Security Directory

G

Gemeinde Malsburg-Marzell

malsburg-marzell.de

61

Gemeinde Malsburg-Marzell operates as a small municipal government entity in the southern Black Forest region of Germany, providing comprehensive local administration and public services to its approximately 1,580 residents across seven districts. The website serves as an information hub and digital service portal, offering access to administrative forms, local news, event calendars, and tourism information. The platform is built on the Verwaltungsportal.de CMS, leveraging standard web technologies such as jQuery and Nivo Slider for interactive content presentation. The site demonstrates good content quality, clear navigation, and basic mobile optimization, catering primarily to local citizens and visitors seeking municipal services or tourism information. Security measures include cookie consent management and captcha protections, though explicit security policies and headers are not evident. Overall, the website maintains a trustworthy and professional presence consistent with a government entity.

Stadt An der Schmücke is a small municipal government entity in Thüringen, Germany, serving approximately 6,000 residents across several formerly independent communities merged in 2019. The website serves as an official portal providing city information, news, event calendars, administrative services, and contact details. It targets local residents, visitors, and community members seeking municipal services and information. The business model is typical for local government, focusing on public service and community engagement. Technically, the website uses a standard German municipal CMS platform with Bootstrap and jQuery frameworks, enhanced by libraries like Nivo Slider for image carousels. The site is mobile-optimized, accessible, and performs moderately well. It employs HTTPS and basic security practices but lacks advanced security headers and explicit incident response or security policy disclosures. Security posture is adequate for a government informational site, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is supported by a privacy policy and cookie consent mechanism, aligning with GDPR requirements. Contact information is clearly presented, and social media channels enhance community engagement. Overall, the site is trustworthy, professional, and well-suited for its purpose. Recommendations include enhancing security headers, publishing explicit security and incident response policies, and maintaining up-to-date third-party libraries to improve security and compliance further.

S

Stadt Zahna-Elster

stadt-zahna-elster.de

62

Stadt Zahna-Elster operates as the official municipal government portal for the city of Zahna-Elster in Germany, providing residents and visitors with comprehensive information about local administration, cultural events, tourism, and public services. The website offers key services such as online appointment booking, event calendars, and detailed contact information, positioning itself as a trusted local government resource. The target audience includes residents, local businesses, and tourists seeking municipal services and information. Technically, the website employs a moderate technology stack including jQuery, Bootstrap, and Material Design Lite, hosted on a Verwaltungsportal CMS platform. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. The cookie consent mechanism is robust and GDPR compliant, enhancing privacy transparency. From a security perspective, the site uses HTTPS and implements cookie consent with user control, but lacks advanced security headers and a published security policy or incident response contact. No vulnerabilities or suspicious domains were detected, and the WHOIS data aligns with German DNS providers, supporting legitimacy. Overall, the security posture is solid but could benefit from additional hardening. The overall risk assessment is low, with recommendations focusing on improving security headers, publishing security policies, and enhancing transparency around incident response. The website is professional, trustworthy, and well-suited for its governmental role.

G

Gemeinde Milower Land

milow.de

58

Gemeinde Milower Land is a small German municipal government entity providing local administration, public services, and tourism information for its approximately 5,000 residents. The website serves as an official portal offering comprehensive information about the municipality, its public institutions, events, and contact points. The digital infrastructure is built on a specialized municipal CMS with common web technologies such as jQuery, Material Design Lite, and various UI libraries, ensuring a good user experience and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be enhanced. No signs of blocking or WAF interference were detected, and privacy compliance is well addressed with clear policies and consent banners. Overall, the website is trustworthy, professional, and serves its community effectively.

G

Gemeinde Weichs

weichs.de

63

The website www.weichs.de serves as the official digital presence of the municipality of Weichs in Germany. It provides comprehensive information about local government services, community news, events, and administrative resources. The site targets residents and visitors seeking municipal information and services, including online appointment booking and access to forms. The business model is that of a government service portal, focusing on transparency and citizen engagement. Technically, the website employs a mature infrastructure built on the Verwaltungsportal CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and various carousel and slider libraries. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms compliant with GDPR, and uses session management and captcha protections to mitigate abuse. However, it lacks explicit published security policies or incident response contacts, which could enhance trust and preparedness. Overall, the website is professional, trustworthy, and well-maintained, with no signs of malicious content or vulnerabilities. Strategic improvements could include publishing a formal security policy, adding incident response information, and enhancing HTTP security headers to further strengthen its security posture.

The Verwaltungsgemeinschaft Dornburg-Camburg website serves as the official online portal for a local government administrative community in Germany. It provides citizens with access to administrative information, services such as online appointment booking for the residents' registration and civil registry offices, news updates, and contact details. The site targets local residents and stakeholders seeking government services and information. Technically, the website uses a custom government portal CMS with technologies including jQuery, Slick Carousel, and Material Design Lite, delivering a moderately performant and accessible user experience. Security-wise, the site implements cookie consent and CAPTCHA mechanisms but lacks visible HTTP security headers and explicit incident response information. The WHOIS data is unavailable, likely due to privacy protection, which is uncommon for government domains but the website content and domain usage appear legitimate. Overall, the site is professional, trustworthy, and compliant with GDPR, though security enhancements are recommended.

