Security Directory

H

HESCOM-Software GbR

hescom.de

57

HESCOM-Software GbR is a small German software company specializing in software solutions for antiquarian bookshops, collectors, galleries, and publishers. Their offerings include proprietary software products such as Antiquar-PC, Exlibris-PC, and an integrated webshop solution, targeting niche markets with tailored IT consulting and web design services. The company has a consistent market presence since 2006 and maintains a professional website with clear navigation and relevant content. Technically, the website uses a proprietary web framework with standard web technologies including jQuery and Slick Carousel, and employs Piwik/Matomo for analytics. Mobile optimization and SEO are adequately addressed, though accessibility is basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but could improve in security and privacy compliance aspects.

H

HESCOM-Software GbR

hescomshop.de

57

HESCOM-Software GbR is a specialized software provider based in Germany, focusing on solutions for antiquarian bookshops, publishers, galleries, libraries, and collectors. Their core offerings include software products like Antiquar-PC and Exlibris-PC, complemented by a flexible and powerful webshop solution tailored for presenting and selling antiquarian books and graphics online. The company also provides web design and hosting services, targeting a niche market with professional and comprehensive solutions. The website reflects a consistent brand image and professional content aimed at their target audience. Technically, the website employs a custom HESCOM Web Framework along with common JavaScript libraries such as jQuery, Slick Carousel, and SimpleLightbox for UI enhancements. Analytics are handled via a self-hosted Piwik/Matomo instance, indicating a privacy-conscious approach. The site is mobile-optimized with good SEO and accessibility basics, though some improvements in accessibility and security headers could be made. Hosting appears stable with dedicated nameservers and no blocking or WAF interference. From a security perspective, the site uses encrypted data transmission for orders and does not expose sensitive information in the HTML. However, explicit security policies, incident response contacts, and cookie consent mechanisms are absent, which could be improved to enhance compliance and user trust. The WHOIS data aligns well with the website claims, showing consistent domain registration and no privacy protection, supporting legitimacy. Overall, the website is professional, secure, and compliant with GDPR, serving a specialized market effectively. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen their security posture and compliance standing.

H

HESCOM-Software GbR

hescomshop.com

57

HESCOM-Software GbR is a specialized software provider based in Germany, focusing on solutions for antiquarian bookshops, collectors, publishers, galleries, and libraries. Their core offerings include the Antiquar-PC and Exlibris-PC software systems, complemented by a flexible and powerful webshop solution tailored for antiquarian inventory presentation and eCommerce. The company positions itself as a niche player with a strong focus on the antiquarian and collector market segments, providing integrated software and web design services with hosting options. The website content is professionally presented, with clear navigation and multilingual support, targeting German and English-speaking customers in the antiquarian book and collector community.

S

Schweizer Buchpreis

schweizerbuchpreis.ch

48

The Schweizer Buchpreis website represents a well-established Swiss literary prize organization founded in 2017. It serves a niche audience of literature enthusiasts, authors, and publishing professionals primarily in Switzerland and German-speaking regions. The site provides information about the prize, nominees, events, and downloadable promotional materials, supported by recognized cultural partners. The business model is non-profit and focused on cultural promotion through annual awards and related events. Technically, the website is built on WordPress with common plugins such as Yoast SEO and Contact Form 7, enhanced by Google reCAPTCHA for bot protection. The site demonstrates good mobile optimization, SEO practices, and moderate performance. The technology stack is modern and appropriate for the organization's needs, though hosting details are not explicitly identified. From a security perspective, the site enforces HTTPS and uses reCAPTCHA, but lacks explicit security headers and a cookie consent mechanism, which are recommended for improved compliance and protection. No vulnerabilities or exposed sensitive data were detected. Privacy policy is present and GDPR compliant, but cookie consent and incident response contacts are missing. Overall, the website is professional, trustworthy, and secure for its purpose, with minor improvements recommended in privacy compliance and security headers. The domain registration is consistent with the organization's identity and history, supporting high legitimacy and trustworthiness.

B

Bücher Eule

buechereule.ch

51

Bücher Eule is a small, specialized antiquarian bookshop and bookstore based in Bern, Switzerland. The business focuses on providing a curated selection of antiquarian and modern books, serving readers and collectors primarily in the Swiss market. Their website offers a comprehensive catalog, search functionality, and additional services such as newsletters and collector software, positioning them as a niche player in the retail book industry. The company maintains an active social media presence and clear contact channels, enhancing customer engagement and trust. Technically, the website is built on a custom CMS framework (HESCOM Web Framework) and uses technologies like jQuery and Shariff for social sharing. The site is moderately performant with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. Analytics are handled via Matomo, indicating some privacy-conscious tracking. From a security perspective, the site uses HTTPS and secure form submissions but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. No explicit security or incident response policies are published, which could impact compliance and customer trust. The WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the site is professional and trustworthy but could enhance its security posture and privacy compliance. Strategically, Bücher Eule should prioritize implementing security headers, cookie consent, and publishing security policies to improve compliance and user trust. Regular security audits and updates to third-party libraries will further strengthen their security stance. Enhancing privacy compliance will also align the business with GDPR requirements, important for their European customer base.

K

karenina illustration

karenina-illustration.de

56

Karenina Illustration is a small independent artist based in Hamburg, Germany, specializing in mixed media illustrations combining vector art with found materials. The website serves as a portfolio and client showcase, targeting art enthusiasts and potential clients interested in unique illustration styles. The business operates primarily as a creative service provider with a niche market position. Technically, the site is built on the Jimdo Creator platform, utilizing jQuery and legacy Flash content, which poses compatibility and security concerns. The site is moderately optimized for performance and mobile use but lacks advanced accessibility features. Security posture is adequate with HTTPS and cookie consent mechanisms in place, but the absence of security headers and presence of Flash content reduce the overall security maturity. Privacy compliance is good with a visible privacy policy and cookie controls, though no terms of service or incident response policies are published. Overall, the site is professional and trustworthy for its scope but would benefit from modernization and enhanced security practices.

