Security Directory

The website www.evangelischejugend.de represents the official online presence of the Kinder- und Jugendpfarramt der Evangelischen Kirche in Mitteldeutschland (EKM), focusing on youth work within the church community. It provides information, resources, and event announcements targeted at children, youth, and church workers engaged in evangelical youth activities. The organization operates as a non-profit entity with a regional focus in Germany. The site is well-branded, consistent, and maintains a professional tone suitable for its audience. Technically, the website employs modern front-end technologies including Bootstrap 5 and FontAwesome, with additional JavaScript libraries for layout and media handling. Hosting is provided by Eastlink, as indicated by the nameservers. The site is mobile-optimized and performs moderately well, though some improvements in accessibility and SEO could be made. Analytics are handled via Piwik, reflecting moderate user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and secure forms but lacks visible security headers and a cookie consent mechanism, which are recommended for enhanced compliance and protection. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data aligns with the organizational identity, supporting legitimacy. Overall, the website is a credible, safe, and functional platform for its intended audience, with room for improvement in privacy compliance and security best practices.

E

Evangelische Schulstiftung in Mitteldeutschland St. Johannes

schulstiftung-ekm.de

39

The Evangelische Schulstiftung in Mitteldeutschland St. Johannes operates as a large non-profit educational foundation managing 42 educational institutions across the German states of Saxony, Saxony-Anhalt, and Thuringia. It serves over 7,000 students with a staff of approximately 900, offering a broad range of school types including primary, secondary, and special education. The foundation also provides career opportunities and professional development programs, positioning itself as a key regional player in evangelical education. Technically, the website employs a modern front-end stack including Bootstrap, jQuery, and various UI libraries, delivering a responsive and well-structured user experience. While performance is moderate, the site is mobile-optimized and SEO-friendly. Analytics are handled via Matomo/Piwik, reflecting a moderate level of user tracking with some privacy considerations. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Privacy compliance is strong regarding GDPR with a comprehensive privacy policy, but the absence of a cookie consent mechanism is a notable gap. Overall, the website is professional, trustworthy, and well-aligned with its educational mission. Strategic enhancements in security headers, cookie consent, and incident response transparency would further strengthen its security posture and compliance.

N

Norwegian University of Science and Technology

ntnu.edu

69

The Norwegian University of Science and Technology (NTNU) operates a comprehensive and professionally designed website serving students, researchers, and the academic community. The site offers detailed information on study programs, research initiatives, student life, and institutional resources, positioning NTNU as a leading educational institution in Norway. The digital infrastructure leverages modern technologies including Liferay CMS, Bootstrap, and various analytics tools, reflecting a mature and well-maintained technical environment. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers could be enhanced. Privacy compliance is strong with clear policies and consent mechanisms. Overall, the website demonstrates high professionalism, trustworthiness, and user-centric design.

M

MAISONNOÉE Berlin

maisonnoee.com

60

MAISONNOÉE Berlin is a small luxury fashion and lifestyle brand specializing in women's and kids' apparel, emphasizing European craftsmanship, sustainability, and timeless design. Founded in 2013, the company operates primarily through its e-commerce platform, offering products such as leather goods, ready-to-wear, and made-to-measure clothing. The brand maintains a consistent and professional online presence with active social media channels and multiple payment options, targeting discerning customers seeking elegant and sustainable fashion. Technically, the website is built on WordPress with WooCommerce, leveraging modern frameworks like Bootstrap and JavaScript libraries such as jQuery and OwlCarousel. The site integrates marketing and analytics tools including Google Analytics, Facebook Pixel, Sendinblue, and Brevo Conversations for live chat support. Performance and mobile optimization are good, though accessibility features are basic. SEO is well implemented with proper meta tags and structured data. From a security perspective, the site uses HTTPS with a valid SSL certificate and has domain transfer protections in place. However, it lacks DNSSEC and explicit security headers, and does not provide a public security policy or incident response information. No cookie consent mechanism was detected, which may pose GDPR compliance risks. The WHOIS data is transparent and consistent with the business claims, indicating a legitimate and stable domain registration. Overall, the website demonstrates a solid business and technical foundation with room for improvement in security hardening and privacy compliance. Strategic enhancements in these areas would strengthen trust and regulatory adherence, supporting the brand's premium market positioning.

S

SMYLE

smylemag.com

42

SMYLE is a German online lifestyle magazine focusing on beauty, wellness, and dental health topics. It offers editorial content and a subscription-based magazine service targeting a general audience interested in health and style. The website is built on WordPress with common plugins such as Yoast SEO and Gravity Forms, indicating a moderate level of digital maturity. The technical infrastructure includes standard web technologies like jQuery, Bootstrap, and Owl Carousel, hosted by Cronon GmbH in Germany. Security posture is basic with HTTPS enabled but lacks advanced security headers and DNSSEC, representing moderate risk. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism detected. Overall, the site is functional and professional but could improve in security and privacy transparency.

