains, polymer bearings, flexible cables, and linear slides. The Slovakian localized website www.igus.sk serves industrial customers and engineers with comprehensive product information, digital configurators, and CAD resources. The company operates a large, well-structured digital presence with multiple country-specific domains, reflecting its extensive global market reach. Technically, the website employs modern JavaScript libraries, analytics tools, and responsive design, ensuring good user experience and performance. Security posture is solid with HTTPS enforcement and no visible vulnerabilities, though some security headers could be improved. Privacy and cookie policies are present and GDPR compliant, supporting strong privacy practices. Overall, the site is professional, trustworthy, and well-aligned with the company's business objectives.

igus® AB is a Swedish branch of the global igus® GmbH group, specializing in the development and manufacturing of high-performance polymer components such as energy chains, cables, bearings, and linear technology. The company serves a broad industrial audience with a strong focus on motion plastics® solutions, offering extensive product catalogs, configurators, and CAD resources. The website demonstrates a mature digital presence with multi-language support and comprehensive product and service information. Technically, the site uses modern JavaScript libraries, analytics tools, and secure HTTPS protocols, reflecting a well-maintained infrastructure. Security posture is strong with no visible vulnerabilities or exposed sensitive data, although explicit incident response and vulnerability disclosure information are not present. Privacy and cookie policies are well implemented with consent mechanisms, supporting GDPR compliance. Overall, the site is professional, trustworthy, and aligned with industry best practices.

igus® (India) Pvt. Ltd. is a subsidiary of igus GmbH, specializing in manufacturing and supplying high-performance polymer components for motion applications such as energy chains, polymer bearings, flexible cables, and linear slides. The company targets industrial sectors including automation, robotics, and manufacturing, providing both products and digital configurator tools to enhance customer experience. The website reflects a strong market position with comprehensive product offerings and a global footprint supported by localized country domains. Technically, the website employs modern web technologies and analytics tools, ensuring good performance, mobile optimization, and SEO. Security posture is robust with HTTPS, security headers, and no visible vulnerabilities, although explicit security policies and incident response information could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the business's industrial focus.

igus® Hungária Kft. is a Hungarian subsidiary of the global igus GmbH group, specializing in manufacturing and supplying high-performance plastic energy chains, flexible cables, and maintenance-free plastic bearings. The company targets industrial manufacturers and engineers, offering a broad product portfolio including ready-to-install cable systems, 3D printing services, and digital tools such as online configurators and CAD downloads. The website reflects a mature digital presence with localized content and multi-language support, positioning igus as a trusted leader in motion plastics technology within Hungary and internationally. The business model is B2B focused, serving over 188,000 customers worldwide across more than 50 industries.

igus® ApS is a well-established manufacturer and developer of high-performance polymer products including energy chains, flexible cables, maintenance-free bearings, and linear systems. The company operates a professional and comprehensive website targeting industrial customers, engineers, and manufacturers primarily in Denmark but with a global presence through multiple country-specific domains. The site offers extensive product information, configurators, CAD data, and digital services, reflecting a mature digital infrastructure. Technically, the website uses modern JavaScript libraries, analytics tools, and secure HTTPS protocols, ensuring good performance and user experience. Security posture is strong with appropriate headers and no visible vulnerabilities, although public security policies and incident response contacts could be improved. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, supporting a high level of business credibility.

igus GmbH operates the website igus.cl as a localized Chilean presence offering advanced motion plastics solutions including cable carriers, linear bearings, and automation components. The company is a global leader in manufacturing technical plastics for motion with a strong B2B focus serving diverse industrial sectors. The website demonstrates a mature digital infrastructure with modern technologies such as jQuery, Google Tag Manager, and Piwik PRO analytics, ensuring good performance and user experience. Security posture is strong with HTTPS enforcement and appropriate security headers, though explicit security policy and incident response contacts are not found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the parent company's branding and market positioning.

D

Deutsches Krebsforschungszentrum (DKFZ)

dkfz.de

64

The Deutsches Krebsforschungszentrum (DKFZ) is Germany's largest biomedical cancer research institution, employing over 3,000 staff and focusing on understanding cancer development, risk factors, prevention, diagnostics, and treatment. The website reflects a mature, well-funded public research entity with strong collaborations and translational research centers. Technically, the site is built on TYPO3 CMS with modern web technologies, optimized for performance, accessibility, and SEO. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site projects high professionalism and trustworthiness, supporting DKFZ's mission and public engagement.