A

Arbeiter-Samariter-Bund Österreichs Gruppe Linz

samariterbund.at

61

The Arbeiter-Samariter-Bund Österreichs Gruppe Linz is a well-established non-profit organization providing a wide range of emergency, social, and educational services primarily in Linz and the Upper Austria region. Their services include emergency medical transport, first aid training, social care such as mobile nursing and meal delivery, and community engagement through volunteer and civil service programs. The organization maintains a strong regional presence supported by sister and parent organizations across Austria. Technically, the website is built on WordPress with modern frameworks like Bootstrap and uses several plugins for GDPR compliance, galleries, and statistics tracking. The site is mobile-optimized, well-structured, and professionally designed, reflecting a mature digital infrastructure. Analytics and tracking are implemented with user consent mechanisms, ensuring privacy compliance. From a security perspective, the site enforces HTTPS and uses cookie consent management, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were detected. The domain registration aligns well with the organization's identity, enhancing trustworthiness. Overall, the website presents a low-risk profile with strong compliance and professionalism. Strategic improvements in security headers and incident response transparency could further enhance their security posture and trust.

LiteraTour Nord is a cultural non-profit initiative managed by Literaturhaus Hannover e.V., organizing annual literary tours featuring contemporary German-speaking authors. The website serves as an information portal for event schedules, author profiles, and archival content, targeting literature enthusiasts and academic audiences in northern Germany. The business model relies on sponsorships, notably from the VGH Stiftung, and collaboration with local literature houses and universities. The site is professionally designed and consistently branded, reflecting a well-established regional cultural presence. Technically, the website is built on TYPO3 CMS, utilizing common front-end libraries such as jQuery, Bootstrap, and Font Awesome. It employs Matomo analytics with Do Not Track enabled, indicating some privacy awareness. The site is mobile optimized and SEO friendly, though accessibility features are basic. Hosting is managed via domaincontrol.com name servers, a reputable provider. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and has implemented Do Not Track in analytics, but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance. No incident response or security policy information is published. The absence of contact emails and phone numbers on the main page limits direct communication channels. Overall, the security posture is adequate but could be improved with standard best practices. The overall risk is low given the non-profit cultural nature and absence of suspicious content. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and enhancing contact information visibility to improve trust and compliance.

J

Julius-Club

julius-club.de

57

Julius-Club is a German youth-focused educational and cultural initiative promoting reading, writing, and creative activities during summer holidays. The website serves as an information portal for the club's events, book selections, and registration. It targets young audiences and their families, offering a variety of engaging activities such as readings, excursions, gaming, and creative workshops. The platform is positioned as a niche non-profit educational program within Germany. Technically, the website is built on WordPress with modern plugins like Yoast SEO and Elementor, ensuring good SEO and user experience. The site is mobile-optimized and uses HTTPS for secure communication. Security posture is adequate with cookie consent implemented, but lacks explicit privacy policies, terms of service, and security headers. No incident response or vulnerability disclosure information is provided. Overall, the site is professional, trustworthy, and safe for general audiences.

F

Festival aufm Platz

festival-aufmplatz.de

45

Festival aufm Platz is a well-established cultural festival in Niedersachsen, Germany, offering free open-air literary and musical events supported by reputable foundations such as the VGH Stiftung and Niedersächsische Sparkassenstiftung. The website reflects a professional and accessible platform with good SEO and accessibility features, built on WordPress with modern plugins and frameworks. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. No critical vulnerabilities or suspicious elements were detected. The site lacks explicit contact emails or phone numbers on the homepage, and no terms of service or security policies are published, which could be enhanced for transparency. Overall, the site is trustworthy, well-branded, and serves a general audience with safe content.

B

Biker's Point Fuchs Uslar

bikerspoint-fuchs.de

49

Biker's Point Fuchs Uslar is a specialized motorcycle dealership based in Germany, focusing on Honda and KTM motorcycles with a particular emphasis on Goldwing and Trikes, positioning itself as a leading European provider in this niche. The website is built on WordPress using the Divi theme, indicating a modern and flexible technical infrastructure. The site demonstrates good mobile optimization, accessibility, and SEO practices, although performance is moderate. Security posture is strong with HTTPS enabled and appropriate security headers, but lacks explicit security and privacy policies on the site. Contact information is not clearly presented, which may affect user trust and compliance. Overall, the site is professional and functional but would benefit from enhanced transparency and compliance documentation.

T

Typoakademie.de | Seminare für Designer, Werbe- und Medienprofis

typoakademie.de

63

Typoakademie.de is a specialized educational platform offering professional typography seminars and inhouse training primarily targeting design, advertising, and media professionals in Germany and Austria. The website presents a well-structured schedule of upcoming seminars across multiple cities, with clear registration links and detailed event information. The business operates as a small entity with a niche focus on typography education, leveraging the expertise of Wolfgang Beinert. The platform maintains a professional online presence with consistent branding and quality content, supported by structured data for SEO. Technically, the website is built on WordPress using the Uncode theme and Yoast SEO plugin, incorporating modern web technologies such as jQuery and FontAwesome. Hosting is managed via UI-DNS nameservers, and the site enforces HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are solid, with proper meta tags and structured data enhancing search visibility. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or vulnerable libraries. However, it lacks security headers and a formal security policy or incident response information. No cookie consent mechanism was detected, which may impact GDPR compliance. The WHOIS data aligns well with the website content, showing consistent domain registration and business history dating back to 2003, supporting legitimacy. Overall, Typoakademie.de demonstrates a strong business credibility and technical foundation with minor gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and incident response transparency would enhance trust and compliance.