Ö

Öffentliche Versicherung Oldenburg - Simon Rebitzer

teamrathausplatz.de

57

The website www.teamrathausplatz.de represents a regional insurance agency, Öffentliche Versicherung Oldenburg - Simon Rebitzer, offering tailored insurance solutions for private and commercial clients, including pet health insurance and claims services. The business operates primarily in Germany, targeting local customers with a focus on personalized advisory and insurance brokerage services. The site is well-branded and consistent with the parent company Öffentliche Versicherung Oldenburg, indicating a stable market position within the regional insurance sector. Technically, the website is built on the verwaltungsportal.de CMS platform, utilizing common web technologies such as jQuery, Bootstrap, and Material Design Lite. The site includes standard SEO and accessibility features but could improve mobile optimization and performance. Google Analytics is used for visitor tracking with appropriate cookie consent mechanisms in place, reflecting good privacy compliance. From a security perspective, the site uses HTTPS and implements cookie consent with categorized cookies, including captcha for suspicious behavior. However, no explicit security headers were detected, and there is no visible security policy or incident response information, which suggests room for improvement in security posture. No vulnerabilities or suspicious content were found. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. The main risks relate to enhancing security best practices and expanding transparency around terms of service and incident response. Strategic recommendations include implementing security headers, publishing security policies, and conducting regular security audits to maintain and improve trust and compliance.

S

Susanne Eichin

susanne-eichin.de

60

Susanne Eichin operates a small healthcare practice specializing in natural healing therapies including neurogenic tremor therapy (TRE), Dorn-Breuss therapy, and related wellness services. The website targets patients in the Lörrach region of Germany and offers both onsite and online courses and workshops. The business is well positioned locally with a clear niche and a professional online presence supported by social media and third-party booking and review widgets. Technically, the site uses a CMS platform with modern frontend libraries and frameworks, delivering a good user experience with mobile optimization and clear navigation. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking advanced security headers and incident response disclosures. Overall, the site is trustworthy and compliant with GDPR, providing comprehensive contact information and privacy policies.

S

Stadt Rodewisch

rodewisch.de

67

Stadt Rodewisch operates as the official municipal government website for the city of Rodewisch, Germany. It provides comprehensive information about local government, politics, city services, events, and community resources targeted at residents, businesses, and visitors. The site is well-structured with clear navigation and offers key services such as public announcements, online appointment booking, and access to municipal documents. The website maintains consistent branding and trust indicators appropriate for a government entity. Technically, the website uses a modern yet somewhat traditional technology stack including jQuery, Material Design Lite, and Nivo Slider, hosted on a Verwaltungsportal CMS platform. It demonstrates good mobile optimization, accessibility, and SEO practices. Performance is moderate, with room for improvement in loading speed and modernizing some libraries. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, explicit security headers are not detected, and no dedicated security or incident response policies are published. There is no vulnerability disclosure or security.txt file, which could enhance transparency and security posture. The WHOIS data is minimal but consistent with a municipal domain, with no suspicious indicators. Overall, the website is a trustworthy and professional municipal portal with good privacy compliance and user experience. Strategic improvements in security headers, incident response transparency, and technical modernization could further strengthen its posture.

The website www.sandraleist.de represents a small German educational and social services provider focused on data protection and pedagogy. It offers training courses such as LRS Deutschland Trainer certification and intensive literacy programs, alongside human resources and family center services. The site is well-structured with clear navigation and professional design, targeting individuals and organizations interested in education and social care. Technically, the site uses a proprietary CMS platform with common JavaScript libraries and Material Design Lite framework, delivering moderate performance and basic mobile optimization. Security posture is adequate with cookie consent mechanisms and session management but lacks advanced HTTP security headers and explicit security policies. No contact emails or phone numbers are directly visible, and no terms of service or incident response policies are published. The domain WHOIS data is limited but consistent with the website's German localization and business nature. Overall, the site is safe, compliant with GDPR, and trustworthy for its niche audience.

M

Mobile Praxis für Ernährungsberatung und Ernährungstherapie

lukas-therapie.de

62

The website represents a small, specialized healthcare provider offering mobile and online nutritional counseling and therapy services primarily in Germany with some regional focus including Swiss guests. The business is well-positioned locally with certifications and recognized expertise in dietetics and nutrition therapy. The website infrastructure is built on a specialized CMS platform common in German public service sectors, utilizing modern frontend libraries such as jQuery and Material Design Lite. The site is mobile optimized, accessible, and provides clear navigation and professional content. Security posture is adequate with HTTPS enforced and cookie consent implemented, though lacking advanced security headers and explicit incident response policies. Overall, the site is trustworthy and compliant with GDPR, providing transparent contact information and privacy policies.

E

European Travel Commission

visiteurope.com

63

Visiteurope.com is the official travel portal of Europe, operated under the auspices of the European Travel Commission. It provides comprehensive travel inspiration, destination guides, experiences, events, and essential travel information to tourists interested in exploring Europe. The website targets a broad audience of travelers and tourists, offering multilingual support and rich content to facilitate trip planning. The business model appears to be informational and promotional, supported by EU co-funding and partnerships with tourism bodies. The site holds a strong market position as an authoritative source for European travel information. Technically, the website is built on WordPress with modern technologies including React, jQuery, and various SEO and multilingual plugins. It leverages Cloudflare for DNS and uses Google Fonts and Google Maps APIs. The site is well-optimized for SEO, mobile-friendly, and accessible, with good performance metrics. Structured data and Open Graph tags are properly implemented to enhance search engine visibility and social media sharing. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent via Cookiebot. However, DNSSEC is not enabled, and there is no visible security policy or incident response information published. The site uses multiple third-party marketing and tracking tools, but with consent mechanisms in place. No critical vulnerabilities or exposed sensitive data were detected. Overall, visiteurope.com is a professional, trustworthy, and well-maintained website with strong content quality and business credibility. Minor improvements in DNS security and transparency around security policies could further enhance its security posture and user trust.

