Security Directory

Z

ZEISS

zeiss.nl

68

ZEISS Nederland is the Dutch branch of ZEISS, an internationally leading technology company specializing in optics and optoelectronics. The website reflects a professional corporate presence with a focus on Vision Care, Medical Technology, and other high-tech sectors. The site is built on Adobe Experience Manager, leveraging modern web technologies and internationalization to serve a broad audience. The presence of a cookie consent mechanism via OneTrust indicates attention to privacy compliance, although explicit privacy and terms of service documents were not found in the provided content. Security posture is solid with HTTPS and no visible vulnerabilities, but could be improved with explicit security headers and published policies. Overall, the website is trustworthy, well-branded, and serves as a credible digital front for ZEISS in the Netherlands.

Z

ZEISS

zeiss.it

70

ZEISS Italia is a regional corporate website for ZEISS, a global leader in optics and optoelectronics. The site targets both general and professional audiences in Italy, showcasing ZEISS's key sectors including Vision Care, Medical Technology, and Semiconductor Manufacturing Technology. The business model is primarily B2B with some B2C elements, reflecting ZEISS's role as a technology and manufacturing solutions provider. The website content is professionally presented with consistent branding and localized international presence.

Z

ZEISS

zeiss.co.in

69

ZEISS India operates as a regional presence of the internationally renowned ZEISS Group, specializing in optics and optoelectronics technology. The website reflects a professional corporate identity with clear branding and a focus on key sectors such as vision care, medical technology, semiconductor manufacturing, and industrial quality solutions. The site is built on Adobe Experience Manager, indicating a mature digital infrastructure. Technical implementation includes modern JavaScript libraries, Google Tag Manager for analytics, and a cookie consent mechanism, demonstrating compliance with basic privacy standards. Security posture is solid with HTTPS and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the website is trustworthy and well-maintained, serving its enterprise audience effectively.

Z

ZEISS

zeiss.hu

70

ZEISS Hungary is a regional branch of the internationally recognized Carl Zeiss AG, a leader in optical and optoelectronic technologies. The website serves as a corporate portal providing information about ZEISS's presence and services in Hungary, targeting both professional and general audiences interested in vision care, medical technology, and industrial solutions. The site is well-structured with multilingual support and uses modern web technologies including Adobe Experience Manager and Google Tag Manager for analytics and marketing. Technically, the website demonstrates a mature digital infrastructure with responsive design, accessibility considerations, and performance optimizations. The use of structured data and SEO best practices enhances discoverability. Security posture is strong with HTTPS enforced and standard security headers likely in place, although explicit security policies and incident response information are not published on the homepage. Privacy compliance is supported by a comprehensive cookie consent mechanism via OneTrust, indicating adherence to GDPR requirements. However, explicit privacy policies and terms of service are not directly found on the homepage, suggesting they may reside on other pages. Contact information is available through a dedicated contact page but lacks direct emails or phone numbers on the main page. Overall, the website reflects a professional, trustworthy, and secure corporate presence with room for improvement in publishing explicit security and privacy documentation to enhance transparency and user trust.

Z

ZEISS

zeiss.de

68

ZEISS is a globally recognized technology company specializing in optical and optoelectronic industries, with a strong market position and enterprise scale. The website reflects a mature digital infrastructure leveraging Adobe Experience Manager CMS and Akamai CDN, ensuring good performance, mobile optimization, and accessibility. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly available. Overall, the site demonstrates professionalism and trustworthiness suitable for its industry and audience.

Z

ZEISS

zeiss.fr

68

ZEISS France is a regional corporate website representing ZEISS, a leading international technology company specializing in optics and optoelectronics. The site presents a professional and well-branded digital presence with multimedia content and multiple language support, targeting a broad audience including healthcare and technology sectors. The technical infrastructure is modern, leveraging Adobe Experience Manager CMS and integrating Google Tag Manager and OneTrust for analytics and cookie consent management. Security posture is good with HTTPS enforced, though explicit security headers and vulnerability disclosure mechanisms are absent. Privacy compliance is partial, with cookie consent present but no clear privacy policy on the homepage. WHOIS data is unavailable, which slightly reduces domain trustworthiness but does not detract from the strong corporate branding and content quality. Overall, the site is professional, secure, and credible with room for improvement in transparency and security best practices.