A

Atelier Wolfgang Beinert | Berlin

wolfgang-beinert.de

57

Atelier Wolfgang Beinert is a well-established communication design studio based in Berlin, specializing in graphic design, typography, and photography. Founded in 1989, the studio serves a diverse clientele including international companies and institutions such as Vogue, BMW, Mercedes-Benz, Leica, Chanel, and the Goethe-Institut. The website showcases a professional portfolio, detailed service offerings, and educational initiatives, positioning the studio as a reputable and experienced player in the media and design industry. The business model focuses on bespoke design solutions, consulting, and training services, targeting companies and institutions seeking high-quality visual communication.

S

SWH. Bäder Halle GmbH

baden-in-halle.de

54

SWH. Bäder Halle GmbH operates a network of public bathing and sauna facilities in Halle, Germany, including indoor pools, outdoor pools, and camping sites. The company is part of the larger SWH group, which encompasses various regional utility and service providers. The website serves local residents and visitors seeking leisure and wellness services. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and SVG graphics, with a focus on accessibility and mobile responsiveness. Cookie consent is managed through Usercentrics, indicating GDPR awareness, though explicit privacy and terms of service pages were not found in the analyzed content. Security measures include HTTPS and bot protection via FriendlyCaptcha, but lack visible security headers and a published security policy. Overall, the site is professional and trustworthy, with room for improvement in privacy disclosures and security hardening.

H

Hallesche Verkehrs-AG

havag.com

62

Hallesche Verkehrs-AG (HAVAG) is a regional public transportation company serving the Halle (Saale) and Merseburg areas in Germany. It operates under the Mitteldeutscher Verkehrsverbund and is part of the larger SWH group. The website provides comprehensive information about public transport services, ticketing options, customer service, and multimodal transport offers. It targets local residents and commuters seeking reliable public transit information and services. The company maintains a medium-sized regional presence with a clear business model focused on public transportation and customer support. Technically, the website employs a modern technology stack including jQuery, Leaflet for mapping, FontAwesome icons, and Matomo for analytics, complemented by Usercentrics for consent management. The site is hosted by Vautron Rechenzentrum AG and shows good mobile optimization and SEO practices. The infrastructure is stable with HTTPS enforced, though some security headers are not explicitly confirmed. Privacy compliance is well addressed with visible cookie consent and a detailed privacy policy. From a security perspective, the site demonstrates good practices such as HTTPS usage and consent management but lacks explicit incident response contacts and vulnerability disclosure mechanisms. DNSSEC is not enabled, which is a recommended improvement. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy, professional, and compliant with GDPR requirements. The overall risk is low, with recommendations focusing on enhancing DNS security, publishing security.txt, and adding explicit security headers to strengthen the security posture further. The website is suitable for its audience and business purpose, with a strong alignment between domain registration data and business claims.

H

Hallesche Wasser und Stadtwirtschaft GmbH

hws-halle.de

61

Hallesche Wasser und Stadtwirtschaft GmbH is a regional utility company based in Halle, Germany, providing essential municipal services including water supply, wastewater management, waste disposal, and city cleaning primarily targeting private customers. The company operates as part of the larger SWH Gruppe, which encompasses multiple related entities in energy, transportation, and municipal services. Their website reflects a structured and comprehensive presentation of services, targeting local residents and businesses with clear navigation and service menus. Technically, the website employs modern frontend technologies such as jQuery, FontAwesome, and Slick Carousel, alongside privacy-conscious tools like Usercentrics for consent management and Matomo for analytics. The site is mobile optimized and demonstrates moderate performance and accessibility standards. However, some security headers are not explicitly detected, and there is no visible security policy or incident response information. From a security perspective, the site enforces HTTPS and uses consent management, but lacks published security policies and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were found in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Overall, the website presents a professional and trustworthy digital presence for a municipal utility provider, with room for improvement in security policy transparency and enhanced privacy compliance documentation.

N

NETZ HALLE GmbH

netzhalle.de

60

NETZ HALLE GmbH operates as a regional energy network operator in Halle (Saale), Germany, providing essential services such as electricity, gas, and heat network connections, metering, and customer support. The company is part of the larger Stadtwerke Halle group, which includes various utility and service subsidiaries. The website reflects a professional and regionally focused utility provider with clear service offerings and customer engagement channels. Technically, the website employs a legacy CMS (SixCMS) with common JavaScript libraries like jQuery and Modernizr, enhanced by user consent management via Usercentrics and analytics through Matomo. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Hosting appears to be managed by EVH, consistent with the regional focus. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms, but lacks visible advanced security headers and a public security policy or vulnerability disclosure. No critical vulnerabilities or suspicious content were detected. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Recommendations include enhancing security headers, publishing a security policy, and improving accessibility features to further strengthen compliance and security posture.

E

Energieversorgung Halle Netz GmbH (EVH)

evh.de

58

Energieversorgung Halle Netz GmbH (EVH) is a regional energy provider based in Halle, Germany, offering a comprehensive portfolio of energy products including electricity, gas, heat, and innovative energy solutions such as e-mobility and photovoltaics. The company targets private and commercial customers, positioning itself as a key player in the regional energy market with a focus on sustainable and customer-centric services. The website reflects a mature digital presence with clear navigation, professional design, and comprehensive content tailored to its audience. Technically, the site employs modern frameworks like Bootstrap and integrates privacy and security tools such as Usercentrics CMP and FriendlyCaptcha, indicating a commitment to GDPR compliance and user security. Security posture is strong with HTTPS enforcement, security headers, and bot mitigation mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, EVH demonstrates a solid business and technical foundation with room for enhanced transparency in security governance.

