Security Directory

M

museom service gmbh

museom.at

52

Museom service gmbh is a specialized Austrian company founded in 2012, offering consulting, exhibition construction, and art handling services primarily for museums and art institutions. The company leverages decades of industry experience and maintains strong references with notable museums such as the Wien Museum and Jüdisches Museum Wien. Their website reflects a professional and focused business presence with clear contact information and project showcases. Technically, the website is built on standard web technologies with a custom CMS, is mobile-optimized, and uses Matomo analytics for privacy-conscious tracking. Security posture is solid with HTTPS enforced, though improvements in security headers and published policies are recommended. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

K

Kunsttrans Spedition GesmbH

kunsttrans.com

41

Kunsttrans Spedition GesmbH is a specialized Austrian company focused on the transportation, storage, and handling of art. Their services cater to art collectors, museums, galleries, and institutions requiring expert logistics solutions for valuable and delicate artworks. The company emphasizes secure, tailored transport and sustainable practices, positioning itself as a trusted niche provider in the art logistics sector. The website is professionally designed, bilingual (German and English), and provides comprehensive service descriptions and contact information, supporting a medium-sized business profile. Technically, the website employs modern web technologies including HTTPS, Matomo analytics for privacy-conscious tracking, and the June Framework for form handling. The site is mobile-optimized with good SEO and accessibility features, though some improvements in security headers and cookie consent mechanisms are recommended. The WHOIS data is notably missing or unavailable, which raises concerns about domain registration legitimacy despite the active and professional online presence. From a security perspective, the site benefits from HTTPS and secure form handling but lacks visible security headers and explicit incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is partially addressed with a privacy policy page but lacks a cookie consent mechanism. Overall, the site demonstrates a solid security posture with room for enhancement in compliance and transparency. The overall risk assessment is moderate due to the missing WHOIS data and minor compliance gaps. Strategic recommendations include verifying domain registration, implementing security headers, adding cookie consent, and publishing security policies to enhance trust and compliance.

R

Rechtsanwalt Ing. Mag. Thomas Benda

rechtsanwalt-benda.at

47

Rechtsanwalt Ing. Mag. Thomas Benda is a small legal practice based in Austria, specializing in process representation, legal enforcement, contract drafting, and comprehensive legal advice. The website clearly targets individuals and businesses seeking legal services, emphasizing integrity, client-focused solutions, and professional legal support. The firm has been established since 2007 and operates independently since 2012, positioning itself as a trusted local legal advisor. Technically, the website employs standard web technologies including HTML5, CSS, and JavaScript, with a responsive design optimized for mobile devices. The site loads at a moderate speed and includes proper meta tags for SEO. However, no advanced frameworks or CMS platforms are detected, indicating a custom or lightweight implementation. Accessibility is basic but functional. From a security perspective, the website uses HTTPS with excellent SSL configuration, secure form submission, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security headers and publicly available security or incident response policies. Privacy compliance is well addressed with a GDPR-compliant privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website presents a professional, trustworthy, and secure online presence for a small legal practice. There are no critical security issues or content safety concerns. Strategic improvements could include adding security headers, publishing security policies, and enhancing accessibility features to further strengthen the security posture and user trust.

E

ELSTER

elster.de

53

ELSTER is the official German government online tax portal providing digital tax filing and related services to individuals, employers, and other user groups. The website offers a comprehensive suite of services including form submissions, digital document management, and user account functionalities. It targets a broad audience including private persons, businesses, and tax professionals. The platform is positioned as a trusted government service with a strong emphasis on security and user guidance. Technically, the site uses modern JavaScript libraries for cryptography and file handling, is hosted on reputable infrastructure providers including Akamai and Deutsche Telekom, and implements HTTPS with session management and CSRF protections. However, explicit privacy and cookie policies are not visible on the start page, and no public security or incident response policies are published. Overall, the site demonstrates a high level of professionalism, security awareness, and user-centric design, suitable for its critical government function.

H

Heinz & Ganka GbR

ocmlabs.com

47

ocmlabs.com is a German small-sized advertising agency specializing in media development, design, marketing, and communication services. The company, Heinz & Ganka GbR, has been operating since 2004 and targets businesses seeking classical and digital media solutions. The website is currently under construction, providing limited content and no interactive features. Technically, the site uses basic HTML and CSS without advanced frameworks or CMS, and lacks modern security headers or cookie consent mechanisms. Security posture is minimal with no visible HTTPS confirmation or security policies. Overall, the site presents a basic but legitimate business presence with room for technical and security improvements.

R

REMONDIS SE & Co. KG

remondis-buergerservice.de

61

REMONDIS SE & Co. KG operates a comprehensive citizen-focused website dedicated to waste management education and service information. The company is a global leader in recycling, waste, and water services with a strong market position and extensive geographic footprint. The website reflects a mature digital presence using TYPO3 CMS, integrating modern technologies such as FriendlyCaptcha and Google Tag Manager, and demonstrates good GDPR compliance with cookie consent and privacy policy availability. Security posture is solid with HTTPS and CAPTCHA protections, though formal security policies and incident response contacts are not publicly disclosed. WHOIS data aligns well with the business identity, supporting domain legitimacy. Overall, the site is professional, trustworthy, and well-structured for its target audience.