T

Tremaze GmbH

tagea.app

67

Tremaze GmbH is a German-based company specializing in digital software solutions tailored for social work organizations. Their flagship product, Tagea, integrates communication, documentation, and administrative functions into a unified platform designed to streamline workflows for social institutions. The company targets social sector organizations, offering a SaaS model that supports internal and external communication, appointment management, and integration with existing systems. Their market position is niche but well-defined, serving a critical need in the social services domain. Technically, the website is built on the Webflow CMS platform, leveraging modern web technologies including Google Analytics and Tag Manager for analytics, and Cookie-Script for consent management. Hosting is provided by Hetzner, a reputable German hosting provider, ensuring data residency within Germany. The site is mobile-optimized with good SEO and accessibility basics, reflecting a mature digital presence. From a security perspective, the site enforces HTTPS with strong SSL configuration and incorporates privacy-conscious features such as IP anonymization in analytics and a comprehensive cookie consent mechanism. However, it lacks publicly available security policies, incident response contacts, and advanced security headers, which are areas for improvement. No vulnerabilities or suspicious patterns were detected in the WHOIS or site content. Overall, Tremaze GmbH presents a professional and trustworthy online presence with strong compliance to GDPR and privacy standards. The risk profile is low, but enhancing transparency around security policies and incident management would further strengthen trust and security posture.

J

Junip Inc.

juniphq.com

60

Junip Inc. operates a SaaS platform focused on helping ecommerce brands collect and display customer reviews to enhance product understanding and increase conversions. The company targets online retailers and boasts over 5000 customers, positioning itself as an industry leader in ecommerce review solutions. Their services include mobile-first review collection, automated requests, review display widgets, syndication to major sales channels, moderation, tagging, analytics, and multi-store management. Founded in 2020 and based in Canada, Junip demonstrates a strong market presence with integrations to platforms like Shopify and Klaviyo.

R

Retention.com

retention.com

72

Retention.com is a technology company specializing in identity resolution and retention marketing solutions primarily for ecommerce brands, publishers, and retailers. Their platform enables businesses to convert anonymous website visitors into known customers, boosting email list growth, remarketing effectiveness, and overall revenue. The company positions itself as an industry leader with over 1500 brands served and showcases strong customer success stories demonstrating significant ROI. The website is professionally designed, mobile-optimized, and integrates multiple modern marketing and analytics technologies including HubSpot, Facebook Pixel, ProfitWell, and Hotjar. Privacy and cookie compliance are well addressed with clear policies and consent mechanisms. Security posture is solid with HTTPS and SOC2 Type 2 certification, though some security headers could be improved and incident response details are not publicly available. The WHOIS data is missing or protected, which slightly reduces trustworthiness but is mitigated by the professional web presence and certifications. Overall, Retention.com presents as a credible and mature SaaS provider in the ecommerce marketing space.

S

Social Snowball

socialsnowball.io

60

Social Snowball is a SaaS platform specializing in influencer, affiliate, and referral marketing automation for ecommerce and DTC brands. It positions itself as a leading solution with over 2,500 brands using its services, offering key features such as automated affiliate onboarding, influencer management, Safelinks to prevent coupon abuse, and TikTok Shop affiliate integration. The company was founded in 2019 and targets ecommerce businesses seeking to scale word-of-mouth marketing efficiently. Technically, the website is built on Webflow CMS, leveraging modern JavaScript libraries like jQuery, GSAP, and Slick Carousel for rich interactive experiences. It integrates with popular platforms such as Shopify and TikTok Shop and uses third-party services like Intercom for customer engagement and OptinMonster for conversion optimization. The site is well-optimized for mobile and SEO, with fast performance and clear navigation. From a security perspective, the site enforces HTTPS with a good SSL configuration and uses domain status protections to prevent unauthorized changes. Cookie consent is implemented via CookieYes, and privacy policies are comprehensive and GDPR compliant. However, there is no explicit security policy or incident response information publicly available, and DNSSEC is not enabled, which could be improved. Overall, Social Snowball demonstrates a mature digital presence with strong business credibility and technical implementation. The security posture is solid but could benefit from additional transparency and technical enhancements. The risk level is low, and the platform appears trustworthy and professional, serving a clear market need in ecommerce marketing automation.

H

Humble Bundle

humblebundle.com

66

Humble Bundle is a well-established e-commerce platform specializing in curated bundles of games, books, and software with a unique pay-what-you-want model that supports charity. Since its founding in 2010, it has built a strong market position by combining digital content sales with charitable giving, appealing to gamers, readers, and software users globally. The website demonstrates a mature digital infrastructure with modern technologies, responsive design, and comprehensive privacy and cookie management. Security posture is strong with HTTPS, security headers, and anti-bot measures, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, trustworthy, and compliant with privacy regulations, though WHOIS data is unavailable, possibly due to privacy protections or registry policies.

F

Flottmann Kneipe

flottmannkneipe.de

57

Flottmann Kneipe is a small hospitality business located in Herne, Germany, operating within a historic cultural venue known as the Flottmann-Hallen. The business offers traditional bar food, drinks, a beer garden, and a rich program of cultural events including concerts and readings, positioning itself as a local cultural hub. The website is built using RapidWeaver CMS with a moderate technical infrastructure including jQuery and Google Analytics for user tracking. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with cookie consent and privacy policy present. Overall, the website is professional and trustworthy with clear contact information and social media presence, targeting mature audiences interested in nightlife and culture.

W

Wohnungsgenossenschaft Duisburg-Süd eG

wogedu.de

57

Wohnungsgenossenschaft Duisburg-Süd eG is the largest housing cooperative in Duisburg, Germany, managing approximately 4,300 residential units and several commercial properties. Established in 1905, the cooperative serves tenants primarily in Duisburg's city center and southern districts. The website provides comprehensive information about housing offers, membership, tenant services, and community engagement, reflecting a well-established local real estate business. Technically, the site is built on TYPO3 CMS with modern frontend technologies including Bootstrap and jQuery, offering good mobile responsiveness and accessibility. Security-wise, the site enforces HTTPS, implements cookie consent with clear categories, and avoids exposing sensitive data, though it lacks a formal published security policy or incident response details. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the cooperative's credibility and tenant engagement.