Weidmüller Interface GmbH & Co. KG is a well-established enterprise specializing in industrial connectivity solutions, including products and services for connection technology, automation, and digitalization. The company targets industrial customers, system integrators, and device manufacturers globally, positioning itself as a leader in manufacturing and technology sectors. Their website reflects a mature digital presence with comprehensive product catalogs and solution offerings. Technically, the website employs modern web technologies such as Google Tag Manager and OneTrust for privacy compliance, and it is optimized for mobile and accessibility standards. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS registration data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional website and branding. Strategic recommendations include publishing detailed security policies and vulnerability disclosure information to enhance trust and compliance.

M

Moongate

moongate.id

68

Moongate is a technology company focused on building an attention asset protocol that leverages blockchain technology to transform the value exchange between consumers and brands. Their platform offers no-code tools for brands to deploy token campaigns, token gating, and rewards, integrating real-world activations with digital assets. The company targets brands and consumers interested in blockchain-based engagement and tokenization, positioning itself as an emerging player with backing from multiple venture capital and angel investors. Technically, the website is built on Webflow CMS, using modern web technologies including Google Fonts, Google Tag Manager, and JavaScript. The site is mobile optimized with good design quality and clear navigation. Hosting is provided by Webflow, and performance is moderate. However, some accessibility features are basic, and SEO optimization is good. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. There is no explicit privacy or cookie policy, nor a vulnerability disclosure or incident response policy, which are compliance gaps. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a moderate risk profile with good business credibility but needs improvements in privacy compliance and security best practices. Strategic recommendations include publishing privacy and cookie policies, implementing security headers, and establishing a vulnerability disclosure process.

U

Ultima Media Germany GmbH

cmx-conference.com

61

The CMxC website represents a professional event platform organized by Ultima Media Germany GmbH, focusing on corporate mobility and sustainable fleet management. It serves as a knowledge-sharing and networking hub for professionals involved in corporate mobility, including fleet managers, IT, HR, and procurement. The site is well-structured, content-rich, and uses modern web technologies such as TYPO3 CMS and Google Tag Manager, with embedded privacy compliance tools. The event is positioned as a leading conference in Germany for corporate mobility and sustainability, featuring a strong lineup of industry experts and sponsors.

V

verlag moderne industrie GmbH

automotive-battery-conference.com

63

The website represents a professional and well-established international conference focused on automotive battery technology, organized by verlag moderne industrie GmbH. It targets industry experts and professionals involved in battery technology, production, strategy, and regulation. The site provides comprehensive event details, speaker information, and networking opportunities, positioning itself as a key niche event in the energy and transportation sectors. Technically, the site is built on TYPO3 CMS with modern web technologies and includes privacy compliance mechanisms such as Google Consent Mode and a comprehensive privacy policy. Security posture is good with HTTPS usage and no visible vulnerabilities, though security headers are not explicitly detected. The WHOIS data is unavailable, which slightly reduces transparency but does not significantly impact trust given the professional presentation and detailed content. Overall, the site scores well in content quality, technical implementation, security, privacy compliance, and business credibility.

D

DASDING / Südwestrundfunk - Anstalt des Öffentlichen Rechts

dasding.de

58

DASDING is a regional public radio station serving Baden-Württemberg and Rheinland-Pfalz in Germany, operated under the Südwestrundfunk public broadcasting organization. The website offers a comprehensive digital platform featuring live radio streaming, video livestreams, podcasts, music discovery, and event information targeting a young audience. The site is professionally designed with consistent branding and rich multimedia content, reflecting a mature digital presence. Technically, the site employs modern web standards, including responsive design, SVG icons, and multiple audio streaming formats, supported by analytics tools such as Chartbeat and Piano. Security posture is generally good with HTTPS enabled and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are absent. Privacy compliance is limited by the lack of visible privacy and cookie policies or consent mechanisms. Overall, the site is trustworthy and credible, aligned with its public broadcaster status.