P

Prellball | Prellball.de

prellball.de

54

Prellball.de is a German-language informational website dedicated to the sport of Prellball, providing comprehensive coverage of leagues such as Bundesliga and Regionalliga, championships, training resources, and news updates. The site targets Prellball players, clubs, and enthusiasts primarily within Germany, serving as a niche community and information hub. The business model is informational with community engagement through newsletters and social media. Technically, the website is built using modern web technologies including React and Gatsby, ensuring fast performance and good mobile optimization. Hosting appears to be managed by 1&1 IONOS, inferred from the nameservers. The site uses minimal tracking via Simple Analytics, respecting user privacy. SEO and accessibility are adequately addressed, though some improvements could be made. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, security headers are not evident, and no formal security or incident response policies are published. Privacy compliance is basic but present with a privacy policy; cookie consent mechanisms are missing. No critical vulnerabilities or suspicious WHOIS patterns were detected, though WHOIS data is minimal. Overall, Prellball.de is a well-maintained, niche sports information site with good technical implementation and moderate security posture. Strategic improvements in security headers, cookie consent, and formal policies would enhance trust and compliance.

T

temu-europe.com

temu-europe.com

61

temu-europe.com is currently a placeholder website with a 'Launching Soon' message and minimal content. The site is built using GoDaddy Website Builder and hosted by GoDaddy.com, LLC. It includes a contact form protected by Google reCAPTCHA and a cookie consent banner linking to Google's privacy and terms policies. There is no detailed business description, contact emails, phone numbers, or social media presence visible. The domain WHOIS data is suspicious due to a future creation date (July 2025), which undermines trust and legitimacy. Technically, the site uses modern web fonts and scripts but lacks advanced security headers and DNSSEC. Overall, the website is in an early stage with limited digital maturity and business presence.

D

Deutscher Turner-Bund e.V.

dtb-gymnet.de

56

The website dtb-gymnet.de serves as the official online management and booking portal for the Deutscher Turner-Bund e.V., the German gymnastics federation. It provides event registration and administrative login capabilities for members, clubs, and associations affiliated with the federation. The platform targets a niche audience within the sports federation community in Germany, offering essential services for event participation and organizational management. The business model focuses on facilitating membership and event administration digitally, supporting the federation's operational needs. Technically, the website is built using basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. The hosting appears to be managed via generic German hosting providers, with no visible modern web technologies or analytics tools. The site performs moderately with basic mobile optimization and accessibility features. The absence of structured data and SEO enhancements suggests room for technical improvement. From a security perspective, the site uses HTTPS (implied by external links) and employs POST methods for login forms, but lacks visible security headers, anti-CSRF tokens, or bot mitigation measures. No incident response or security policies are publicly disclosed. Privacy compliance is partially addressed with a linked privacy policy PDF, but no cookie consent mechanism is present. The WHOIS data is minimal but consistent with the hosting environment, though lacking detailed registrant information. Overall, the website is functional and trustworthy for its intended audience but could benefit from enhanced security practices, improved privacy compliance, and technical modernization to strengthen its posture and user trust.

S

spodeco

spodeco.de

66

Spodeco is a German-based e-commerce retailer specializing in multibrand tennis and sports equipment, offering products such as rackets, strings, grips, fitness equipment, balls, and court supplies. The website is built on the Shopify platform, leveraging modern web technologies and integrating multiple third-party marketing and analytics tools to enhance customer engagement and operational efficiency. The site demonstrates good digital maturity with fast performance, mobile optimization, and clear navigation. Security posture is strong, with HTTPS enforced and standard security headers in place, although explicit security policies and incident response contacts are not published. Privacy compliance is well addressed with comprehensive privacy and cookie policies and active consent mechanisms. Overall, the site is professional, trustworthy, and safe for general audiences.

B

Bielefeld Marketing GmbH

matchyourfuture.de

53

The website matchyourfuture.de is a professionally designed city marketing platform operated by Bielefeld Marketing GmbH, aimed at promoting the city of Bielefeld, Germany. It highlights the city's cultural, educational, economic, and recreational strengths through engaging content and an interactive quiz. The site targets potential residents, students, professionals, and tourists, positioning Bielefeld as a vibrant and attractive city. Technically, the site leverages modern web technologies including React and Next.js, ensuring fast performance and excellent mobile optimization. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although some security headers could be improved. Privacy compliance is well addressed with clear cookie consent and a comprehensive privacy policy. Overall, the site demonstrates high professionalism and trustworthiness, with strong social media integration and partner references.

W

Wissenswerkstadt Bielefeld

wissenswerkstadt.de

52

Wissenswerkstadt Bielefeld is a local educational and cultural institution focused on interactive science, technology, and DIY activities for children, youth, families, and educational institutions. The website presents a rich calendar of workshops, exhibitions, and events, emphasizing engagement and learning. Technically, the site is built on TYPO3 CMS, with good mobile optimization, accessibility, and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though lacking explicit security headers and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Sparkasse Kaiserslautern

sparkasse-kl.de

71

Sparkasse Kaiserslautern is a regional financial institution providing a broad range of banking and financial services including online banking, loans, insurance, investments, and real estate services. The website targets both private and corporate customers with a strong emphasis on accessibility and user-friendly digital services. The bank holds several awards recognizing its advisory quality and market position. Technically, the website is built on a modern stack likely powered by Adobe Experience Manager, with responsive design and good SEO and accessibility features. Security posture is strong with HTTPS, session management, and cookie consent mechanisms, although explicit security policies and vulnerability disclosure mechanisms are not published. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