M

mama & family

mamaundfamily.de

53

mama & family operates a German-language online magazine specializing in family-related topics such as pregnancy, parenting, baby care, and toddler development. The website targets parents and prospective parents, providing informational content, newsletters, and advertising opportunities. The business model is content publishing with monetization primarily through advertising and newsletter subscriptions. The site maintains a consistent brand presence and offers good quality content relevant to its niche audience. Technically, the site is built on WordPress with a modern tech stack including jQuery, Bootstrap, and various plugins for social sharing, forms, and ads. Hosting and DNS are managed via Cloudflare, ensuring reliable delivery and security. The website is mobile-optimized and SEO-friendly with structured data and meta tags implemented. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though security headers are lacking and no explicit security or incident response policies are published. Privacy compliance is good, with a comprehensive privacy policy and cookie consent aligned with GDPR. No suspicious or malicious content or domains were detected. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

C

Colgate Oral Health Network

colgatedentaleducatorsnetwork.com

59

The Colgate Oral Health Network website serves as a professional platform focused on dental education and oral health resources. It targets dental educators and oral health professionals, providing educational content and networking opportunities. The site appears to be a niche healthcare-related resource, likely affiliated with Colgate-Palmolive, although explicit corporate details are not provided. Technically, the website is built on WordPress and employs modern web technologies such as Bootstrap, FontAwesome, and analytics tools like Matomo and Google Tag Manager. The site demonstrates moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. Security posture is moderate with HTTPS presumably enabled, but no explicit security headers or policies are visible. Privacy and cookie policies are absent, and no contact information is provided, which impacts trust and compliance. The WHOIS data is missing, raising concerns about domain registration legitimacy. Overall, the website is functional but requires improvements in transparency, security, and compliance to enhance trustworthiness and user confidence.

C

Colgate Oral Health Network

colgateoralhealthnetwork.com

59

The Colgate Oral Health Network website serves as a professional platform providing educational content and resources focused on oral health, targeting dental professionals and practitioners. The site is branded consistently with the Colgate-Palmolive Company, indicating a strong market position in healthcare education. Technically, the website is built on WordPress with modern libraries such as Bootstrap and uses Google Tag Manager and Matomo for analytics, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is weak, with no visible privacy or cookie policies, which could expose the organization to regulatory risks. Overall, the website is professional and trustworthy in content but requires improvements in privacy and security transparency to enhance compliance and user trust.

O

Odne

odne.co

51

Odne is a healthcare technology company specializing in innovative dental devices and therapies focused on root preservation. Their product suite includes FDA cleared devices such as hydro-dynamic cavitation tools and light-cured obturation materials, targeting dental professionals seeking advanced endodontic solutions. The company maintains a professional online presence with comprehensive educational resources and a clear business focus on minimally invasive root canal therapies. Technically, the website is built on WordPress with modern plugins and frameworks, offering good performance and mobile optimization. Security posture is solid with HTTPS and reputable third-party integrations, though explicit security headers and policies could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, Odne presents a credible and trustworthy business with a strong digital footprint in the healthcare sector.

S

STUMMER Kommunalfahrzeuge Ges.m.b.H

stummer.net

52

STUMMER Kommunalfahrzeuge Ges.m.b.H is a medium-sized Austrian company specializing in innovative waste disposal vehicle technology and related services. With over 40 years of experience, they offer a broad portfolio including refuse collection vehicles, lifter systems, container changer systems, and alternative drive technologies. Their market position is strong within the transportation sector, targeting municipalities and waste management companies. The website is professionally designed, mobile-optimized, and provides comprehensive product and service information. Technically, the site is built on WordPress with modern plugins and frameworks, hosted by Conova, and includes security measures such as HTTPS and hCaptcha. Privacy compliance is well addressed with a detailed privacy policy and cookie consent mechanism. However, no explicit security policy or incident response contacts are found, and DNSSEC is not enabled. Overall, the site demonstrates a solid security posture with room for improvement in security headers and vulnerability disclosure. The domain registration is consistent and trustworthy, supporting the company's legitimacy.

Axians eWaste GmbH operates a specialized online service portal focused on waste management solutions, targeting business customers primarily in Germany. The portal offers centralized software architecture to streamline waste management processes and related services. The company is positioned as a medium-sized player within the energy and environmental services sector, leveraging digital platforms to enhance customer engagement and operational efficiency. The website reflects a professional and consistent brand image aligned with the parent company Axians. Technically, the site uses a modern but standard tech stack including jQuery and Bootstrap, with moderate performance and good mobile optimization. Security practices include HTTPS usage and CSRF protection on forms, but lack explicit security headers and documented incident response policies. Privacy compliance is strong with clear cookie consent and privacy policies. Overall, the site is trustworthy and business-appropriate with room for security enhancements.

Intel's German homepage presents a comprehensive and professional digital presence focused on AI and computing solutions. The company offers a broad portfolio of hardware and software products, targeting enterprises, developers, and technology enthusiasts. The website is well-structured, mobile-optimized, and uses modern web technologies including Adobe Experience Manager. Security posture is strong with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not evident in the provided content. Overall, Intel maintains a high level of business credibility and digital maturity in this regional site.

S

Stiftung Bildungspakt Bayern

bildungspakt-bayern.de

56

Stiftung Bildungspakt Bayern is a non-profit foundation dedicated to advancing education in Bavaria, Germany, with a focus on digital transformation and innovative school projects. The foundation operates with government affiliation, providing educational initiatives and support to schools and educators. Their website reflects a professional and consistent brand image, targeting educators, policymakers, and stakeholders in the education sector. Technically, the site is built on WordPress with modern plugins and libraries, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies are missing. Privacy compliance is partial, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-maintained, serving its educational mission effectively.

