Security Directory

S

Stiftung Kunstsammlung Nordrhein-Westfalen

kunstsammlung.de

56

Kunstsammlung Nordrhein-Westfalen is a prominent cultural institution operating internationally recognized museums K20 and K21 in Düsseldorf, Germany. The organization focuses on classical modern and contemporary art exhibitions, educational programs, and public engagement through various services including ticket sales and an online collection. The website reflects a mature digital presence with professional design, clear navigation, and multilingual support, targeting art enthusiasts, cultural tourists, and educational groups. Technically, the website employs modern web technologies such as Bootstrap, jQuery, and Swiper.js, hosted likely by 1&1 IONOS, and uses ExpressionEngine CMS. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of cookie consent and GDPR-compliant privacy policies indicates a strong commitment to privacy compliance. From a security perspective, the site enforces HTTPS, uses CSRF tokens, and implements cookie consent mechanisms. However, it lacks explicit security headers and publicly available security or incident response policies. No vulnerabilities or suspicious activities were detected in the content or WHOIS data, which is consistent and transparent. Overall, the website is trustworthy, professionally managed, and compliant with relevant privacy regulations, making it a reliable source for visitors and stakeholders. Strategic improvements in security headers and incident response transparency could further enhance its security posture.

S

Stadt Dormagen

dormagen.de

64

Stadt Dormagen operates as the official municipal government website for the city of Dormagen, Germany. It provides comprehensive information and services related to city administration, tourism, culture, business, and citizen engagement. The site targets residents, tourists, and local businesses, positioning itself as a central digital hub for municipal services and community information. The website is built on TYPO3 CMS and incorporates accessibility and multilingual features, reflecting a mature digital infrastructure suitable for a government entity. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates a professional and trustworthy presence with good content quality and user experience.

Literaturbüro in der Euregio Maas-Rhein e. V. is a small, non-profit cultural organization based in Aachen, Germany, dedicated to promoting literature and literary culture in the tri-border Euregio Maas-Rhein region. Founded in 1981, it organizes a variety of literary events, seminars, and projects aimed at authors and literature enthusiasts. The website is professionally designed using WordPress with Yoast SEO, providing rich content and clear navigation tailored to its target audience. The technical infrastructure is modern and well-maintained, hosted on rzone.de, with good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, though improvements could be made by adding security headers and cookie consent mechanisms. Overall, the site reflects a trustworthy and credible cultural institution with strong regional ties.

B

Buchhandlung Schmetz am Dom, Aachen

buchhandlung-schmetz.de

53

Buchhandlung Schmetz am Dom is a small, independent retail bookstore located in Aachen, Germany, offering a broad selection of books, games, and related products both in-store and through an online shop operated by a partner. The business emphasizes personal customer service, community engagement through events, and specialized offerings for young readers. Their digital presence is supported by a modern CMS (ProcessWire), privacy-conscious analytics (Matomo), and a compliant cookie consent mechanism. The website is well-designed, mobile-optimized, and provides comprehensive legal and contact information, enhancing trust and professionalism. Security posture is solid with HTTPS and privacy controls, though some security headers and explicit policies could be improved. Overall, the site reflects a mature digital infrastructure suitable for a local retail business with a strong community focus.

E

euregio rhein-maas-nord

euregio-rmn.de

46

The euregio rhein-maas-nord website represents a well-established regional cooperation organization focused on strengthening cross-border relations between the Netherlands and Germany. Founded in 1978, it serves as a key contact point for cross-border questions and offers services such as subsidy programs, educational cooperation, and information for cross-border workers and employers. The website is bilingual, professionally designed, and provides clear navigation and relevant content for its target audience. Technically, the site is built on WordPress 6.8.1 with the Elementor page builder, leveraging modern JavaScript libraries like Swiper.js and jQuery. Hosting is provided by Schlundtech, as indicated by the nameservers. The site uses HTTPS with a good SSL configuration and includes privacy and cookie policies with consent mechanisms, reflecting a moderate to good level of digital maturity. From a security perspective, the site enforces HTTPS and uses security-related plugins such as Borlabs Cookie. However, some security headers like Content-Security-Policy and X-Frame-Options are not explicitly detected and could be improved. No vulnerabilities or exposed sensitive data were found in the HTML content. Incident response and security policy information are not publicly available. Overall, the website is safe, trustworthy, and compliant with GDPR requirements. It lacks some advanced security disclosures but maintains a solid baseline security posture. The domain registration data is consistent and supports the legitimacy of the organization. Strategic recommendations include enhancing security headers, maintaining up-to-date software, and publishing incident response information to further improve trust and security.