MeinBeitragWirkt.at is a regional non-profit website dedicated to informing and supporting members of the Catholic Church in Salzburg regarding their church contributions. The platform provides detailed information on contribution usage, payment options, frequently asked questions, and contact services, positioning itself as a trusted resource for church members. The website is built on TYPO3 CMS with modern frontend technologies like Bootstrap and jQuery, and employs Matomo analytics to ensure privacy-conscious user tracking. The site is well-designed, mobile-optimized, and offers a clear navigation structure, enhancing user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements could be made by adding security headers and explicit cookie consent mechanisms. Overall, the domain registration data aligns well with the website's purpose and location, indicating a trustworthy and legitimate online presence.

E

Erzdiözese Salzburg

rupertusblatt.at

59

The Rupertusblatt website serves as the official weekly newspaper for the Erzdiözese Salzburg, providing religious, cultural, and social news relevant to the Archdiocese and its community. It offers subscription services, e-paper access, and community engagement features. The site is well-branded and professionally maintained, reflecting its role as a trusted regional media outlet. Technically, the site uses a modern CMS (siteswift), integrates popular JavaScript libraries for UI and interactivity, and implements a cookie consent mechanism aligned with GDPR requirements. Security practices include CSRF token usage and consent management, though HTTP security headers and SSL configuration details are not explicitly visible. The absence of WHOIS data limits domain registration transparency but does not detract from the site's evident legitimacy and professional presentation. Overall, the site is a reliable, well-structured platform serving its target audience effectively.

E

Erzdiözese Salzburg

edsbg.at

59

Erzdiözese Salzburg operates as a large, established Catholic diocese serving the Salzburg region and Tiroler Unterland in Austria. The website functions as an informational and community engagement platform, offering news, event details, and religious content tailored to its Catholic audience. The organization maintains a consistent brand presence and leverages social media channels to extend its outreach. Technically, the site uses the siteswift CMS platform with modern JavaScript libraries, ensuring a responsive and user-friendly experience. Security measures include HTTPS enforcement, CSRF protection on forms, and a comprehensive cookie consent mechanism, although explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates a good balance of content quality, technical implementation, and privacy compliance, reflecting the organization's credibility and commitment to user trust.

E

Erzdiözese Salzburg

eds.at

67

The website eds.at serves as the official online presence of the Erzdiözese Salzburg, the Catholic Church in Salzburg and the Tiroler Unterland region. It provides comprehensive information on religious services, community events, social support, and educational content targeted at church members and the general public interested in faith and community activities. The site is well-positioned as a regional religious authority and community service provider with a large audience base. Technically, the site is built on TYPO3 CMS, leveraging modern web technologies such as Bootstrap and jQuery, and integrates privacy-conscious analytics via Matomo. The site demonstrates good digital maturity with mobile optimization, accessibility, and SEO best practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though some security headers could be improved. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements.

C

Catholic Bishops' Conference of England and Wales

dayforlife.org

49

The Catholic Bishops' Conference of England and Wales operates a professional and authoritative website dedicated to religious advocacy and raising awareness on life issues. The site provides comprehensive resources including messages, prayer booklets, and grant information, targeting Catholics and interested individuals in England and Wales. The organization holds a strong market position as a recognized religious authority with consistent branding and a clear mission. Technically, the website is built on WordPress with modern technologies such as Bootstrap, Yoast SEO, and Google Analytics, hosted with CDN support for performance. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site uses HTTPS and employs security best practices, although explicit security headers are not detected in the provided data. No vulnerabilities or exposed sensitive data were found. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a low risk profile with strong business credibility and technical maturity. The main limitation is the lack of WHOIS data due to querying the 'www' subdomain, but this does not detract from the site's legitimacy. Strategic recommendations include enhancing security headers and publishing explicit security and incident response policies.

C

Catholic Bishops' Conference of England and Wales

taking-stock.org.uk

45

Taking Stock is a non-profit project managed by the Catholic Bishops' Conference of England and Wales, focusing on the architectural and historical review of Catholic churches and chapels across England and Wales. The website serves as an informational resource and partnership platform involving dioceses and Historic England. The target audience includes researchers, heritage professionals, and the Catholic community. The business model is collaborative and heritage-focused, with a niche market position in religious architectural documentation. Technically, the website is built on WordPress with a modern tech stack including Bootstrap, jQuery, and advanced SEO plugins like Yoast. Hosting utilizes a CDN for performance, and Google Analytics is implemented for visitor tracking. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in security headers and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks explicit security policies, incident response information, and cookie consent banners, which are important for GDPR compliance and user trust. No critical vulnerabilities or suspicious activities were detected. Overall, the website is professionally maintained with a strong business credibility and good content quality. Strategic recommendations include enhancing privacy compliance with cookie consent, implementing security headers, and publishing security and incident response policies to improve trust and compliance posture.

N

National Protective Security Authority

npsa.gov.uk

78

The National Protective Security Authority (NPSA) is the UK government's National Technical Authority for physical and personnel protective security, operating as part of MI5. The website serves as a comprehensive resource offering guidance, tools, and risk management information targeted at security professionals, government entities, industry sectors, and high-risk individuals. It holds a strong market position as an authoritative government agency providing protective security expertise. Technically, the website is built on Drupal CMS with modern JavaScript libraries and integrates analytics and tracking tools such as Google Tag Manager, Facebook Pixel, Hotjar, and LinkedIn Insight. The site demonstrates good mobile optimization, accessibility, and SEO practices, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is robust with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website presents a low risk profile with strong trust indicators including official UK government domain usage, Crown copyright, and consistent branding. The absence of WHOIS data is typical for government domains and does not detract from legitimacy. Strategic recommendations include enhancing security headers, publishing a security policy, and providing clear incident response contacts to further strengthen security posture.