V

Verband Deutscher Reeder

reederverband.de

46

The Verband Deutscher Reeder (VDR) is a German maritime industry association representing the seventh largest merchant fleet worldwide. The website serves as an information and advocacy platform for members, policymakers, media, and trainees in the shipping sector. It provides news, publications, training information, and industry data. Technically, the site is built on Drupal 7 with modern JavaScript libraries and is hosted via Schlund Technologies. The site is mobile-optimized and provides a cookie consent mechanism compliant with GDPR. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its business purpose.

E

Eurofile

eurofile.info

43

Eurofile is a small, established design and advertising agency based in Aschaffenburg, Germany, with over 25 years of experience providing print and online marketing services including web design, programming, SEO, and social marketing. The company positions itself as a trusted partner for businesses seeking comprehensive marketing solutions, supported by positive customer testimonials and a perfect Google My Business rating. Technically, the website uses a modern tech stack including Bootstrap, jQuery, and Revolution Slider, with a cookie consent mechanism implemented to comply with privacy regulations. Security posture is moderate with room for improvement in security headers and explicit security policies. No blocking or WAF mechanisms were detected, and the website is fully accessible. Overall, the site is professional, trustworthy, and compliant with basic GDPR requirements.

F

Fort- und Weiterbildung Freising

fwb-freising.de

56

Fort- und Weiterbildung Freising is a specialized educational provider focused on offering tailored professional development and training services for church employees in Germany. The organization operates a well-structured website featuring comprehensive event listings, speaker profiles, and educational planners, targeting church staff seeking further qualification. The business is positioned as a regional leader in church-related education with a clear focus on quality and relevance. Technically, the website employs a modern technology stack including Bootstrap, jQuery, and various JavaScript libraries to enhance user experience and interactivity. The site is mobile-optimized and features good SEO practices, although it lacks explicit CMS identification and some advanced accessibility features. Performance is moderate with room for optimization. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, it lacks explicit security headers and incident response contact information, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong with accessible privacy and cookie policies. Overall, the website is trustworthy, professional, and well-maintained, serving its niche audience effectively. Strategic improvements in security headers, incident response transparency, and accessibility would further strengthen its position and reduce risk.

M

Městský bytový podnik Lanškroun, s.r.o.

mbplan.cz

44

Městský bytový podnik Lanškroun, s.r.o. is a municipal company founded in 2000 and fully owned by the city of Lanškroun. It provides housing management and energy supply services, including heat and hot water delivery to residential areas. The company manages accounting for multiple homeowners associations and offers rental apartments. The website serves local residents and stakeholders with relevant information and contact details. Technically, the site is built on Joomla CMS using common JavaScript libraries such as jQuery and Bootstrap, with moderate performance and basic mobile optimization. Security posture is adequate with HTTPS enabled and CSRF tokens in forms, but lacks advanced security headers and cookie consent mechanisms. WHOIS data is missing, which reduces domain trustworthiness, but official registration numbers and consistent business information support legitimacy. Overall, the website is professional and trustworthy but could improve privacy compliance and security practices.

RFL Fuar is a Turkish event organization company specializing in fairs and exhibitions, serving the Turkish foreign trade and industry sectors since 2006. The website presents the company as a leader in providing quality fair services and market access. The business targets professional and corporate clients involved in trade and industry within Turkey. The domain age and WHOIS data support the legitimacy and stability of the business. Technically, the website uses a range of common front-end libraries and frameworks such as Bootstrap, jQuery, and Owl Carousel, hosted on Bluehost. The site shows basic mobile responsiveness and moderate performance but lacks advanced SEO and accessibility features. No CMS or advanced platform is detected, indicating a custom or static site. From a security perspective, the site lacks visible HTTPS confirmation and security headers, and DNSSEC is not enabled. No privacy or cookie policies are published, indicating compliance gaps with GDPR and other privacy regulations. Contact information is clearly provided, but no incident response or security policies are visible. The security posture is moderate but requires improvements to meet best practices. Overall, the website is functional and moderately professional but requires enhancements in security, privacy compliance, and technical modernization to improve trust and user experience. Strategic recommendations include enabling HTTPS, publishing privacy and cookie policies, adding security headers, and improving accessibility and SEO.

S

Saaletalbad Hammelburg

saaletalbad.de

53

Saaletalbad Hammelburg operates as a local leisure and wellness facility in Germany, offering indoor and outdoor swimming pools, sauna services, a bistro, and various courses and offers. The website targets local residents and visitors seeking recreational swimming and wellness experiences. The business model is centered on paid access to these facilities and related services. The website is built on Joomla CMS with a professional design and clear navigation, supporting a good user experience and mobile optimization. Security posture is solid with HTTPS and GDPR-compliant cookie consent, though explicit security policies and incident response information are absent. Overall, the site is trustworthy and well-maintained, suitable for its audience and business purpose.

D

das agnes is under construction

das-agnes.de

35

The website das-agnes.de is currently under construction and displays a placeholder page indicating ongoing work. There is no business description, contact information, or legal policies available, which limits the ability to assess the company's market position or services. The site uses WordPress with an under construction plugin and includes standard web fonts and CSS frameworks such as Bootstrap and Font Awesome. No advanced technical or security features are evident. Security posture is minimal with no detected security headers or incident response information. The lack of privacy and cookie policies indicates non-compliance with GDPR and related regulations. Overall, the site presents a low trust profile and limited business credibility due to the absence of meaningful content and contact details.