Sparkassenverband Rheinland-Pfalz

sv-rlp.de

49

The Sparkassenverband Rheinland-Pfalz (SVRP) operates as a central umbrella organization and service provider for the savings banks (Sparkassen) and their municipal sponsors in the Rheinland-Pfalz region of Germany. The website reflects a professional, well-structured digital presence focused on providing information about the association's services, educational offerings via its Akademie, and news updates relevant to its stakeholders. The organization holds recognized certifications such as the 'audit berufundfamilie' and supports diversity initiatives, enhancing its trustworthiness and social responsibility profile. Technically, the site is built on TYPO3 CMS, employs modern web standards, and is optimized for accessibility and mobile devices, though performance is moderate. Security posture is solid with HTTPS enforced and secure form handling, but lacks some advanced security headers and explicit incident response information. Privacy compliance is strong with clear privacy and cookie policies and consent mechanisms in place. Overall, the site is trustworthy, professional, and well-aligned with its business purpose.

BauNetz Wissen is a specialized German-language online portal providing comprehensive knowledge and resources related to architecture and construction technology. It targets professionals such as architects, planners, and engineers, offering thousands of articles, glossary terms, and building case studies. The website is well-established within its niche, supported by a strong partner network of reputable companies in the construction sector. Technically, the site employs modern web technologies including JavaScript frameworks, consent management tools, and analytics services like Hotjar and Google Tag Manager, all integrated with GDPR-compliant consent mechanisms. Hosting and security are enhanced by Cloudflare services, ensuring good performance and SSL encryption. Security posture is solid with HTTPS and consent management, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates high professionalism, excellent content quality, and strong trust indicators, making it a reliable resource in its industry.

O

Olympiastützpunkt Hessen im Landessportbund Hessen e.V.

osph.de

47

Olympiastützpunkt Hessen is a regional elite sports support center operating under the Landessportbund Hessen e.V., focusing on athlete development, sports medicine, physiotherapy, and career dual support in Hessen, Germany. The website serves athletes, sports professionals, and governmental partners with comprehensive information and services. The organization holds a strong market position within the regional sports ecosystem, supported by partnerships with federal and state ministries and sports bodies. Technically, the website is built on TYPO3 CMS with standard web technologies like jQuery and HTML5. It demonstrates moderate performance and good mobile optimization but lacks some advanced security headers and cookie consent mechanisms. The site is well-structured, professionally designed, and provides clear navigation and relevant content. From a security perspective, the site uses HTTPS and avoids exposing sensitive data but could improve by implementing security headers and publishing explicit security policies. Privacy compliance is good with a comprehensive privacy policy linked, though cookie consent is missing. WHOIS data aligns well with the website's claims, indicating legitimacy and consistency. Overall, the website is trustworthy and professional with minor areas for security and privacy enhancement. Strategic improvements in security headers, cookie consent, and incident response transparency would strengthen its posture and compliance.

S

Sportjugend Hessen

sportjugend-hessen.de

66

Sportjugend Hessen is the largest youth sports association in Hessen, Germany, serving approximately 800,000 young sports enthusiasts across 7,500 clubs. The organization offers a broad range of services including training and further education, youth travel programs, volunteer services, and mobile sports experiences. Their market position is strong within the non-profit youth sports sector, with a focus on innovative approaches to youth sport and movement culture. Technically, the website is built on TYPO3 CMS, hosted by GWeb Solutions, and incorporates modern web technologies with good accessibility and privacy features such as Matomo analytics and the Eye-Able accessibility plugin. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is professional, trustworthy, and compliant with GDPR, targeting youth and sports organizations in Hessen.

B

Berufsverband Deutscher Nuklearmediziner e.V.

berufsverband-nuklearmedizin.de

47

The Berufsverband Deutscher Nuklearmediziner e.V. (BDN) is a professional association representing nuclear medicine physicians in Germany. The organization focuses on advocating for the professional and political interests of its members, providing resources, organizing events, and offering services such as a physician search and job marketplace. The website reflects a clear and professional presentation of these services, targeting both medical professionals and patients seeking nuclear medicine expertise. Technically, the website is built on the TYPO3 CMS platform, utilizing standard web technologies including JavaScript and CSS. The site is hosted on servers associated with 'agenturserver' as indicated by the nameservers. The website demonstrates moderate performance and good mobile optimization, with basic accessibility and SEO features. The presence of structured data and meta tags supports search engine visibility. From a security perspective, the site enforces HTTPS and uses secure login forms with CSRF tokens. However, it lacks several security headers and does not publish explicit security policies or incident response contacts. No cookie consent mechanism was detected, which is a compliance gap given GDPR requirements. No vulnerabilities or exposed sensitive data were found in the analyzed content. Overall, the website is trustworthy and professional, with a solid business credibility score. The main areas for improvement include enhancing privacy compliance with cookie consent, publishing security and incident response policies, and implementing additional security headers to strengthen the security posture.