Z

ZEISS

zeiss.cz

70

ZEISS Česká republika is the Czech branch of ZEISS, a globally recognized technology company specializing in optics and optoelectronics. The website reflects a professional corporate presence with a focus on vision care, medical technology, and industrial applications. The company holds a leading market position in its industry segment and targets both general consumers and professional clients. The digital infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and ensuring good mobile optimization and accessibility. Security posture is strong with HTTPS enforcement and security headers, although explicit security policies and incident response contacts are not publicly available. Privacy compliance is well addressed with GDPR-aligned cookie consent and privacy policies. Overall, the website demonstrates a mature digital presence consistent with a large enterprise brand.

Z

ZEISS

zeiss.ca

67

ZEISS Canada operates a corporate website serving as a gateway for language selection to their English and French corporate sites. ZEISS is a globally recognized leader in optics and technology solutions, targeting both business and consumer markets. The website infrastructure is built on Adobe Experience Manager, leveraging modern web technologies and third-party services such as Google Tag Manager and OneTrust for analytics and privacy compliance. The site demonstrates a strong commitment to privacy with GDPR-compliant cookie consent mechanisms and links to comprehensive privacy policies. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security headers and incident response information are absent. Overall, the website reflects a professional and trustworthy digital presence consistent with a large enterprise technology company.

Z

ZEISS

zeiss.com.br

68

ZEISS do Brasil is a localized corporate website representing ZEISS, a global leader in optics and optoelectronics technology. The site targets both general consumers and professional sectors such as vision care, medical technology, and semiconductor manufacturing. The business model is primarily B2B with some B2C elements, supported by a strong international brand and enterprise infrastructure. The website is built on Adobe Experience Manager and hosted via Akamai CDN, reflecting a mature digital presence with good performance and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and headers could be improved. Privacy compliance is basic, with no visible privacy policy or terms of service on the homepage. Overall, the site is professional, trustworthy, and well-branded, suitable for an enterprise technology company.

Z

ZEISS

zeiss.at

69

ZEISS is a globally recognized technology company specializing in optics and optoelectronics, with a strong presence in Austria as reflected by the localized website. The site demonstrates a professional digital presence built on Adobe Experience Manager, incorporating modern web technologies and a responsive design. The company targets both general and professional audiences in the optics and medical technology sectors. While the website is well-structured and content-rich, WHOIS data is unavailable, limiting domain registration transparency. Cookie consent is implemented, indicating some privacy compliance efforts. Security posture is moderate with HTTPS usage and cookie consent but lacks visible security headers and incident response information.

Z

ZEISS Group

zeiss.com

68

ZEISS Group is a globally recognized technology enterprise specializing in optics and optoelectronics, serving diverse sectors including vision care, medical technology, and industrial metrology. The website reflects a mature digital presence with professional design, multilingual support, and multimedia content highlighting their technological innovations such as renewable energy solutions. Technically, the site leverages Adobe Experience Manager CMS, modern JavaScript libraries, and integrates Google Tag Manager and OneTrust for analytics and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and vulnerability disclosures suggests room for improvement. The WHOIS data is notably missing or inaccessible, which is unusual for a corporate domain and may indicate privacy protection or registry data issues. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced transparency in privacy and security policies.

81 alarm s.r.o. operates a professional website focused on providing comprehensive security solutions using the AJAX alarm system. The company targets residential and commercial customers in the Czech Republic, offering sales, installation, and ongoing support services. The website reflects a strong market position with clear service offerings and regional contact points. Technically, the site employs modern web technologies including Cloudflare DNS and Google Tag Manager, with responsive design and good SEO practices. Security posture is adequate with HTTPS enabled, though lacking some advanced security headers and explicit incident response policies. Privacy compliance is partially addressed with a GDPR policy but lacks cookie consent mechanisms. Overall, the site is trustworthy and professionally maintained, supporting the company's business credibility.

O

Otto Bohuš

ottobohus.cz

48

Otto Bohuš is a Czech-based personal brand specializing in copywriting services, educational courses, audiobooks, and blog content aimed at helping businesses and individuals improve their text marketing and sales through compelling writing. The website is built on Drupal 7, hosted on Websupport infrastructure, and incorporates modern web technologies such as jQuery and SVG icons. It features a professional design with good mobile optimization and clear navigation. Security posture is adequate with HTTPS enforced and secure forms, but lacks advanced security headers and explicit privacy or cookie policies. Tracking is implemented via Facebook Pixel, indicating moderate user tracking. Overall, the site is legitimate, well-maintained, and targets a niche market with a small business scale.

