Security Directory

A

Aktion Mensch e.V.

aktion-mensch.de

67

Aktion Mensch e.V. is Germany's largest private funding organization dedicated to supporting social projects for people with and without disabilities. The organization operates primarily through a lottery business model, funding inclusion campaigns and social initiatives. Their website is professionally designed, accessible, and provides comprehensive information and services to a broad audience interested in social inclusion and disability support. Technically, the site uses modern JavaScript libraries, a tag management system (Tealium), and appears to be built on a CMS platform likely Sitecore. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and explicit security policies are not evident. Overall, the domain and website content are consistent and trustworthy, reflecting a mature non-profit organization with a strong market position in Germany.

B

Baden-Baden

baden-baden.com

53

Baden-Baden.com is the official tourism portal for the city of Baden-Baden, Germany, providing comprehensive information on local attractions, events, accommodations, dining, and wellness offerings. The website targets tourists and visitors seeking detailed travel and leisure information about the region. Technically, the site is built on the Neos CMS platform using the Flow PHP framework, with modern web technologies including JavaScript and CSS. It features a cookie consent mechanism compliant with GDPR, uses hCaptcha for bot protection, and integrates analytics tools such as Google Analytics and Facebook Pixel. Security posture is generally good with HTTPS enforced, though some security headers are not evident in the provided data. The absence of WHOIS registration data is a notable anomaly, reducing domain trustworthiness despite the professional presentation and official branding. Overall, the site is well-structured, accessible, and provides a positive user experience for its target audience.

The website fr.igraal.com is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. This prevents extraction of meaningful business, contact, or policy information. The domain WHOIS data for this subdomain is unavailable, consistent with it being a subdomain rather than an independently registered domain. The page contains minimal HTML content focused solely on verifying the visitor is human before granting access. No privacy, cookie, or terms of service policies are visible, nor are there any contact details or business descriptions. The technical infrastructure relies on Cloudflare for security and DDoS protection, but the lack of accessible content limits further analysis. Security posture cannot be fully assessed due to the blocking mechanism, though the use of Cloudflare indicates some baseline protection. Overall, the site’s risk profile is elevated due to lack of transparency and accessibility, and a full security and compliance evaluation requires bypassing the WAF challenge.

Grupo Parques Reunidos operates as a major global leisure park operator managing a diverse portfolio of amusement parks, aquariums, zoos, and water parks across multiple countries. The company employs various business models including ownership, management, and consultancy, positioning itself as a leader in the hospitality and entertainment sector. The website reflects a professional digital presence with clear navigation, multilingual support, and active social media engagement. Technically, the site is built on Adobe Experience Manager with integration of Google Tag Manager and OneTrust for cookie consent, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy policies, which are areas for improvement. The absence of WHOIS registration data is a notable anomaly that reduces trust slightly, though the overall business credibility remains high based on website professionalism and content quality. Strategic recommendations include enhancing security headers, publishing comprehensive privacy and terms policies, and clarifying domain registration details to improve trust and compliance.

Papoo Software & Media GmbH operates the Papoo CMS, a German-based, open source content management system focused on accessibility, SEO, and marketing integration. The company targets website owners and developers seeking a modern, mobile-friendly CMS with extensive features and customization options. The website demonstrates a mature technical infrastructure using PHP, MySQL, and modern frontend frameworks, with strong emphasis on SEO and accessibility. Security posture is solid with HTTPS, CSRF protections, and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is comprehensive, with detailed policies and GDPR-aligned consent tools. Overall, the site is professional, trustworthy, and well-positioned in the CMS market.

J

Jspreadsheet

lemonadejs.com

61

LemonadeJS is a small technology company offering a lightweight, dependency-free reactive JavaScript library designed for modern frontend development. The company provides a suite of reusable components and plugins that integrate with popular frameworks such as React and VueJS. Their ecosystem includes commercial and open-source products, targeting JavaScript developers seeking efficient and flexible tools. The website is well-structured, professionally designed, and provides comprehensive technical documentation and examples. The technical infrastructure leverages modern web technologies and includes analytics via Google Tag Manager and Google Analytics. Security posture is moderate with HTTPS enforced but lacks published security policies, privacy policies, and security headers. The domain is well-established with consistent WHOIS data, supporting legitimacy. Overall, the website is trustworthy but could improve privacy compliance and security transparency.

The website www.beckum.de serves as the official digital portal for the city of Beckum, Germany, providing residents and visitors with access to municipal services, educational resources, housing information, cultural events, and tourism details. The site is well-organized with a clear navigation structure and uses modern web technologies including a CMS (ionas4), JavaScript frameworks, and Matomo analytics for user tracking. Hosting is managed via Telekom domains, consistent with a German municipal infrastructure. From a security perspective, the website enforces HTTPS with strong SSL configurations and uses script integrity checks, indicating a good baseline security posture. However, explicit security headers and published security policies are absent, which could be improved to enhance trust and compliance. Privacy compliance is partially addressed through a cookie consent mechanism, but no dedicated privacy policy or GDPR compliance statements were found. Overall, the website is professional, trustworthy, and serves its governmental function effectively. There are no indications of malicious content or security risks based on the provided data. Strategic improvements in transparency around privacy, security policies, and incident response would further strengthen the site's security posture and user trust.