W

Wohnungsgesellschaft Ruhrgebiet mbH

woge.ruhr

45

Wohnungsgesellschaft Ruhrgebiet mbH is a regional housing company based in Germany with a long-standing history since 1930. The company manages approximately 1000 rental units across several cities in the Ruhrgebiet area, focusing on fair rents and cooperative tenant relationships. Their website serves as an information portal for tenants and property owners, providing access to housing services and community news. Technically, the website uses standard web technologies including HTML5, CSS3, and jQuery, hosted by a local provider. The site is mobile optimized and includes basic SEO and accessibility features. Security posture is adequate with HTTPS enabled and cookie consent implemented, but lacks advanced security headers and DNSSEC. No incident response or security policy information is publicly available. WHOIS data confirms the legitimacy and consistency of the domain registration with the business identity. Overall, the website is professional, trustworthy, and serves its target audience effectively.

W

Wohnungsgenossenschaft Duisburg-Hamborn eG

hamborner-woge.de

62

Wohnungsgenossenschaft Duisburg-Hamborn eG operates as a housing cooperative focused on providing rental apartments and related housing services in the Duisburg-Hamborn area of Germany. The website serves as an information portal for tenants and prospective members, offering details about housing offers, membership, events, and contact information. The organization maintains a local market position with a medium-sized operational scale and targets residents seeking affordable and community-oriented housing solutions. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and Font Awesome, with integrated accessibility features and mobile optimization. Analytics are handled via Piwik, and cookie consent is managed through Cookiebot, reflecting a strong commitment to privacy compliance. Security posture is solid with HTTPS enforced and no visible vulnerabilities, although formal security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

W

Wohnungsgenossenschaft Duisburg-Mitte eG

wgd-mitte.de

59

Wohnungsgenossenschaft Duisburg-Mitte eG is a well-established housing cooperative based in Duisburg, Germany, with a history spanning over 125 years. The organization focuses on providing affordable, needs-based housing, modernizing properties with energy-efficient solutions, and fostering social engagement within the community. Their services include rental housing, guest apartments, repair services, and social programs, targeting local residents and cooperative members. The website reflects a professional and consistent brand image with clear contact information and active social media presence. Technically, the website employs modern frontend technologies such as Bootstrap, jQuery, and various UI libraries, ensuring good mobile responsiveness and user experience. However, there is no indication of a CMS, suggesting a custom-built or static site. Performance is moderate with room for optimization. SEO and accessibility are basic to good but could be improved further. From a security perspective, the site uses HTTPS but lacks visible security headers and a vulnerability disclosure policy. No cookie consent mechanism is present, which is a compliance gap under GDPR. The WHOIS data aligns well with the business claims, indicating legitimacy and consistent domain registration practices. Overall, the website is trustworthy and professional but would benefit from enhanced security measures, privacy compliance improvements, and formalized policies to strengthen user trust and regulatory adherence.

W

Wohnungsgenossenschaft Rheinpreußensiedlung eG

rheinpreussensiedlung.de

57

Wohnungsgenossenschaft Rheinpreußensiedlung eG operates as a housing cooperative in Germany, providing residential housing services primarily targeting local residents and tenants. The website is built on WordPress using the Divi theme, reflecting a moderate level of digital maturity with basic content and design quality. While the site is accessible and functional, it lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security policies. No contact information or incident response channels are explicitly provided, which may impact user trust and compliance with GDPR regulations. The domain registration data is consistent with the business identity, supporting legitimacy. Overall, the website serves its informational purpose but requires improvements in security posture and privacy compliance to enhance trust and regulatory adherence.

B

Bauverein Rheinhausen eG

bauverein-rheinhausen.de

61

Bauverein Rheinhausen eG is a well-established German housing cooperative founded in 1919, providing residential and commercial rental services primarily in Duisburg and surrounding areas. The cooperative manages a portfolio including approximately 3,300 households, commercial units, and parking facilities, focusing on sustainable development, modernization, and community-oriented living spaces. The website reflects a professional digital presence with clear navigation, comprehensive service offerings, and active communication channels including social media and a members' newsletter. Technically, the site is built on WordPress with modern plugins and frameworks, optimized for accessibility and SEO, and includes GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital infrastructure supporting the cooperative's business goals and community engagement.

The website for Gemeinnütziger Spar- und Bauverein Friemersheim eG serves as an informational portal for a local housing cooperative based in Duisburg Friemersheim, Germany. It provides details about housing offers, membership, tenant services, and organizational information. The site targets general audiences interested in cooperative housing with a focus on affordable and lifelong residential rights. The business operates in the real estate sector with a small-sized local market presence. Technically, the site is built on Joomla CMS using Bootstrap and jQuery, offering basic mobile responsiveness and moderate performance. Security posture is adequate with HTTPS enabled and CSRF tokens present, but lacks advanced security headers and incident response information. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or terms of service. Overall, the site is functional and moderately trustworthy but could improve in security and compliance aspects.

G

GEWOGE Duisburg-Ruhrort eG

gewoge-duisburg.de

46

GEWOGE Duisburg-Ruhrort eG is a well-established housing cooperative founded in 1896, managing over 1,000 apartments and garages in the Ruhr region of Germany. The cooperative focuses on providing affordable, secure housing with no deposit requirements, including specialized senior living facilities such as Wohndorf Laar. The website serves as an information portal for current rental offers, services, and contact details, targeting local residents and seniors seeking assisted living options. Technically, the website is built on WordPress with the Enfold theme and uses common plugins for forms, maps, and news tickers. It demonstrates good digital maturity with mobile optimization and GDPR-compliant cookie consent mechanisms. Security posture is adequate with HTTPS and cookie management but lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting the cooperative's community-focused business model.