W

Westdeutscher Rundfunk

wdr5.de

56

The website www1.wdr.de/radio/wdr5/index.html represents Westdeutscher Rundfunk (WDR), a large and established public broadcasting media entity in Germany. It offers a comprehensive range of radio programming, podcasts, news, and cultural content targeted primarily at German-speaking audiences interested in politics, culture, and regional news in North Rhine-Westphalia (NRW). The site is professionally designed with consistent branding and excellent content quality, reflecting WDR's strong market position in the media industry. Technically, the site uses modern web technologies including JavaScript, CSS, and ARD's proprietary player scripts, with responsive design optimized for mobile devices. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and explicit security policies are absent. Privacy compliance is weak due to missing privacy and cookie policies and lack of consent mechanisms. Contact information is limited to a phone hotline and a contact form, with no direct emails or incident response contacts visible. Overall, the site is trustworthy and safe for general audiences, with no adult or explicit content detected.

E

EuregioKultur e. V.

euregio-lit.eu

51

EuregioKultur e. V. is a small non-profit cultural association dedicated to fostering cross-border cultural and literary exchange within the Euregio Maas-Rhein region. The organization runs several literary projects and awards, targeting cultural institutions, translators, students, and literary enthusiasts. The website reflects a professional and consistent brand presence with clear navigation and relevant content focused on its mission. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries such as jQuery and Facebook SDK for social integration. It employs HTTPS with a good SSL configuration and includes a GDPR-compliant cookie consent mechanism. The site is moderately optimized for performance and mobile devices, though accessibility features are basic. From a security perspective, the site benefits from HTTPS and cookie consent but lacks visible security headers and explicit incident response or vulnerability disclosure information. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is unavailable due to EURid privacy policies, but the domain appears legitimate based on content and partner affiliations. Overall, the website presents a low-risk profile with good privacy compliance and a clear cultural mission. Strategic improvements in security headers, incident response transparency, and accessibility would enhance its security posture and user trust.

The domain mvr.bg is currently protected behind a Cloudflare Turnstile CAPTCHA challenge page, preventing access to any substantive website content. The WHOIS data is minimal and privacy protected, with no registrant organization or country information disclosed due to GDPR compliance. The website appears to be actively maintained with DNSSEC enabled and Cloudflare nameservers, indicating a legitimate operational setup. However, the lack of accessible content, business information, or compliance documentation severely limits the ability to assess the business or security posture comprehensively. The site currently provides no visible privacy, cookie, or terms of service policies, nor any contact or incident response information. Technical infrastructure relies heavily on Cloudflare services for security and performance.

М

Министерство на регионалното развитие и благоустройството

bgregio.eu

67

The website bgregio.eu is the official portal for the Bulgarian government’s "Regional Development Program 2021-2027", managed by the Ministry of Regional Development and Public Works. It serves as an information hub for regional development initiatives, funding opportunities, program execution, and public communication. The site targets Bulgarian citizens, regional authorities, and program beneficiaries, providing structured navigation and content relevant to its mission. Technically, the site is built on IBM WebSphere Portal with Dojo Toolkit and jQuery, indicating a mature but somewhat legacy infrastructure. The site is accessible, uses HTTPS, and integrates Matomo analytics for user tracking. However, it lacks explicit privacy and cookie policies, security headers, and detailed incident response information, which are areas for improvement. Overall, the site is professional and trustworthy, reflecting its government affiliation, but could enhance privacy compliance and security posture.

The website nextgeneration.bg is an official Bulgarian government portal dedicated to informing the public and stakeholders about the Next Generation EU initiatives, including the National Recovery and Resilience Plan, Cohesion Policy, Fair Transition Mechanism, REACT-EU, and other EU priorities. It serves as a comprehensive informational resource with access to official documents, presentations, and public consultation links. The site targets Bulgarian citizens, government officials, and entities involved in EU funding programs. Technically, the site uses Bootstrap for responsive design, Matomo for analytics, and integrates Vimeo for video content. The website is mobile optimized, accessible, and has clear navigation, though it lacks some advanced SEO and security headers. The performance is moderate, and the technical stack is modern but basic. From a security perspective, the site uses HTTPS and does not expose sensitive data. However, it lacks visible security headers, privacy and cookie policies, and incident response information. There is no vulnerability disclosure or security.txt file. User tracking is moderate via Matomo but without explicit consent mechanisms, indicating privacy compliance gaps. Overall, the website is trustworthy and professional as a government information portal but would benefit from enhanced privacy compliance, security best practices, and clearer contact information to improve user trust and regulatory adherence.

Фонд мениджър на финансови инструменти в България ЕАД е специализирано държавно дружество, създадено от Министерски съвет за управление на финансови инструменти, финансирани от Европейските структурни и инвестиционни фондове. Компанията обслужва широк спектър от клиенти, включително частен бизнес, публичен сектор и финансови институции, като предоставя микрокредити, гаранционни схеми и инвестиции в иновации и дигитализация. Тя заема ключова позиция в българския пазар на финансови инструменти, подпомагайки устойчив икономически растеж и регионално развитие. Техническата инфраструктура на сайта е базирана на модерни уеб технологии като Bootstrap, jQuery и Google Tag Manager, осигуряващи добра производителност и мобилна оптимизация. Сайтът използва HTTPS и включва защитни механизми като Google reCAPTCHA, но липсват някои важни сигурностни заглавки и политики за поверителност и бисквитки. Въпреки това, бизнес информацията е ясна и подкрепена от официални партньорства и социални медии, което повишава доверието. Общата оценка на сайта е добра, с препоръки за подобряване на политиките за поверителност, сигурността и видимостта на контактната информация.