L

Landkreis Bautzen

landkreis-bautzen.de

55

Landkreis Bautzen operates as a regional government authority in Germany, providing a broad range of public services including citizen services, waste disposal, vehicle registration, job and training opportunities, and official publications. The website serves as an official portal targeting residents and stakeholders within the Landkreis Bautzen region, offering comprehensive information and digital services. The business model is focused on public administration and community engagement, positioning itself as a trusted government entity in the region. Technically, the website is built on a modern CMS platform (xima CMS) with a technology stack including JavaScript, jQuery, SVG, and CSS3. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Hosting is provided by Schlundtech, consistent with the domain's nameservers, indicating a stable and professional infrastructure. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and a dedicated security policy or incident response contact information. No vulnerabilities or exposed sensitive data were detected in the HTML content. Analytics are handled via Matomo with user consent, reflecting a privacy-conscious approach. Overall, the website presents a low risk profile with strong business credibility and good technical implementation. Strategic improvements include publishing a formal security policy, adding security headers, and providing incident response contacts to enhance trust and compliance further.

K

Kreis Bad Dürkheim

kreis-bad-duerkheim.de

63

Kreis Bad Dürkheim operates as a regional government authority in Germany, providing a broad range of public services and information to residents and stakeholders within the district. The website serves as an official portal for announcements, citizen services, political information, and regional development resources. It targets local residents, government officials, and visitors seeking authoritative information about the district. Technically, the website is built on the Ionas4 CMS platform with AngularJS components, leveraging modern web technologies such as SystemJS for module loading. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Hosting appears to be regional with German-based nameservers. From a security perspective, the site enforces HTTPS and integrates Google Invisible reCAPTCHA to protect forms. While explicit security headers are not fully documented in the provided data, no critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service. Contact information is not explicitly provided in the analyzed content. Overall, the website is trustworthy and professional, reflecting its role as a government portal. Strategic improvements include publishing detailed privacy and security policies, enhancing security headers, and providing clear contact information to improve transparency and compliance.

A

ANHALT-BITTERFELDER KREISWERKE GmbH

abikw.de

45

ANHALT-BITTERFELDER KREISWERKE GmbH (ABIKW) is a regional municipal waste management company serving the Landkreis Anhalt-Bitterfeld in Germany. Founded in 2009 through a merger, it provides comprehensive waste disposal services including household and commercial waste, bio and green waste, bulky waste, and electronic waste collection. The company emphasizes sustainability and quality in its service offerings. The website is professionally designed, mobile-optimized, and provides clear contact and legal information, reflecting a mature digital presence. Technically, the site runs on WordPress with common plugins and modern web technologies, delivering moderate performance and good SEO. Security posture is solid with HTTPS enforced, though security headers and incident response details are lacking. Privacy compliance is mostly met with a comprehensive privacy policy but lacks a cookie consent mechanism. Overall, the domain and website content align well with the company's municipal service role, showing high trustworthiness and no suspicious indicators.

A

Abfallwirtschaftsbetrieb Landkreis Altenkirchen

awb-ak.de

41

The Abfallwirtschaftsbetrieb Landkreis Altenkirchen is a public waste management entity operating as an Eigenbetrieb of the Landkreis Altenkirchen in Germany. The organization provides comprehensive waste disposal and recycling services, supported by an evolving waste management concept recognized as one of the most successful in Rheinland-Pfalz. The website serves as an information portal for residents and businesses, offering news, service registrations, and detailed guidance on waste types and collection schedules. Technically, the website employs standard web technologies including Bootstrap, jQuery, and FontAwesome, delivering a responsive and user-friendly experience. While the site is moderately optimized for performance and mobile devices, there is room for improvement in accessibility and SEO. The use of embedded iframes for news content from a third-party domain is noted. From a security perspective, the site appears to use HTTPS (assumed), but lacks visible security headers and cookie consent mechanisms, which are important for compliance and protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is limited but does not raise suspicion, aligning with the site's government affiliation. Overall, the website is professional, trustworthy, and serves its public service role effectively. Strategic improvements in privacy compliance, security headers, and accessibility would enhance its security posture and user trust.

L

Landratsamt Altenburger Land

altenburgerland.de

52

The Altenburger Land website serves as the official regional government portal for the Altenburger Land district in Germany. It provides comprehensive information about the region's economic sectors, cultural highlights, and public services. The site offers a variety of online citizen services such as vehicle registration, appointment booking, and access to official forms. The target audience includes local residents, investors, and tourists. The website is well-branded, professionally designed, and emphasizes accessibility with features like easy language and sign language support. Technically, the site uses modern web technologies including Foundation framework and Splide.js for carousels, hosted on servers associated with key-systems.net. The site is mobile-optimized and SEO-friendly, with proper meta tags and structured navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the website demonstrates a mature digital infrastructure suitable for a government entity, with a high level of trustworthiness and user experience. No security blocking or WAF challenges were detected, and no vulnerabilities or sensitive data exposures were found. Privacy compliance is robust with a clear privacy policy and cookie consent. Strategic recommendations include publishing a security policy and incident response contacts, adding a security.txt file for vulnerability disclosure, and enhancing security headers for improved protection.

Z

Zoll (German Customs)

zoll-karriere.de

61

The website www.zoll-karriere.de serves as the official career portal for the German Customs (Zoll) administration, providing comprehensive information about career paths, training, dual studies, and application procedures. It targets students and prospective applicants interested in government employment within the Zoll sector. The site is authoritative and well-positioned as a government resource, supported by the Federal Ministry of Finance. Technically, the site is built on the Government Site Builder CMS, uses modern web technologies including HTML5, CSS3, JavaScript, and integrates accessible video players and a self-hosted Matomo analytics platform, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response contacts are not evident. Overall, the site is professional, trustworthy, and privacy-conscious, with no signs of suspicious activity or vulnerabilities.