K

Klaviyo

kmail-lists.com

71

Klaviyo is a leading marketing automation platform specializing in email and SMS marketing for eCommerce businesses. Founded in 2012 and headquartered in Boston, MA, it offers a SaaS solution that enables personalized customer engagement through data-driven campaigns. The company holds a strong market position with a focus on technology-driven marketing solutions tailored for online retailers. Technically, Klaviyo's website demonstrates a mature digital infrastructure, leveraging modern JavaScript frameworks, CDN hosting via AWS Cloudfront, and integration with analytics and experimentation tools such as Google Tag Manager and Optimizely. The site is well-optimized for performance, mobile responsiveness, and accessibility, reflecting a high level of digital maturity. From a security perspective, the website enforces HTTPS, employs security headers, and uses reCAPTCHA to protect forms. However, it lacks a publicly visible dedicated security policy or incident response contact, which could be improved to enhance transparency and trust. No vulnerabilities or suspicious content were detected, and privacy compliance is supported by comprehensive privacy and cookie policies. Overall, Klaviyo presents a professional and trustworthy online presence with strong technical and security foundations. Strategic enhancements in security transparency and WHOIS data availability would further strengthen its risk profile and stakeholder confidence.

G

Google

google.dev

71

The Google Developer Program website is a professionally designed and well-structured platform aimed at developers and technology professionals. It provides comprehensive documentation, training resources, and visibility for developer achievements. The site is part of the Google Developers ecosystem, leveraging Google's strong brand and technological infrastructure. The website uses modern web technologies, including progressive web app features, Google Fonts, Material Icons, and Google Analytics for tracking. Hosting and content delivery are managed via Google Cloud Platform, ensuring fast performance and high availability. From a security perspective, the site enforces HTTPS and employs best practices such as secure forms and no exposed sensitive data. While explicit security headers like Content-Security-Policy are not visible in the HTML, the overall SSL configuration and security posture are strong. Privacy compliance is well addressed with accessible privacy and cookie policies, including consent mechanisms and GDPR compliance indicators. However, no direct contact or incident response information is found on the profile page. The domain is a subdomain of google.com, which is a highly trusted and established domain. WHOIS data for the subdomain is not available, which is typical for large organizations managing subdomains internally. The website content is safe for general audiences, with no adult or explicit content detected. Overall, the site demonstrates a high level of professionalism, trustworthiness, and technical maturity.

G

Google Merchandise Store

googlemerchandisestore.com

65

The Google Merchandise Store website serves as an official e-commerce platform for Google branded merchandise, including apparel, accessories, and gifts. The site targets consumers globally with regional shipping options and maintains consistent branding aligned with Google's corporate identity. The business model is retail e-commerce, supported by a medium-sized operation likely under Google's corporate umbrella. The domain age and registration details support the legitimacy of the site as an official merchandise outlet. Technically, the website uses a combination of legacy and modern web technologies including jQuery, Google Analytics, and Google Tag Manager for tracking and performance monitoring. Hosting and content delivery appear to be managed in partnership with Robertson Marketing, a known marketing service provider. The site is mobile optimized with a good user experience but lacks advanced accessibility features and comprehensive SEO optimization. From a security perspective, the site enforces HTTPS and has domain status locks to prevent unauthorized changes. However, it lacks DNSSEC and visible security headers, which are recommended best practices. No privacy or cookie policies are present, indicating compliance gaps with GDPR and other privacy regulations. The site does not provide incident response or vulnerability disclosure information, which could be improved to enhance trust. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. Strategic recommendations include implementing DNSSEC, adding security headers, publishing privacy and cookie policies with consent mechanisms, and providing clear incident response contacts to improve security posture and regulatory compliance.

Stadt Haltern am See operates a municipal government website providing comprehensive information about local administration, politics, public services, and community news. The site targets residents and visitors, offering services such as Bürgerbüro contact, political updates, and event information. The website is well-structured, mobile-optimized, and uses modern web technologies including jQuery and CSS3. It is managed using the PANSITE CMS platform. Security posture is solid with HTTPS enforced and cookie consent implemented, though security headers and incident response information are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie banner. The domain WHOIS data is minimal but consistent with a legitimate municipal entity. Overall, the website is trustworthy, professional, and serves its public service mission effectively.

S

Stadt Datteln

datteln.de

69

The website www.datteln.de serves as the official online portal for the city of Datteln, Germany, providing residents, visitors, and local businesses with comprehensive information about municipal services, news, events, and tourism. The site is well-structured and professionally designed, targeting a broad audience including citizens and tourists. It operates on a Drupal CMS platform with modern web technologies and emphasizes privacy through the use of Matomo Analytics and a robust cookie consent mechanism. Security posture is strong with HTTPS enforced and privacy-respecting analytics, though explicit security policies and incident response contacts are not publicly disclosed. Overall, the site demonstrates a mature digital presence suitable for a government entity, with high trustworthiness and compliance with GDPR.

C

CASKlimahelden

casklimahelden.de

43

The website 'CASKlimahelden' appears to be a German-based platform focused on climate awareness and energy-related services. The business targets a general audience interested in environmental issues and sustainable energy solutions. The site uses WordPress CMS and includes modern iconography with Font Awesome and Google Tag Manager for analytics. However, the site lacks critical privacy and cookie policies, contact information, and advanced security headers, which impacts its overall trustworthiness and compliance posture. The technical infrastructure is moderate with room for improvement in mobile optimization and accessibility. Security posture is basic, with no evident vulnerabilities but missing best practices such as security headers and incident response contacts. Overall, the site is functional but requires enhancements in privacy compliance, security, and business transparency to improve its risk profile and user trust.