F

Fort- und Weiterbildung Freising

theologischefortbildung.de

51

Fort- und Weiterbildung Freising is a specialized educational institution providing continuing education and training services primarily for church employees in Germany. The organization offers a broad range of events, workshops, and further education programs focused on theological and pastoral topics, positioning itself as a regional leader in this niche. The website reflects a professional and consistent brand image, targeting a well-defined audience with clear service offerings. Technically, the website employs a modern tech stack including Bootstrap, jQuery, and several JavaScript libraries to enhance user experience and interactivity. The site is mobile-optimized and features good navigation and SEO practices. However, there is no evidence of a common CMS, suggesting a custom or bespoke platform. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and implements a GDPR-compliant cookie consent mechanism, indicating awareness of privacy regulations. However, explicit security headers and incident response policies are not publicly visible, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy standards. The domain registration data aligns well with the business profile, supporting legitimacy. Strategic improvements in security policy transparency and technical security controls would further strengthen the site's security and compliance standing.

M

Město Polička

policka.org

47

Město Polička operates an official municipal website serving residents and visitors with comprehensive city information, including news, events, official documents, and public services. The website is well-established with a domain age since 2003, reflecting a stable digital presence for the local government of Polička, Czech Republic. The site targets local citizens and visitors seeking municipal updates and services. Technically, the website uses ASP.NET Web Forms with Bootstrap and FontAwesome, providing a responsive and user-friendly interface, though performance is moderate and accessibility is basic. Security posture is adequate with HTTPS enabled but lacks advanced security headers and DNSSEC, indicating room for improvement. Privacy compliance is basic with privacy and cookie policies present but no active consent mechanism. Contact information is clearly provided, including emails, phone numbers, and physical address, enhancing business credibility. Overall, the website is trustworthy and professionally maintained, suitable for its government function.

M

Městský úřad Svitavy

svitavy.cz

61

The website www.svitavy.cz serves as the official municipal portal for the city of Svitavy in the Czech Republic. It provides comprehensive information about the city administration, public services, cultural events, and citizen resources. The site targets residents and visitors, offering a well-structured navigation system and multiple language options via external translation links. The business model is that of a government service portal, with a medium-sized organizational footprint and a focus on transparency and public engagement. Technically, the site is built on Drupal 10, leveraging modern web technologies including Bootstrap for responsive design, Google Analytics for traffic monitoring, and various JavaScript libraries for enhanced user experience. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. Performance is moderate, with no critical errors or broken elements detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with EU GDPR regulations. However, it lacks visible security headers such as Content-Security-Policy and X-Frame-Options, which are recommended to enhance security posture. No vulnerabilities or exposed sensitive data were found in the HTML content. The absence of WHOIS data limits the ability to fully verify domain legitimacy, but the official branding and content strongly support authenticity. Overall, the website presents a trustworthy and professional digital presence for the city government, with room for security enhancements and improved transparency in incident response and vulnerability disclosure policies. The risk level is low, and the site is safe for general audiences.

Česká správa sociálního zabezpečení (ČSSZ) is the official Czech government agency responsible for administering social security programs including pensions, sickness benefits, maternity support, and social insurance contributions. The website serves as a comprehensive portal providing information, online services, and resources for citizens, employers, self-employed persons, and foreigners with temporary protection. It holds a strong market position as the primary social security institution in the Czech Republic. Technically, the website is built on the Liferay CMS platform, utilizing modern web technologies such as Bootstrap and jQuery, and integrates Matomo for analytics. The site is mobile-optimized, accessible, and demonstrates good SEO practices. Security measures include HTTPS enforcement and standard security headers, contributing to a solid security posture. While the WHOIS data is unavailable due to registry policies, the website's official domain, consistent branding, and government affiliation indicate legitimacy. Privacy and cookie policies are present and GDPR compliant, though explicit terms of service and vulnerability disclosure mechanisms are not found. Contact information includes phone numbers and contact forms, with no exposed sensitive data detected. Overall, the website presents a professional, secure, and user-friendly platform for social security services in the Czech Republic, with recommendations to enhance transparency around security policies and incident response capabilities.

K

koalice Za snadné dárcovství

snadnedarcovstvi.cz

42

The website 'koalice Za snadné dárcovství' represents a Czech non-profit coalition focused on advancing individual fundraising through relationship-based donor engagement. It serves as a platform for non-profit organizations to collaborate, educate, and overcome obstacles in the donation process. The site positions itself as a key player in the Czech fundraising ecosystem, targeting non-profit organizations and fundraising professionals. Technically, the website is built on WordPress using Elementor and several common plugins, delivering a modern and responsive user experience with moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and privacy compliance documentation, which are areas for improvement. Overall, the site appears legitimate and trustworthy, though the absence of WHOIS data limits domain registration transparency.

K

Komm Shop

komm-webshop.de

56

Komm Shop operates as a specialized e-commerce platform offering Christian promotional materials and gifts primarily targeting religious communities and individuals in Germany. The website presents a professional and consistent brand image with a broad product range including books, cards, gifts, and religious items. The business model focuses on online retail with personal consultation and fast shipping as key service differentiators. Technically, the site is built on the Shopware CMS platform, utilizing modern JavaScript libraries and standard web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though it lacks explicit security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service pages. Overall, the website is trustworthy and functional but could improve compliance and security transparency.