O

Obec Krásno

obeckrasno.sk

66

Obec Krásno operates an official municipal website serving the local community in Slovakia. The site provides a broad range of services including news, event calendars, public service announcements, and contact information for the municipal office. It targets residents and visitors, offering essential government and community information. The website is positioned as a trusted local government portal with a clear focus on accessibility and citizen engagement. Technically, the website employs modern web standards and frameworks such as Bulma CSS, FontAwesome, and integrates Google services like reCAPTCHA and Translate. It uses HTTPS with strong security headers and includes cookie consent mechanisms, reflecting a mature digital infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the website demonstrates good practices including HTTPS enforcement, reCAPTCHA on forms, and privacy compliance with GDPR. However, it lacks a dedicated security policy or incident response page and does not publish a vulnerability disclosure or security.txt file. No vulnerabilities or exposed sensitive data were detected. Overall, the website is secure, professional, and trustworthy, serving its purpose effectively. Strategic improvements could include publishing explicit security policies and incident response contacts to enhance transparency and preparedness.

O

Obec Liptovský Peter

liptovskypeter.sk

66

Liptovský Peter is the official municipal website for the village of Liptovský Peter in Slovakia, providing residents and visitors with local news, contact information, event calendars, weather updates, and community services. The site serves as a key communication channel for the local government, offering transparency and accessibility to public information. The website is well-structured, mobile-optimized, and maintains consistent branding aligned with its governmental purpose. Technically, it employs modern web standards, including HTTPS, security headers, and third-party integrations such as Google reCAPTCHA and Facebook SDK for social engagement and security. Security posture is strong with no evident vulnerabilities or exposed sensitive data, though the site lacks a publicly available security policy or incident response information. Privacy compliance is addressed through cookie consent mechanisms and a basic privacy policy, supporting GDPR adherence. Overall, the website demonstrates a high level of trustworthiness and professionalism appropriate for a local government entity.

V

Vest Erleben

vest-erleben.de

55

Vest Erleben is a regional media platform serving the Vest Recklinghausen area in Germany, providing local news, event information, and community engagement. The website is supported by a consortium of local institutions including Sparkasse Vest Recklinghausen, Diakonie Recklinghausen, Hertener Stadtwerke, and RDN-Verlag, positioning it as a trusted source for regional content. The platform targets residents and visitors interested in cultural, social, and economic developments within the region. Technically, the website is built on WordPress with modern enhancements such as ElasticPress for search, Matomo for analytics, and responsive design elements ensuring good mobile usability. The site uses HTTPS and includes basic security practices like CSRF tokens, but lacks some advanced security headers and explicit cookie consent mechanisms. Performance is moderate with good SEO and accessibility basics. From a security perspective, the site demonstrates a reasonable posture with encrypted connections and no visible vulnerabilities or exposed sensitive data. However, it could improve by implementing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy. Privacy compliance is partially addressed with a privacy policy present, but cookie consent mechanisms are missing despite tracking usage. Overall, Vest Erleben is a credible and professionally maintained regional media website with solid business credibility and technical infrastructure. Strategic improvements in privacy compliance and security transparency would enhance trust and regulatory adherence.

K

kaleidos:code

kaleidoscode.de

58

kaleidos:code is a specialized web design and app development studio based in Fulda, Germany. The company offers a comprehensive range of services including website and app development, UI/UX consulting, branding, accessibility consulting, and ongoing website maintenance. Their market position is that of a small, highly specialized studio focusing on quality, user experience, and digital accessibility, serving businesses and organizations seeking professional digital solutions. The website reflects a strong professional image with clear contact information, client testimonials, and a consistent brand identity. Technically, the website is built using modern web technologies including Webflow CMS, JavaScript, and jQuery, hosted on Hetzner servers in Germany. It employs privacy-conscious analytics tools such as Plausible and Google Tag Manager with IP anonymization. The site is well optimized for performance, mobile responsiveness, SEO, and accessibility, demonstrating a mature digital infrastructure. From a security perspective, the site uses HTTPS with good SSL configuration and implements cookie consent mechanisms compliant with GDPR. However, no explicit security headers were detected, and there is no public security policy or incident response information. No vulnerabilities or exposed sensitive data were found, indicating a solid security posture for a small business. Overall, kaleidos:code presents a trustworthy and professional digital presence with strong compliance and technical maturity. Strategic improvements could include adding security headers and publicly available security policies to further enhance trust and compliance.

S

Spreewelten Lübbenau

spreewelten.de

48

The website spreewelten.de represents a hospitality business located in Germany, specifically focused on leisure and wellness services such as swimming with penguins, sauna experiences, and hotel accommodations in the Spreewald region. The site is primarily in German and targets general audiences interested in wellness tourism. The business model appears to be service-oriented hospitality with a niche attraction. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript libraries like FontAwesome and Swiper. The site is moderately optimized for mobile and SEO but lacks advanced technical frameworks or CMS identification. Security-wise, the website lacks critical security headers, privacy and cookie policies, and active analytics tracking, indicating a low maturity level in security and privacy compliance. There are no signs of WAF or content blocking, and the site is accessible. Overall, the risk is moderate due to missing privacy and security best practices, but the business content is legitimate and safe for general audiences.