EVENTIM Inhouse is a medium-sized technology company specializing in flexible ticketing solutions and event management services primarily targeting event organizers, cultural institutions, and museums in Germany. Their offerings include ticketing systems, CRM, reporting, sales channels, access control, and consulting services. The website is built on TYPO3 CMS and uses modern web technologies such as Bootstrap and jQuery, with integrated GDPR-compliant consent management and Google Tag Manager for analytics. Security posture is solid with HTTPS and secure login forms, though explicit security policies and incident response information are not publicly available. Overall, the site is professional, well-branded, and trustworthy with good content quality and user experience.

S

SHC Netzwerktechnik GmbH

shc.eu

60

SHC Netzwerktechnik GmbH is a German-based IT security and infrastructure company specializing in comprehensive solutions for data centers, core networking, and cloud computing. The company partners with leading manufacturers such as Sophos, Dell, VMware, and Microsoft, positioning itself as a trusted provider of managed detection and response, endpoint protection, and security operations center services. Their market presence is focused on serving businesses across Germany with a strong emphasis on IT security and network technology. Technically, the website is built on WordPress using the Divi theme, incorporating modern web technologies and analytics tools like Matomo. The site demonstrates good mobile optimization and SEO practices, with GDPR compliance mechanisms in place, including cookie consent banners. The technical infrastructure reflects a moderate to good level of digital maturity suitable for their business model. From a security perspective, the website enforces HTTPS and employs GDPR-compliant cookie management. However, it lacks some advanced security headers and does not publicly disclose a formal security policy or incident response plan. The WHOIS data is privacy protected, which is typical for European domains and justified given the company's IT security focus. No critical vulnerabilities or suspicious indicators were found in the website content or technical setup. Overall, SHC Netzwerktechnik GmbH presents a professional and trustworthy online presence with a solid foundation in IT security services. Strategic improvements in security transparency and enhanced header configurations could further strengthen their security posture and customer trust.

D

Dieter Janecek

dieterjanecek.de

49

Dieter Janecek's website serves as the official online presence for a German Bundestag member representing Munich-West/Mitte. The site focuses on political communication, providing news, event information, and a newsletter subscription to engage constituents and supporters of the Green party. The business model centers on political representation and public outreach, targeting German citizens and political stakeholders. The website is well-branded, consistent, and offers multilingual support, enhancing accessibility for a broader audience. Technically, the site is built on WordPress using a modern tech stack including jQuery, Swiper.js, and several reputable plugins for events, forms, and multilingual content. The site demonstrates good mobile optimization and moderate performance, with a clean and professional design. SEO and accessibility are basic but adequate for the site's purpose. From a security perspective, the website enforces HTTPS and implements a GDPR-compliant cookie consent mechanism with granular user controls. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly present, and there is no dedicated security or incident response policy visible. The WHOIS data aligns with the website content, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with good privacy compliance and a solid security posture for a political site. Strategic improvements could include adding security headers, incident response information, and enhanced accessibility features to further strengthen trust and compliance.

A

Arbeitskreis Humanitäre Hilfe für Asylbewerber e.V.

ak-asyl-nw.de

51

The website represents a small non-profit organization named Arbeitskreis Humanitäre Hilfe für Asylbewerber e.V., focused on providing humanitarian aid and consultation services to asylum seekers in Germany. The site content is primarily informational, offering consultation times and links to related refugee support organizations. The organization appears to operate locally with a clear humanitarian mission. Technically, the website is built on Joomla CMS using the Helix Ultimate template and Bootstrap 5.3.3, indicating a moderately modern infrastructure. The site is mobile optimized and includes a cookie consent mechanism that blocks cookies and local storage until user consent is given, reflecting good privacy awareness. However, no advanced analytics or tracking tools are detected, and security headers are not present, suggesting room for improvement in security hardening. From a security perspective, the site enforces HTTPS and implements cookie consent, but lacks explicit security policies, incident response contacts, and terms of service. No vulnerabilities or exposed sensitive data were found in the HTML content. The WHOIS data is consistent with the website's purpose and shows no suspicious patterns, supporting the legitimacy of the domain. Overall, the website is safe, with content appropriate for a general audience. It demonstrates basic compliance with GDPR through its privacy and cookie policies but could enhance its security posture and business credibility by adding more detailed policies and contact information.

B

Bundesregierung

gleichstellungsbericht.de

45

The website gleichstellungsbericht.de is an official German government platform dedicated to publishing gender equality reports and related information. It serves as a key resource for policymakers, administrators, and the public interested in gender equality progress and recommendations in Germany. The site provides access to current and past reports, event announcements, and downloadable documents, positioning itself as a trusted governmental information source. The business model is informational and regulatory, with a focus on transparency and public engagement in gender equality matters. Technically, the website is built on WordPress and employs common web technologies such as jQuery and Owl Carousel for interactive content. It integrates a sophisticated accessibility tool (digi·access) supporting multiple languages and accessibility needs, reflecting a high level of digital maturity and inclusiveness. Hosting is managed via domaincontrol.com (GoDaddy), a reputable provider. The site demonstrates good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and includes essential security headers, contributing to a strong security posture. No vulnerabilities or exposed sensitive data were detected. However, the absence of a cookie consent mechanism, explicit security policies, and vulnerability disclosure pages indicates areas for improvement in compliance and transparency. No incident response contacts or data protection officer information were found, which are recommended for enhanced trust and regulatory adherence. Overall, the website is professional, trustworthy, and well-maintained, with a strong focus on accessibility and content quality. Strategic recommendations include implementing cookie consent, publishing security and incident response policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

U

united-domains AG

europa.blog

52

Europa Blog is a niche German-language media platform focusing on European political, social, and cultural topics. It publishes essays and columns from various authors, including notable contributors like Jürgen Klute and Frederik D. Tunnat. The site targets readers interested in in-depth socio-political analysis and commentary within Europe. The business model centers on content publishing without evident commercial sales or e-commerce components. The domain is registered since 2016 with privacy protection, consistent with the site's profile as a small media outlet.