P

POWER+RADACH

power-radach.de

41

POWER+RADACH is a German advertising agency based in Aachen, specializing in the development of effective service and marketing concepts. The website presents a professional and well-structured digital presence built on WordPress, optimized with NitroPack for performance. The technical infrastructure includes Cloudflare DNS services, ensuring reliable hosting and security. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms. However, the site lacks explicit contact information and published security policies, which could be improved to enhance trust and transparency. Overall, the security posture is solid with HTTPS enabled but could benefit from additional security headers and vulnerability disclosures.

eBuSy is a specialized online booking and reservation system tailored for sports facilities, trusted by over 800 clubs, organizations, and companies. The business operates primarily in Germany and offers a SaaS model that facilitates flexible and efficient management of sports venue bookings. The website reflects a professional and consistent brand image, targeting sports organizations and enterprises seeking digital booking solutions. Technically, the site is built on WordPress with Elementor and Yoast SEO, hosted on Hetzner servers, and integrates Google services for analytics and marketing. Security measures include HTTPS, Wordfence protection, and a comprehensive cookie consent mechanism, although some security headers could be improved. Privacy compliance is strong, with clear GDPR-aligned policies and consent management. Overall, the site demonstrates a mature digital presence with good performance and user experience.

E

EWV Energie- und Wasserversorgung GmbH

ewv.de

45

EWV Energie- und Wasserversorgung GmbH is a regional energy and water utility company based in Stolberg, Germany, focusing on sustainable and climate-friendly energy solutions including electricity, gas, heating, photovoltaics, and e-mobility. The company targets both private and business customers within its service region, emphasizing local partnerships and environmental responsibility. The website is built on TYPO3 CMS and integrates modern technologies such as Usercentrics for GDPR-compliant cookie consent, Google Tag Manager, and Meta Pixel for marketing and analytics. The digital infrastructure supports customer engagement through an online portal and product finders, reflecting a moderate to good level of digital maturity. Security posture is adequate with HTTPS enforced and consent mechanisms in place, though explicit security policies and incident response information are not published. Overall, the website is professional, trustworthy, and well-structured, supporting the company's regional market position and sustainability goals.

S

Stadtwerke Alsdorf GmbH

stadtwerke-alsdorf.de

43

Stadtwerke Alsdorf GmbH is a regional municipal energy provider based in Germany, focusing on sustainable and ecological energy solutions for the city of Alsdorf. Their business model centers on providing reliable, affordable, and environmentally friendly energy services, including electricity, gas, and decentralized renewable energy projects such as solar PV and heat supply systems. The company positions itself as a trusted local partner for citizens, municipal entities, and market partners, emphasizing green technologies and energy efficiency. Technically, the website is built on WordPress using the Elementor page builder and OceanWP theme, indicating a modern and flexible digital infrastructure. The site is mobile-optimized and includes standard SEO and accessibility features, although some accessibility aspects could be improved. Performance is moderate, with use of common JavaScript libraries and tracking tools such as Google Tag Manager. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, there is no evidence of advanced security headers or explicit security policies. No vulnerability disclosure or incident response information is provided, which could be areas for enhancement. WHOIS data is consistent and shows no privacy protection, supporting the legitimacy of the domain. Overall, the website presents a professional and trustworthy image with good content quality and business credibility. The absence of direct contact emails or phone numbers on the homepage is noted but may be available on other pages. The site is safe for general audiences with no adult or questionable content. Strategic improvements in security policies and contact transparency would further strengthen the company's digital trustworthiness.

A

AVM GmbH

avm.de

50

AVM GmbH operates the website en.fritz.com, providing a comprehensive portfolio of home networking products including routers (FRITZ!Box), mesh Wi-Fi systems, telephony devices, smart home products, and related applications. The company is positioned as a leading technology provider in the home networking and telecommunications sector, targeting consumers and small businesses seeking reliable and user-friendly Internet connectivity solutions. The website content is professionally curated, with clear navigation and detailed product information, supporting AVM's market presence and brand recognition. Technically, the website is built on the TYPO3 CMS platform, utilizing modern JavaScript libraries such as jQuery and Slick Slider for enhanced user experience. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive digital maturity profile. Analytics are implemented via Piwik (Matomo), reflecting a moderate level of user tracking balanced with privacy considerations. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data in its HTML content. However, explicit security headers and published security policies or incident response procedures are not evident, representing areas for improvement. The absence of vulnerability disclosure mechanisms or security.txt files limits transparency in security communications. Overall, the website is trustworthy, safe, and professionally maintained, with no indications of adult or questionable content. The WHOIS data for the subdomain en.fritz.com is unavailable, which is expected as it is a subdomain; the main domain fritz.com is a well-established brand owned by AVM GmbH. Strategic recommendations include enhancing security headers, publishing security policies, and establishing vulnerability disclosure channels to strengthen security posture and stakeholder trust.