P

Piltz Rechtsanwälte PartGmbB

piltz.legal

54

Piltz Legal is a specialized legal advisory firm based in Berlin, Germany, focusing on data protection, IT law, and commercial law for companies, institutions, and associations. The firm offers consulting, accompaniment, and litigation services with a pragmatic and solution-oriented approach. Their market position is that of a boutique legal practice with a strong emphasis on digital and international legal matters. The website content is professional, well-structured, and regularly updated with news, events, and blog posts, reflecting a mature digital presence. Technically, the website uses standard modern web technologies such as HTML5, CSS3, and JavaScript, with good mobile optimization and accessibility features. However, there is no evidence of advanced frameworks or CMS platforms. Performance is moderate, and SEO practices are adequately implemented. The site uses HTTPS, but lacks visible security headers and cookie consent mechanisms, which are recommended for enhanced security and compliance. From a security perspective, the site shows good baseline practices with no exposed sensitive data or vulnerabilities detected in the HTML content. The absence of security headers and vulnerability disclosure policies suggests room for improvement in security posture. WHOIS data is unavailable due to malformed queries or privacy restrictions, which slightly reduces domain trustworthiness but does not contradict the professional nature of the business. Overall, Piltz Legal presents a trustworthy and professional online presence suitable for its target audience. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and improving WHOIS transparency to enhance trust and compliance.

R

RückHalt e.V.

rueckhalt-beratung.de

61

RückHalt e.V. is a specialized non-profit counseling center based in Aachen, Germany, dedicated to supporting individuals affected by sexual violence, their relatives, and professionals in the region. The organization offers a range of services including counseling, psychosocial process support, assistance with applications, training, and prevention programs. The website reflects a focused mission with clear service offerings and a regional target audience. Technically, the site is built on the Weblication® CMS platform, hosted via DomainControl (GoDaddy), and demonstrates good mobile optimization and SEO practices. However, it lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance and security posture. The site does not appear to use analytics or tracking services, indicating a privacy-conscious approach. Overall, the security posture is moderate with room for improvement in security policies and incident response transparency.

F

Frauennotruf Bielefeld e.V.

frauennotruf-bielefeld.de

56

Frauennotruf Bielefeld e.V. is a small non-profit organization based in Germany providing counseling and support services to women and girls aged 16 and above who have experienced sexualized violence. The organization offers anonymous, confidential, and free assistance including online and video consultations, psychosocial process support, and educational training. The website is well-structured, multilingual, and designed to be accessible and barrier-free, targeting a vulnerable audience with sensitivity and professionalism. Technically, the site is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, hosted likely via a German hosting provider using UI-DNS name servers. The site is HTTPS secured with no visible critical vulnerabilities, though it lacks some advanced security headers and a cookie consent mechanism. Contact information is clearly presented, enhancing trust and credibility. Overall, the website demonstrates a good balance of content quality, technical implementation, and security posture appropriate for a non-profit counseling service.

H

Haubarg Blumenhof / Familie Hostrup

haubarg-blumenhof.de

59

Haubarg Blumenhof is a small, family-owned hospitality business located in Tating, Germany, offering holiday apartments in a historic cultural monument farmhouse. The website presents a well-structured and content-rich platform targeting tourists interested in rural and seaside vacations on the Eiderstedt peninsula. The technical infrastructure is based on a commercial CMS (Zeta Producer) with modern web technologies and good mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements in security headers and incident response policies are recommended. Privacy compliance is good with a clear privacy policy and cookie consent. Overall, the website is trustworthy and professionally maintained, supporting the business's niche market position in cultural heritage tourism.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) which is not a publicly accessible website. It serves as a placeholder or error display within the Chrome browser when a page fails to load. The page includes embedded JavaScript and styles related to the Chrome offline dinosaur game, but contains no business or organizational content. Consequently, no privacy, cookie, or terms of service policies are present, nor is there any contact or security policy information. The technical infrastructure is limited to browser internal scripts and canvas-based game rendering. Security posture is minimal due to the nature of the page being an error display rather than a live website. Overall, this content is not representative of a real website and cannot be evaluated for business credibility or compliance.

C

CHECK24

check24.de

69

CHECK24 is a prominent German online comparison portal specializing in a wide range of sectors including insurance, finance, energy, telecommunications, and travel. The platform offers users tools to compare prices and services, helping consumers make informed decisions. It holds a strong market position in Germany with a large user base and multiple certifications that enhance its trustworthiness. Technically, the website employs modern web standards, uses HTTPS with strong security headers, and integrates Google Tag Manager for analytics and marketing. The site is well-optimized for mobile and accessibility, providing a professional user experience. Security posture is solid with no evident vulnerabilities or exposed sensitive data, although explicit security policies and incident response information are not publicly visible. Privacy compliance is partially addressed with a cookie consent mechanism, but lacks visible privacy and terms of service documentation in the provided content. WHOIS data confirms the domain's legitimacy and consistent registration. Overall, CHECK24 presents a secure, professional, and trustworthy online service with room for improvement in transparency around privacy and security policies.

A

Aareon Deutschland GmbH

aareon.de

65

Aareon Deutschland GmbH operates a professional and comprehensive website focused on providing SaaS property management solutions tailored for the European real estate sector. The company positions itself as a market leader offering integrated ERP systems, digital customer portals, and sustainability planning tools for residential and commercial real estate management. The website content is well-structured, professionally designed, and targets real estate companies, property managers, and investors. The digital infrastructure includes modern web technologies such as jQuery and Swiper.js, with a CMS likely based on SixCMS. The site is mobile-optimized and SEO-friendly, providing a positive user experience. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. The domain WHOIS data aligns with the company’s branding and infrastructure, supporting legitimacy. Overall, the website reflects a mature enterprise with strong business credibility and compliance with GDPR.

A

Aareon France

aareon.fr

59

Aareon France is a well-established software and digital solutions provider specializing in the social housing sector in France. The company offers a comprehensive portfolio of ERP and digital solutions designed to optimize processes and connect stakeholders in the social housing ecosystem. The website reflects a mature digital presence with professional design, clear navigation, and relevant content targeting social housing organizations and their collaborators. Technically, the site is built on HubSpot CMS with modern JavaScript libraries and demonstrates good mobile optimization and accessibility. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though explicit security policies and incident response contacts are not found. The absence of WHOIS data from AFNIC limits domain trust assessment but does not detract significantly from the overall legitimacy given the professional content and branding. Strategic recommendations include publishing security and incident response policies and providing direct contact information for data protection and security matters.

