Security Directory

E

ezra. Opferberatung Thüringen

opferhilfe-thueringen.de

57

ezra. Opferberatung Thüringen is a specialized non-profit organization providing counseling and support services to victims of right-wing, racist, and antisemitic violence in the German state of Thüringen. The organization targets affected individuals, their relatives, and witnesses, offering victim assistance, incident documentation, and a victim aid fund. The website is professionally designed, multilingual, and well-structured, reflecting a clear mission and strong regional presence. It is supported by official funding bodies and partners, enhancing its credibility and trustworthiness. Technically, the site is built on WordPress, hosted by Raidboxes, and uses common plugins and libraries such as Contact Form 7 and Font Awesome. The site is mobile-optimized and SEO-friendly, though performance is moderate. Security posture is good with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and a cookie consent mechanism, which are recommended for GDPR compliance. Overall, the site is trustworthy and serves an essential social function with a strong regional focus.

F

Förderverein Moritzkirche Naumburg (Saale) e.V.

moritzkirche-naumburg.de

49

The website represents the Förderverein Moritzkirche Naumburg (Saale) e.V., a non-profit organization dedicated to preserving and promoting the cultural and religious heritage of the St. Moritz church in Naumburg, Germany. It offers information about church services, exhibitions, concerts, and historical lectures, targeting local visitors and cultural enthusiasts. The site is well-branded and provides clear contact and donation information, reflecting a trustworthy community institution. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and slick carousel, delivering a good user experience with mobile optimization and clear navigation. However, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security-wise, HTTPS is used, but no security headers or vulnerability disclosures are present, indicating room for improvement in security posture. Overall, the site is safe, professional, and credible but would benefit from enhanced privacy and security measures.

E

Evangelische Schulstiftung in Mitteldeutschland St. Johannes

schulstiftung-ekm.de

39

The Evangelische Schulstiftung in Mitteldeutschland St. Johannes operates as a large non-profit educational foundation managing 42 educational institutions across the German states of Saxony, Saxony-Anhalt, and Thuringia. It serves over 7,000 students with a staff of approximately 900, offering a broad range of school types including primary, secondary, and special education. The foundation also provides career opportunities and professional development programs, positioning itself as a key regional player in evangelical education. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and well-structured user experience. While performance is moderate, the site is mobile-optimized and SEO-friendly. Analytics are handled via Matomo/Piwik, reflecting a moderate level of user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

O

Octadesk

octadesk.com

52

Octadesk is a Brazilian technology company providing a comprehensive SaaS platform for omnichannel customer service and sales automation. The platform integrates AI chatbots, ticketing, workflow automation, and analytics to optimize customer interactions and operational efficiency. With over 4000 companies using its services, Octadesk holds a strong market position in Brazil's customer service technology sector. The website demonstrates a mature digital infrastructure leveraging Webflow CMS, HubSpot marketing tools, and multiple analytics and advertising pixels, indicating advanced digital marketing and user engagement strategies. Security posture is robust with HTTPS, security headers, and secure forms, although explicit security policies and incident response information are not publicly detailed. The absence of WHOIS domain registration data is a notable concern but does not detract significantly from the overall trustworthiness given the professional website and business presence. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and enhancing transparency around data protection roles. Overall, Octadesk presents as a credible and professional technology provider with a strong digital presence and good security hygiene.

C

Cloud Security Alliance Norway Chapter

cloudsecurityalliance.no

61

The Cloud Security Alliance Norway Chapter website serves as the local representation of the global Cloud Security Alliance organization, focusing on cloud security education, networking, and community engagement within Norway. Founded in 2015, the chapter provides members with access to events, research, and professional development opportunities in cloud security. The website is hosted on the Higher Logic platform, leveraging ASP.NET WebForms and common web technologies such as jQuery and Bootstrap for its frontend implementation. From a technical perspective, the site employs a moderate technology stack with CDN hosting via Amazon CloudFront, ensuring reasonable performance and availability. While the site is functional and professionally designed, mobile optimization and accessibility are basic, and SEO practices are modest. The site uses HTTPS with good SSL configuration but lacks several recommended security headers, which could enhance its security posture. Security-wise, the website enforces HTTPS and uses Google Tag Manager for analytics and tracking but does not provide explicit security policies, incident response contacts, or vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism or GDPR compliance indicators. The absence of direct contact emails or phone numbers on the homepage limits immediate user engagement but aligns with the community-focused nature of the chapter. Overall, the website is trustworthy and legitimate, consistent with the Cloud Security Alliance brand and its Norway chapter mission. Strategic improvements in security headers, privacy compliance, and mobile accessibility would enhance the site's security posture and user experience.

D

Demers Ambulances

demers-ambulances.com

56

Demers Ambulances is a well-established manufacturer specializing in innovative and ergonomic ambulances designed for EMS and fire services. With a history dating back to 1960 and backed by parent company JB Poindexter & Co., Demers positions itself as a trusted partner delivering high-quality, safety-focused ambulance solutions. The website reflects a professional digital presence with detailed product information, customer testimonials, and active social media engagement. Technically, the site is built on WordPress with modern plugins and tracking tools, offering good mobile optimization and SEO practices. Security posture is solid with HTTPS and reCAPTCHA usage, though improvements in security headers and cookie consent mechanisms are recommended. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall trustworthiness. Strategic recommendations include enhancing privacy compliance, publishing security policies, and improving security headers to strengthen trust and compliance.