P

Piwik PRO

piwikpro.it

70

Piwik PRO is a technology company specializing in privacy-compliant analytics solutions targeted at marketing experts and analysts. The company offers a flexible analytics suite designed to respect user privacy throughout the data collection and analysis process. The website reflects a mature digital presence with a focus on privacy, integrating modern marketing tools such as HubSpot and Google reCAPTCHA to enhance user experience and security. The domain age and WHOIS data align well with the company's stated history, supporting its legitimacy and market position as a niche leader in privacy-focused analytics. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, although there is room for improvement in publishing explicit security policies and implementing security headers. Overall, the website is professional, well-structured, and compliant with GDPR requirements, making it a trustworthy platform for its target audience.

P

Piwik PRO

piwikpro.se

72

Piwik PRO is a technology company specializing in privacy-focused analytics solutions, targeting marketers and analysts who require flexible and compliant data analysis tools. The company has an established market presence with multiple localized domains, indicating a broad international footprint. Their website is built on WordPress with modern SEO and marketing integrations, reflecting a mature digital infrastructure. Security measures include HTTPS, Google reCAPTCHA Enterprise, and a comprehensive cookie consent mechanism, demonstrating a strong commitment to privacy and compliance. However, explicit security policies and incident response information are not publicly disclosed, which could be improved to enhance trust. Overall, the website is professional, well-structured, and trustworthy, with good privacy compliance and technical implementation.

P

Piwik PRO

piwikpro.nl

72

Piwik PRO is a privacy-focused analytics software provider established in 2014, targeting marketers and analysts who require flexible analytics solutions that respect user privacy. The company positions itself as a modern analytics suite with strong compliance to GDPR and user consent requirements. The website is built on WordPress with professional design and clear navigation, optimized for SEO and mobile devices. The technical infrastructure includes integration with HubSpot for marketing automation and CookieInformation for consent management, alongside Piwik PRO's own analytics scripts. Security posture is strong with HTTPS, reCAPTCHA, and user enumeration protection, though explicit security policies and incident response contacts are not publicly visible. Overall, the website demonstrates a mature digital presence with good privacy compliance and trustworthy business representation.

P

Piwik PRO

piwikpro.dk

65

Piwik PRO is a technology company specializing in privacy-focused analytics solutions tailored for marketing professionals and analysts. Their core offering is the Piwik PRO Analytics Suite, which emphasizes respecting user privacy and compliance with data protection regulations such as GDPR. The company positions itself as a modern, flexible analytics provider with a strong commitment to data privacy and transparency. The website content is professional and targeted primarily at marketing and analytics professionals seeking compliant analytics tools. Technically, the website is built on WordPress with modern SEO and marketing integrations including Yoast SEO, HubSpot forms, Google reCAPTCHA, and a comprehensive cookie consent mechanism powered by CookieInformation.com. The site demonstrates good mobile optimization and moderate performance. The technical stack reflects a mature digital infrastructure with a focus on privacy and user consent management. From a security perspective, the site uses HTTPS and employs reCAPTCHA to protect forms. The cookie consent banner is detailed and allows granular user control, indicating good privacy compliance practices. However, explicit security headers and incident response policies are not evident, suggesting room for improvement in security posture documentation and transparency. Overall, the website is trustworthy, well-structured, and compliant with privacy regulations. The domain registration data aligns with the business claims, supporting legitimacy. No critical security issues or content safety concerns were identified.

P

Piwik PRO

piwikpro.pl

66

Piwik PRO is a Poland-based technology company offering a flexible analytics platform designed for marketers and analysts with a strong emphasis on user privacy. The website is professionally designed using WordPress CMS and integrates advanced marketing and consent management tools such as HubSpot and Cookie Information. The platform positions itself as a privacy-compliant alternative for customer journey analytics, targeting marketing professionals and analysts. The domain is well-established since 2014, consistent with the company's maturity and market presence. Security posture is solid with HTTPS, reCAPTCHA Enterprise, and cookie consent mechanisms, though some security headers and policies could be improved. Overall, the website demonstrates good technical implementation, privacy compliance, and business credibility.

2

23grad – Netzwerk Umwelt- und Nachhaltigkeitswissenschaften e.V.