E

European Compost Network

compostnetwork.info

53

The European Compost Network (ECN) operates as a membership organization representing bio-waste organizations, plant operators, researchers, policy makers, and consultants across 27 European countries. It serves as a key network advocating for sustainable bio-waste management and composting practices, offering certification services (ECN-QAS), policy advocacy, and dissemination of research and market development information. The website is well-structured, content-rich, and targets professionals and stakeholders in the bio-waste and environmental sustainability sectors. Technically, the website is built on WordPress with a modern tech stack including Yoast SEO, jQuery, Bootstrap, and various plugins for downloads, events, newsletters, and GDPR compliance. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some improvements in security headers and incident response documentation are recommended. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, but lacks explicit security policies and vulnerability disclosure channels. No WHOIS data is publicly available, indicating privacy protection which is justified for this type of organization. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the site presents a trustworthy and professional digital presence for ECN, with strong business credibility and compliance with privacy regulations. Strategic improvements in security transparency and contact information availability would further enhance trust and resilience.

W

World Dredgers GmbH & Co. KG

world-dredgers.de

49

World Dredgers GmbH & Co. KG is a specialized engineering company focused on the design, construction, and servicing of suction dredgers and related equipment for efficient gravel and sand extraction. The company emphasizes innovation, notably with its autonomous GPS-based movement control system for dredgers, enhancing operational efficiency and automation. Their market position is that of a niche specialist serving B2B clients in the energy and transportation sectors related to raw material extraction. Technically, the website is built on the Contao CMS platform, utilizing modern JavaScript libraries and frameworks, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response policies. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, reflecting a credible small-sized enterprise with a clear business focus and parent company affiliation.

H

Hülskens GmbH & Co. KG

huelskens-kies-sand.de

50

Hülskens GmbH & Co. KG is a well-established German company specializing in the extraction and supply of mineral raw materials such as sand and gravel, primarily serving the construction and infrastructure sectors. With over 100 years of experience and multiple regional subsidiaries, the company emphasizes sustainable land use and ecological projects alongside its core business. The website reflects a professional and regionally focused business model with clear communication of services and corporate values. Technically, the website is built on the Contao CMS platform, utilizing modern web technologies including Bootstrap and jQuery. It is hosted on agenturserver infrastructure, with good mobile optimization and SEO practices. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements. However, some security headers are missing, and no explicit security or incident response policies are published. From a security perspective, the site shows a solid posture with no detected vulnerabilities or exposed sensitive data. The absence of analytics scripts suggests a privacy-conscious approach. WHOIS data aligns well with the business claims, supporting legitimacy. Overall, the website is trustworthy, professional, and compliant, with room for improvement in security policy transparency and header implementation. The risk level is low, with no critical issues detected. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain and improve security and compliance posture.

T

Tourism Development Association Pardubicko – Czech Gingerbread Heart

topardubicko.cz

36

The website represents the Tourism Development Association Pardubicko – Czech Gingerbread Heart, a regional tourism promotion entity focused on the Pardubicko area in the Czech Republic. It offers tourist information, downloadable promotional materials, and collaborates with CzechTourism to provide travel inspiration. The site targets tourists interested in cultural heritage, local cuisine, and family-friendly activities. Technically, the website uses modern front-end technologies such as Bootstrap, jQuery, and Google Fonts, and includes a cookie consent mechanism and Google Analytics for tracking. The site is mobile responsive and well-structured, though accessibility features are basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and privacy policies. WHOIS data is unavailable, which reduces domain trust but the website content and business information appear legitimate. Overall, the site is functional and professional but would benefit from enhanced privacy compliance and security hardening.

M

Miroslav Mrázek

joomla-webdesign.cz

42

Joomla Webdesign is a Czech Republic-based small business specializing in Joomla CMS web design, development, SEO, and maintenance services. With over 10 years of experience, the company targets small to medium enterprises seeking tailored Joomla-based web solutions. The website demonstrates a professional digital presence with a modern tech stack including Joomla, Bootstrap, and Google Analytics integration. Security posture is solid with HTTPS and CSRF protections, though it lacks some security headers and formal privacy policies. The absence of WHOIS data reduces domain trust but is partially offset by clear business contact information and a portfolio of projects. Overall, the site is functional, user-friendly, and business-focused.

A

Asociácia inštitúcií vzdelávania dospelých v Slovenskej republike

aivd.sk

42

Asociácia inštitúcií vzdelávania dospelých (AIVD) is a Slovak non-profit association dedicated to adult education. Established in 1991, it represents institutions involved in adult learning, providing certification, organizing events, and fostering international partnerships. The organization is well-established with a domain registered since 2003 and recognized certifications such as EduQua. The website serves as a professional platform to communicate its activities, membership opportunities, and sector news. Technically, the site is built on WordPress with Bootstrap and jQuery, hosted likely by Websupport, and is mobile optimized with moderate performance. Security posture is good with HTTPS and DNSSEC enabled, though it lacks some security headers and formal privacy and cookie policies. Contact information is comprehensive, supporting business credibility. Overall, the site is trustworthy and serves its target audience effectively.