S

SWR/Südwestrundfunk - Anstalt des Öffentlichen Rechts

swr4.de

63

The website www.swr.de/swr4 is the official regional portal for SWR4, a public radio station operated by Südwestrundfunk (SWR), a major public broadcaster in Germany. It offers regional news, practical lifestyle tips, music programming, and event information targeted primarily at audiences in the Rheinland-Pfalz and Baden-Württemberg regions. The site demonstrates consistent branding and professional content quality, reflecting its position as a trusted media entity. Technically, the site uses modern web technologies including lazy loading, SVG icons, and analytics tools such as Chartbeat and Piano Analytics, ensuring good mobile optimization and accessibility. However, explicit privacy and cookie policies are not found in the provided content, and no direct contact information for security or incident response is disclosed. The domain registration data aligns well with the public broadcaster's identity, supporting high legitimacy and trustworthiness.

D

Deutscher Tourismusverband e.V.

deutschertourismusverband.de

55

The Deutscher Tourismusverband e.V. is a prominent non-profit umbrella organization representing tourism interests across Germany. It acts as an advocate, networker, and catalyst for strengthening the tourism economy, developing infrastructure, and promoting sustainable quality tourism. The website reflects a professional and consistent brand presence, targeting regional and local tourism stakeholders. Technically, the site is built on TYPO3 CMS, leveraging modern consent management via Cookiebot and analytics through Matomo, indicating a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in its sector.

D

Delegation of the European Union to Bosnia and Herzegovina & European Union Special Representative in Bosnia and Herzegovina

europa.ba

72

The Delegation of the European Union to Bosnia and Herzegovina serves as the official representation of the EU in Bosnia and Herzegovina, providing comprehensive information on EU activities, projects, and policies in the country. The website is professionally designed, well-structured, and targets a broad audience including citizens, media, and stakeholders interested in EU-Bosnia relations. Technically, the site is built on Drupal 10 with modern web standards, ensuring good performance, mobile responsiveness, and accessibility. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response details are not published. Privacy compliance is robust, featuring clear privacy and cookie policies with consent mechanisms aligned with GDPR. The domain is part of the official europa.eu space, managed by EU authorities, ensuring high legitimacy despite the absence of WHOIS details due to privacy policies. Overall, the site reflects a mature, trustworthy, and authoritative EU governmental presence in Bosnia and Herzegovina.

T

TIMOCOM GmbH

timocom.gr

60

TIMOCOM GmbH operates a leading European digital marketplace for road freight logistics, offering services such as freight exchange, closed freight exchange, transport orders, and interfaces for integration with TMS and ERP systems. The company, founded in 1997 and headquartered in Germany, serves a large user base exceeding 156,000 users and facilitates over 228 million freight and vehicle offers annually. The website is professionally designed, multilingual, and optimized for performance and accessibility, reflecting a mature digital infrastructure supported by HubSpot and Azure CDN technologies. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and no visible vulnerabilities. Legal and privacy compliance is evident with GDPR-aligned policies and clear contact information. Overall, TIMOCOM presents a trustworthy and authoritative presence in the transportation logistics sector.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

landwirtschaft-bw.de

64

The website www.landwirtschaft-bw.de is an official government portal managed by the Ministry of Nutrition, Rural Areas, and Consumer Protection of Baden-Württemberg, Germany. It serves as a comprehensive information and service platform focused on agriculture, food, and rural development. The site offers a wide range of resources including market data, advisory services, publications, event announcements, and online applications targeted primarily at agricultural businesses, advisors, and citizens within the region. The content is professionally curated, well-structured, and highly relevant to its audience, reflecting a strong government presence and authority in the sector. Technically, the website employs modern JavaScript libraries such as jQuery and jQuery UI, uses Matomo for privacy-conscious analytics, and is hosted on government infrastructure with PowerDNS nameservers. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent branding and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be more visible. No vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital infrastructure aligned with government standards, providing trustworthy and valuable services to its users. The domain registration and WHOIS data confirm legitimacy and consistency with the official government entity. Privacy compliance is well addressed with clear policies and consent mechanisms. Strategic recommendations include enhancing security header implementation, publishing incident response contacts and security.txt files, and improving transparency on data retention policies to further strengthen trust and compliance.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