A

Arbeitsgemeinschaft Duisburger Wohnungsgenossenschaften

duisburger-wohnungsgenossenschaften.de

39

Die Duisburger Wohnungsgenossenschaften sind ein Verbund von acht regionalen Wohnungsgenossenschaften, die zusammen rund 15.000 genossenschaftliche Wohnungen in Duisburg anbieten. Sie fokussieren sich auf bezahlbaren und sicheren Wohnraum, fördern Karrieren durch Ausbildungsplätze und engagieren sich sozial in der Region. Die Website präsentiert sich als professionell und gut strukturiert mit klaren Informationen zu den Partnergenossenschaften und deren Angeboten. Technisch basiert die Seite auf bewährten Frontend-Technologien wie Bootstrap und jQuery, ist mobil optimiert und bietet eine moderate Performance. Sicherheitsrelevante Maßnahmen wie Security Headers oder Cookie-Consent-Mechanismen sind nicht explizit erkennbar, was Verbesserungspotential darstellt. Die Domainregistrierung ist konsistent und legitim, was die Vertrauenswürdigkeit der Website unterstützt.

W

Wirtschaftsbetriebe Duisburg - AöR

wb-duisburg.de

62

Wirtschaftsbetriebe Duisburg - AöR is a large municipal utility and infrastructure service provider for the city of Duisburg, Germany. The organization manages a broad range of public services including waste disposal, street cleaning, wastewater management, road and bridge construction, municipal real estate, playgrounds, green spaces, and cemeteries. The website serves as a comprehensive portal for residents and businesses to access these services, including online scheduling, information, and customer portals. The site is well structured, professionally designed, and optimized for mobile devices, reflecting a mature digital presence. Technically, the website is built on modern frameworks such as Next.js and React, with content managed via Storyblok CMS. It integrates third-party services like Usercentrics for cookie consent management and uses legacy jQuery 1.12.4, which may pose some security risks. Performance is moderate with good SEO and accessibility features. The site uses HTTPS and has basic security best practices but lacks explicit security headers and a published security policy or incident response information. From a security perspective, the site is generally secure with no visible vulnerabilities or exposed sensitive data. However, the use of an outdated jQuery version and absence of a vulnerability disclosure mechanism are areas for improvement. Privacy compliance is strong, with a clear privacy policy and cookie consent mechanism in place, aligning with GDPR requirements. Overall, the website represents a trustworthy and professional municipal service portal with a solid business credibility score. Strategic recommendations include upgrading legacy libraries, publishing security policies, and enhancing security headers to further strengthen the security posture and compliance.

R

Ruhr Tourismus GmbH

mein-ruhrgebiet.blog

50

Mein Ruhrgebiet is a German-language travel blog operated by Ruhr Tourismus GmbH, focusing on providing travel inspiration, local tips, and cultural insights about the Ruhrgebiet region. The website targets tourists and travelers interested in exploring this area, offering curated content such as travel guides, event information, and regional highlights. The business model centers on digital content creation and regional tourism promotion, positioning itself as a trusted source for Ruhrgebiet travel information. Technically, the website is built on WordPress 6.8.1 with modern plugins like Yoast SEO and WP Rocket for SEO and performance optimization. It uses Bootstrap for responsive design and integrates third-party services such as Cookiebot for cookie consent management, Google Tag Manager for analytics, and Facebook Pixel for marketing. The site demonstrates good mobile optimization and SEO practices, though accessibility features could be enhanced. From a security perspective, the site enforces HTTPS with anonymized IP tracking in Google Analytics and provides a comprehensive cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data due to privacy protection slightly impacts trust but is common for such sites. Overall, the website presents a professional and trustworthy digital presence for regional tourism, with moderate technical maturity and a solid security posture. Strategic improvements in security headers, incident response transparency, and accessibility would further enhance its risk profile and compliance standing.

R

ruhrkultur.jetzt

ruhrkultur.jetzt

51

ruhrkultur.jetzt is a digital cultural guide focused on the Ruhr metropolitan area in Germany, providing users with event calendars, ticket information, and location tips related to the RuhrKunstMuseen and RuhrBühnen networks. The website targets culture enthusiasts, tourists, and local residents interested in arts and cultural events. It operates as a regional informational portal with a small business profile founded in 2017. Technically, the website employs modern web technologies including the Ionic Framework and StencilJS, ensuring good mobile optimization and accessibility. The site is served over HTTPS, enhancing security, but lacks some advanced security headers and DNSSEC is not enabled. No CMS or third-party analytics/tracking scripts were detected, indicating a lightweight and privacy-conscious implementation. From a security perspective, the site has a cookie consent mechanism compliant with GDPR but lacks a published privacy policy, terms of service, and explicit security policies or incident response contacts. The domain registration is consistent and transparent, supporting the legitimacy of the business. No WAF or blocking mechanisms were detected, and no adult or questionable content is present. Overall, ruhrkultur.jetzt presents a trustworthy and professionally designed cultural guide with room for improvement in privacy documentation and security hardening. Strategic recommendations include publishing privacy and terms documents, enabling DNSSEC, adding security headers, and providing clear contact information for security incidents.

radrevier.ruhr is a professionally managed regional tourism website focused on promoting cycling and bike holidays in the Ruhrgebiet area of Germany. It offers comprehensive route information, planning tools, and thematic cycling routes, positioning itself as a leading urban cycling travel region certified by the ADFC. The platform targets cycling tourists and outdoor enthusiasts, providing rich content and digital resources to enhance visitor experience. Technically, the site is built on WordPress with modern frameworks like Bootstrap and integrates SEO and cookie consent tools effectively. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Privacy compliance is robust, with clear GDPR-aligned privacy and cookie policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and digital maturity suitable for its tourism promotion role.