RFL Fuar is a Turkish event organization company specializing in fairs and exhibitions, serving the Turkish foreign trade and industry sectors since 2006. The website presents the company as a leader in providing quality fair services and market access. The business targets professional and corporate clients involved in trade and industry within Turkey. The domain age and WHOIS data support the legitimacy and stability of the business. Technically, the website uses a range of common front-end libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, hosted on Bluehost. The site shows basic mobile responsiveness and moderate performance but lacks advanced SEO and accessibility features. No CMS or advanced platform is detected, indicating a custom or static site. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and DNSSEC is not enabled. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, but no incident response or security policies are visible. The security posture is moderate but requires improvements to meet best practices. Overall, the website is functional and moderately professional but requires enhancements in security, privacy compliance, and technical modernization to improve trust and user experience. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, adding security headers, and improving accessibility and SEO.

W

Wild Media GmbH

wildmedia.eu

56

Wild Media GmbH is a German-based full-service marketing and advertising agency located in Bad Kissingen. The company offers a wide range of services including marketing, web design, print, film production, audio, photography, and event entertainment. Their website is professionally designed using Joomla CMS and incorporates modern web technologies and frameworks such as Bootstrap, Font Awesome, and LayerSlider. The site is mobile optimized and includes GDPR-compliant cookie consent via Usercentrics. Contact information is clearly provided, enhancing business credibility. Security posture is adequate with HTTPS enabled, though some security headers and policies could be improved. Overall, the website reflects a legitimate and professional small business with a solid digital presence.

F

FREUDENBERGER - Agentur für Kommunikation

agentur-freudenberger.de

45

FREUDENBERGER - Agentur für Kommunikation is a specialized communication agency serving the energy sector, including energy suppliers, municipal utilities, and companies. The agency offers tailored services such as sales communication, marketing, press relations, internet, and social media solutions. The company positions itself as a niche player with a solid client base of over 40 municipal utilities, indicating a focused market presence. The website is professionally designed, consistent in branding, and provides clear contact information and service descriptions. Technically, the site is built on WordPress using modern plugins and frameworks like Elementor and Qi Addons, ensuring a good user experience and mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though it lacks some security headers and incident response information. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism. Overall, the site reflects a credible small agency with room for improvement in security and privacy practices.

S

Saaletalbad Hammelburg

saaletalbad.de

53

Saaletalbad Hammelburg operates as a local leisure and wellness facility in Germany, offering indoor and outdoor swimming pools, sauna services, a bistro, and various courses and offers. The website targets local residents and visitors seeking recreational swimming and wellness experiences. The business model is centered on paid access to these facilities and related services. The website is built on Joomla CMS with a professional design and clear navigation, supporting a good user experience and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-maintained, suitable for its audience and business purpose.

D

das agnes is under construction

das-agnes.de

35

The website das-agnes.de is currently under construction and displays a placeholder page indicating ongoing work. There is no business description, contact information, or legal policies available, which limits the ability to assess the company's market position or services. The site uses WordPress with an under construction plugin and includes standard web fonts and CSS frameworks such as Bootstrap and Font Awesome. No advanced technical or security features are evident. Security posture is minimal with no detected security headers or incident response information. The lack of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Overall, the site presents a low trust profile and limited business credibility due to the absence of meaningful content and contact details.

K

koalice Za snadné dárcovství

snadnedarcovstvi.cz

42

The website 'koalice Za snadné dárcovství' represents a Czech non-profit coalition focused on advancing individual fundraising through relationship-based donor engagement. It serves as a platform for non-profit organizations to collaborate, educate, and overcome obstacles in the donation process. The site positions itself as a key player in the Czech fundraising ecosystem, targeting non-profit organizations and fundraising professionals. Technically, the website is built on WordPress using Elementor and several common plugins, delivering a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance documentation, which are areas for improvement. Overall, the site appears legitimate and trustworthy, though the absence of WHOIS data limits domain registration transparency.

WebyLevně.cz is a Czech-based small business specializing in affordable website creation services primarily using WordPress CMS. The site targets individuals and small businesses seeking low-cost informational and presentation websites. The business has been established since 2006, as supported by domain registration data. The website content is basic but functional, providing guidance on pricing, examples of websites, and a contact email for inquiries. Technically, the site runs on WordPress 5.1.1 with several common JavaScript libraries including an outdated jQuery version, which poses a security risk. The site uses HTTPS but lacks modern security headers and visible privacy or cookie policies, indicating limited privacy compliance. No forms or extensive data collection mechanisms are present, reducing privacy risks but also limiting user engagement. Overall, the website demonstrates moderate professionalism and trustworthiness but would benefit from improved security and privacy practices.