mlr-bw.de

66

The website represents the official online presence of the Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg, a government ministry responsible for agriculture, rural development, consumer protection, forestry, animal health, and nutrition in the German state of Baden-Württemberg. It serves as an authoritative source of information for citizens, stakeholders in agriculture and forestry, and consumers. The site offers comprehensive content including news, press releases, service information, career opportunities, and links to related government portals and campaigns. The target audience includes the general public, professionals in agriculture and forestry, and government employees. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including responsive design, SVG icons, and asynchronous JavaScript. It employs Matomo analytics with a user consent mechanism, reflecting a mature approach to privacy and data protection. The site is well-optimized for accessibility and SEO, with clear navigation and structured content. From a security perspective, the site enforces HTTPS and integrates cookie consent for tracking. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the official government domain usage, indicating legitimacy. However, the site lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. Overall, the website demonstrates a strong digital maturity for a government entity, balancing comprehensive public service content with privacy and security considerations. Strategic improvements could include publishing detailed security policies and enhancing security header configurations to further strengthen its security posture.

T

Turun Sanomat

ts.fi

56

Turun Sanomat is a well-established Finnish media company providing news and information services primarily to the Finnish-speaking population. The website offers a broad range of news content, multimedia, and subscription services, positioning itself as a leading regional newspaper in Finland. The technical infrastructure includes modern JavaScript libraries, Google Tag Manager, and Facebook SDK for analytics and advertising, indicating a mature digital presence. Security posture is adequate with HTTPS enabled and no visible exposed sensitive data, but lacks explicit security headers and formal privacy/cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security best practices.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

verbraucherinfo-bw.de

63

The website 'verbraucherinfo-bw.de' is an official consumer information portal managed by the Ministry of Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides statutory information on food and feed safety, including official control results and regulatory updates. The site targets consumers within the Baden-Württemberg region, offering transparency and compliance with legal obligations under German and EU law. The business model is public service and government information dissemination, with a medium-sized scope consistent with regional government operations. Technically, the site employs a modern JavaScript stack including jQuery and jQuery UI, with privacy-conscious analytics via Matomo. The hosting and DNS infrastructure appear stable and government-affiliated. The site is mobile-optimized and accessible, with good SEO basics and consistent branding. Performance is moderate but acceptable for a government portal. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The privacy policy and cookie policy are comprehensive and GDPR compliant. Overall, the site presents a low-risk profile with strong trust indicators typical of government portals. Recommendations include enhancing security headers, publishing incident response information, and adding explicit contact details for security and data protection officers to improve transparency and compliance.

L

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Bawü)

xn--baw-joa.social

67

BaWü.social is a Mastodon social networking instance operated by the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI Bawü), a governmental data protection authority in Germany. The platform serves as a privacy-focused, non-commercial social media service targeting residents and stakeholders in Baden-Württemberg interested in data protection and transparent communication. The website is well-branded, consistent, and provides a good user experience with a focus on privacy and federated social networking. Technically, the site runs Mastodon version 4.3.6 with modern web technologies including React and WebSocket streaming. The infrastructure appears stable and moderately performant with good mobile optimization. Security practices include HTTPS enforcement and subresource integrity, though some security headers are missing. Privacy compliance is good with a clear privacy policy, but lacks a cookie consent mechanism and terms of service. The security posture is solid with no visible vulnerabilities or exposed sensitive data. The WHOIS data confirms legitimacy with consistent registration details matching the governmental entity. No advertising or tracking services are detected, supporting the privacy-centric mission. Overall, the site is trustworthy, safe, and professionally maintained. Strategic recommendations include adding explicit security headers, implementing cookie consent, publishing a security policy and incident response contacts, and adding a vulnerability disclosure or security.txt file to enhance transparency and security readiness.

S

Städtisches Klinikum Karlsruhe gGmbH

klinikum-karlsruhe.de

48

Städtisches Klinikum Karlsruhe gGmbH operates the largest hospital in the Mittlerer Oberrhein region of Germany, providing comprehensive healthcare services including inpatient and outpatient care, emergency services, specialized clinics, and medical education. The institution is recognized as a maximum care hospital and serves as a teaching hospital for the University of Freiburg. The website reflects a mature digital presence with detailed information targeting patients, medical professionals, and prospective employees. Technically, the site is built on TYPO3 CMS, hosted by cron IT GmbH, and employs modern web technologies such as SVG icons and responsive design. However, there is room for improvement in security posture, including the implementation of security headers and explicit incident response policies. Privacy compliance is partially addressed with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain and website content are consistent with a legitimate healthcare institution with a strong market position in its region.