P

pitcom GmbH

pitcom.de

59

pitcom GmbH is a well-established digital agency and internet service provider based in Plauen, Germany, founded in 1997. The company specializes in comprehensive digital communication solutions, serving primarily B2B clients including over 200 Sparkassen, banks, municipalities, and medium-sized enterprises. Their service portfolio spans web development, digital business processes, marketing, hosting, and IT consulting, supported by their own data center infrastructure. The website is professionally designed, content-rich, and optimized for usability and accessibility, reflecting a mature digital presence. Technically, the site is built on TYPO3 CMS, employs modern web technologies, and integrates privacy-conscious analytics via Matomo. Hosting is managed internally, indicating control over infrastructure and data security. The website implements GDPR-compliant cookie consent mechanisms and provides clear contact information, enhancing trust and compliance. However, explicit security policies and incident response contacts are not publicly available, representing an area for improvement. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. The absence of advanced security headers and formal security documentation suggests room for enhancement in defense-in-depth strategies. Overall, the site demonstrates a high level of professionalism, security awareness, and regulatory compliance, positioning pitcom GmbH as a credible and trustworthy digital service provider. Strategically, the company should focus on formalizing and publishing security policies, enhancing incident response transparency, and adopting additional security headers to further strengthen their security posture and client confidence.

P

Psychedelic Therapies

psychedelictherapies.de

60

Psychedelic Therapies is a small German-based service provider specializing in counseling and integration therapy related to psychedelic treatments. The website targets clients and facilitators interested in psychedelic therapy, positioning itself as a niche mental health service provider. The digital infrastructure is built on the Squarespace platform, leveraging modern web technologies and providing a responsive and professionally designed user experience. Security posture is strong with HTTPS and HSTS enabled, and Google reCAPTCHA is used to protect forms. However, the site lacks explicit privacy policies, terms of service, and direct contact information, which are important for compliance and trust. Overall, the site is safe, well-structured, and suitable for its target audience, but improvements in privacy compliance and business transparency are recommended.

G

Gemeinde- und Schulbibliothek Turbenthal

bibliothek-turbenthal.ch

59

The website www.bibliothek-turbenthal.ch represents the Gemeinde- und Schulbibliothek Turbenthal, a local public and school library in Switzerland. It serves as a community hub offering books, digital media, children's Tonie figures, films, games, and local events. The site is built on the Wix platform, leveraging Wix Thunderbolt and editor elements, providing a moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and scripts to harden client-side requests, but lacks explicit security headers and privacy/cookie policies. No contact emails or phone numbers were found in the analyzed content, which limits direct user engagement and compliance transparency. Overall, the site is professional and trustworthy for its purpose but would benefit from enhanced privacy compliance and security best practices.

H

Holzwerk GmbH

holzwerk-celle.de

41

Holzwerk GmbH is a small regional German company specializing in carpentry, roofing, and renovation services, particularly focusing on traditional woodwork and altbausanierung (old building restoration). The company serves the Celle area and nearby cities such as Hannover and Braunschweig, positioning itself as a trusted master craftsman business with a focus on quality and customer orientation. Their website provides detailed service descriptions, references, and contact information, supporting their local market presence. Technically, the website is a static or custom-built site using basic HTML, CSS, and JavaScript, with Google Analytics integrated for visitor tracking. The site lacks modern CMS or frameworks and shows basic mobile optimization and accessibility. Hosting is managed via nsentry.de nameservers, indicating a professional hosting environment. SEO is adequately addressed with meta tags and structured navigation. From a security perspective, the site lacks visible HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. The presence of a cookie consent banner and privacy policy indicates some GDPR compliance, but incident response and security policies are absent. Google Analytics is configured with IP anonymization, reflecting some privacy awareness. Overall, the website is functional and credible for a small business but requires improvements in security posture and technical modernization to enhance trust and compliance.

Transports Brevet is a French transportation company specializing in temperature-controlled logistics services. The website serves primarily as a private client login portal, indicating a B2B focus on clients requiring secure access to transport information. The company operates from two physical locations in France and has been registered since 2010, suggesting an established presence in its niche market. The website content is minimal, focusing on login functionality and contact information without broader marketing or informational content. Technically, the site uses basic HTML, CSS, and JavaScript without modern frameworks or CMS, and lacks visible security enhancements such as HTTPS confirmation or security headers. The security posture is weak, with no privacy or cookie policies, no visible incident response contacts, and potential vulnerabilities in form handling. Overall, the site is functional but basic, with room for significant improvements in security, privacy compliance, and user experience.

N

naturenergie netze

ednetze.de

74

naturenergie netze is a regional utility network operator based in Südbaden, Germany, providing essential services in electricity, water, lighting, communication technology, and training. The company operates as part of the Energiedienst-Gruppe, targeting customers and partners in the energy and utility sectors. The website is professionally designed using TYPO3 CMS, with good content quality and clear navigation tailored to its audience. The technical infrastructure includes modern web technologies and is hosted on Microsoft Azure DNS, indicating a reliable hosting environment. The site incorporates accessibility features and is optimized for mobile devices. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented via Cookiebot, ensuring GDPR compliance. However, explicit security headers and incident response policies are not publicly documented. Overall, the website demonstrates a mature digital presence with moderate tracking and marketing tools, balanced with user privacy considerations.

K

Kultursaat e.V.

kultursaat.org

48

Kultursaat e.V. is a German non-profit association dedicated to biodynamic plant breeding and the preservation of cultivated plant varieties. Established in 2004, the organization focuses on breeding open-pollinated vegetable varieties for ecological agriculture, aiming to conserve agricultural biodiversity and cultural heritage. Their website reflects a niche market position targeting ecological farmers, researchers, and supporters of biodynamic agriculture. The business model is centered on research, education, membership, and donations. Technically, the website is built on the TYPO3 CMS platform, utilizing modern web technologies and incorporating Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, clear navigation, and a professional design. Performance is moderate, with room for improvement in accessibility features. The hosting provider is not explicitly identified, but DNS uses powerdns.de name servers. From a security perspective, the site uses HTTPS and implements a comprehensive cookie consent mechanism aligned with GDPR requirements. However, DNSSEC is not enabled, and no advanced security headers were detected in the provided data. There is no published security policy or incident response contact information, which could be improved to enhance trust and compliance. No vulnerabilities or exposed sensitive data were found. Overall, the website is trustworthy, professional, and compliant with privacy regulations. The domain registration data aligns well with the organization's profile, indicating legitimacy and stability. Strategic recommendations include enabling DNSSEC, adding security headers, and publishing security and incident response policies to strengthen the security posture and user trust.