M

Miroslav Mrázek

joomla-webdesign.cz

42

Joomla Webdesign is a Czech Republic-based small business specializing in Joomla CMS web design, development, SEO, and maintenance services. With over 10 years of experience, the company targets small to medium enterprises seeking tailored Joomla-based web solutions. The website demonstrates a professional digital presence with a modern tech stack including Joomla, Bootstrap, and Google Analytics integration. Security posture is solid with HTTPS and CSRF protections, though it lacks some security headers and formal privacy policies. The absence of WHOIS data reduces domain trust but is partially offset by clear business contact information and a portfolio of projects. Overall, the site is functional, user-friendly, and business-focused.

D

Dobrovolný svazek obcí Holicka

dsoh.cz

51

Dobrovolný svazek obcí Holicka is a voluntary association of municipalities in the Pardubice region of the Czech Republic, centered around the town of Holice. The website serves as an informational portal for residents and stakeholders, providing official notices, event calendars, tourism information, and downloadable documents. The organization operates as a local government non-profit entity, focusing on regional cooperation and community services. Technically, the website employs a custom CMS developed by Galileo Corporation s.r.o., utilizing JavaScript libraries such as jQuery and MooTools. The site has moderate performance and basic mobile optimization. It implements a cookie consent mechanism but lacks visible privacy and terms of service pages. No advanced analytics or tracking tools are detected, indicating a minimal user tracking approach. From a security perspective, the site uses HTTPS but lacks visible security headers such as CSP or HSTS in the provided data. No WHOIS registration data is available, which reduces domain trustworthiness. Contact information is clearly presented, but no dedicated security policy or incident response contacts are found. Overall, the security posture is moderate but could be improved with enhanced headers and transparency. The overall risk is moderate with recommendations to verify domain registration status, implement security headers, and publish privacy and security policies to enhance trust and compliance.

F

Ferienhof Wübbold

ferienhof-wuebbold.de

44

Ferienhof Wübbold is a small hospitality business based in Germany offering farm holiday experiences and vacation rentals near the Alfsee area. The website presents a professional and family-friendly image, targeting families and holidaymakers seeking nature and farm-related vacations. The business operates primarily through holiday apartments and houses, emphasizing a niche market in regional farm tourism. Technically, the website is built on Joomla CMS with Bootstrap framework, incorporating modern web technologies such as jQuery and Font Awesome. Accessibility features and cookie consent mechanisms are implemented, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic best practices observed, though there is room for improvement in publishing privacy policies, terms of service, and security disclosures. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence. No critical security issues or suspicious content were detected.

O

OCI

oci.eu

63

OCI is a French company specializing in digital transformation and IT services for businesses including SMEs, mid-sized companies, associations, and local authorities. Their website presents a comprehensive portfolio of services such as infrastructure, cybersecurity, cloud services, IT equipment, telephony, physical security, managed IT services, and business software solutions. The company positions itself as a trusted partner for digitalization in France. Technically, the website is built on WordPress using Elementor and optimized with WP Rocket, featuring modern web technologies and good SEO practices. Security-wise, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and a published security policy. The absence of WHOIS data limits domain trust assessment, though the website content and design indicate a professional and legitimate business. Overall, the site demonstrates a mature digital presence with room for improvement in privacy and security transparency.

L

Landratsamt Miltenberg

landratsamt-miltenberg.de

61

Landkreis Miltenberg operates a professional and comprehensive local government website providing residents and stakeholders with current news, career opportunities, departmental information, and citizen services. The site is well-structured, accessible, and includes privacy and cookie consent mechanisms, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries and a reputable CMS (Contao), hosted on a known provider, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and privacy compliance, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected. Overall, the website is trustworthy and serves its public sector role effectively.

K

klein•wenner

kleinwenner.eu

60

klein•wenner is a small, multicultural law firm specializing in business law with an international reach, formed by the merger of KGA Avocats and Wenner. The website presents a professional image with a clear focus on business law services targeting international clients and business professionals. The firm positions itself as a multicultural entity with expertise in business law, although detailed business information such as founding year or company size is not explicitly provided. The website is built on WordPress using the Divi theme, incorporating SEO and analytics tools such as Yoast SEO and Google Analytics, indicating a moderate level of digital maturity. The technical infrastructure is standard for a professional service website, with good mobile optimization and basic accessibility features. Security posture is adequate with HTTPS enabled and some privacy mechanisms like cookie consent in place, but lacks advanced security headers and explicit privacy or security policies. No contact information or incident response details are found, which limits direct communication channels for security or business inquiries. Overall, the website is professional and safe but could improve in transparency and security best practices.

F

Freunde der Katholischen Theresienschule in Berlin-Weißensee e.V.

theresienball.de

9

The website 'Theresienball' represents a non-profit educational event organized by the Freunde der Katholischen Theresienschule in Berlin-Weißensee e.V. It serves as a platform to promote and provide information about the annual school ball, targeting students, parents, and teachers. The site is built on WordPress with WooCommerce and Tickera plugins to support ticketing and event management functionalities. The technical infrastructure is modern and includes common web technologies such as jQuery and Font Awesome, with a responsive design suitable for mobile devices. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no cookie banner. Overall, the site is professional, trustworthy, and focused on community engagement.