23grad.de

46

23grad – Netzwerk Umwelt- und Nachhaltigkeitswissenschaften e.V. is a German non-profit organization focused on fostering exchange and collaboration among individuals engaged in environmental and sustainability sciences. Established as a formal association in 2008 with roots dating back to 1996, it serves a community of several hundred members through workshops, regional meetings, excursions, and career support initiatives. The organization emphasizes independence from financial and political influences, promoting sustainable development knowledge and practice. Technically, the website is built on WordPress with Elementor and Astra theme, hosted by Manitu, and demonstrates moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced, though some security headers are missing and no explicit cookie consent mechanism is present. The site lacks visible contact emails or phone numbers but provides a contact form and LinkedIn profiles for board members. Overall, the website is professional, trustworthy, and content-rich, serving its niche audience effectively.

D

Dealum

dealum.com

69

Dealum is a technology company founded in 2016 that provides a SaaS platform focused on managing applications, increasing investor engagement, and facilitating co-investment. The website presents a professional and modern design, leveraging Angular framework and integrating analytics tools such as Microsoft Clarity and Google Tag Manager. The technical infrastructure is supported by Cloudflare DNS services, ensuring reliable hosting and domain management. Security posture is adequate with HTTPS enabled and domain transfer protections, but lacks advanced security headers and explicit security policies on the website. Privacy compliance is weak due to absence of privacy and cookie policies, which should be addressed to meet regulatory standards. Overall, the website is accessible, well-structured, and targets investors and startups seeking streamlined investment management solutions.

3

3DHochdrei

3dhochdrei.de

55

3DHochdrei is a German-based small business specializing in photorealistic 3D visualizations and virtual tours primarily for real estate, museums, and commercial clients. Their website presents a professional and modern digital presence built on WordPress, leveraging contemporary front-end libraries such as Swiper.js and AOS for animations. The company offers a range of services including 3D rendering, virtual 360-degree tours, drone photography, and virtual trade show stands, targeting businesses seeking to enhance customer engagement through immersive digital experiences. Social media integration and client references support their market positioning as a niche provider in the German market. Technically, the site is well-structured with good SEO practices and mobile optimization, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional but could improve in security and privacy transparency.

W

WPMU DEV

wpmudev.org

77

WPMU DEV is a well-established WordPress platform offering an all-in-one stack including pro plugins, managed hosting, site management tools, wholesale domains, expert services, and reseller options. Founded in 2008 and operated under the parent company Incsub, it targets WordPress developers, freelancers, and agencies with a subscription-based SaaS business model. The website demonstrates strong branding, professional design, and comprehensive content tailored to its audience. Technically, the site is built on WordPress 6.7.1, uses modern analytics and marketing tools such as Google Analytics, Google Tag Manager, and Hotjar, and benefits from Cloudflare DNS services. Performance and mobile optimization are excellent, with good SEO and accessibility practices in place. Security posture is strong, with HTTPS enforced, domain locks in place, and SOC 2 Type II certification prominently displayed. Privacy and cookie policies are comprehensive and GDPR compliant, supported by a consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration is consistent and legitimate, supporting the business's credibility and trustworthiness.

D

Datenschutz ist Pflicht

datenschutz-ist-pflicht.de

59

Datenschutz ist Pflicht is a German-based company specializing in outsourced data protection management services, offering a flat-rate subscription model. Their services include certified data protection officers, IT security consulting, and compliance management, targeting businesses seeking comprehensive GDPR and data privacy solutions. The company emphasizes professional expertise with over 35 years of strategic IT consulting experience and multilingual support across more than 20 industries. Technically, the website is built on WordPress with the Divi theme, hosted by webgo.de, and employs modern web technologies including lazy loading and responsive design. Security posture is solid with HTTPS and certified personnel, though improvements are recommended in security headers and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-positioned in the data protection services market.

W

Word­press Web­site mit Datenschutz­garantie!

dswebsite.de

63

The website dswebsite.de offers specialized WordPress hosting and website creation services with a strong emphasis on GDPR compliance, consent management, and security features. It targets small to medium businesses, freelancers, and enterprises in Germany seeking reliable and privacy-focused WordPress solutions. The business model is subscription-based with tiered pricing plans tailored to different customer needs. Technically, the site is built on WordPress using the Divi theme and incorporates modern plugins such as Borlabs Cookie for consent management and Matomo for analytics, hosted on webgo.de servers. Security posture is robust with HTTPS enforced, daily backups, malware scanning, and spam filtering, although explicit security headers and vulnerability disclosure mechanisms are not evident. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a credible service provider in its niche.

V

VR-Bank eG

vrbank-eg.de

61

VR-Bank eG operates as a regional cooperative bank in Germany, providing local banking and financial services to its community. The website serves as an informational portal highlighting the bank's offerings and commitment to local customer service. The technical infrastructure is based on modern web technologies including Angular Material and uses Dynatrace for performance monitoring, indicating a moderate level of digital maturity. However, the site lacks visible privacy and cookie policies, which impacts compliance and trust. Security posture is moderate with no explicit security headers or incident response information found, suggesting room for improvement in security transparency and best practices. Overall, the website is functional and professional but would benefit from enhanced privacy compliance and security disclosures to improve user trust and regulatory adherence.