W

Where Beagles Dare

wewbd.com

57

Where Beagles Dare (WBD) is a small, story-forward digital agency specializing in helping independent makers and brands build authentic connections through storytelling and e-commerce solutions. The company appears newly founded in 2024, with a clear focus on digital media and brand engagement. Their website reflects a professional and modern design, hosted on the Cargo platform, with responsive features and a cookie consent mechanism to comply with privacy regulations. Technical infrastructure is standard for a small agency, leveraging Cargo CMS and third-party cookie management scripts. Security posture is adequate with HTTPS enabled, but lacks advanced security headers and DNSSEC. No explicit security or incident response policies are published, and contact is limited to email only. Overall, the website is trustworthy and professionally presented, suitable for its niche audience.

W

WEBY GROUP s.r.o.

stavebnik.sk

65

Stavebnik.sk is a well-established Slovak online portal specializing in the construction industry, operating since 2000. It offers a comprehensive directory of construction companies, informative articles, job listings, and advertising opportunities tailored to construction professionals and consumers in Slovakia. The portal is operated by WEBY GROUP s.r.o., a Slovak company with clear contact details and a consistent domain registration history. Technically, the website employs modern web technologies including jQuery, OpenLayers for mapping, and Facebook Pixel for marketing analytics. The site is mobile-optimized with good navigation and content relevance, supporting a positive user experience. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks explicit security policies or vulnerability disclosure information. Overall, the website demonstrates a solid security posture with room for improvement in security headers and incident response transparency.

U

Unabhängige Bundesbeauftragte gegen sexuellen Missbrauch von Kindern und Jugendlichen

hilfeportal-missbrauch.de

67

The Hilfe-Portal Missbrauch is an official German federal government portal operated by the Unabhängige Bundesbeauftragte gegen sexuellen Missbrauch von Kindern und Jugendlichen. It provides comprehensive support, information, and counseling services for victims of sexual abuse, including telephone and online counseling, a searchable database of help offers, and educational content. The portal is well-positioned as a trusted, authoritative resource in the government and non-profit sector, targeting affected individuals, families, and professionals. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies such as Mapbox for geolocation services and Matomo for privacy-focused analytics. The site demonstrates good digital maturity with responsive design, accessibility features, and GDPR-compliant data collection practices. Hosting appears to be managed by a reputable German technical service provider, ensuring data sovereignty and compliance. From a security perspective, the site enforces HTTPS, anonymizes IP addresses in analytics, and uses a consent-based cookie mechanism. However, it lacks publicly visible security policies, incident response contacts, and advanced security headers, which could be improved to enhance trust and compliance. No vulnerabilities or suspicious activities were detected. Overall, the portal scores highly on content quality, privacy compliance, and business credibility, making it a reliable and professional resource. Strategic improvements in security transparency and incident response readiness are recommended to further strengthen its posture.

R

Regenbogenschule Steinfurt

rbs-steinfurt.de

36

Regenbogenschule Steinfurt operates a secure login portal based on the IServ platform, providing digital access for students and staff. The website is professionally designed with consistent branding and optimized for mobile devices. The technical infrastructure leverages modern web standards and the IServ platform, ensuring a stable and secure user experience. Security measures include HTTPS enforcement and secure login forms, though some security headers are missing. Privacy and cookie policies are not present, which is a compliance gap. Overall, the site is trustworthy and appropriate for its educational purpose.

Z

Zweckverband Lausitzer Seenland Brandenburg

zweckverband-lsb.de

46

Zweckverband Lausitzer Seenland Brandenburg (LSB) is a regional public entity focused on the development and promotion of the Lausitzer Seenland area in Brandenburg, Germany. The organization supports municipalities in infrastructure projects, operates tourism facilities such as family parks and camping sites, and engages in sustainable project development to foster economic and touristic growth. The website reflects a professional and consistent brand presence targeting local governments, investors, tourists, and job seekers. Technically, the site uses modern web technologies including jQuery and Modernizr, is mobile optimized, and implements privacy-conscious practices by not activating Google Analytics and providing comprehensive cookie consent mechanisms. Security posture is good with HTTPS enforced, though explicit security headers and incident response information are absent. Overall, the site is trustworthy, well-structured, and compliant with GDPR requirements.

W

WetterOnline

wetteronline.de

63

WetterOnline is a well-established German weather information provider offering comprehensive weather forecasts, radar maps, news, and multimedia content. The website targets a general audience interested in weather updates primarily in Germany and Europe but also worldwide. The business model relies heavily on advertising and providing detailed weather data and services. Technically, the site uses modern web technologies including JavaScript frameworks, Google Tag Manager, Prebid.js for advertising, and Amazon AWS for hosting, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and GDPR-compliant consent management, though explicit security policies and incident response information are not publicly visible. Overall, the site is professional, trustworthy, and compliant with privacy regulations.

S

Serviceportal Baden-Württemberg

service-bw.de

60

The website www.service-bw.de/zufi serves as an official government service portal for the Baden-Württemberg region in Germany. It provides detailed information and access to administrative services, forms, and online tools for citizens, businesses, and public administration employees. The portal is well-branded and professionally designed, targeting a broad audience within the regional government ecosystem. Technically, the site uses standard web technologies with good mobile optimization and accessibility features, although no specific CMS or advanced frameworks were detected. Security posture is limited based on the provided data, with no visible security headers or published security policies. Privacy compliance is minimal, lacking privacy and cookie policies or consent mechanisms. The domain WHOIS data shows consistency with regional network infrastructure but lacks detailed registrant information. Overall, the site is credible and trustworthy as a government portal but would benefit from enhanced security and privacy transparency.