O

OMNIA MEDIA

omniamedia.cz

50

OMNIA MEDIA is a Czech Republic based digital marketing and media production agency offering a comprehensive range of services including video production, digital and offline marketing, and graphic design. The company emphasizes data-driven strategies combined with creativity to deliver impactful brand communication and measurable results. Their website showcases client projects and provides clear contact information, positioning them as a professional and trusted agency in the media sector. Technically, the website is built on WordPress with Elementor and uses modern libraries like Swiper.js and Bootstrap, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms in place, though some security headers and policies could be improved. Overall, the site is professional, trustworthy, and compliant with basic privacy standards, though it lacks explicit privacy and terms of service pages. The domain registration is consistent and transparent, supporting the legitimacy of the business.

F

Ferienhof Wübbold

ferienhof-wuebbold.de

44

Ferienhof Wübbold is a small hospitality business based in Germany offering farm holiday experiences and vacation rentals near the Alfsee area. The website presents a professional and family-friendly image, targeting families and holidaymakers seeking nature and farm-related vacations. The business operates primarily through holiday apartments and houses, emphasizing a niche market in regional farm tourism. Technically, the website is built on Joomla CMS with Bootstrap framework, incorporating modern web technologies such as jQuery and Font Awesome. Accessibility features and cookie consent mechanisms are implemented, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and basic best practices observed, though there is room for improvement in publishing privacy policies, terms of service, and security disclosures. Overall, the website is trustworthy and professionally maintained, with clear contact information and social media presence. No critical security issues or suspicious content were detected.

BeSt Bernauer Stadtmarketing GmbH is a small-sized city marketing company founded in 2009, dedicated to promoting the city of Bernau bei Berlin. The company manages cultural events, visitor centers including the UNESCO World Heritage Bauhaus visitor center, and tourist information services. The website reflects a well-structured and content-rich platform targeting residents, tourists, and cultural enthusiasts. Technically, the site uses Contao CMS with modern frontend frameworks like Bootstrap and SwiperJS, and integrates analytics tools such as Google Analytics and Matomo. Security posture is moderate with HTTPS usage but lacks explicit security headers and incident response information. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

V

VR-EASY GmbH

vr-easy.com

10

VR-EASY GmbH operates a specialized SaaS platform enabling users to create, manage, and share virtual 360° tours online without the need for software installation. The company targets small to medium businesses, educational institutions, real estate professionals, and municipalities, offering tiered subscription packages tailored to various sectors. Their market position is that of a niche provider with innovative features such as integration of multimedia content and marketing tools, supported by reputable partners like Deutsche Telekom and EU funding. The website is primarily in German with English alternatives, reflecting a focus on the German market. Technically, the website uses a modern tech stack including jQuery, Bootstrap, and Popper.js, hosted on the Open Telekom Cloud which emphasizes green energy. The platform is web-based with moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility is basic. The site lacks a CMS, indicating a custom-built solution. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers such as CSP or HSTS. No vulnerability disclosure or incident response policies are visible. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, but no cookie consent mechanism is detected. Contact information is clear and professional, enhancing business credibility. Overall, the website is professional, trustworthy, and well-positioned in its niche. Security improvements and enhanced privacy mechanisms would further strengthen its posture. The domain registration data aligns well with the business claims, supporting legitimacy.

Zartbitter e.V. operates an online webshop focused on educational and preventive materials related to child protection, sexual abuse prevention, and child rights. The website offers a variety of products including books, brochures, posters, and multimedia targeted primarily at parents, educators, and professionals working with children and youth. The business model is a niche non-profit e-commerce platform serving the German-speaking market (Germany, Austria, Switzerland). Technically, the website is built on WordPress with WooCommerce and uses several plugins for product display, discount rules, and GDPR compliance. The site is mobile-optimized and uses HTTPS, but lacks some advanced security headers. Performance is moderate with a good user experience and clear navigation. From a security perspective, the site enforces HTTPS and has a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected in the HTML content. However, security headers like Content-Security-Policy and HSTS are not evident and should be implemented. There is no published security policy or incident response contact information. Overall, the website is safe, professional, and trustworthy for its target audience. The lack of direct contact information and detailed WHOIS data slightly limits business credibility assessment. Strategic improvements in security headers and transparency around security policies would enhance trust and compliance.

D

Dental Tribune International

dental-tribune.com

57

Dental Tribune Germany is a professional online portal delivering daily news, webinars, market and product information focused on the dental industry in Germany. It is part of the global Dental Tribune International network, providing dental professionals, students, and industry stakeholders with up-to-date trends and innovations in dentistry. The website offers a variety of content including news articles, educational webinars, events, and a marketplace for dental products and services. Technically, the site is built on WordPress, leveraging modern web technologies such as jQuery, Bootstrap, and Matomo analytics, and is hosted on AWS Cloudfront CDN, ensuring reasonable performance and availability. Security posture is good with HTTPS enforced and no obvious vulnerabilities detected, though some security headers could be improved. Privacy compliance is moderate with a cookie consent mechanism present but no explicit privacy policy found in the provided content. The domain WHOIS data is missing or unavailable, which raises some concerns about domain registration transparency, but the website content and branding align with a reputable international dental media company. Overall, the site is professional, content-rich, and serves its target audience effectively.