R

Route Industriekultur

industriekultur.ruhr

54

Route Industriekultur is a well-established cultural tourism platform dedicated to showcasing the industrial heritage of the Ruhr region in Germany. The website offers comprehensive information on 27 key industrial heritage sites, panoramic viewpoints, historic settlements, cycling tours, and events, targeting tourists, families, and culture enthusiasts. The platform is professionally designed with excellent content quality, clear navigation, and multilingual support, positioning it as a leading regional resource for industrial heritage tourism. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for privacy compliance. It uses Bootstrap for responsive design and integrates analytics tools like Google Analytics and Matomo. The site demonstrates good performance, mobile optimization, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS, implements cookie consent mechanisms, and avoids exposing sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced security posture. No critical vulnerabilities or WAF protections were detected, indicating open and accessible content. Overall, the website scores well on content quality, technical implementation, security, privacy compliance, and business credibility, reflecting a mature and trustworthy digital presence. Strategic improvements in security transparency and incident response readiness would further strengthen its posture.

R

Ruhrbühnen

ruhrbuehnen.de

41

Ruhrbühnen is a regional cultural institution dedicated to theatre and performing arts in the Ruhr region of Germany. The website serves as an informational platform for their performances and cultural events, targeting a general audience interested in arts and culture. The business model is focused on cultural provision rather than commercial sales. The site content is basic but functional, with moderate branding consistency and a regional market position. Technically, the website uses modern web technologies including web components (hylo-button) and appears to be built with StencilJS. Hosting is managed via DomainControl name servers, indicating registration through GoDaddy. The site shows moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. From a security perspective, the website lacks visible security headers, privacy policies, cookie consent mechanisms, and incident response information. SSL configuration and HTTPS enforcement could not be confirmed from the provided data. No vulnerabilities or malicious indicators were detected, but the security posture is weak due to missing best practices and compliance documentation. Overall, the website is accessible and safe for general audiences but requires improvements in privacy compliance, security policies, and contact transparency to enhance trust and regulatory adherence.

R

RuhrKunstMuseen

ruhrkunstmuseen.com

44

The domain www.ruhrkunstmuseen.com appears to be unregistered or inactive as per the WHOIS raw data, which shows no match for the domain. The website content is inaccessible or minimal, with the provided HTML content truncated and lacking meaningful data. Consequently, no business information, contact details, or security policies are available for analysis. The absence of registration and website content raises significant concerns about the legitimacy and operational status of the domain. Technically, no technologies, frameworks, or hosting details could be identified. Security posture cannot be assessed due to lack of data. Overall, the domain and website do not present any verifiable business presence or security maturity.

B

Bezirksregierung Münster

bezreg-muenster.de

59

Bezirksregierung Münster operates as a regional government authority in North Rhine-Westphalia, Germany, providing a broad range of public administrative services including education, environment, health, regional planning, and social affairs. The website serves as an official portal offering information and resources to citizens, businesses, and public institutions within the Münster district. It maintains a professional and consistent brand presence aligned with government standards. Technically, the website is built on Drupal CMS, leveraging modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and FontAwesome for iconography. The site demonstrates good performance, accessibility, and SEO practices, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS, implements standard security headers, and provides a GDPR-compliant cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response information are not publicly available, suggesting room for improvement in transparency and preparedness. Overall, the website reflects a mature digital presence for a government entity, with high trustworthiness and compliance. Strategic recommendations include publishing detailed security and incident response policies, adding vulnerability disclosure mechanisms, and maintaining regular security audits to uphold and enhance the security posture.

L

Landesverband der Volkshochschulen von NRW e.V.

vhs-nrw.de

47

The Landesverband der Volkshochschulen von NRW e.V. is a large, well-established non-profit educational association representing 131 Volkshochschulen (adult education centers) across North Rhine-Westphalia, Germany. The organization focuses on providing accessible continuing education, promoting democracy, integration, sustainability, and digital literacy. Their website reflects a professional and comprehensive digital presence, leveraging WordPress with Elementor and Yoast SEO for content management and optimization. The site is well-structured, mobile-optimized, and includes clear navigation and rich content tailored to their target audience of local residents and educational stakeholders. Security posture is strong with HTTPS, cookie consent mechanisms, and no detected vulnerabilities, although some security headers could be improved. The presence of ISO 9001 certification and transparent contact information enhances trust and credibility. Overall, the website demonstrates a mature digital infrastructure supporting the organization's mission effectively.

D

Deutscher Volkshochschul-Verband e. V.

volkshochschule.de

62

The Deutscher Volkshochschul-Verband e. V. operates the website volkshochschule.de, serving as the central platform for adult education centers (Volkshochschulen) in Germany. The site provides course finding tools, educational policy information, and news updates, targeting adult learners and educational institutions. It holds a strong position as a leading non-profit educational association in Germany. Technically, the website is built on the Sitepark CMS platform, hosted on bringe.net, and employs modern web technologies including responsive images and SVG icons. The site is mobile optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS, uses anonymized Matomo analytics, and provides a GDPR-compliant cookie consent mechanism. However, explicit security policies and incident response contacts are not found, which could be improved. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for its audience.