G

Grundstücksgesellschaft Franz-Mehring-Platz 1 mbH

muenzenbergforum.de

46

The Internationales Willi Münzenberg Forum is a German non-profit organization that serves as a loose network of scientific project groups, political-cultural education providers, and media enterprises. The website reflects a niche educational and cultural collaboration platform with a focus on political culture and media projects. It targets politically and culturally engaged audiences, providing resources such as events, journals, and a library. The organization appears small and specialized, with a founding date around 2015. Technically, the website is built on WordPress 6.8.3, utilizing modern plugins such as Yoast SEO, Contact Form 7, and GDPR compliance tools like ShapePress DSGVO. Hosting is provided by Hetzner in Germany, aligning with the website's language and business location. The site demonstrates good mobile optimization, SEO practices, and moderate performance. From a security perspective, the site enforces HTTPS and implements GDPR-compliant cookie consent mechanisms. However, no explicit security headers were detected, and there is no visible security or incident response policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of contact emails and phone numbers is mitigated by the presence of contact forms and social media channels. Overall, the website presents a professional and trustworthy front for a small non-profit organization. Recommendations include enhancing security headers, adding explicit security policies, and possibly publishing vulnerability disclosure information to improve transparency and security posture.

C

common verlagsgenossenschaft eG

oxiblog.de

48

OXI Blog is a German media publication focused on alternative economic perspectives, operated by common verlagsgenossenschaft eG. The website offers articles, digital and print subscriptions, and a newsletter targeting a general audience interested in economic and social topics. The business model relies on content publication supported by subscriptions and donations, positioning itself as a niche media outlet in Germany. Technically, the site is built on WordPress with a modern tech stack including Yoast SEO, GDPR-compliant cookie consent via ShapePress DSGVO, and analytics through Matomo and WP Statistics. Hosting is provided by Hetzner, a reputable German provider, ensuring reliable infrastructure. Security posture is strong with HTTPS enforced, use of reCAPTCHA for forms, and cookie consent mechanisms, though some security headers and explicit incident response contacts are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with no signs of content blocking or WAF interference.

D

Die Linke im Europaparlament

dielinke-europa.eu

44

Die Linke im Europaparlament is a political group representing left-wing interests within the European Parliament, focusing on social justice, peace, and democracy in Europe. The website serves as an information hub for their parliamentary activities, news, publications, and contact with representatives. It targets European citizens interested in progressive politics and EU governance. The organization maintains a consistent brand presence and leverages official EU affiliations to establish trust. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and FontAwesome. The site is hosted by http.net Internet GmbH and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper metadata and Open Graph tags. From a security perspective, the site enforces HTTPS and includes privacy consent mechanisms in its contact forms, aligning with GDPR requirements. However, it lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration. Overall, the website presents a professional and trustworthy digital presence for a political organization, with room for improvement in security hardening and cookie consent implementation to enhance privacy compliance and user trust.

The Projektnetzwerk Ländliche Räume Niedersachsen website serves as an official regional government platform aimed at consolidating and promoting projects in rural areas of Lower Saxony, Germany. It provides categorized project listings, information on regional development programs, and facilitates project visibility for stakeholders such as municipalities and project managers. The platform is supported by various ministries and government entities, reinforcing its authoritative position in the regional development sector. Technically, the website is built on the connectiv! WebCMS 6 platform, employs standard web technologies including JavaScript and YouTube APIs, and uses etracker for analytics with respect for user privacy. While the site is accessible and well-structured, it lacks some modern security headers and explicit cookie consent mechanisms, which are areas for improvement. The security posture is generally good with HTTPS enforced and no visible vulnerabilities, but could benefit from enhanced security policies and incident response disclosures. Overall, the website is trustworthy, professionally maintained, and serves its target audience effectively with a moderate technical maturity level.

N

Niedersächsischer Integrationspreis

niedersaechsischer-integrationspreis.de

52

The Niedersächsischer Integrationspreis website serves as an official platform for a regional government-supported integration award in Lower Saxony, Germany. It targets organizations and the general public interested in integration initiatives, providing information about the award, past winners, news, and related events. The site is built on TYPO3 CMS and features a professional design with consistent branding and clear navigation, supporting a good user experience. The content is primarily in German and focuses on non-profit and governmental activities related to integration.

Impresa Fidata is a regional project focused on supporting construction companies in Abruzzo, Italy, by providing a free service to validate subcontractor documentation and promote compliance with safety regulations. The initiative is realized by FORMEDIL ABRUZZO with the contribution of INAIL Abruzzo, targeting construction firms registered in Edilcassa Abruzzo. The website serves as an informational and promotional platform for this project, offering contact details and links to partner organizations. Technically, the website is built using SitePad CMS and incorporates common web technologies such as jQuery, Bootstrap Grid, Font Awesome, and cookie consent scripts. The site is accessible, mobile-optimized, and presents a professional design with clear navigation. However, it lacks explicit privacy and terms of service pages, which are important for compliance and user trust. From a security perspective, the site uses HTTPS but does not show evidence of security headers or advanced security practices. No forms or data collection fields are present on the homepage, reducing immediate data exposure risks. The absence of WHOIS registration data is a notable concern, potentially indicating privacy protection or data unavailability, which slightly reduces trustworthiness. Overall, the website is functional and serves its informational purpose well but would benefit from enhanced privacy compliance, security hardening, and transparency regarding domain registration to improve trust and compliance posture.