L

Lürssen

lurssen.com

62

Lürssen is a renowned German company specializing in the design, construction, and refit of luxury yachts. The website reflects a strong brand presence with a focus on high-end maritime transportation solutions, targeting affluent clients and industry professionals. The site offers multilingual support and highlights key services including new builds, refit and services, and a marine foundation. Technically, the website uses modern frameworks such as Nuxt.js and integrates Matomo for analytics alongside Cookiefirst for cookie consent management, indicating a moderate level of digital maturity. Security-wise, while HTTPS is implied, explicit security headers and detailed privacy policies are not evident, suggesting room for improvement in security posture and compliance transparency. Overall, the site is professional and trustworthy but would benefit from enhanced security disclosures and verified domain registration data.

L

LUKAS Hydraulik GmbH

idexfiresafety-shop.com

50

The website idexfiresafety-shop.com operates as an e-commerce platform primarily focused on selling promotional products such as clothing, advertising giveaways, and books. It is associated with LUKAS Hydraulik GmbH and partners, targeting business customers seeking creative giveaways. The site is relatively new, with the domain registered in November 2023, aligning with the business launch timeframe. The parent company is identified as IDEX Corporation, indicating a connection to a larger industrial group. The business model revolves around retailing branded promotional items through a Shopware-based online store.

T

Telia

telia.no

64

Telia Norway is a major telecommunications provider offering mobile subscriptions, TV, and internet services targeted at families and general consumers. The website presents a professional and modern digital presence with a focus on service offerings and customer engagement. The technical infrastructure includes modern JavaScript frameworks, analytics via Microsoft Application Insights and Google Tag Manager, and a cookie consent mechanism indicating some level of privacy compliance. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not evident. The absence of WHOIS data limits full trust assessment but the site appears legitimate and well-maintained.

G

Greenpeace e. V.

greenpeace.de

70

Greenpeace e. V. is a well-established non-profit environmental organization based in Germany, focused on climate protection, biodiversity, and peace advocacy. The website serves as a comprehensive platform for public education, activism, and fundraising, targeting environmentally conscious individuals and supporters. It maintains a strong market position as a leading environmental NGO with a large audience and consistent branding. Technically, the website is built on Drupal 10, leveraging modern web technologies and third-party tools such as Usercentrics for consent management and Google Tag Manager for analytics. Hosting is provided by Colt Technology Services, indicating a professional infrastructure. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS and consent management but lacks visible security headers and explicit security policies or incident response contacts. No vulnerabilities or suspicious content were detected. Privacy compliance is partial due to the absence of a clearly linked privacy policy and terms of service. Overall, Greenpeace.de presents a trustworthy, professional, and content-rich website with minor gaps in privacy and security transparency. Strategic improvements in these areas would enhance compliance and user trust.

S

Schornsteinfeger Verlag GmbH

schornsteinfegerverlag.de

65

Schornsteinfeger Verlag GmbH operates a specialized e-commerce platform focused on providing professional literature, gifts, calendars, software, and merchandise tailored to the chimney sweep trade and related audiences. The company positions itself as a niche market leader within this sector, offering a curated selection of products and subscription services. The website is professionally designed with clear navigation and is primarily targeted at German-speaking chimney sweep professionals and enthusiasts. Technically, the website is built on the Shopware platform, leveraging modern web technologies including responsive design and JavaScript enhancements. The site demonstrates moderate performance and basic accessibility features. It employs HTTPS for secure communications and includes cookie consent mechanisms, indicating a reasonable level of digital maturity. From a security perspective, the site enforces HTTPS and implements cookie consent but lacks explicit security headers and a published security policy or incident response information. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is minimal but does not raise concerns, supporting the legitimacy of the domain. Overall, the website presents a low-risk profile with good business credibility and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the security posture and user trust further.

E

Evangelisch-lutherische Landeskirche Hannovers

material-e.de

53

The website material-e.de operates as the official online shop for the Evangelisch-lutherische Landeskirche Hannovers, providing a specialized e-commerce platform focused on church-related materials such as brochures, campaign products, and educational aids. The platform targets church communities, educators, and local organizers, positioning itself as a niche provider within the religious and non-profit sector in Germany. The site features professional branding consistent with the organization's identity and offers clear contact channels including email, phone, and a contact form. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies including Bootstrap and JavaScript. It demonstrates good mobile optimization, accessibility, and SEO practices. The site employs HTTPS with strong SSL configuration and implements security best practices such as CSRF tokens and cookie consent mechanisms. Analytics and marketing tools like Google Analytics, Facebook Pixel, and Hotjar are used with appropriate consent management. From a security perspective, the site maintains a solid posture with essential security headers and no detected vulnerabilities or exposed sensitive data. However, it lacks a publicly available security policy or incident response contact information, which could enhance transparency and preparedness. Privacy compliance is robust, with comprehensive privacy and cookie policies aligned with GDPR requirements. Overall, material-e.de presents a trustworthy, professional, and secure platform serving its target audience effectively. Strategic recommendations include publishing a dedicated security policy, establishing incident response contacts, and enhancing transparency around vulnerability disclosures to further strengthen its security and compliance posture.