H

Hans-Georg Hostrup

eiderstedt1.de

62

The website eiderstedt1.de represents a small regional cultural heritage and tourism business centered around the historic Haubarg Blumenhof farmstead in Tating, Germany. It provides detailed information about the heritage site, the Hochdorfer Garten, and the IGB heritage association, targeting tourists and visitors interested in cultural and garden tourism. The business model focuses on holiday apartment rentals and promoting local cultural landmarks. Technically, the website is built using the Zeta Producer CMS and standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It features a responsive design with good mobile optimization and moderate performance. SEO and accessibility are basic but adequate for the site's purpose. No advanced analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site enforces HTTPS and implements a GDPR-compliant cookie consent mechanism. However, it lacks advanced security headers and does not provide explicit security policies or incident response contacts. No vulnerabilities or suspicious content were found, and the domain registration data aligns well with the website's content and business claims. Overall, the site is trustworthy, professionally presented, and suitable for its niche audience. Strategic improvements could include adding security headers, incident response information, and terms of service to enhance compliance and trustworthiness.

R

Richardsen-Bruchwitz-Stiftung

hochdorfer-garten.de

52

Hochdorfer Garten in Tating is a culturally significant Baroque garden managed by the Richardsen-Bruchwitz-Stiftung, a non-profit foundation dedicated to preserving this historic site as a public park. The website provides detailed information about the garden, its history, events, and visitor information, targeting tourists and local visitors interested in cultural heritage and nature. The site is well-structured, with clear navigation and relevant content, supporting the foundation's mission and community engagement. Technically, the website is built using the Zeta Producer CMS and employs standard web technologies including HTML5, CSS3, JavaScript, and jQuery. It uses FlexSlider for image slideshows and loads custom web fonts via Google Fonts. Hosting is provided by RZone, as indicated by the nameservers. The site is mobile-optimized and performs moderately well, with good SEO practices and accessibility at a basic level. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. No security headers were detected in the HTML content, and no explicit security or incident response policies are published. There are no visible vulnerabilities or exposed sensitive data. The WHOIS data is consistent with the website's regional and organizational context, supporting legitimacy. Overall, the website presents a low-risk profile with good privacy compliance and business credibility. Strategic improvements include adding security headers, publishing a security policy, and enhancing accessibility features to further strengthen the site's security posture and user trust.

T

Tourismusverein Tating

tating-nordsee.de

52

Tourismusverein Tating operates as a regional tourism association promoting vacation opportunities in the village of Tating and surrounding Eiderstedt peninsula near the North Sea coast of Germany. The website serves as an informational and accommodation directory platform targeting tourists interested in rural and coastal holidays. The business model focuses on local tourism promotion without direct e-commerce or booking functionalities. Technically, the site is built using the Zeta Producer CMS, employs standard web technologies including JavaScript and CSS, and is hosted on a known German hosting provider's infrastructure. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Privacy compliance is good with a clear privacy policy and cookie management. Overall, the website is trustworthy, professional, and safe for general audiences.

F

Förderverein für regionale Entwicklung e.V.

kmu-intranet.de

62

The website www.kmu-intranet.de represents a German small to medium enterprise focused on providing digital intranet and organizational support solutions tailored for small and medium-sized businesses. Their offerings include a mobile employee communication app, time tracking, chat, document management, appointment booking, meeting management, and organizational helpers. The company positions itself as a niche provider with a strong emphasis on efficient workflows and employee support. The site is professionally designed, well-structured, and targets German-speaking SMEs seeking digital transformation tools. Technically, the website leverages modern web technologies including jQuery, Material Design Lite, and various JavaScript libraries for UI and interactivity. It is hosted in Germany on an ISO 27001 certified infrastructure, ensuring compliance with stringent data protection standards. The site is mobile-optimized and accessible, with good SEO practices and performance. Analytics are handled via Matomo, respecting user privacy with cookie consent mechanisms. From a security perspective, the site employs SSL encryption, cookie consent with categorized cookies, and CAPTCHA protections on forms. The hosting environment is ISO 27001 certified, indicating a mature security posture. However, explicit security headers like CSP and X-Frame-Options are not visible in the HTML and should be verified server-side. No vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie policies are comprehensive and GDPR compliant. Overall, the website presents a trustworthy and professional digital presence with a solid security foundation. It effectively communicates its business offerings and maintains compliance with privacy regulations. Strategic improvements could include publishing an incident response policy and enhancing security headers. The domain registration is minimal but consistent with a small German business, with no suspicious indicators.

F

Förderverein für regionale Entwicklung e.V.

handwerk-intranet.de

64

The website www.handwerk-intranet.de represents a specialized digital platform aimed at supporting craft businesses in Germany with intranet and mobile app solutions. The company, Förderverein für regionale Entwicklung e.V., offers a suite of services including digital time tracking, device and vehicle management, contact management, and event scheduling. The platform is GDPR compliant, ISO 27001 certified, and provides a user-friendly experience accessible via web and mobile apps for iOS and Android. The site demonstrates a solid market position within its niche, targeting small to medium-sized craft enterprises seeking digital transformation tools. Technically, the website employs modern web technologies such as jQuery, Material Design Lite, and Slick Carousel, hosted on a German ISO 27001 certified environment with SSL encryption ensuring secure communications. Security posture is strong with granular access controls and captcha-protected forms, although the absence of explicit security headers is noted. Privacy compliance is robust with detailed cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and well-structured, with clear contact information and transparent data handling practices.