C

CrankWheel ehf.

meeting.is

66

CrankWheel ehf. is a technology company specializing in providing instant and effortless screen sharing solutions tailored for inside sales and telesales professionals. Founded in 2014 and based in Iceland, the company offers a SaaS product that enables users to share their screens to any device without requiring setup or downloads for viewers. The website positions CrankWheel as a niche player focused on improving sales presentations and customer engagement through seamless screen sharing technology. The business model revolves around software subscriptions and affiliate marketing partnerships. Technically, the website leverages a modern technology stack including Cloudflare for DNS and CDN services, Google Tag Manager, Adobe DTM, Sentry for crash reporting, and CookieYes for cookie consent management. The site is well-optimized for mobile devices and incorporates multiple analytics and marketing tools such as Google Analytics, Hotjar, Amplitude, and Facebook Pixel. The hosting and infrastructure appear robust with good performance and security practices, although DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and uses bot protection mechanisms like Cloudflare Bot Management and Google reCAPTCHA. Cookie consent is implemented with granular user control, supporting GDPR compliance. However, there is no publicly visible privacy policy, terms of service, or security policy pages, and no vulnerability disclosure or incident response contacts are provided. Security headers are not explicitly detected, and DNSSEC is not enabled, which are areas for improvement. Overall, CrankWheel's website demonstrates a professional and trustworthy online presence with good technical maturity and marketing sophistication. The lack of explicit privacy and security policy documentation slightly reduces privacy compliance scores. Strategic recommendations include publishing comprehensive privacy and security policies, enabling DNSSEC, adding security headers, and providing vulnerability disclosure information to enhance trust and compliance.

S

Středisko volného času RADOVÁNEK

radovanek.cz

44

Středisko volného času RADOVÁNEK is a well-established non-profit educational and leisure center based in Plzeň, Czech Republic, with a history dating back to 2005 and organizational roots spanning 75 years. The organization offers a broad range of educational clubs, camps, cultural events, and projects targeting children, youth, and adults in the Plzeň region. The website reflects a professional and consistent brand presence, showcasing partnerships, awards, and a comprehensive offering of services. Technically, the site is built on Joomla CMS with modern frameworks like Gantry 5 and uses common libraries such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie management. Overall, the site is trustworthy, user-friendly, and well-positioned in its regional educational sector.

E

Evangelische Kirche von Westfalen

kirchenrecht-westfalen.de

62

The website kirchenrecht-westfalen.de serves as an official online legal reference system for the Evangelical Church of Westphalia, providing comprehensive access to church laws, ordinances, and related legal documents. It targets church officials, legal professionals, and members interested in church law. The platform offers systematic navigation, search functionality, and downloadable e-book formats, positioning itself as a trusted resource within its niche. Technically, the site employs Bootstrap for responsive design, Font Awesome for icons, and Matomo (Piwik) for analytics, indicating a modern and privacy-conscious infrastructure. Hosting is managed by SchlundTech, a known German hosting provider. The site is mobile-optimized with good navigation clarity and SEO practices, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, reflecting GDPR awareness. However, no explicit privacy policy, terms of service, or security headers were detected, suggesting areas for compliance and security enhancement. No vulnerabilities or suspicious content were found, and the domain registration aligns well with the church's identity, supporting legitimacy. Overall, the site is a professional, secure, and trustworthy resource for church law, with recommendations to improve privacy disclosures and security headers to enhance compliance and user trust.

F

FRAMETRAXX UG (haftungsbeschränkt)

frametraxx.de

54

FRAMETRAXX UG operates a specialized e-commerce platform offering royalty-free (gemafreie) music for various applications including YouTube, advertising, film, and commercial use. The company targets content creators, agencies, and businesses seeking legally secure music licensing solutions. Their market position is that of a niche provider with a comprehensive catalog and clear licensing models, supported by a professional website and trusted client logos. Technically, the website is built on the Gambio e-commerce platform with modern JavaScript libraries and Google Tag Manager integration, providing a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally maintained.

D

Deutsche Atlantische Gesellschaft e.V.

ata-dag.de

38

The Deutsche Atlantische Gesellschaft e.V. is a German non-profit organization dedicated to informing and engaging the public on German and European security policy, NATO objectives, and transatlantic relations. The organization operates through events, seminars, lectures, podcasts, and publications, targeting individuals and entities interested in security and defense topics. Their market position is that of an established, reputable non-profit within the government and policy sector in Germany. Technically, the website is built on WordPress, utilizing common libraries such as jQuery, Bootstrap, and Font Awesome, with SEO optimization via Yoast. Hosting appears to be managed through kasserver.com. The site is moderately performant, mobile-optimized, and includes analytics via Matomo, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, alongside a cookie consent mechanism. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for the organization, with good content quality and business credibility. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust.