S

Sparkasse Aachen

sparkasse-aachen.de

70

Sparkasse Aachen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, investments, insurance, and personal advisory services. The website targets both private and corporate customers with a comprehensive digital presence and strong local market positioning, supported by awards and certifications. Technically, the site is built on a modern CMS platform (likely Adobe Experience Manager), uses HTTPS with good security practices, and integrates monitoring and analytics tools such as Dynatrace and Google Analytics. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with session management and cookie consent mechanisms, though explicit security policy and incident response contacts are not published. Overall, the website is professional, trustworthy, and compliant with GDPR and cookie regulations, making it a reliable digital channel for the bank's customers.

R

Rausgegangen GmbH

zentrale.events

61

Rausgegangen GmbH operates the website zentrale.events as a centralized platform for event organizers, venues, and artists primarily in Germany. The platform offers integrated services including event publishing, ticketing, and targeted marketing, positioning itself as one of the largest event recommendation platforms in Germany. The business model leverages a freemium approach with additional marketing services, targeting cultural professionals and event goers. Technically, the site is built using modern web technologies such as React and Next.js, with privacy-conscious analytics via Matomo and a comprehensive cookie consent mechanism provided by Iubenda. The website is mobile-optimized and well-structured, providing a good user experience.

O

OXID eSales

oxid.jobs

67

OXID eSales operates a professional job listing website targeting candidates interested in the e-commerce sector. The site is built on TYPO3 CMS and integrates modern marketing and consent management tools such as HubSpot and Usercentrics, indicating a mature digital infrastructure. The website is well-designed, mobile-optimized, and provides a clear employer branding message. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit privacy policies and terms of service are missing, which could impact compliance. No direct contact information or incident response channels are provided, limiting transparency in security matters. Overall, the site is legitimate and trustworthy but could improve in privacy and security disclosures.

E

EHI Retail Institute GmbH

ehi.de

58

The EHI Retail Institute GmbH is a scientific research institute based in Cologne, Germany, serving the retail sector with approximately 850 members. The organization focuses on research, publications, events, and community engagement to support retail industry stakeholders. The website reflects a professional and well-structured digital presence, leveraging WordPress CMS with the Divi theme and modern JavaScript libraries such as UIkit, Splide.js, and GSAP. It integrates advanced search capabilities via Fact-Finder and employs Borlabs Cookie for privacy compliance. Security posture is solid with HTTPS enabled and cookie consent mechanisms in place, though some security headers and explicit privacy policies are missing. The WHOIS data is unavailable, which slightly impacts trust but is mitigated by the professional content and structured data. Overall, the website is trustworthy, content-rich, and well-optimized for its audience.

F

FactFinder

fact-finder.de

58

FactFinder is a well-established German company specializing in AI-driven search and product discovery solutions for eCommerce businesses. With over 20 years of experience and a client base exceeding 2,000 online shops, FactFinder offers a comprehensive SaaS platform that enhances conversion rates through personalized shopping experiences. The company holds multiple industry awards, underscoring its market leadership and innovation. Technically, the website employs modern JavaScript libraries, consent management, and analytics tools, ensuring a robust digital presence with good performance and mobile optimization. Security practices include HTTPS enforcement and input validation, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, making it a credible resource for eCommerce technology solutions.

F

Fachagentur Wind und Solar

fachagentur-wind-solar.de

52

Fachagentur Wind und Solar is a German organization dedicated to promoting environmentally compatible use of wind and solar energy. Acting as an interface between science, practice, and politics, it supports the energy transition with in-depth analyses, expert information, and practical guidance. The website is professionally designed, content-rich, and regularly updated with news, publications, and events focused on renewable energy topics. The target audience includes policymakers, practitioners, researchers, and local communities interested in wind and solar energy development. Technically, the site runs on TYPO3 CMS, hosted on AWS infrastructure, and uses Matomo for privacy-respecting analytics. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, GDPR compliant, and provides valuable resources in the renewable energy sector.

S

Spartan Race

spartan.com

71

Spartan Race operates a professional e-commerce platform focused on obstacle course race event registrations and merchandise sales. The website targets fitness enthusiasts and athletes seeking challenging physical events. The business is positioned as a leading global organizer in its niche, leveraging Shopify as its e-commerce platform and integrating multiple marketing and analytics tools to optimize customer engagement and sales. The technical infrastructure is modern and robust, with good mobile optimization and performance. Security posture is strong with HTTPS enforcement and security headers, though explicit privacy and terms policies are not clearly presented in the analyzed content. The absence of WHOIS data is due to privacy protection, which is common and justified for commercial entities. Overall, the website demonstrates a mature digital presence with room for improvement in privacy transparency and contact information availability.