E

EP Power Minerals

eppowerminerals.com

50

EP Power Minerals is a well-established European company specializing in the supply of cementitious materials such as fly ash and granulated blast furnace slag, serving the concrete and cement industries globally. With over 40 years of experience and a network of subsidiaries and partners, the company positions itself as a leader in its sector. The website reflects a professional and modern digital presence built on TYPO3 CMS, featuring comprehensive content, clear navigation, and mobile optimization. Privacy and cookie compliance are well implemented with a consent manager and detailed policies. Security posture is solid with HTTPS and no visible vulnerabilities, though some security headers and explicit policies could be improved. The absence of WHOIS registration data introduces some uncertainty about domain legitimacy, but the overall business credibility remains high based on website content and external domain relationships.

B

Bremische Evangelische Kirche

kirche-bremen.de

55

The Bremische Evangelische Kirche website serves as the official online presence of the regional evangelical church in Bremen, Germany. It offers comprehensive information about its communities, faith, events, and social support services. The site targets a general audience interested in religious and community activities, positioning itself as a trusted non-profit organization within the Bremen region. The business model focuses on community engagement, religious services, and social assistance, supported by educational and cultural programs.

The website www.karriere-im-kreis.de serves as the official career portal for the Rhein-Sieg-Kreis regional government in Germany. It provides comprehensive information about job opportunities, dual education, and studies within the public sector, targeting job seekers in the Rhein-Sieg-Kreis area. The site is professionally designed with consistent branding and high-quality content, reflecting a strong regional government presence. Technically, the site uses the Sitepark CMS platform with modern JavaScript libraries and is hosted by a regional IT provider, ensuring moderate performance and good mobile optimization. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and incident response policies are not published. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the site is trustworthy, safe, and well-suited for its audience.

R

Rhein-Sieg-Kreis

rhein-sieg-kreis.de

58

The Rhein-Sieg-Kreis website serves as the official digital portal for the regional government of Rhein-Sieg-Kreis in Germany. It provides residents and stakeholders with access to a wide range of public services, including vehicle registration, political information, event calendars, and family support services. The site is well-structured and targets local citizens and public service users. The business model is that of a public sector entity focused on governance and community services. Technically, the site is built on the Information Enterprise Server by Sitepark GmbH, utilizing modern web technologies such as SVG icons and JavaScript for interactive elements. The site demonstrates good mobile optimization and accessibility features, although performance is moderate. Security posture is adequate with HTTPS usage implied, but lacks visible security headers and explicit security policies. Privacy compliance is weak due to the absence of clear privacy and cookie policies. Overall, the site is trustworthy and professional, but could improve transparency and security practices.

E

ExpiredDomains.com

espresso.church

71

ExpiredDomains.com operates as a specialized online platform providing comprehensive listings and insights for expired and expiring domain names. It serves domain investors, SEOs, and marketers by aggregating domain data across numerous TLDs and linking users to trusted registrars like GoDaddy for domain acquisition. The platform is well-positioned in the domain marketplace sector, trusted by thousands of users, and offers a user-friendly interface with detailed domain profiles and filtering capabilities. Technically, the website employs modern web standards with responsive design and moderate performance, supported by Cloudflare DNS and secure HTTPS connections. Security posture is solid with domain status protections and no evident vulnerabilities, though DNSSEC is not enabled and additional security headers could enhance protection. Privacy and cookie policies are comprehensive and GDPR compliant, with consent mechanisms in place. However, direct contact information such as emails or phone numbers is absent, relying solely on contact forms. Overall, the website is professional, trustworthy, and safe for general audiences, with no adult or explicit content detected.

E

Evangelische Kirche in Deutschland (EKD)

fundus-medien.de

58

Fundus Medien is a cooperative image and media database operated by the Evangelische Kirche in Deutschland (EKD) and 15 regional churches. It provides free access to a large collection of images, graphics, and drawings for church and diaconal media and public relations work. The website targets church media professionals and volunteers, offering a user-friendly platform with registration and upload capabilities. Technically, the site is built on TYPO3 CMS, uses Cookiebot for GDPR-compliant cookie consent, and Matomo for privacy-respecting analytics. The site is well-structured, mobile-optimized, and professionally designed. Security practices include HTTPS enforcement and cookie consent blocking mechanisms, though some security headers could be improved. Overall, the site demonstrates a strong commitment to privacy and compliance, with clear contact information and trust signals from official church domains.