H

Haus der Industrie

hausderindustrie.de

40

Haus der Industrie is a German-language website likely representing an industrial or business entity, though explicit business details are not present in the accessible content. The site uses WordPress with common plugins such as Bootstrap and Visual Composer, indicating a standard CMS-based infrastructure. The technical setup is moderate with basic mobile optimization and no advanced analytics or marketing tools detected. Security posture is basic, with HTTPS enabled but lacking security headers and visible security policies. No privacy or cookie policies were found, and no contact information is provided, limiting user trust and compliance. Overall, the site is accessible and functional but lacks comprehensive business and security information.

Internet Port Hamburg GmbH (IPHH) is a medium-sized German technology company specializing in datacenter solutions, colocation, managed services, and fiber optic network connectivity exclusively for business customers. Founded in 1996 and operating under the parent company Portus Data Centers Company, IPHH positions itself as a reliable partner offering customized infrastructure and consulting services tailored to enterprise needs. The website reflects a professional and consistent brand image with detailed service descriptions and certifications such as ISO/IEC 27001 and Health Data Hosting (HDS) France, underscoring its commitment to security and compliance. Technically, the website is built on the Contao Open Source CMS platform and leverages modern JavaScript libraries like jQuery, Swipe.js, and Colorbox for enhanced user experience. The site is mobile-optimized with good navigation clarity and moderate performance. However, there is room for improvement in accessibility and SEO optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though the absence of explicit security headers and cookie consent mechanisms suggests areas for enhancement. The WHOIS data for the domain www.iphh.net is unavailable, which raises some concerns about domain registration transparency. Despite this, the website content, certifications, and contact information indicate a legitimate and established business. No WAF or blocking mechanisms were detected, and the site is fully accessible. Overall, IPHH demonstrates a mature digital presence with a strong focus on security and customer service, though improvements in privacy compliance and domain registration transparency are recommended.

Internet Port Hamburg GmbH (IPHH) is a medium-sized German company founded in 1996, specializing in providing colocation, housing, managed services, and IP/fiber optic connectivity exclusively to business customers. Positioned as a reliable full-service provider, IPHH emphasizes personalized service, technical excellence, and compliance with industry standards such as ISO/IEC 27001 and Health Data Hosting (HDS) certifications. Their business model focuses on B2B enterprise clients requiring secure and customized data center solutions. The website reflects a professional and consistent brand image with clear contact information and detailed service offerings. Technically, the website is built on the Contao Open Source CMS and utilizes modern JavaScript libraries such as jQuery, Swipe.js, and Colorbox for enhanced user experience. The site is mobile-optimized with good navigation clarity and moderate performance. SEO and accessibility are basic but adequate for the target audience. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers and cookie consent mechanisms are missing. The security posture is bolstered by the company's ISO certifications and clear emphasis on data center security. However, the absence of WHOIS registration data raises concerns about domain legitimacy and transparency. No explicit incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website and business present a trustworthy and professional image with room for technical and compliance enhancements. Strategically, IPHH should verify and publish domain registration details, implement cookie consent mechanisms, and provide clear incident response contacts to strengthen security culture and regulatory compliance. These steps will improve customer trust and align with best practices in data protection and cybersecurity.

Craftverk Digital's website is currently under construction, displaying only a placeholder message with no substantive content or business details. The site uses WordPress with the Impreza theme and WPBakery page builder, hosted likely by WebSupport based on nameservers. Basic security features such as HTTPS and DNSSEC are enabled, but no privacy, cookie, or terms of service policies are present, nor is there any contact information or forms. The domain WHOIS data is suspicious due to a future creation date, which undermines trust and legitimacy. Overall, the website is in an early stage of development with minimal digital maturity and poor content quality.

K

Katholische Studierende Jugend

ksjberlin.de

45

KSJ Berlin is a non-profit youth organization focused on engaging students and young people in Berlin through volunteer activities, school participation, and societal involvement. The organization operates as part of the Catholic youth umbrella (BDKJ) but is inclusive of all beliefs. Their website provides information about membership, events, and community platforms such as a Discord server. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Fonts, and is hosted with domain control services. It is mobile optimized and includes SEO best practices. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of youth in Berlin.

J

Jugendverbände der Gemeinschaft Christlichen Lebens - Diözesanverband Berlin

j-gcl.berlin

42

J-GCL Berlin is a small non-profit youth organization focused on Christian community activities within the Berlin region. The website serves primarily as an informational portal presenting the organization's identity, social media presence, and contact email. The business model centers on community engagement and youth involvement in Christian life, positioning itself as a local entity without commercial operations. Technically, the website is built on a simple HTML5 and CSS stack with some JavaScript for UI enhancements, using the HTML5 UP design template and Font Awesome icons. The site is moderately optimized for mobile devices but lacks advanced SEO and accessibility features. Security posture is basic; while the domain is registered with a reputable German registrar and protected against unauthorized transfers, the site lacks DNSSEC, security headers, and visible HTTPS enforcement details. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. Overall, the site is safe, with no adult or questionable content, but would benefit from enhanced security and compliance measures.