L

Landesverband autonomer Frauen-Notrufe NRW e.V.

frauennotrufe-nrw.de

62

The Landesverband autonomer Frauen-Notrufe NRW e.V. is a non-profit umbrella organization in North Rhine-Westphalia, Germany, uniting specialized women's emergency call centers focused on supporting women and girls affected by sexualized violence. Their services include free counseling, crisis intervention, legal process accompaniment, and prevention and public relations work. The organization targets victims of sexual violence within the NRW region and operates as a registered association since 2015, with roots dating back to 1986. The website reflects a professional and consistent brand image, providing clear information and partner links to regional counseling centers. Technically, the site is built on Weblication CMS and uses OpenLayers for interactive maps, hosted on GoDaddy infrastructure. The site is mobile-optimized with good navigation and content quality but lacks advanced SEO and accessibility features. Security posture is moderate, with HTTPS enabled but missing security headers and no visible incident response or vulnerability disclosure information. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and serves its non-profit mission effectively.

V

Vestische Pioniere

vestische-pioniere.de

46

Vestische Pioniere is a regional initiative based in Germany that honors companies in the Kreis Recklinghausen area for their commitment to ecological and social sustainability. Supported by local government and financial institutions, it operates as a non-profit award platform promoting responsible business practices. The website is well-designed, mobile-optimized, and provides clear information about the award, jury, criteria, and participation process. Technically, the site uses modern frontend frameworks like Vue.js combined with a WordPress backend, and employs Matomo analytics for privacy-conscious visitor tracking. Security measures include HTTPS enforcement and CSRF protection cookies, alongside a comprehensive cookie consent mechanism. However, explicit security policies and incident response contacts are not published, which could be improved to enhance trust and compliance. Overall, the site presents a professional and trustworthy digital presence for a small regional non-profit initiative.

L

Lausitzer Seenland

lausitzerseenland.de

48

Lausitzer Seenland is a regional tourism website promoting a young holiday region located between Dresden and Berlin in Germany. The site offers comprehensive information on outdoor activities such as cycling, skating, water sports, and cultural experiences, alongside accommodation and activity booking services. The business operates as a regional tourism authority, targeting families, tourists, and outdoor enthusiasts. The website is well-structured with clear navigation and good content quality, supporting a positive user experience. Technically, it employs modern JavaScript libraries like Swiper and jQuery UI, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but cookie consent is missing. The domain registration data is consistent and trustworthy, aligning with the website's regional focus. Overall, the site is professional, trustworthy, and suitable for general audiences seeking tourism information.

E

Europäischer Parkverbund Lausitz

parkverbund.eu

46

The Europäischer Parkverbund Lausitz is a cultural and tourism network connecting nine significant parks and castles in the Lausitz region of Germany. The website serves as an informational and promotional platform targeting tourists and culture enthusiasts interested in historical gardens and heritage sites. It offers event calendars, guided tours, audiotours, and digital maps to enhance visitor experience. Technically, the site employs a custom CMS with a modern JavaScript stack including jQuery, Swiper, and Matomo analytics, hosted by Vautron Rechenzentrum AG. The website is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site uses HTTPS and cookie consent mechanisms, but lacks some advanced security headers and explicit incident response information. Overall, the site is trustworthy, compliant with GDPR, and free of suspicious content.

The website 'datteln.org' serves as an internal information portal for the city of Datteln, Germany, primarily focused on communicating technical problems and planned solutions to its users. The site is relatively new, established in early 2024, and is operated by the municipal government. The content is minimal but relevant, targeting residents and internal stakeholders of the city administration. The business model is public service oriented, with no commercial aspects evident. The site maintains a moderate level of professionalism with basic branding and navigation clarity. From a technical perspective, the website uses standard web technologies including HTML5, CSS3, and JavaScript, hosted on servers associated with kasserver.com. The site is mobile optimized and provides a smooth user experience, though it lacks advanced frameworks or CMS identification. Performance is moderate, and SEO practices are basic but present. No analytics or advertising technologies are detected, indicating a focus on privacy and simplicity. Security posture is adequate but could be improved. HTTPS is enabled, and the domain status includes clientTransferProhibited, which protects against unauthorized transfers. However, DNSSEC is not enabled, and no security headers were detected, which are recommended to enhance protection. The site lacks a cookie consent mechanism and detailed security or incident response policies. WHOIS data aligns well with the website content, confirming legitimacy and consistent registration details. Overall, the website is safe, with no adult or questionable content. It serves a clear governmental function with minimal tracking or advertising. Recommendations include enabling DNSSEC, adding security headers, implementing cookie consent for GDPR compliance, and publishing security and incident response policies to improve trust and compliance.

A

Aareon

aareon.com

66

Aareon is a leading European SaaS provider specializing in property management systems designed to streamline operations for property owners and managers. Their platform integrates multiple facets of property management including payments, sustainability planning, and customer engagement, targeting a broad audience across residential and commercial real estate sectors. The website reflects a mature digital presence with professional design, clear navigation, and multimedia content that supports their market positioning. Technically, the site is built on the HubSpot CMS platform, leveraging modern JavaScript libraries and responsive design techniques to ensure good performance and accessibility. Security best practices such as HTTPS enforcement and security headers are implemented, though explicit security policies and incident response information are not publicly detailed. The absence of WHOIS data for the domain introduces some uncertainty regarding domain registration transparency, but the professional quality of the website and the presence of privacy and cookie policies indicate a legitimate business operation. No signs of WAF or content blocking were detected, and the site does not contain any adult or questionable content. Overall, Aareon demonstrates a strong business and technical foundation with room for improvement in transparency and security communication.