M

Minijob-Zentrale

minijob-zentrale.de

68

Minijob-Zentrale is the official German government portal dedicated to providing comprehensive information and administrative services related to Minijobs and minor employment in Germany. It serves as the central registration and reporting authority for such employment types, targeting both employers and employees. The website offers a broad range of services including registration, calculators, informational articles, newsletters, and a household job marketplace platform. The site is well-positioned as a trusted government resource with authoritative content and a strong market presence in the employment sector.

P

profihost

de-nserver.de

71

profihost is a German technology company specializing in managed hosting, cloud services, and IT infrastructure solutions tailored for businesses, especially in e-commerce. Their website presents a professional and comprehensive portfolio of services including managed servers, security solutions, performance optimization, and specialized hosting for platforms like Shopware and Magento. The company targets business customers seeking reliable and scalable hosting and IT services. Technically, the website is well-structured, mobile-optimized, and uses modern technologies such as Google Tag Manager and consent management tools to ensure compliance and analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response contacts are not evident. The absence of WHOIS data raises some concerns about domain registration transparency, but the overall website professionalism and content quality suggest a legitimate and established business. Strategic recommendations include enhancing security headers, publishing a security policy, and verifying domain registration details for trust enhancement.

F

Fräser24

fraeser24.shop

65

Fräser24 is a German-based small e-commerce business specializing in milling and engraving tools and accessories. The website offers product categories such as Fräsen (milling), Gravieren (engraving), and Zubehör (accessories). Although the site is currently under construction, it provides basic navigation and contact options including a phone hotline and contact form. The business targets manufacturing professionals and hobbyists requiring specialized tools. Technically, the site is built on the Shopware platform with a ThemeWare theme, featuring responsive design and basic SEO elements. Security posture is moderate with HTTPS enforced and domain transfer protection, but lacks DNSSEC and advanced security headers. Privacy compliance is good with a cookie consent mechanism and privacy policy present. Overall, the website is functional but could improve in security and content depth to enhance trust and user experience.

R

Rohr-Frei Völker GmbH

rohrfrei-ab.de

56

Rohr-Frei Völker GmbH is a specialized service provider in the Aschaffenburg district, Germany, offering comprehensive pipe and sewer cleaning, renovation, inspection, and drying services. The company emphasizes 24/7 availability, modern technology, and customer-oriented solutions. Their website reflects a local, trusted business with clear service offerings and certifications. Technically, the site is built on Webflow with responsive design and uses Cloudflare Turnstile captcha for form protection, indicating a moderate level of digital maturity. Security posture is adequate but could be improved with standard security headers and explicit privacy policies. Overall, the website is professional and trustworthy but lacks some compliance documentation and email contact details.

P

Plinko

plinko.co.za

63

Plinko.co.za is an online gaming platform specializing in the Plinko casino game, targeting primarily the South African market. The website offers real money gameplay, bonuses, and downloadable apps, with a focus on engaging and strategic gambling experiences. The business is relatively new, founded in 2024, and operates with a professional and consistent brand presence. The technical infrastructure leverages Cloudflare for DNS and CDN services, uses modern JavaScript modules, and integrates Google reCAPTCHA for form security. The site is well optimized for mobile and desktop users, providing a fast and accessible user experience. Security posture is solid with HTTPS and anti-bot measures, though explicit security policies and incident response contacts are absent. WHOIS data indicates a recent domain registration with some geographic mismatch between registrant country (Ukraine) and target market (South Africa), which is common in online gaming but should be monitored. Overall, the platform is trustworthy, compliant with basic privacy and cookie regulations, and provides a safe environment for adult users interested in online gambling.

D

Deutsche Post AG

deutschepost.de

71

Deutsche Post AG operates as the leading postal and logistics service provider in Germany, offering a wide range of services including letter and parcel delivery, express shipping, and online postage solutions. The company targets both private individuals and business customers, maintaining a strong market position supported by its parent company Deutsche Post DHL Group and its subsidiary DHL. The website reflects a mature digital presence with comprehensive service information and customer support features. Technically, the site employs modern JavaScript frameworks, Adobe Launch for tag management, and OneTrust for consent management, ensuring compliance with privacy regulations. Security measures include HTTPS enforcement and multiple security headers, contributing to a robust security posture. However, the absence of a dedicated security policy and incident response contact information suggests areas for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, supporting Deutsche Post's reputation as a reliable service provider.