S

Středisko volného času RADOVÁNEK

radovanek.cz

44

Středisko volného času RADOVÁNEK is a well-established non-profit educational and leisure center based in Plzeň, Czech Republic, with a history dating back to 2005 and organizational roots spanning 75 years. The organization offers a broad range of educational clubs, camps, cultural events, and projects targeting children, youth, and adults in the Plzeň region. The website reflects a professional and consistent brand presence, showcasing partnerships, awards, and a comprehensive offering of services. Technically, the site is built on Joomla CMS with modern frameworks like Gantry 5 and uses common libraries such as jQuery and Bootstrap, ensuring good mobile optimization and accessibility. Security posture is solid with HTTPS enforced, use of Google reCAPTCHA, and a detailed cookie consent mechanism, although some security headers could be improved. Privacy compliance is well addressed with a comprehensive GDPR policy and cookie management. Overall, the site is trustworthy, user-friendly, and well-positioned in its regional educational sector.

S

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau)

djk-spandau.de

47

Sportvereinigung Deutsche Jugendkraft Spandau (DJK Spandau) is a German non-profit sports club offering a variety of sports activities such as badminton, boule, gymnastics, Nordic walking, skate biathlon, sports shooting, table tennis, volleyball, and archery. The club targets local community members including children, adults, and people interested in inclusive sports programs. The website reflects a well-structured and accessible platform with clear navigation and content relevant to its audience. It maintains partnerships with reputable sports organizations, enhancing its community presence and trustworthiness. Technically, the website is built on Joomla CMS with modern web technologies including Bootstrap and jQuery. It is hosted on servers associated with kasserver.com and employs HTTPS with a cookie consent mechanism compliant with GDPR. Accessibility features such as screen reader support and contrast modes are implemented, indicating a commitment to inclusive design. Performance is moderate with good mobile optimization. From a security perspective, the site uses HTTPS and cookie consent banners but lacks visible security headers and dedicated security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but consistent with a legitimate hosting setup. Overall, the security posture is adequate but could be improved with additional headers and documented policies. The overall risk assessment is low with recommendations to enhance security headers, add incident response contact information, and maintain regular updates to Joomla and plugins. The website is professional, trustworthy, and compliant with privacy regulations, serving its community effectively.

D

Deutsche Atlantische Gesellschaft e.V.

ata-dag.de

38

The Deutsche Atlantische Gesellschaft e.V. is a German non-profit organization dedicated to informing and engaging the public on German and European security policy, NATO objectives, and transatlantic relations. The organization operates through events, seminars, lectures, podcasts, and publications, targeting individuals and entities interested in security and defense topics. Their market position is that of an established, reputable non-profit within the government and policy sector in Germany. Technically, the website is built on WordPress, utilizing common libraries such as jQuery, Bootstrap, and Font Awesome, with SEO optimization via Yoast. Hosting appears to be managed through kasserver.com. The site is moderately performant, mobile-optimized, and includes analytics via Matomo, reflecting a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms, alongside a cookie consent mechanism. However, it lacks explicit security headers, a published security policy, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with no explicit privacy policy or terms of service pages found. Overall, the website presents a professional and trustworthy front for the organization, with good content quality and business credibility. Security and privacy practices could be enhanced to meet higher compliance standards and improve user trust.

H

Haus der Industrie

hausderindustrie.de

40

Haus der Industrie is a German-language website likely representing an industrial or business entity, though explicit business details are not present in the accessible content. The site uses WordPress with common plugins such as Bootstrap and Visual Composer, indicating a standard CMS-based infrastructure. The technical setup is moderate with basic mobile optimization and no advanced analytics or marketing tools detected. Security posture is basic, with HTTPS enabled but lacking security headers and visible security policies. No privacy or cookie policies were found, and no contact information is provided, limiting user trust and compliance. Overall, the site is accessible and functional but lacks comprehensive business and security information.

K

Katholische Schule Sankt Hildegard

kssh-berlin.de

61

Katholische Schule Sankt Hildegard is a recognized Catholic educational institution in Berlin providing primary and secondary education with a focus on children and youth with specific educational needs. The website serves as an information portal for students, parents, and educators, offering news, events, and service information. The school is supported by the Archdiocese of Berlin and holds a digital education certification (fobizz Schule 2024/25). The site is well-structured, professionally designed, and regularly updated with relevant content.

K

Katholische Studierende Jugend

ksjberlin.de

45

KSJ Berlin is a non-profit youth organization focused on engaging students and young people in Berlin through volunteer activities, school participation, and societal involvement. The organization operates as part of the Catholic youth umbrella (BDKJ) but is inclusive of all beliefs. Their website provides information about membership, events, and community platforms such as a Discord server. Technically, the site uses modern frontend technologies including Bootstrap, jQuery, and Google Fonts, and is hosted with domain control services. It is mobile optimized and includes SEO best practices. Security-wise, the site enforces HTTPS, uses Google Analytics with IP anonymization, and implements a cookie consent banner, but lacks advanced security headers and explicit security policies. Overall, the site is trustworthy and professionally maintained, suitable for its target audience of youth in Berlin.