G

Getswish AB

swish.nu

63

Getswish AB operates the Swish mobile payment service, a leading FinTech solution in Sweden since 2012. The company provides real-time mobile payments targeting private individuals, companies, and payment ecosystem participants. The website reflects a professional and consistent brand with clear business information and a strong social media presence. Technically, the site uses modern JavaScript modules, Vue.js framework, and Contentful CMS, delivering a good user experience with mobile optimization and moderate performance. Security posture is strong with HTTPS and no visible vulnerabilities, though security headers and cookie consent mechanisms could be improved. Privacy compliance is adequate with a clear privacy policy but lacks cookie consent banners and terms of service pages. Overall, the domain registration aligns well with the business claims, indicating high legitimacy and trustworthiness.

F

foodwatch

foodwatch.de

64

foodwatch is a German non-profit organization dedicated to exposing consumer-unfriendly practices in the food industry and advocating for the right to good, healthy, and honest food. The organization operates independently from the food industry and government funding, relying primarily on donations. Their website is content-rich, professionally designed, and targets German-speaking consumers interested in food safety and consumer rights. The site offers campaigns, reports, podcasts, and petitions to engage the public. Technically, the website is built on TYPO3 CMS and uses Matomo analytics for privacy-conscious visitor tracking. It features a cookie consent mechanism compliant with GDPR and is optimized for mobile devices with good accessibility and SEO practices. The site uses HTTPS with strong SSL configuration but lacks some advanced security headers and a public security policy or vulnerability disclosure page. From a security perspective, the site shows good practices such as encrypted connections and no exposed sensitive data. However, WHOIS data is privacy protected, limiting transparency about domain registration details. Overall, the site appears legitimate, trustworthy, and well-maintained, with recommendations to enhance security headers and publish a security policy for improved transparency and incident response readiness.

N

naturenergie netze

naturenergie-netze.de

74

naturenergie netze is a regional energy network operator based in Südbaden, Germany, providing essential utility services including electricity, water, lighting, communication technology, and training. The company operates as part of the Energiedienst-Gruppe, positioning itself as a key regional player in energy distribution and infrastructure services. The website reflects a professional and consistent brand presence targeting customers and partners within the energy sector in the region. Technically, the site is built on TYPO3 CMS, hosted on Azure DNS infrastructure, and integrates modern web technologies including Cookiebot for GDPR-compliant cookie management, Google Analytics, and social media tracking tools. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Security posture is solid with HTTPS enforced and use of reputable third-party scripts, although explicit security headers and incident response information are not clearly published. Privacy compliance is well addressed through a comprehensive privacy policy and granular cookie consent mechanisms. Overall, the website is trustworthy, professional, and compliant with relevant regulations, supporting the company's business credibility and digital maturity.

C

Centrum Air

centrum-air.com

57

Centrum Air is a private airline company based in Uzbekistan, founded in 2023, offering affordable flight tickets primarily from Tashkent to various regional and international destinations. The website provides a modern booking platform built on Next.js and React, featuring multiple flight routes, schedules, and additional services such as extra baggage, seat selection, and wheelchair rental. The technical infrastructure is contemporary with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the business appears legitimate and focused on transportation services with a clear market presence in Uzbekistan and surrounding regions.

B

Bayerische Staatsforsten AöR

baysf.de

65

Bayerische Staatsforsten AöR is a publicly owned forestry organization under the Free State of Bavaria, managing the entire Bavarian state forest with a focus on sustainable, integrative forest management. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content targeting citizens, forestry professionals, and environmental stakeholders. The organization offers a broad range of services including wood production, hunting, renewable energy, and nature conservation. Technically, the site is built on Drupal CMS, uses Matomo for analytics with user consent, and supports responsive design and accessibility. Security posture is strong with HTTPS enforced and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the domain and WHOIS data align with the organization's government affiliation, supporting legitimacy and trust. No critical vulnerabilities or suspicious content were detected.

G

ge-webdesign.de

ge-webdesign.de

39

ge-webdesign.de is a small, local web design service provider based in Berlin, Germany, specializing in affordable and technically sound website creation using the CMSimple platform. The website offers CMSimple templates, plugins, and installation services, targeting small businesses and individuals in the Berlin-Brandenburg region. The business emphasizes over 20 years of experience and provides a general license for its templates and plugins. Technically, the website is built on CMSimple 5.21 with jQuery 1.12.4 and standard HTML/CSS, showing good mobile optimization and SEO practices but lacking modern security headers and cookie consent mechanisms. Security posture is moderate with no visible vulnerabilities but could be improved by updating libraries and enhancing SSL and header configurations. Overall, the site is accessible without WAF or blocking, contains no adult or questionable content, and demonstrates moderate trustworthiness with room for technical and privacy compliance improvements.