The website arztsuchehessen.de is an official regional healthcare service platform operated by the Kassenärztliche Vereinigung Hessen, a public law corporation in Frankfurt/Main, Germany. It provides a comprehensive search tool for residents to find doctors, psychotherapists, and medical on-call services within Hessen. The platform offers detailed filtering options by specialty, location, gender, status, and additional qualifications, supporting users in locating appropriate healthcare providers efficiently. The site is professionally designed with consistent branding and clear navigation, targeting the general public in Hessen seeking medical services. Technically, the website employs modern web technologies including jQuery 3.7.1 and Livewire components, hosted on Anexia infrastructure. The site is mobile-optimized and uses SVG icons for a rich user interface. Performance is moderate with good SEO practices evident through meta tags and structured metadata. However, accessibility features are basic and could be improved to meet higher standards. From a security perspective, the site uses HTTPS and up-to-date JavaScript libraries, reducing risks from known vulnerabilities. However, no explicit security headers were detected, and there is no visible privacy policy, cookie consent mechanism, or incident response information, which are important for GDPR compliance and user trust. No advertising or tracking scripts were found, indicating minimal user tracking. Overall, the website is a trustworthy and professional healthcare directory with strong business credibility but could enhance its privacy compliance and security posture by adding relevant policies, consent mechanisms, and security headers. These improvements would strengthen user trust and regulatory adherence.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ)

familienportal.de

62

The Familienportal.de website is an official German federal government portal managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMFSFJ). It serves as a comprehensive information hub for families, providing detailed guidance on state family benefits, legal regulations, advisory services, and various calculators and application forms. The portal targets families in Germany, including parents, children, and related social groups, positioning itself as the authoritative source for family-related governmental information. The site is professionally designed with consistent branding and excellent content quality, supporting a high level of trustworthiness. Technically, the website employs modern web technologies including JavaScript, SVG icons, and Matomo analytics for user behavior tracking with privacy-conscious consent mechanisms. The site demonstrates good mobile optimization, accessibility, and SEO practices, although no explicit CMS or hosting provider details are evident. Security posture is strong with HTTPS enforced and privacy-respecting analytics, but explicit security headers and incident response contacts are not clearly published. From a security and compliance perspective, the portal implements GDPR-compliant privacy and cookie policies with clear user consent mechanisms and data retention policies. However, it lacks visible vulnerability disclosure or security.txt files, and no direct contact information for security incidents is provided. Overall, the site maintains a solid security posture appropriate for a government information portal. The overall risk assessment is low, with no critical vulnerabilities or suspicious indicators detected. Strategic recommendations include publishing explicit security headers, providing incident response contact details, and establishing a vulnerability disclosure policy to enhance transparency and trust. The portal's technical infrastructure and content quality support its role as a trusted government resource for families in Germany.

S

Stadt Coburg

mein-coburg.de

54

The website www.coburg.de serves as the official municipal portal for the city of Coburg, Germany. It provides residents and visitors with up-to-date news, event information, and public service announcements. The site is well-branded with the city's official logo and maintains consistent content quality aimed at local citizens. The business model is focused on government communication and citizen engagement, positioning it as an essential resource for the community. The target audience includes local residents, businesses, and visitors seeking municipal information. Technically, the website employs a modern CMS platform (Information Enterprise Server by Sitepark GmbH) and integrates Matomo analytics with a GDPR-compliant cookie consent banner. The site uses HTTPS with strong security headers and includes accessibility and mobile optimization features. The technical infrastructure supports a moderate performance level with good SEO practices. From a security perspective, the site demonstrates good practices such as HTTPS enforcement, consent mechanisms, and use of reCAPTCHA for forms. However, it lacks explicit published security policies, incident response contacts, and vulnerability disclosure information. No vulnerabilities or suspicious activities were detected in the content or scripts. The WHOIS data aligns with a legitimate municipal domain, enhancing trust. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic recommendations include publishing explicit security and incident response policies, enhancing direct contact information, and considering a vulnerability disclosure policy to further strengthen trust and security posture.