L

Landratsamt Sigmaringen

landkreis-sigmaringen.de

50

Landkreis Sigmaringen operates an official government website providing comprehensive information and services to residents and stakeholders within the region. The site offers detailed navigation covering citizen services, administration, cultural events, and economic development. The business model is focused on public service delivery as a regional government authority in Germany. Technically, the website is built on the cEasy CMS platform, employs modern web standards, and integrates privacy-conscious analytics (Matomo) with cookie consent mechanisms. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, reflecting a mature digital presence for a government entity.

A

Autoriteit Consument & Markt (ACM)

consuwijzer.nl

71

ACM ConsuWijzer is the official Dutch government consumer rights advisory portal operated under the Ministry of Economic Affairs. It provides practical advice, example letters, and step-by-step guides to help consumers understand and exercise their rights. The website targets consumers in the Netherlands and serves as a trusted source of government-backed consumer information. The business model is informational and advisory, with no commercial transactions. The site is well positioned as a primary government resource in the consumer protection sector. Technically, the website is built on Drupal CMS, employing modern web standards including responsive design, SVG icons, and accessibility features. The site is mobile-optimized and offers good SEO practices. Analytics are implemented via Siteimprove, with minimal user tracking and GDPR-compliant cookie consent mechanisms. From a security perspective, the site uses HTTPS and cookie consent banners, but lacks explicit security headers and published security policies or incident response information. No vulnerabilities or suspicious activities were detected. The WHOIS data confirms the domain is registered to the official government entity, reinforcing legitimacy. Overall, ACM ConsuWijzer presents a professional, trustworthy, and secure platform for consumer advice. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

L

Lewiatan Holding S.A.

wybieramlokalne.pl

39

Lewiatan Holding S.A. operates wybieramlokalne.pl as a blog platform promoting local food products sourced from nearby producers in Poland. The website emphasizes supporting local communities and producers by providing fresh, quality products with short transport distances. The business targets consumers interested in local and sustainable food choices, leveraging its established market position in the Polish retail sector. Technically, the site is built on WordPress 6.7.2, uses Google Analytics and Tag Manager for tracking, and loads Google Fonts and SVG icons for UI. The site is mobile-optimized with a good user experience and clear navigation. Security posture is moderate with HTTPS enabled but lacks advanced security headers and DNSSEC. Privacy compliance is weak due to missing privacy and cookie policies and no consent mechanisms. Contact information is clearly provided, enhancing business credibility.

A

Autoriteit Consument & Markt (ACM)

acm.nl

74

The Autoriteit Consument & Markt (ACM) is an independent Dutch government authority focused on ensuring well-functioning markets for consumers and businesses. The website serves as a comprehensive portal for market supervision, consumer protection, and regulatory enforcement across sectors such as energy, telecommunications, transport, and healthcare. It provides key services including reporting violations, market information, and public communications. The ACM positions itself as a trusted regulator with a clear mission and strong public engagement.

G

Government Executive

govexec.com

76

Government Executive is a leading media organization providing news, research, and events focused on the federal government's executive branch. The website targets federal employees, government officials, and stakeholders interested in government operations. It offers a wide range of content including news articles, podcasts, newsletters, and sponsored content, positioning itself as a trusted source in the government sector. Technically, the site is built on a Django CMS with Bootstrap 4, leveraging modern analytics and marketing tools such as Google Analytics, HubSpot, Segment, and Facebook Pixel. The site is well-optimized for mobile and accessibility, with good SEO practices and a professional design. Security-wise, the site enforces HTTPS and uses privacy and cookie consent mechanisms, though explicit security headers could be further verified. The WHOIS data is unavailable or privacy protected, but the site's branding and content quality strongly indicate legitimacy. Overall, the site scores well on content quality, technical implementation, security posture, privacy compliance, and business credibility.

A

a11y.info

a11y.info

67

a11y.info operates as a niche Mastodon social networking server dedicated to the accessibility and inclusion community. Founded in 2018 and hosted under a US-based domain, it provides an open platform for users interested in digital accessibility topics. The website serves as a community hub with Mastodon integration, offering trending posts and user engagement features. The platform is small in scale with approximately 20 active users, reflecting a focused and specialized audience. Technically, the site leverages Mastodon version 4.4.1 with modern JavaScript frameworks and is hosted with reputable DNS and registrar services. The site demonstrates good mobile optimization and accessibility features, aligning well with its mission. Security posture is solid with HTTPS enforced and domain transfer protections in place, though DNSSEC is not enabled and security headers are absent, indicating room for improvement. Privacy compliance is partial; a privacy policy exists but cookie consent and terms of service are missing. No direct contact information or incident response details are provided, which may limit user trust and compliance readiness. Overall, the site is professionally presented with consistent branding and trustworthy domain registration, but could enhance security and privacy practices to better serve its community and regulatory requirements.