A

AVM GmbH

myfritz.net

71

The website sso.myfritz.net serves as the secure login portal for MyFRITZ!Net, a service provided by AVM GmbH, a recognized German technology company specializing in home networking products. The platform allows users to authenticate and manage their FRITZ! devices through a centralized account. The site is professionally designed with consistent branding and provides links to comprehensive privacy and terms of service documents hosted on official AVM domains. The target audience is primarily users of FRITZ! products seeking device management and account access.

T

Tourismusverein Obermain-Jura e. V.

obermain-jura.de

49

Obermain.Jura is a regional tourism organization promoting the Obermain-Jura area in Germany, focusing on outdoor activities, cultural experiences, health and wellness, and family-friendly tourism. The website serves as a comprehensive portal for visitors, offering information on hiking, biking, local landmarks, gastronomy, and accommodations. The organization positions itself as a key regional tourism promoter with a strong emphasis on accessibility and user experience. Technically, the website is built on WordPress 6.8.1, utilizing modern libraries such as Bootstrap 5.2.3, Leaflet for maps, and FontAwesome for icons. It employs GDPR-compliant cookie management via the Complianz plugin and integrates Matomo analytics for privacy-conscious visitor tracking. The site is mobile-optimized and includes advanced accessibility features, including a dedicated accessibility assistant. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, explicit HTTP security headers are not detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found in the analysis. The domain WHOIS data is consistent with the website's regional tourism purpose, indicating legitimacy and trustworthiness. Overall, Obermain.Jura demonstrates a mature digital presence with strong content quality, good technical implementation, and solid privacy compliance. Strategic improvements in security headers and incident response transparency could further enhance its security posture and trustworthiness.

The website stellen.center currently serves only a 404 Not Found error page in German, indicating that the site content is inaccessible or missing. There is no visible business information, metadata, or structured data to analyze. The domain is registered since 2020 with a reputable registrar and hosted on Hetzner servers, suggesting legitimacy of the domain registration but no active web presence. The technical infrastructure appears minimal with no detected CMS, scripts, or external integrations. Security posture cannot be properly assessed due to lack of content and headers, but no WAF or blocking mechanisms are detected. Overall, the site is inactive or misconfigured, resulting in a very low trust and quality score.

B

BAMBERG Tourismus & Kongress Service

tagen-in-bamberg.de

61

The website 'Tagen in Bamberg' serves as a regional platform promoting Bamberg as an ideal location for meetings, conferences, and events. Operated by BAMBERG Tourismus & Kongress Service, it offers comprehensive services including venue listings, event programs, and support services tailored to corporate and event planners. The site is professionally designed with clear navigation and is optimized for mobile devices, providing a positive user experience. Technically, it employs modern JavaScript libraries, Google Tag Manager, and a GDPR-compliant cookie consent mechanism, reflecting a moderate level of digital maturity. Security-wise, the site uses HTTPS and cookie consent but lacks visible advanced security headers or explicit security policies, indicating room for improvement. Overall, the website is trustworthy, compliant with privacy regulations, and well-positioned within its niche, though it could enhance its security posture and transparency further.

F

Frankenhotel Drei Kronen Memmelsdorf GmbH

drei-kronen.de

43

Frankenhotel Drei Kronen Memmelsdorf GmbH operates a traditional hotel and brewery guesthouse located in Memmelsdorf near Bamberg, Germany. The business emphasizes a blend of Franconian culinary tradition and modern hospitality, offering hotel accommodations, brewery tours, event hosting, and regional tourism packages. The company holds recognized certifications such as the 3-Sterne-Superior hotel classification and the DEHOGA Umweltcheck Gold award, underscoring its commitment to quality and environmental responsibility. The website is professionally designed, mobile-optimized, and rich in content, targeting tourists, business travelers, and local visitors interested in authentic Franconian experiences. Technically, the site uses a modern stack including Bootstrap, jQuery, Matomo analytics, and Pimcore CMS, hosted on Hetzner infrastructure, ensuring reliable performance and good SEO practices.

W

Welcome Hotels GHG Beteiligungsgesellschaft mbH

welcome-hotels.com

55

Welcome Hotels GHG Beteiligungsgesellschaft mbH operates a network of 14 hotels across Germany, offering accommodation, wellness, and event hosting services. The company emphasizes sustainability, demonstrated by its GreenSign certification, and targets a broad audience including tourists, business travelers, and event organizers. The website is professionally designed, mobile-optimized, and provides comprehensive information about hotel locations, amenities, and special offers. Technically, the site uses modern JavaScript libraries and integrates cookie consent mechanisms, ensuring compliance with privacy regulations. Security posture is good with HTTPS enforced, though some security headers are missing and no explicit security policy or incident response information is published. The WHOIS data is unavailable, which slightly reduces transparency but the overall business credibility remains high based on website content and trust indicators.