A

Arbeitgeberverband Oldenburg e.V.

agv-oldenburg.de

57

Arbeitgeberverband Oldenburg e.V. is the largest employer association in northwest Lower Saxony, Germany, representing over 750 companies and approximately 85,000 employees. The association offers a broad range of services including legal advice, process representation, cost avoidance, interest representation, seminars, and networking opportunities. The website reflects a professional and well-established organization with a history dating back to 1919. The target audience primarily consists of employers across various industries in the region. Technically, the website employs modern web technologies such as Matomo for analytics, StimulusJS for frontend interactivity, and Swiper.js for sliders. The site is mobile-optimized, accessible, and SEO-friendly, though no explicit CMS was detected. Hosting appears to be managed via your-server.de and related nameservers. From a security perspective, the site uses HTTPS with good SSL configuration and respects DoNotTrack settings in analytics. However, it lacks visible security headers and does not provide explicit incident response or vulnerability disclosure information. Privacy compliance is strong with a comprehensive privacy policy and terms of service, but no cookie consent mechanism was found. Overall, the website is trustworthy, professional, and well-maintained, with minor areas for improvement in security headers and privacy consent mechanisms. There is no indication of blocking or WAF interference, and the content is safe for general audiences.

L

Landkreis Kulmbach

landkreis-kulmbach.de

52

Landkreis Kulmbach operates as a regional government authority in Germany, providing a wide range of public services including citizen services, vehicle registration, waste management, health and social services, education, and environmental initiatives. The website serves as a comprehensive portal for residents and stakeholders, offering access to information, forms, and contact points. The organization holds a stable market position as a public sector entity with a focus on community engagement and regional development. Technically, the website is built on TYPO3 CMS, leveraging modern responsive design and web standards to ensure accessibility and usability across devices. The infrastructure appears professionally managed, likely hosted under Deutsche Telekom domains, with secure HTTPS connections and optimized content delivery. However, some areas such as cookie consent and security headers could be improved to enhance compliance and security. From a security perspective, the site enforces HTTPS and provides warnings against phishing attempts, indicating awareness of security risks. No critical vulnerabilities or exposed sensitive data were detected. The absence of explicit security policies and incident response contacts suggests room for maturity in security governance. Overall, the site maintains a good security posture appropriate for a government website. The overall risk assessment is low, with recommendations focusing on enhancing privacy compliance through cookie consent mechanisms, publishing security policies, and implementing additional security headers. These improvements will strengthen trust and regulatory adherence while maintaining the site's role as a reliable public service platform.

S

Stadt Coburg

coburg.de

54

The website www.coburg.de serves as the official online portal for the city of Coburg, Germany, providing a wide range of municipal information and services to residents and visitors. It offers access to online services, event information, local news, and administrative resources, positioning itself as a comprehensive digital gateway for the city's public administration and community engagement. The site targets citizens, tourists, and local businesses, emphasizing accessibility and service convenience. Technically, the website is built on the Sitepark CMS platform, utilizing modern web technologies including responsive design, SVG icons, and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization, accessibility features, and SEO practices, contributing to a positive user experience and efficient content delivery. From a security perspective, the site enforces HTTPS and employs a cookie consent mechanism compliant with GDPR standards. While explicit security headers and incident response policies are not clearly published, no critical vulnerabilities or suspicious activities were detected. The use of Matomo analytics reflects a commitment to privacy and data protection. Overall, the website presents a professional, trustworthy, and user-friendly interface for municipal services. Strategic recommendations include enhancing security header implementation, publishing clear security and incident response policies, and considering a vulnerability disclosure program to further strengthen trust and compliance.

L

LUKi e.V.

kirche.social

60

kirche.social is a niche Mastodon social networking instance operated by the non-profit organization LUKi e.V., focusing on Christian, interdenominational, and ecumenical communities. The platform provides a community-driven social experience within the fediverse, emphasizing privacy and open-source technologies. The website is well-structured, with good content quality and clear navigation, primarily targeting German-speaking users interested in church-related social networking. Technically, the site leverages modern frameworks such as React and Mastodon 4.4.8, ensuring a responsive and accessible user experience. Security posture is adequate with HTTPS usage and no visible vulnerabilities, though security headers and incident response information could be improved. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms and terms of service. Overall, the domain WHOIS data is privacy protected, which is justified for this non-profit community platform. The site demonstrates a trustworthy and professional presence within its niche.

K

Kindertagesstätte St. Anna Bad Staffelstein

kita-stanna-badstaffelstein.de

59

Kindertagesstätte St. Anna Bad Staffelstein is a small, local childcare and early education provider affiliated with the Catholic Church (Erzbistum Bamberg) serving families in Bad Staffelstein, Germany. The website provides comprehensive information about childcare services including nursery (Krippe), kindergarten, parental fees, daily routines, and contact details. The business model is non-profit and community-focused, targeting parents seeking trusted childcare solutions. The site is well-branded and consistent with the parent organization’s identity. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies such as JavaScript, SVG icons, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and includes strong accessibility features via the eyeAble plugin. Performance is moderate with good SEO and metadata implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed and no incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its target audience with clear contact information and relevant content. Strategic improvements in security policy transparency and technical security headers would enhance its posture further.