S

Stadtwerke Hammelburg GmbH

stadtwerke-hammelburg.de

53

Stadtwerke Hammelburg GmbH is a regional utility company serving the Hammelburg area in Germany, providing essential services including electricity, gas, water, heat supply, and telecommunications via their HAB-Net DSL service. The company also operates local amenities such as the Saaletalbad swimming pool and parking facilities. Their market position is that of a trusted regional provider with a diversified portfolio catering to both residential and business customers. The website reflects a professional and consistent brand image with clear service offerings and customer support channels. Technically, the site is built on Joomla CMS with modern frontend technologies and includes a comprehensive GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the regional energy and telecommunications sectors.

E

Ev.-Luth. Kirche in Oldenburg (ELKiO)

kirchenrecht-oldenburg.de

59

The website kirchenrecht-oldenburg.de serves as the official online legal reference system for the Evangelical Lutheran Church in Oldenburg, Germany. It provides comprehensive access to current and archived church laws, regulations, and related legal documents, targeting church officials, legal professionals, and members of the church community. The site offers search functionality and downloadable e-book formats, supporting transparency and accessibility of church legal frameworks. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, and Matomo (Piwik) for analytics with user consent mechanisms. Hosting is provided by SchlundTech, a known German hosting provider. The site is mobile-optimized with good navigation clarity and SEO practices, though no explicit CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS and implements cookie consent in compliance with GDPR. However, there is no evidence of advanced security headers or a published security policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The site does not appear to use any advertising or affiliate marketing, focusing solely on informational content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It is safe for general audiences and free from adult or questionable content. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

U

United4Rescue – Gemeinsam Retten e.V.

united4rescue.org

58

United4Rescue is a German non-profit alliance dedicated to supporting civilian sea rescue operations in the Mediterranean. The organization connects various societal groups and NGOs to raise awareness and funds to prevent loss of life at sea. Their business model relies on donations, memberships, and fundraising campaigns, supported by an online shop selling branded merchandise. The website is professionally designed, multilingual, and provides clear navigation and relevant content for its humanitarian mission. Technically, the site uses modern tracking and consent tools, hosted by a German provider, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and cookie consent, though some security headers and DNSSEC could be improved. No direct contact emails or phone numbers are publicly listed, but contact forms and social media channels are available. WHOIS data aligns well with the organization's profile, indicating legitimacy and consistency. Overall, the website is trustworthy, compliant with GDPR, and effectively supports the organization's mission.

S

SCHWING Stetter Algérie

schwing-stetter-algerie.com

48

SCHWING Stetter Algérie is a medium-sized subsidiary of the German SCHWING group specializing in the marketing and distribution of concrete production, transport, and pumping machinery. The company targets construction and industrial clients primarily in Algeria, leveraging the global reputation and product range of its parent group. The website presents a professional and consistent brand image with detailed product offerings and event participation announcements, supporting its market position as a leading supplier in the concrete machinery sector. Technically, the website is built on a standard modern stack including Bootstrap and jQuery, hosted by OVH sas. It offers moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The absence of a CMS suggests a custom or static site approach. Security posture is basic, with no DNSSEC, no visible security headers, and no published privacy or cookie policies, indicating room for improvement in compliance and protection. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks critical security best practices such as HTTPS enforcement details, security headers, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. However, the lack of direct contact emails or phone numbers and absence of privacy-related policies reduce trust and compliance scores. Overall, the website is functional and professional but requires enhancements in privacy compliance, security hardening, and contact transparency to improve trustworthiness and regulatory adherence.

Mitteldeutsche Hartstein-Industrie AG is a well-established German company specializing in the production and supply of raw and construction materials, infrastructure construction, recycling, and related services. With a history spanning over 119 years and a network of 42 locations, the company serves primarily business clients in the construction and infrastructure sectors. Their business model focuses on B2B supply and service provision, emphasizing sustainability and quality. The website reflects a professional and consistent brand image, supported by certifications such as Fair Company 2025 and active social media engagement. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap, jQuery, and Font Awesome. It integrates analytics tools like Matomo and Google Analytics and uses Google Maps API for location services. The site is mobile-optimized and offers good SEO and accessibility features, although some accessibility improvements could be made. Performance is moderate, with no critical technical issues detected. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were found. The domain registration data is consistent with the company's identity and history, supporting a high trust level. Overall, the website is professional, secure, and compliant with privacy regulations, serving as a credible digital presence for the company. Strategic improvements in security policy transparency and accessibility could further enhance trust and compliance.

RFL Fuar is a Turkish company specializing in organizing trade fairs and exhibitions, serving the Turkish foreign trade and industry sectors since 2006. The website reflects a business-focused approach with clear service offerings and contact information, targeting businesses and professionals interested in trade events. The domain is mature and consistent with the company's history, enhancing credibility. Technically, the website employs a range of common front-end libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, providing a responsive and user-friendly experience. However, there is no detected CMS or advanced analytics, indicating a relatively simple but functional technical infrastructure. Mobile optimization and navigation clarity are good, though accessibility and SEO could be improved. From a security perspective, the site lacks visible security headers and privacy compliance documentation, which are critical for modern web security and regulatory adherence. The domain is registered with a reputable registrar and DNS hosting provider, but DNSSEC is not enabled. No WAF or blocking mechanisms were detected, and no vulnerabilities were immediately apparent in the HTML content. Overall, the website is functional and credible but requires improvements in security posture and privacy compliance to reduce risk and enhance trustworthiness. Strategic enhancements in these areas would benefit the company's digital maturity and regulatory alignment.