M

Mirus

mirus.it

73

Mirus is an established Italian communication company with over 30 years of experience, specializing in integrated communication, consulting, events, digital branding, and strategic creativity. The company targets businesses seeking to strengthen their brand presence through multi-channel experiences. Their market position is supported by a portfolio of notable clients including government and regional entities, and a clear emphasis on certifications and ethical practices. Technically, the website is built on WordPress with Elementor and incorporates modern SEO and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms, though there is room for improvement in explicit security policies and incident response disclosures. Overall, the website presents a professional, trustworthy, and compliant digital presence suitable for its business domain.

F

FILLEA CGIL

filleacgil.net

64

FILLEA CGIL is an Italian trade union federation representing workers in the construction, wood, furniture, cement, bricks, and stone sectors. It operates as a large non-profit organization affiliated with the national CGIL confederation. The website serves as an information and communication platform targeting Italian workers in these industries, providing news, contract information, training, and advocacy resources. The business model focuses on worker representation and labor rights advocacy within Italy's construction and related sectors. Technically, the website is built on Joomla CMS with modern frameworks like Gantry5 and Bootstrap, offering a responsive and accessible user experience. The site includes GDPR-compliant cookie consent mechanisms and integrates social media channels for broader engagement. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though it lacks some advanced security headers and published incident response policies. The WHOIS data is missing or unavailable, which raises concerns about domain registration legitimacy, but the website content and branding appear professional and trustworthy. Overall, the site is well-maintained, content-rich, and serves its target audience effectively, though improvements in security policy transparency and domain registration clarity are recommended.

FILCA CISL is the Italian Federation of Workers in Construction and Related Industries, operating as a trade union federation under the larger CISL confederation. The organization represents workers in sectors such as construction, wood, cement, bricks, and stone manufacturing. The website serves as an information and communication platform for members and the public, offering news, sector-specific information, and union resources. It holds a strong market position as a leading trade union in its sectors within Italy. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, ensuring good SEO and mobile responsiveness. Hosting appears to be managed by SiteGround, and the site uses HTTPS with a good SSL configuration. The site includes multi-language support via GTranslate and integrates social media feeds and links to enhance engagement. From a security perspective, the site uses HTTPS and nonce tokens for AJAX calls, but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a cookie consent mechanism present but no visible privacy or terms of service pages. Contact information is limited on the site, with no direct emails or phone numbers found. Overall, the website is professional, trustworthy, and well-positioned for its audience, but could improve in privacy transparency and security policy disclosures.

Q

QUIC.cloud

quic.cloud

74

QUIC.cloud is a specialized technology company providing a comprehensive WordPress optimization platform that includes CDN-level caching, image and page optimization, security features, and DNS services. Established in 2018, it has positioned itself as a niche leader in WordPress performance enhancement with a growing global network of CDN points of presence. The website reflects a mature digital presence with professional design, clear navigation, and extensive service descriptions targeting WordPress site owners and developers. Technically, the site is built on WordPress with Elementor and leverages modern technologies such as LiteSpeed Cache, Google Analytics, and Google Tag Manager. Hosting is supported by Amazon AWS infrastructure, ensuring fast performance and global reach. The site is mobile-optimized and accessible, with good SEO practices and comprehensive metadata including Open Graph and JSON-LD structured data. From a security perspective, the site enforces HTTPS and integrates CDN-level security features including brute-force protection, reCAPTCHA, Layer-7 DDoS mitigation, and WAF rules tailored for WordPress. However, explicit security policies and incident response information are not published, representing an area for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, QUIC.cloud demonstrates a strong security posture, good privacy compliance with GDPR-aligned policies and cookie consent mechanisms, and high business credibility. The domain registration data is consistent and trustworthy. Strategic recommendations include publishing dedicated security and incident response policies, adding security headers, and enhancing transparency around vulnerability disclosures.

K

Klinikum Saarbrücken gGmbH

klinikum-saarbruecken.de

49

Klinikum Saarbrücken gGmbH operates a large, modern hospital facility located in Saarbrücken, Germany, providing comprehensive medical services across 17 specialized departments and 18 interdisciplinary centers. The institution positions itself as a regional maximal care provider with a strong emphasis on quality, patient safety, and community engagement. The website serves multiple audiences including patients, visitors, healthcare professionals, and prospective employees, offering detailed information about medical services, educational programs, and career opportunities. The presence of certifications and compliance information underscores its commitment to healthcare standards and regulatory adherence. Technically, the website is built on the TYPO3 CMS platform, leveraging a modern technology stack including jQuery, Bootstrap, and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices. The cookie consent mechanism and privacy policy are well implemented, reflecting GDPR compliance. The site integrates multiple social media channels and provides a newsletter signup, enhancing user engagement. From a security perspective, the site enforces HTTPS and employs cookie consent management. No critical vulnerabilities or exposed sensitive data were detected in the content. However, there is room for improvement in publishing explicit incident response policies, security headers, and vulnerability disclosure mechanisms. The WHOIS data aligns with the website's claims, indicating a legitimate and professionally managed domain. Overall, Klinikum Saarbrücken's website reflects a mature digital presence with strong business credibility and privacy compliance. Strategic enhancements in security transparency and incident response readiness would further strengthen its posture.