L

Localcities

localcities.ch

65

Localcities is a Swiss-focused digital platform providing residents and stakeholders with comprehensive municipality-related information including events, clubs, contacts, weather, emergency numbers, and directories. The platform serves as a centralized hub for local community engagement and information dissemination, targeting Swiss municipalities and their inhabitants. Technically, the website employs modern web technologies including responsive design, SVG icons, and Google Tag Manager for analytics, ensuring a good user experience across devices. The presence of cookie consent and privacy policies indicates attention to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are absent. Overall, the website is professional, trustworthy, and well-positioned in its niche, with room for improvement in explicit security disclosures and contact transparency.

D

De Groene Koepel

degroenekoepel.nl

49

De Groene Koepel is a well-established Dutch non-profit organization founded in 2013 that connects nature campers with natural camping sites in the Netherlands and surrounding countries. It operates the largest network in natural camping in the region, providing recognition, quality assurance, marketing, knowledge sharing, and advocacy services to camping site owners and the broader recreation sector. The website reflects a professional and consistent brand image with clear messaging targeting nature campers and site managers. Technically, the site is built on WordPress using modern Gutenberg blocks and integrates Cookiebot for GDPR-compliant cookie management. The site is hosted by a reputable Dutch registrar with DNSSEC enabled and uses HTTPS with good SSL configuration. Security posture is solid but could be improved by adding explicit security headers and publishing a security policy or incident response contacts. Overall, the site demonstrates strong privacy compliance and business credibility with active social media engagement and clear contact information.

H

HAN University of Applied Sciences

han.nl

75

HAN University of Applied Sciences is a large Dutch educational institution offering a wide range of programs including bachelor, master, associate degree, and post-hbo courses. It serves diverse audiences such as students, professionals, and mbo'ers, positioning itself as a key regional player in applied sciences education. The website reflects a mature digital presence with modern technologies, responsive design, and comprehensive content that supports its educational mission. Security posture is strong with HTTPS enforcement, consent management via Cookiebot, and no visible vulnerabilities. Privacy compliance is well addressed with clear policies and GDPR adherence. Overall, the site demonstrates high professionalism and trustworthiness, supporting HAN's reputation as a credible educational provider.

HAN University of Applied Sciences is a well-established educational institution in the Netherlands offering a wide range of English-taught Bachelor and Master programs targeted at international students. The university emphasizes practice-based education and has a strong online presence with comprehensive information about programs, admissions, research, and collaboration. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content, reflecting a mature digital infrastructure. Technically, the site uses modern JavaScript frameworks (likely Vue.js), Google Tag Manager for analytics, and Cookiebot for consent management, indicating compliance with privacy regulations. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness given the strong branding and external references. Overall, the site represents a credible and professional educational entity with a solid digital presence.

L

LES EDITIONS DIAMOND

ed-diamond.com

60

LES EDITIONS DIAMOND operates a professional online boutique offering subscriptions and single-issue sales of specialized technology magazines focused on Linux, cybersecurity, embedded systems, and open source. The company targets IT professionals and enthusiasts with a niche market presence in France. The website is well-structured, mobile-optimized, and provides multiple digital and print reading options, including a digital content platform named Diamond Connect. Technically, the site uses modern web technologies and a PrestaShop CMS, with good security practices including HTTPS and security headers. No critical vulnerabilities or security incidents were detected. Privacy and cookie policies are present and GDPR compliant. Overall, the website demonstrates a mature digital presence with a strong business credibility and trustworthy user experience.