F

Ferienwohnungen in Bamberg und Umgebung

fewo-in-bamberg.de

52

The website fewo-in-bamberg.de operates as a specialized regional platform offering listings and booking referrals for private holiday apartments, apartments, and houses in Bamberg and its surroundings. It targets tourists and visitors seeking accommodation in this German region, providing a comprehensive directory of over 110 private rental options with detailed contact information and booking links to external platforms such as Booking.com and Airbnb. The platform also offers availability calendars and local tourist tips, enhancing the user experience for vacation planning. Technically, the website is built on Drupal 7 CMS, utilizing jQuery 2.2.4 and Bootstrap 3.4.1 frameworks, along with Flexslider for image carousels. While the site is mobile-optimized and features a professional design with clear navigation, the use of Drupal 7, which is end-of-life, poses potential security risks. The site enforces HTTPS and includes privacy and cookie policies compliant with GDPR, but lacks visible terms of service and incident response contact information. From a security perspective, the site benefits from HTTPS and some security headers but misses critical headers like Content Security Policy and X-Frame-Options. No security.txt or vulnerability disclosure information is present. The absence of updated CMS and some security best practices suggests moderate security posture with room for improvement. Overall, the website is a credible and trustworthy regional hospitality platform with good content quality and user experience. However, it should prioritize upgrading its CMS, enhancing security headers, and adding incident response and vulnerability disclosure information to strengthen its security and compliance posture.

M

Mohrenhaus - Das Haus für schöne Sachen

mohren-haus.de

53

Mohren-Haus is a German-based e-commerce retailer specializing in lifestyle, gifts, kitchenware, home decor, fashion, and accessories. The website presents a well-structured online shop with a clear focus on branded and quality products, targeting a general audience interested in unique and beautiful items. The business appears to be a small local/regional player with an online presence to expand its reach. Technically, the website uses modern web technologies including Google Tag Manager and Facebook Pixel for marketing and analytics, hosted on Alfahosting with consistent WHOIS data. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks some security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policy pages, although a cookie consent mechanism is present. Overall, the website is legitimate and trustworthy but could improve transparency and security practices.

L

Landhaus Sponsel-Regus

sponsel-regus.de

68

Landhaus Sponsel-Regus is a family-run 4-star wellness hotel located in the Franconia region of Germany, targeting families and wellness tourists. The website presents a professional and consistent brand image with a focus on hospitality and wellness services. The technical infrastructure leverages a custom CMS platform with common web technologies such as jQuery, Matomo analytics, and Google Tag Manager, with cookie consent mechanisms in place. Security posture is generally good with HTTPS enforced and consent-based analytics, but lacks explicit security headers and updated libraries. Privacy compliance is partial due to missing explicit privacy and terms of service pages. Overall, the website is trustworthy and professionally maintained but could improve in transparency and security best practices.

B

bed and breakfast - Privatunterkünfte

bed-and-breakfast.de

53

bed-and-breakfast.de is a German hospitality website specializing in private accommodation bookings including guest rooms, holiday apartments, trade fair rooms, and rooms for workers. The business operates through local agencies that personally vet hosts, offering a trusted and personalized alternative to hotels. The website targets tourists, business travelers, and workers seeking affordable and varied lodging options across over 30 regions in Germany. Technically, the site is built on Joomla CMS, leveraging OpenStreetMap and TomTom APIs for mapping, and uses modern JavaScript libraries for UI enhancements. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS, security headers, and CSRF protections, though it lacks explicit cookie consent and incident response disclosures. Overall, the site is professional, trustworthy, and well-positioned in its niche market.

G

Geburtshaus Levi Strauss Museum

levi-strauss-museum.de

42

The Geburtshaus Levi Strauss Museum is a specialized cultural institution located in Buttenheim, Germany, dedicated to the life and legacy of Levi Strauss, the inventor of blue jeans. The museum offers exhibitions, educational programs, and a museum shop, targeting general visitors, fashion enthusiasts, and cultural tourists. It holds a niche market position with international recognition through awards. Technically, the website is built on WordPress using a child theme of Twenty Twenty-One, hosted on servers associated with flessio.com and flessio.de. The site demonstrates good mobile optimization and SEO practices but lacks advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in security policy transparency and headers. Overall, the website is professional, trustworthy, and provides clear contact information and social media presence, supporting its credibility as a legitimate museum entity.

F

Friedrich Hotel GmbH

schlafen-in-bamberg.de

56

Friedrich Hotel GmbH operates a family-run chain of hotels and holiday apartments in and around Bamberg, Germany. The company targets tourists, business travelers, families, and groups, offering accommodation services across multiple properties including Hotel National, Hotel Rosenhof, Hotel Alt Bamberg, Hotel Bamberg Inn, and Ferienwohnungen Neumann. The website presents a professional and consistent brand image with clear contact information and booking options. Technically, the site uses modern JavaScript libraries, Google Tag Manager for analytics, and a consent management platform to comply with GDPR requirements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is solid with HTTPS enforced and consent mechanisms in place, though some security headers and explicit policies could be improved. Overall, the domain and WHOIS data appear legitimate and consistent with the business claims.