A

Ausbildungskostenausgleichskasse im Schornsteinfegerhandwerk (AKS) GmbH

ausbildungskasse.de

53

Ausbildungskostenausgleichskasse im Schornsteinfegerhandwerk (AKS) GmbH is a specialized organization supporting vocational training in the chimney sweep trade in Germany. The company provides financial assistance to businesses that train apprentices in this niche craft, positioning itself as a key industry support entity. The website reflects a professional and consistent brand image, targeting businesses and apprentices within the trade. Technically, the site is built on the webEdition CMS platform and employs a modern frontend stack including jQuery, Bootstrap, and various UI libraries, ensuring a responsive and user-friendly experience. Security-wise, the site enforces HTTPS and implements a comprehensive cookie consent mechanism, though it lacks explicit published security policies or incident response information. Overall, the website is well-structured, trustworthy, and compliant with GDPR requirements, with room for improvement in security transparency and header implementation.

G

GEFAHRGUTJÄGER GmbH

gefahrgutjaeger.de

65

GEFAHRGUTJÄGER GmbH is a specialized consulting and legal services provider focused on hazardous goods law, hazardous substances, waste management, immission control, and occupational safety. The company targets businesses and professionals requiring expert advice and training in compliance with German and EU regulations. Their market position is that of a niche specialist with a strong focus on regulatory compliance and education. The website is professionally designed using WordPress with Elementor and Yoast SEO, indicating a mature digital presence. Integration of Google Analytics and Maps is managed with user consent, reflecting good privacy practices. Security posture is strong with HTTPS and security headers implemented, although no explicit security policy or incident response information is published. Overall, the website is trustworthy, well-maintained, and compliant with GDPR requirements.

F

Ferienhof Wübbold

alfsee-familienurlaub.de

41

Ferienhof Wübbold operates a family-oriented hospitality business focused on farm and nature vacation experiences at Alfsee, Germany. The website presents a professional and consistent brand image with clear contact information and social media presence. The technical infrastructure is based on Joomla CMS with modern frameworks like Bootstrap and jQuery, supporting good mobile optimization and accessibility. Security posture is adequate with HTTPS and cookie consent implemented, but lacks advanced security headers and formal privacy and terms policies. Overall, the site is safe, trustworthy, and well-suited for its target audience of families seeking vacation rentals and farm experiences.

U

Universes in Universe - Worlds of Art

universes.art

57

Universes in Universe - Worlds of Art is a specialized media platform providing comprehensive information on art destinations, biennials, exhibitions, and art projects worldwide. Established online since 1997, it serves a niche audience of art enthusiasts, curators, and cultural travelers with rich content including guides, articles, and event previews. The website leverages TYPO3 CMS and integrates modern frontend technologies and analytics tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and domain transfer protections, though improvements in DNSSEC and security headers are recommended. Privacy compliance is well addressed with clear policies and cookie consent mechanisms. Overall, the site demonstrates high content quality, good user experience, and trustworthy business credibility.

Partners for Democratic Change Slovakia (PDCS) organizes an international conference titled 'Civic Actors in War and Peace' focusing on strategies to address hate, polarization, and extremism in communities during times of conflict and peace. The conference attracts international experts, civic actors, and policymakers, positioning PDCS as a recognized non-profit entity in the civic engagement and conflict prevention sector. The website provides comprehensive event details, speaker profiles, and multimedia content, reflecting a well-established event with a history dating back to at least 2014. Technically, the site uses modern web technologies including Bootstrap, Font Awesome, Flickity, and integrates privacy-conscious analytics via Plausible. Hosting is managed by Websupport with DNSSEC enabled, and HTTPS is enforced, indicating a secure infrastructure. However, some security best practices such as explicit security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and compliant with GDPR through a linked privacy policy, though improvements in privacy and security disclosures are recommended.

G

GORICA Group

goricagroup.com

44

GORICA Group is a Dubai-based manufacturer specializing in trailers, semitrailers, concrete mixers, and related heavy vehicle equipment serving the MENA region. The company positions itself as a leading manufacturer in the Middle East and North Africa, with a business model focused on manufacturing and after-sales services. The website reflects a medium-sized enterprise with subsidiaries and a consistent brand presence. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering moderate performance and good mobile optimization. However, the site lacks comprehensive privacy and cookie policies, and no incident response or security contact information is provided, indicating compliance and security posture gaps. The domain is well-established since 2001, consistent with the company's claimed history, and no blocking or WAF mechanisms interfere with content access.