A

Avrios

avrios.com

63

Avrios is a cloud-based fleet management software provider targeting fleet managers and administrators primarily in Europe. The platform offers comprehensive tools for digitizing fleet data, automating workflows, managing compliance, and reducing costs. The website demonstrates a mature digital presence with multi-language support, professional design, and clear calls to action such as free trials and demos. Technically, the site leverages modern web technologies including Webflow CMS, Google Tag Manager, and privacy-focused analytics tools like Usermaven and Plausible, combined with Usercentrics for consent management. Security posture is strong with HTTPS, GDPR compliance, and TÜV-certified data protection, though explicit incident response and vulnerability disclosure policies are not publicly found. The domain WHOIS data is not publicly available, likely due to privacy protection, which is common for SaaS businesses. Overall, Avrios presents a credible and professional business with a solid technical and security foundation.

V

Vimcar

vimcar.com

60

Vimcar is a German-based company specializing in digital vehicle management solutions, including digital logbooks, GPS tracking, and fleet management software. The company targets self-employed individuals, fleet managers, and tax consultants, offering automated and tax-compliant vehicle documentation services. Vimcar holds reputable certifications such as TÜV and KPMG and is recommended by DATEV and DStV, positioning itself as a trusted player in the transportation software market. The website is professionally designed, mobile-optimized, and uses modern technologies like Webflow CMS, Google Tag Manager, and Usercentrics for consent management. Security posture is solid with HTTPS and data redaction enabled, though some security headers and explicit policies are missing. Overall, Vimcar demonstrates a mature digital presence with good privacy compliance and business credibility.

C

Commune Granges-Paccot

granges-paccot.ch

61

The website www.granges-paccot.ch serves as the official digital portal for the municipality of Granges-Paccot in Switzerland. It provides residents and visitors with comprehensive information about local government administration, community services, education, environment, transport, and events. The site supports eGovernment initiatives with online services such as a virtual counter for administrative procedures and access to municipal documents. The target audience primarily includes local residents and stakeholders interested in municipal affairs. Technically, the website is built on the i-web.ch CMS platform, utilizing modern web technologies including JavaScript modules and responsive CSS. The site is mobile-optimized and accessible, with a clear navigation structure and good SEO practices. Performance is moderate, with no critical technical issues detected. The site employs HTTPS and anonymized web statistics hosted in Switzerland, reflecting a commitment to privacy. From a security perspective, the website demonstrates a solid baseline with HTTPS encryption and secure form handling. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No security headers were detected in the provided data, suggesting room for improvement in hardening the site against common web threats. No vulnerabilities or suspicious activities were identified. Overall, the website is a trustworthy and professional municipal portal with good content quality and user experience. The domain registration aligns with the municipal entity, reinforcing legitimacy. Strategic recommendations include enhancing security posture by adding security headers, publishing a security policy, and establishing incident response contacts to improve transparency and resilience.

I

Independence Hall Association

independencehallassociation.org

57

The Independence Hall Association (IHA) is a longstanding non-profit organization dedicated to educating the public about American history. Founded in 1942, it operates the website USHistory.org, which serves as a major online resource for US history education, attracting millions of visitors globally. The organization is governed by a volunteer board and holds 501(c)(3) tax-exempt status, emphasizing its educational mission and non-commercial nature. The website content is well-structured, professionally designed, and targets educators, students, and history enthusiasts. Technically, the website is built on the Squarespace platform, leveraging modern web technologies such as Google Fonts and SVG icons. The site is mobile-optimized and performs moderately well, though there is room for improvement in accessibility and SEO. Security measures include HTTPS with HSTS enabled, but additional security headers could enhance protection. Privacy and cookie policies are notably absent, which is a compliance gap. Overall, the security posture is solid with no evident vulnerabilities or exposed sensitive data. The lack of WHOIS transparency is common for privacy reasons but slightly impacts trust. The site does not employ tracking or analytics scripts in the provided content, indicating a minimal user tracking approach. Strategic recommendations include implementing comprehensive privacy and cookie policies, enhancing security headers, and improving accessibility features to strengthen compliance and user trust.

I

ImageMagick Studio LLC

imagemagick.org

58

ImageMagick Studio LLC operates the ImageMagick website, providing a powerful open-source software suite for digital image processing, editing, and conversion. The company targets web developers, graphic designers, and researchers, offering command-line tools and APIs for versatile image manipulation. The website reflects a mature, well-established project with a strong community presence and open-source ethos. Technically, the site uses modern web technologies including Bootstrap and Google services, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and consent management, though improvements in security headers and DNSSEC are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR, though it lacks explicit terms of service and incident response contacts.