B

BEST Tausch- und Verschenkmarkt

bottroper-verschenkmarkt.de

45

The website www.bottroper-verschenkmarkt.de operates as a local classified ads platform primarily serving the Bottrop region in Germany. It facilitates community-driven exchange, gifting, and barter of goods, targeting local residents interested in sustainable and cost-free transactions. The platform leverages the Osclass CMS with a frontend built on Bootstrap 5 and jQuery, supplemented by a chatbot for user assistance. The site structure is clear, with categorized listings and user-friendly navigation, supporting a positive user experience for its target audience. From a technical perspective, the website employs modern web technologies and is mobile-optimized, though performance is moderate. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site uses HTTPS, ensuring encrypted communications, but lacks explicit incident response or vulnerability disclosure information. Contact options are limited to a web form, with no direct emails or phone numbers provided. Security posture is adequate but not robust; the site would benefit from implementing security best practices such as security headers and cookie consent to enhance GDPR compliance. No adult or explicit content is present, making the site safe for general audiences. WHOIS data is minimal but does not raise immediate concerns, though the lack of detailed registrant information limits full trust evaluation. Overall, the site is a functional, community-focused marketplace with good content quality and usability but requires enhancements in security and privacy practices to strengthen trust and compliance.

M

Ministerium für Kinder, Jugend, Familie, Gleichstellung, Flucht und Integration des Landes Nordrhein-Westfalen

familienportal.nrw

62

The Familienportal.NRW website is an official government portal managed by the Ministry for Children, Youth, Family, Equality, Refuge and Integration of the State of North Rhine-Westphalia, Germany. It provides centralized, accessible, and multi-language information and services for families, parents, and children in the region. The portal offers comprehensive content covering pregnancy, child age groups, family topics, and legal information, supported by contact forms and newsletter subscriptions. The site is well-positioned as a trusted government resource with strong branding and accessibility features. Technically, the site is built on Drupal 10 CMS with modern frontend libraries such as Font Awesome and accessible slick carousels. It employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The website is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Security best practices are observed, including HTTPS enforcement and security headers, though no explicit incident response or vulnerability disclosure policies are publicly available. The security posture is strong with no detected vulnerabilities or exposed sensitive data. Privacy compliance is robust, with clear privacy and cookie policies and GDPR adherence. The lack of WHOIS data is due to privacy protection, which is justified for a government domain. Social media presence on major platforms enhances trust and outreach. Overall, the site demonstrates a high level of professionalism, trustworthiness, and user-centric design. Strategic recommendations include establishing a public vulnerability disclosure policy, publishing incident response contacts, and continuous monitoring of third-party libraries to maintain security integrity. These steps will further enhance the portal's security maturity and user trust.

S

Stadtmarketing Herne

wannermondnaechte.de

49

Stadtmarketing Herne operates as a local government-affiliated entity focused on organizing and promoting community events such as the Wanner Mondnächte festival in Wanne-Eickel, Germany. The website provides detailed event information, schedules, multimedia content, and social media integration to engage local residents and visitors. The business model centers on event management and city marketing to foster community spirit and cultural engagement. Technically, the website is built on WordPress using modern plugins and libraries, with good mobile optimization and SEO practices. Security posture is solid with HTTPS and basic security headers, though additional headers and policies could enhance protection. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site is professional, trustworthy, and serves its local audience effectively.

F

Flottmann-Hallen Herne

flottmann-hallen.de

48

Flottmann-Hallen Herne is a cultural event venue located in Herne, Germany, offering a variety of events and exhibitions. The website provides comprehensive information about upcoming programs, ticketing, and visitor services, targeting a general audience interested in cultural activities. The business operates as a small local venue with a focus on hospitality and cultural events. Technically, the website is built using RapidWeaver CMS with Stacks plugins and leverages jQuery and Google Tag Manager for analytics and tracking. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS usage and cookie consent mechanisms in place, but lacks advanced security headers and explicit security policies. Privacy compliance is good with a visible privacy policy and cookie consent banner. Overall, the website is professional, trustworthy, and serves its intended audience effectively.

S

Samuel Niums Aminou

niums.com

42

The website niums.com represents a personal freelance portfolio and blog operated by Samuel Niums Aminou, a French web designer and blogger. The site focuses on showcasing web design work, sharing blog content related to web development and music, and linking to a YouTube channel for video content. The business model is that of an individual freelancer targeting French-speaking audiences interested in web design and music genres. The market position is small and personal, with no indication of larger corporate structure or subsidiaries. Technically, the website is built using basic HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The hosting provider is OVH sas, a reputable French hosting company. The site lacks modern CMS or frameworks and shows minimal mobile optimization and accessibility features. SEO practices are basic, with meta tags present but no advanced structured data or Open Graph tags. From a security perspective, the site has a basic posture. The domain is registered since 2003 with no privacy protection, indicating transparency and legitimacy. However, no DNSSEC is enabled, no security headers are detected, and there is no visible HTTPS enforcement or secure forms. Privacy and cookie policies are absent, and no contact information is provided, which reduces compliance with GDPR and best practices. Google Analytics is used without a consent mechanism, indicating privacy compliance gaps. Overall, the website is functional for its purpose as a personal portfolio and blog but lacks professional security, privacy, and compliance features. The risk level is moderate due to missing security controls and privacy policies. Strategic improvements in security headers, HTTPS enforcement, privacy compliance, and contact transparency are recommended to enhance trust and compliance.

The website respectdudroitdauteur.fr serves as an advocacy and informational platform focused on the respect of copyright and intellectual property rights within the context of emerging AI regulations in Europe. It represents a coalition of European cultural and creative organizations, publishing declarations and charters to influence policy and promote responsible AI use respecting creators' rights. The site is relatively new, founded in 2023, and hosted on OVH using WordPress technology. It demonstrates good content quality and professional presentation, targeting stakeholders in the cultural and AI regulatory sectors. Technically, the site is well-structured, mobile-optimized, and accessible, though it lacks advanced security headers and cookie consent mechanisms. Security posture is adequate with HTTPS enforced but could be improved with additional policies and disclosures. Overall, the site is trustworthy and credible but would benefit from enhanced privacy compliance and security transparency.