J

JK.works mediatec

jk-works.de

55

JK.works mediatec is a small, established German IT service provider specializing in system administration, cloud and backup solutions, server maintenance, and web design/development. With over 20 years of experience and a Microsoft Silver Partner certification, the company targets businesses primarily in the Bremen, Wildeshausen, and Oldenburg regions. Their website reflects a professional and consistent brand image, offering clear service descriptions and accessible contact information. Technically, the site is built on OctoberCMS with a modern tech stack including Bootstrap and jQuery, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and cookie consent implemented, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious or adult content.

C

Catholic Bishops' Conference of England and Wales

cbcew.org.uk

49

The Catholic Bishops' Conference of England and Wales operates an official website providing authoritative information about the Catholic Church's activities, leadership, safeguarding, and community engagement within England and Wales. The site serves a broad audience including clergy, laity, and the general public interested in religious affairs. It offers news, events, podcasts, and educational resources, positioning itself as a trusted source for Catholic-related content in the region. Technically, the website is built on WordPress with modern frameworks like Bootstrap and integrates SEO and analytics tools such as Yoast SEO and Google Analytics, reflecting a mature digital infrastructure. The site is hosted on reliable CDN services ensuring moderate to good performance and mobile responsiveness. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website demonstrates high professionalism, trustworthiness, and compliance with privacy regulations including GDPR. The lack of WHOIS data for the exact subdomain queried is explained by it being a subdomain, with the main domain being legitimate and well-established. Strategic recommendations include enhancing security headers and maintaining regular updates to sustain security and compliance.

E

Erzdiözese Salzburg

kirchen.net

67

The website eds.at serves as the official online presence of the Erzdiözese Salzburg, the Catholic Church in Salzburg and the Tiroler Unterland region. It provides comprehensive information on church news, events, religious teachings, community services, and contact details. The site targets church members, local community members, and those interested in religious and social topics related to the Catholic Church in this region. The business model is non-profit and community-focused, positioning itself as a regional religious authority and information hub. Technically, the website is built on TYPO3 CMS, uses modern web technologies including jQuery and Bootstrap, and integrates Matomo analytics configured for privacy compliance. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure.

K

Katholische Aktion St. Pölten

ka-stp.at

66

Katholische Aktion St. Pölten is a small non-profit religious community organization based in Austria, focused on faith, social justice, and community engagement within the Diocese of St. Pölten. The website serves as a hub for information about their activities, events, and publications, targeting local community members interested in active faith participation. The organization maintains a consistent brand presence with clear contact information and social media integration. Technically, the website is built on WordPress using Elementor and several modern plugins, ensuring good SEO, mobile optimization, and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and policies could be improved. Privacy compliance is strong with comprehensive policies and consent management. Overall, the site is trustworthy, professional, and well-maintained, supporting the organization's mission effectively.

S

Stadtwerke Halle GmbH

swh.de

62

Stadtwerke Halle GmbH is a large municipal utility company serving the city of Halle (Saale) and surrounding region in Germany. The company provides a broad range of essential services including electricity, natural gas, district heating, water supply, waste management, public transportation, and leisure facilities. It operates through multiple subsidiaries and partner organizations, reflecting a diversified municipal service portfolio. The website presents these services clearly and professionally, targeting local residents and businesses. Technically, the website uses a modern technology stack including jQuery, Slick Carousel, FontAwesome, and a consent management platform (Usercentrics) alongside Matomo analytics for privacy-conscious user tracking. The site is mobile optimized and structured for good SEO and accessibility, though some accessibility features could be enhanced. Hosting and CMS appear stable and appropriate for the business scale. From a security perspective, the site enforces HTTPS and uses consent management for cookies, indicating good privacy practices. However, no explicit security policy, incident response contacts, or vulnerability disclosure mechanisms are publicly available, which could be improved. No vulnerabilities or suspicious content were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and aligned with the business's public utility role. Strategic improvements in transparency around security policies and GDPR compliance documentation would enhance trust and compliance posture.

C

Carlsen Verlag

carlsen.de

51

Carlsen Verlag is a well-established German publishing company specializing in children's books, young adult literature, manga, and comics. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to its target audience of children, young adults, educators, and fans of comics and manga. The company operates under the Bonnier Group umbrella and maintains subsidiaries such as Lappan Verlag and Carlsen K. Technically, the site is built on Drupal CMS, uses modern JavaScript libraries like Swiper.js, and integrates Google Tag Manager for analytics and marketing. The site is mobile-optimized and accessible, with good SEO practices.

T

Typolexikon.de | Das Lexikon der Typografie

typolexikon.de

63

Typolexikon.de is a specialized online lexicon and encyclopedia dedicated to typography, fonts, and visual design, curated and edited by Wolfgang Beinert since 2001. It serves a niche audience of typography enthusiasts, graphic designers, and students by providing comprehensive, well-structured educational content and a searchable glossary. The website demonstrates a mature digital presence with professional design, good SEO, and accessibility features, built on WordPress with modern technologies. Security posture is solid with HTTPS and secure form practices, though it lacks published privacy and cookie policies, which are compliance gaps. Contact is available via an external contact form, and no analytics or advertising scripts are detected, indicating a privacy-conscious approach. Overall, the site is trustworthy and authoritative within its domain but should improve privacy compliance documentation.

N

Netzwerk der Literaturhäuser

literaturhaus.net

52

Netzwerk der Literaturhäuser is a German-speaking cultural network focused on promoting literature houses through events, awards, and member coordination. The website serves as an information hub for literature enthusiasts, cultural institutions, and authors. It is built on WordPress using modern plugins and themes, providing a good user experience with multimedia content and mobile optimization. Security posture is adequate with HTTPS and some security plugins, but lacks advanced security headers and cookie consent mechanisms. The absence of WHOIS data for the domain is a notable anomaly that impacts trustworthiness. Overall, the site is professional and functional but could improve in privacy compliance and security transparency.