S

SOMA - Environmental Solutions, Lda.

soma.pt

37

SOMA - Environmental Solutions, Lda. is a Portuguese company specializing in the commercialization, design, manufacturing, and technical assistance of urban cleaning and environmental equipment. Their product portfolio includes waste collection vehicles, sweepers, washing equipment, electric ecological solutions, cranes, and a proprietary operational management system called WISEWASTE®. The company holds ISO 9001:2015 certification and is recognized for innovation, including being the first Portuguese company with Common Criteria certification for an RFID container identification system. Their target audience includes public and private urban cleaning operators, municipalities, and environmental entities. The website reflects a medium-sized enterprise with over 50 years of experience, offering a comprehensive range of products and services.

UAB VAGlita is a Lithuanian company founded in 1999 specializing in providing solutions for the waste management and municipal services sector. Their offerings include sales, rental, and repair of heavy machinery and municipal equipment, with official representation of notable brands such as BOTEK and ZOELLER. The company maintains a medium-sized team of 24 qualified employees and targets municipal service companies and related businesses. The website is built on WordPress and uses common web technologies, presenting a professional and consistent brand image. However, it lacks visible privacy and cookie policies, which impacts compliance and user trust. Security posture is adequate with HTTPS enabled but could be improved by adding security headers and formal vulnerability disclosure mechanisms. Overall, the website is functional, professional, and trustworthy but would benefit from enhanced privacy and security practices.

H

HKP ROHSTOFFE GmbH

hkp-neuwied.de

59

HKP ROHSTOFFE GmbH is a German-based company specializing in the supply of international raw materials for the construction industry, with a strong emphasis on sustainability and recycling of construction waste such as soil and rubble. The company positions itself as a flexible and fast supplier catering to the needs of the construction sector. Their website is professionally designed using WordPress with modern plugins and technologies, providing clear navigation and multilingual support. Contact information is prominently displayed, and privacy compliance is well implemented through cookie consent mechanisms and a comprehensive privacy policy. Security posture is good with HTTPS enabled and no visible vulnerabilities, though some security headers could be improved. Overall, the website reflects a credible and trustworthy small manufacturing business with a clear market focus.

D

Diözesanarchiv Berlin

dioezesanarchiv-berlin.de

52

The Diözesanarchiv Berlin website serves as the official archival repository for the Archdiocese of Berlin, preserving and providing access to historical and ecclesiastical documents related to the Catholic Church in Berlin, Brandenburg, and Pommern. The site targets researchers, historians, and church officials, offering curated archival content and documentation. The business operates under the Archdiocese of Berlin, positioning itself as a specialized government/non-profit archival institution with a clear mission and trusted affiliation. Technically, the website is built on WordPress using a professional theme and SEO plugins, ensuring good SEO optimization and mobile responsiveness. The hosting is managed via DomainControl nameservers, and the site uses HTTPS with no detected blocking or WAF interference. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are critical for GDPR compliance and enhanced security posture. No incident response or vulnerability disclosure information is provided, limiting transparency in security management. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance measures, improved security headers, and clearer contact information to strengthen user trust and regulatory adherence.

D

Diözesane Arbeitsgemeinschaft der Mitarbeitervertretungen im Erzbistum Berlin

diag-mav-berlin.de

55

DiAG-MAV Berlin is a small non-profit organization serving employee representatives within the Archdiocese of Berlin. The website provides informational resources, legal documents, seminar announcements, and contact details tailored to its niche audience. The organization positions itself as a trusted source for employee representation in church-related contexts. Technically, the website is built on WordPress with common plugins and libraries such as jQuery, Bootstrap, and Revolution Slider, indicating a standard but functional digital infrastructure. The site is mobile-optimized and includes interactive maps for location display. Security-wise, the site uses HTTPS and basic form validation but lacks advanced security headers and visible incident response policies. Privacy compliance is addressed with a cookie consent banner and a privacy policy page in German. Overall, the site is professional and trustworthy but could improve in security best practices and transparency regarding terms of service and incident response.

C

Centrum environmentálních technik a technologií (CETT)

cett.eu

42

CETT (Centrum environmentálních technik a technologií) operates as a specialized hospitality and educational center located in the Czech Republic, offering conference facilities, accommodation, and environmental education programs. The business targets corporate clients, institutions, schools, and individual guests, emphasizing quality service and environmental awareness. The website reflects a professional and consistent brand image with clear service offerings and positive trust indicators such as certifications and guest ratings. Technically, the site employs modern frontend technologies including Bootstrap and Google Analytics, providing a responsive and user-friendly experience. However, some areas such as explicit cookie consent and security policies could be improved. Security posture is moderate with HTTPS usage but lacks visible security headers and incident response information. Overall, the site is trustworthy and well-positioned in its niche but would benefit from enhanced privacy and security transparency.

F

Filip Kňažek

filipknazek.eu

36

Filip Kňažek operates a personal coaching and facilitation business focused on nature-based self-development and emotional well-being. The website presents a professional and consistent brand image with clear service offerings including workshops, coaching walks, and group facilitation. The technical infrastructure is based on WordPress with Elementor and Yoast SEO, indicating a modern and maintainable platform. Security posture is adequate with HTTPS enabled, but lacks some security headers and formal privacy/cookie policies. The absence of WHOIS data is due to privacy protection, which is typical for small personal businesses. Overall, the site is trustworthy and well-positioned for its niche audience.