S

Stadtwerke Hammelburg GmbH

stadtwerke-hammelburg.de

53

Stadtwerke Hammelburg GmbH is a regional utility company serving the Hammelburg area in Germany, providing essential services including electricity, gas, water, heat supply, and telecommunications via their HAB-Net DSL service. The company also operates local amenities such as the Saaletalbad swimming pool and parking facilities. Their market position is that of a trusted regional provider with a diversified portfolio catering to both residential and business customers. The website reflects a professional and consistent brand image with clear service offerings and customer support channels. Technically, the site is built on Joomla CMS with modern frontend technologies and includes a comprehensive GDPR-compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and CSRF protections, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is accessible, well-structured, and trustworthy, supporting the company's credibility in the regional energy and telecommunications sectors.

H

Heinrich Wegener & Sohn Bunkergesellschaft m.b.H.

wegener-bunker.de

43

Heinrich Wegener & Sohn Bunkergesellschaft m.b.H. is a specialized German company providing marine fuels and lubricants worldwide, with a strong reputation built over more than 50 years. The company emphasizes quality, sustainability, and certified standards such as ISO 9001 and IMPA membership. Their target audience includes maritime shipping companies and related stakeholders. The website is built on TYPO3 CMS with Bootstrap and jQuery, featuring a professional design and good mobile responsiveness. Matomo analytics is used with privacy-conscious settings disabling cookies. Security posture is solid with HTTPS and some privacy measures, but lacks advanced security headers and formal incident response disclosures. Contact information is comprehensive with multiple phone numbers but no public emails or contact forms. Overall, the site is trustworthy and business-focused with room for improvement in privacy and security transparency.

I

IBT Bunkering & Trading

ibtbunker.com

44

IBT Bunkering & Trading is a well-established global bunker trader based in Hamburg, Germany, with over 45 years of market presence. The company specializes in marine fuel supply, offering services such as spot trading, formula-based contracts, and price hedging to shipping companies worldwide. Their business model focuses on building long-term, reliable relationships with clients and suppliers, supported by a strong network and industry memberships. Technically, the website employs modern web technologies including Bootstrap and JavaScript, providing a good user experience with mobile optimization and clear navigation. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled and domain registration is stable, but the absence of security headers and incident response information suggests room for improvement. Overall, the website is professional and trustworthy, but enhancing privacy compliance and security practices would strengthen its posture.

E

Ev.-Luth. Kirche in Oldenburg (ELKiO)

kirchenrecht-oldenburg.de

59

The website kirchenrecht-oldenburg.de serves as the official online legal reference system for the Evangelical Lutheran Church in Oldenburg, Germany. It provides comprehensive access to current and archived church laws, regulations, and related legal documents, targeting church officials, legal professionals, and members of the church community. The site offers search functionality and downloadable e-book formats, supporting transparency and accessibility of church legal frameworks. Technically, the website employs a modern technology stack including Bootstrap for responsive design, jQuery, and Matomo (Piwik) for analytics with user consent mechanisms. Hosting is provided by SchlundTech, a known German hosting provider. The site is mobile-optimized with good navigation clarity and SEO practices, though no explicit CMS or advanced frameworks were detected. From a security perspective, the site uses HTTPS and implements cookie consent in compliance with GDPR. However, there is no evidence of advanced security headers or a published security policy. No vulnerabilities or exposed sensitive data were found in the HTML content. The site does not appear to use any advertising or affiliate marketing, focusing solely on informational content. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It is safe for general audiences and free from adult or questionable content. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and compliance.

Schwing Stetter Brasil is a well-established manufacturer and provider of concrete and industrial pumping equipment, serving sectors such as construction, mining, sanitation, oil & gas, industry, and agriculture. With over 80 years of history, the company maintains a strong market position in Latin America, supported by a dealer network and technical training programs. The website reflects a mature digital presence with detailed product information, multilingual support, and active marketing efforts. Technically, the site uses modern web technologies including jQuery, Bootstrap, and Google Analytics, hosted by RedeHost in Brazil. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers could be improved. Privacy compliance is evident with a comprehensive privacy policy and cookie banner. Overall, the domain registration and hosting details align well with the business profile, indicating legitimacy and trustworthiness.

S

SCHWING Stetter Algérie

schwing-stetter-algerie.com

48

SCHWING Stetter Algérie is a medium-sized subsidiary of the German SCHWING group specializing in the marketing and distribution of concrete production, transport, and pumping machinery. The company targets construction and industrial clients primarily in Algeria, leveraging the global reputation and product range of its parent group. The website presents a professional and consistent brand image with detailed product offerings and event participation announcements, supporting its market position as a leading supplier in the concrete machinery sector. Technically, the website is built on a standard modern stack including Bootstrap and jQuery, hosted by OVH sas. It offers moderate performance and good mobile optimization but lacks advanced SEO and accessibility features. The absence of a CMS suggests a custom or static site approach. Security posture is basic, with no DNSSEC, no visible security headers, and no published privacy or cookie policies, indicating room for improvement in compliance and protection. From a security perspective, the site is accessible without WAF or blocking mechanisms, but lacks critical security best practices such as HTTPS enforcement details, security headers, and vulnerability disclosure mechanisms. The WHOIS data is consistent with the business claims, showing a domain age appropriate for the company's history and no privacy protection, which supports legitimacy. However, the lack of direct contact emails or phone numbers and absence of privacy-related policies reduce trust and compliance scores. Overall, the website is functional and professional but requires enhancements in privacy compliance, security hardening, and contact transparency to improve trustworthiness and regulatory adherence.