M

Mundharmonika Berlin

mundharmonika-berlin.de

39

Mundharmonika Berlin is a small local business specializing in the sale and consultation of Mundharmonika musical instruments, as well as live music performances in Berlin. The website serves as a platform for showcasing the business offerings, including an online shop and detailed information about the proprietor's musical background. The business targets music enthusiasts and players of the harmonica, focusing on a niche market within the Berlin area. Technically, the website is built on the CMSimple CMS platform, utilizing standard web technologies such as HTML5, CSS, and jQuery. The site demonstrates moderate performance and basic mobile optimization. SEO and accessibility features are present but could be improved. Hosting appears to be provided by a German hosting provider associated with the domain's nameservers. From a security perspective, the website lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user protection. No HTTPS or SSL configuration details were provided, which is a critical area for improvement. The site does not disclose any formal security policies or incident response contacts, indicating a low maturity in security governance. Overall, the website is functional and professional for a small business but requires enhancements in security posture, privacy compliance, and technical modernization to improve trust and user experience.

F

FID Verlag GmbH

gesundheitswissen.de

58

Gesundheitswissen.de is a German health information portal operated by FID Verlag GmbH, providing expert-backed content on health, nutrition, natural medicine, and wellness. The site offers newsletters, webinars, and an online shop, targeting health-conscious German-speaking audiences. The business model focuses on content publishing and community engagement through subscriptions and educational offerings. Technically, the website is built on WordPress, hosted on AWS infrastructure, and employs modern web technologies including FriendlyCaptcha for form security. The site demonstrates good mobile optimization and SEO practices but lacks some advanced security headers and explicit cookie consent mechanisms. Security posture is solid with HTTPS and anti-bot measures but could be enhanced with formal security policies and headers. WHOIS data confirms domain legitimacy and consistency with the business. Overall, the site is professional, trustworthy, and safe for general audiences.

W

WISTA.Service GmbH

wista-service.de

60

WISTA.Service GmbH is a medium-sized German company founded in 2001, specializing in comprehensive building and facility management services at the Berlin Adlershof high-technology location. Their offerings include maintenance of buildings, laboratories, and clean rooms, as well as commercial services such as tenant management and IT infrastructure consulting. The company serves a clientele of research institutions, technology firms, and real estate developers, positioning itself as a trusted local leader with recognized certifications and memberships. Technically, the website is built on TYPO3 CMS, hosted by manitu.net, and demonstrates good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements could be made by adding security headers and explicit privacy consent mechanisms. Overall, the site reflects a professional and trustworthy business presence with room for enhanced privacy and security transparency.

W

WISTA.Plan GmbH

wista-plan.de

60

WISTA.Plan GmbH is a Berlin-based urban development agency specializing in regional, city, and quarter planning, land development, construction, and real estate marketing. The company operates primarily in the Berlin-Johannisthal/Adlershof and Former Güterbahnhof Köpenick areas, serving businesses and stakeholders involved in urban development. The website is professionally designed using TYPO3 CMS, with good mobile optimization and accessibility features. It provides clear business information and contact details, including a physical address, phone number, and email. The presence of a LinkedIn profile adds to its credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though some security best practices like security headers and cookie consent mechanisms are missing. Overall, the site is trustworthy and well-positioned within its sector.

J

Jubla Kanton Freiburg

jubla-freiburg.ch

10

Jubla Kanton Freiburg is a regional non-profit youth organization based in Freiburg, Switzerland, dedicated to providing leisure activities, courses, and community events for young people. The website reflects a well-structured platform with clear navigation and relevant content tailored to its target audience. The organization maintains a consistent brand presence and offers key services such as event agendas, equipment rental via the RAST Shop, and educational courses. Technically, the site is built on the Neos CMS platform, utilizing modern web technologies including lazy loading and responsive design, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site demonstrates a trustworthy and professional online presence appropriate for a small non-profit entity.

JuBla St. Ursen is a small non-profit youth organization based in Switzerland focused on organizing community events, camps, and activities for children and youth. The website serves as an information hub for event announcements, team details, and community engagement, targeting local families and youth participants. Technically, the website uses a custom PHP-based system with jQuery and Fancybox for UI enhancements. The site is moderately optimized for mobile and performance but lacks advanced SEO and accessibility features. Security posture is basic with no visible security headers and use of an outdated jQuery version, which could pose risks. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the site is functional and trustworthy for its community purpose but requires improvements in security and compliance to enhance trust and protect user data.

J

Jubla Plaffeien

jubla-plaffeien.ch

41

Jubla Plaffeien is a small non-profit youth organization based in Switzerland, offering engaging leisure activities and diverse holiday camps for children and adolescents. The website serves as a community hub providing information about upcoming events, camps, and organizational details, targeting local youth and their families. The organization maintains an active presence on social media platforms such as Instagram and Facebook to foster community engagement. Technically, the website is built on the Ongoing CMS platform, utilizing standard web technologies including JavaScript, CSS, and HTML5. The site is mobile-optimized with good navigation and SEO practices, although performance is moderate. Security is enforced via HTTPS, but lacks advanced security headers and explicit privacy compliance mechanisms such as cookie consent banners. The security posture is adequate for a small non-profit, with no evident vulnerabilities or exposed sensitive data. However, improvements are recommended in implementing security headers, privacy policies with GDPR compliance, and incident response contact information to enhance trust and compliance. The WHOIS data aligns well with the website's claims, indicating a legitimate and consistent domain registration. Overall, Jubla Plaffeien presents a trustworthy and professionally maintained online presence suitable for its community-focused mission, with room for enhancement in privacy and security practices.