The Geoportal of Gemeinde Milower Land serves as an official municipal platform providing geospatial data and services to local citizens and administrative users. It offers online map applications, geodata services such as WMS and WFS, and thematic searches, supporting local planning and public information needs. The site is positioned as a small government entity platform within Brandenburg, Germany, with a focus on transparency and public service. Technically, the website employs standard web technologies including Bootstrap 4.3.1 and jQuery 3.5.1, hosted on a provider indicated by the nameservers. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. However, it lacks advanced security headers and cookie consent mechanisms, which are recommended for compliance and security enhancement. From a security perspective, the site shows no signs of blocking or WAF interference and does not expose sensitive data. The absence of security headers and vulnerability disclosure policies suggests room for improvement in security posture. GDPR compliance is partially addressed through a privacy policy, but cookie consent is missing. Contact information is limited to a contact form without explicit emails or phone numbers. Overall, the website is trustworthy and professionally maintained for its municipal purpose but would benefit from enhanced security practices, privacy compliance improvements, and more transparent contact information to strengthen user trust and regulatory adherence.

L

Landesvermessung und Geobasisinformation Brandenburg

geobasis-bb.de

58

The Landesvermessung und Geobasisinformation Brandenburg (LGB) operates as the official geospatial data and mapping authority for the Brandenburg region in Germany. The website serves as a comprehensive portal offering a wide range of geodata products, including 3D models, aerial imagery, cadastral data, and thematic maps. It targets government agencies, geospatial professionals, and the general public interested in regional geoinformation. The business model is that of a public sector service provider, delivering authoritative geospatial data and digital services to support regional planning and administration. Technically, the website is built on a modern stack utilizing HTML5, CSS3 with the Foundation 5 framework, JavaScript, and jQuery UI. It is powered by the SixCMS content management system and hosted likely by Deutsche Telekom, ensuring reliable infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy is well-managed through a GDPR-compliant cookie consent mechanism and the use of Matomo analytics activated only upon user consent. From a security perspective, the site enforces HTTPS and employs a clear cookie consent opt-in mechanism. While explicit security headers are not visible in the provided data, the overall posture is good with no exposed sensitive data or vulnerabilities detected. However, the site could improve by publishing explicit security policies and incident response information and implementing additional security headers. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence for a government entity. It effectively balances user experience, compliance, and security, making it a reliable source for geospatial information in Brandenburg.

K

Kreis Recklinghausen

kreis-re.de

71

Kreis Recklinghausen operates as a governmental authority providing a wide range of public services to residents and businesses within the Recklinghausen district in Germany. The website serves as an information portal and service gateway, offering access to citizen services, administrative information, economic development, education, and leisure activities. The site is well-positioned as a regional government entity with a clear focus on serving its local community. Technically, the website employs standard web technologies including jQuery and Cookiebot for cookie consent management. The site is hosted on INWX infrastructure and demonstrates good mobile optimization and accessibility features. While the site lacks a detected CMS or advanced frameworks, it maintains a moderate performance level and basic SEO optimizations. From a security perspective, the site enforces HTTPS and integrates a comprehensive cookie consent mechanism with blocking capabilities. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious content were detected, indicating a generally secure posture appropriate for a governmental website. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, particularly in privacy and cookie management. The absence of direct contact emails or phone numbers is mitigated by the presence of a contact form. Strategic recommendations include enhancing security headers, publishing security policies, and improving SEO and technical modernization to further strengthen the site's security and user experience.

W

Wirtschaftsbetriebe Duisburg

wbd-innovativ.de

51

Wirtschaftsbetriebe Duisburg operates a municipal innovation portal focused on sustainable urban development, digitalization, and smart city initiatives. The website showcases numerous projects leveraging new technologies such as AI, alternative energy vehicles, and digital customer services to improve city infrastructure and citizen engagement. The organization positions itself as a key municipal service provider and innovation driver in Duisburg, Germany. Technically, the site is built on TYPO3 CMS with modern front-end libraries, offering a good user experience and mobile optimization. However, the site lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. No blocking or WAF mechanisms were detected, and the domain appears legitimate though WHOIS data is minimal. Overall, the site is professional and trustworthy but could improve in privacy compliance and security best practices.

K

Kulturboitel

kulturboitel.de

41

Kulturboitel is a small, regionally focused cultural initiative based in Haltern am See, Germany, specializing in Kabarett and comedy events. Supported by local sponsors including the Sparkasse Westmünsterland, Halterner Zeitung, and the city itself, it provides event information and ticket sales primarily through an external platform. The website is well-structured, mobile-optimized, and professionally designed, targeting local culture enthusiasts. Technically, it uses standard web technologies with no detected CMS or advanced frameworks, hosted on korves.net. Security posture is adequate with HTTPS enabled but lacks advanced security headers and incident response information. Privacy compliance is basic with a privacy policy present but no visible cookie consent mechanism. Overall, the site is trustworthy and legitimate with strong local partnerships and clear contact details.

G

Google

merch.google

65

The website merch.google serves as the official online merchandise store for Google branded products, offering apparel, accessories, and gifts. It targets consumers globally with dedicated shipping options for the US, Canada, and other regions. The site is professionally designed with consistent Google branding and uses modern web technologies including Google Tag Manager and Analytics for marketing and tracking purposes. The technical infrastructure is solid with HTTPS enforced and use of standard JavaScript libraries, though some security headers are not explicitly detected. Privacy and cookie policies are notably absent on this landing page, which impacts compliance posture. Contact information is limited to an email address linked to a third-party marketing partner, suggesting outsourced customer support. Overall, the site is trustworthy and well-positioned as an official Google merchandise outlet.