J

Jungwacht Blauring Thun

jublathun.ch

39

Jungwacht Blauring Thun is a local non-profit youth organization based in Thun, Switzerland, offering leisure activities and holiday camps for children and adolescents. The website serves as an information hub for upcoming events, registration, and community engagement, including a WhatsApp channel for timely updates. The organization targets families and youth in the local community, positioning itself as a trusted provider of youth recreational services. Technically, the website is built on Neos CMS using the Ongoing.Base framework, with a moderate performance profile and good mobile optimization. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no explicit cookie consent or comprehensive privacy policy found. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

J

Jubla Rheinfelden Magden

jubla-rheinfelden.ch

52

Jubla Rheinfelden Magden is a small non-profit youth organization based in Switzerland, focused on providing group activities, events, and summer camps for children and youth in the Rheinfelden and Magden regions. Their offerings include regular group meetings, community events, and themed summer camps, fostering social engagement and recreational learning. The website is well-structured, professionally designed, and targets local families and children aged 5-7 years and older. Technically, the site is built on the Ongoing.Base framework, likely a TYPO3 Neos CMS variant, hosted on a dedicated CDN, and optimized for mobile devices with good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is supported by a comprehensive privacy policy, but lacks a cookie consent mechanism and terms of service. Contact information is clearly presented, including email, phone, and physical address, alongside active social media channels. Overall, the site is trustworthy, safe, and professionally maintained, serving its community effectively.

D

Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V.

dgho.de

64

The Deutsche Gesellschaft für Hämatologie und Medizinische Onkologie e.V. (DGHO) is a well-established German professional medical society specializing in hematology and medical oncology. The organization provides comprehensive services including clinical guidelines via the Onkopedia portal, certification programs such as KoMedT, professional events, and member networking opportunities. Their website reflects a mature digital presence with a focus on healthcare professionals and researchers in Germany. The content is rich, professionally presented, and regularly updated with news and events relevant to their field. Social media integration and external partnerships further enhance their outreach and credibility. Technically, the website is built on the Plone CMS platform, utilizing standard web technologies like JavaScript and CSS. The site is mobile-optimized and accessible, with good SEO practices evident. However, there is room for improvement in security posture, particularly in implementing and displaying security headers such as CSP and HSTS. The site uses HTTPS but lacks visible cookie consent mechanisms, which could be enhanced to improve privacy compliance. From a security perspective, the site shows a moderate maturity level with secure login forms and HTTPS usage. No critical vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns well with the website's claims, indicating a legitimate and trustworthy domain registration. Incident response and explicit security policies are not prominently featured, suggesting an area for future enhancement. Overall, DGHO's website is a professional, trustworthy, and content-rich platform serving its niche audience effectively. Strategic improvements in security headers and privacy consent mechanisms would further strengthen its compliance and security posture.

W

Wohnbau Weil

wohnbau-weil.de

47

Wohnbau Weil is a small local real estate company based in Germany, specializing in housing market services, senior living facilities, social management, and tenant support. Their website provides information about available apartments, senior housing, social engagement initiatives, and tenant communications. The site is primarily informational with basic navigation and content structure, targeting residents and tenants in the Weil am Rhein area. Technically, the website is built with basic HTML and CSS without modern CMS or frameworks detected. Hosting appears to be provided by netcup based on DNS nameservers. The site lacks advanced technical features such as mobile optimization, accessibility enhancements, or SEO best practices. No analytics or tracking technologies are present, indicating minimal user data collection. From a security perspective, the website does not show evidence of HTTPS enforcement or security headers, which lowers its security posture. There are no visible privacy or cookie policies beyond a basic imprint/privacy page, and no incident response or vulnerability disclosure information is provided. The WHOIS data is consistent with the website's business profile, indicating legitimacy. Overall, the website is functional for its purpose but would benefit from improvements in security, privacy compliance, and technical modernization to enhance trust and user experience.

P

Poper

showpopup.com

72

Poper is a technology company offering an AI-powered onsite engagement platform that enhances user interactions, retention, and conversion rates through smart popups, widgets, notifications, and gamification tools. The company targets website owners, e-commerce stores, and marketers seeking to improve engagement and sales. Their market position is supported by serving over 2000 brands and providing a comprehensive suite of AI-driven marketing tools. Technically, the website is built on modern frameworks such as Next.js and React, with good SEO, mobile optimization, and performance. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities, although no explicit security policy or incident response contacts are published. Overall, the website is professional, trustworthy, and well-structured, with privacy and cookie policies in place. WHOIS data is privacy protected, which is justified for this SaaS business, but limits registrant transparency.

F

Francesco Diani

bibbia.net

53

The website www.lachiesa.it/bibbia/ is a niche religious platform offering the Italian Bible in three versions with synoptic comparison and search capabilities. It targets Italian-speaking Christian audiences seeking easy and free access to biblical texts and audio files. The business is small-scale and informational, managed by an individual named Francesco Diani. Technically, the site uses basic HTML, CSS, and JavaScript with integrations for Google Tag Manager and Iubenda cookie consent. The design and user experience are functional but basic, with moderate performance and limited mobile optimization. Security posture is adequate with HTTPS and cookie consent but lacks advanced security headers and incident response information. Privacy compliance is partial due to the absence of a privacy policy and terms of service pages. Overall, the domain registration data is consistent and trustworthy, supporting the legitimacy of the site.

M

mediaspects Beratungsgesellschaft für neue Medien mbH

mediaspects.com

47

Mediaspects Beratungsgesellschaft für neue Medien mbH is a German technology company specializing in software development, telemedicine, online competence, consulting, and OEM development services. Established in 2005, the company targets business clients seeking digital media and healthcare technology solutions. The website is built on TYPO3 CMS with Bootstrap and jQuery, reflecting a moderate level of digital maturity with basic mobile optimization and SEO practices. Security posture is adequate with HTTPS usage and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is minimal with a basic privacy policy and no cookie banner. Overall, the website presents a professional image with clear contact information and consistent branding, but could improve in privacy and security transparency.

B

Baufragen Software GmbH

baufragen.de

55

Baufragen Software GmbH operates a specialized online platform, Baufragen.de, offering free expert consultation in the construction sector via chat. The platform connects users such as architects, planners, craftsmen, and housing companies with over 200 experts across more than 40 competence areas. This unique service aims to streamline research and planning processes in construction projects by providing direct access to product and planning advice online. The company positions itself as an independent, transparent, and cost-free service provider within the German construction industry. Technically, the website employs modern web technologies including JavaScript and Vue.js frameworks, with responsive design optimized for mobile devices. The hosting is managed via rzone.de nameservers, indicating a professional hosting environment. SEO and accessibility are adequately addressed, though some improvements could be made in accessibility features and performance optimization. From a security perspective, the site uses HTTPS and includes CSRF tokens, but lacks visible security headers and explicit cookie consent mechanisms. No direct contact information or security policies are prominently displayed, which could be improved to enhance trust and compliance. WHOIS data aligns well with the business identity, supporting legitimacy. Overall, Baufragen.de presents a professional and trustworthy platform with good content quality and business credibility. However, enhancements in privacy compliance, security headers, and contact transparency would strengthen its security posture and user trust.

V

Verein sports4everybody

sports4everybody.at

49

Verein sports4everybody is a small Austrian non-profit organization dedicated to promoting inclusive sports activities and organizing charity events such as solidarity runs and school sports projects. The website serves as a platform to communicate news, events, and partnerships primarily targeting students, schools, sports enthusiasts, and charitable donors within Austria. The organization collaborates with well-known partners like Licht ins Dunkel and Special Olympics Wien, reinforcing its community presence and trustworthiness. Technically, the website is built with standard HTML5, CSS, and JavaScript, showing moderate performance and good mobile optimization. While no advanced frameworks or CMS are detected, the site maintains a consistent and professional design with clear navigation. Privacy compliance is addressed through a visible cookie consent mechanism and a dedicated privacy policy page, both in German, aligning with GDPR requirements. From a security perspective, the site uses HTTPS with good SSL configuration but lacks explicit security headers and documented security policies or incident response procedures. No vulnerabilities or exposed sensitive data were detected in the provided content. The absence of analytics or tracking scripts suggests a minimal user tracking approach, enhancing privacy. Overall, the website is trustworthy, safe, and professionally maintained, with a strong focus on community engagement and inclusivity in sports. Strategic improvements could include enhancing security headers, publishing incident response information, and adding terms of service to further strengthen compliance and user trust.

S

Sportzentrum Niederösterreich

sportzentrum-noe.at

55

Sportzentrum Niederösterreich operates as a regional sports center in Austria, providing sports facilities and services primarily to athletes and sports enthusiasts within Niederösterreich. The website is built on WordPress and employs standard plugins such as Contact Form 7 and Complianz GDPR for cookie consent management. The site demonstrates a moderate level of digital maturity with good design quality, mobile optimization, and basic SEO practices. Security measures include HTTPS enforcement and Google reCAPTCHA integration, but lack explicit security policies and comprehensive contact details for incident response. Overall, the domain registration data aligns well with the website's regional focus, indicating legitimacy and trustworthiness.

O

OstWestfalenLippe GmbH

ostwestfalen-lippe.de

59

OstWestfalenLippe GmbH is a regional development agency focused on promoting the OstWestfalenLippe region in North Rhine-Westphalia, Germany. The organization supports sustainable transformation, economic growth, education, and cultural initiatives, positioning itself as a key regional stakeholder. The website reflects a mature digital presence built on TYPO3 CMS, with modern design and good mobile optimization. Security posture is solid with HTTPS and spam-protected emails, though some advanced security headers and cookie consent mechanisms are missing. Overall, the site is professional, trustworthy, and well-aligned with the organization's mission.

K

Kloster Einsiedeln

wallfahrt-einsiedeln.ch

31

Kloster Einsiedeln operates as a prominent Benedictine abbey and the largest pilgrimage site in Switzerland, combining religious, cultural, and community services. The website effectively communicates its spiritual mission, pilgrimage offerings, and cultural events, targeting pilgrims, religious visitors, and cultural tourists. The institution holds a strong market position as a unique religious and cultural landmark in Switzerland. Technically, the website is built on TYPO3 CMS, a robust and mature content management system, with a modern tech stack including HTML5, CSS, and JavaScript. The site is mobile-optimized, accessible, and SEO-friendly, providing a good user experience with clear navigation and professional design. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some advanced security headers and a visible cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. No critical vulnerabilities or security incidents were detected. Overall, the website demonstrates a high level of professionalism, trustworthiness, and content quality, with minor improvements recommended in privacy compliance and security best practices to further strengthen its posture.