B

Bundeskanzleramt (Federal Chancellery of Germany)

bundeskanzler.de

65

The website represents the official online presence of the Federal Chancellor of the Federal Republic of Germany, currently Friedrich Merz. It serves as a government information portal providing details about the Chancellor, his appointments, and the functions of the Federal Chancellery. The site targets the general public, citizens of Germany, and international visitors interested in German government affairs. The business model is purely informational and public service oriented, with a strong emphasis on trust and official representation. Technically, the website is built on the CoreMedia CMS platform and uses modern web technologies including SVG icons and JavaScript. It is optimized for mobile devices and demonstrates good accessibility and SEO practices. The site employs Piwik (Matomo) analytics with privacy-conscious configurations such as disabling cookies and honoring Do Not Track signals. From a security perspective, the site uses HTTPS with good SSL configuration and implements some privacy best practices. However, it lacks explicit security headers, a security.txt file, and clear incident response contact information. No vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is professional, trustworthy, and secure for its purpose, but could improve privacy compliance and security transparency by publishing privacy and cookie policies, security disclosures, and contact details for incident response.

F

Frankfurt du bist so wunderbar

frankfurtdubistsowunderbar.de

41

Frankfurt du bist so wunderbar is a local online magazine and blog dedicated to urban life in Frankfurt, Germany. It serves as a cultural and culinary guide, providing curated content for residents and enthusiasts of the city. The website leverages Drupal 10 CMS and modern web technologies to deliver a responsive and visually appealing user experience. It maintains an active social media presence across Instagram, Facebook, Pinterest, and TikTok, enhancing community engagement. However, the site lacks explicit privacy policy and terms of service pages, which are important for compliance and user trust. The cookie consent banner indicates GDPR awareness and usage of Google Analytics for anonymized statistics. Security posture is moderate with room for improvement in security headers and incident response transparency. Overall, the website is professionally designed, content-rich, and trustworthy, but could benefit from enhanced privacy and security documentation.

C

CariThek – Bamberger Freiwilligenzentrum

carithek.de

63

CariThek – Bamberger Freiwilligenzentrum is a local non-profit volunteer center based in Bamberg, Germany, affiliated with Caritas Bamberg. The organization focuses on promoting volunteer engagement, providing consulting services, training, and managing various social projects aimed at community support and integration. The website serves as an information hub for volunteers and organizations, offering access to volunteer opportunities, news, events, and educational resources. Technically, the site is built on the alkacon Mercury CMS platform, employs modern web technologies including SVG icons and JavaScript, and integrates Matomo analytics for privacy-conscious user tracking. Accessibility features and cookie consent mechanisms are implemented, reflecting a commitment to inclusivity and compliance with GDPR. Security posture is solid with HTTPS enforced and standard security headers present, though explicit security policies and incident response contacts are not published. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.

Ducati Polska operates as the exclusive importer and distributor of Ducati motorcycles and related accessories in Poland. The website serves as a comprehensive platform for showcasing Ducati's motorcycle models, offering configurators, dealer locators, and test ride booking services. The business targets motorcycle enthusiasts and potential buyers within the Polish market, positioning itself as a key player in the transportation sector with a medium-sized operational scale and a founding date consistent with the domain registration in 2011. Technically, the website employs modern web technologies including Google Analytics, Facebook Pixel, and Google Tag Manager, ensuring effective marketing and user tracking. The site is hosted by a reputable Polish hosting provider and demonstrates good mobile optimization and SEO practices. Security-wise, the site uses HTTPS and reCAPTCHA, but lacks advanced security headers and publicly available security policies or incident response information, indicating room for improvement in security posture. Overall, the site is professional, trustworthy, and compliant with GDPR cookie consent requirements, though it could enhance transparency by publishing privacy and security policies.

C

Caritasverband für die Erzdiözese Bamberg e.V.

caritas-bamberg.de

61

The Caritasverband für die Erzdiözese Bamberg e.V. is a large non-profit organization serving as the leading Caritas association in Upper Franconia and parts of Middle Franconia, Germany. It represents over 500 social services and employs approximately 12,000 full-time staff and 12,500 volunteers, focusing on supporting disadvantaged and needy individuals. The website reflects a well-structured and professionally maintained digital presence with comprehensive information about their services, current news, and accessibility features. Technically, the website is built on the Alkacon Mercury CMS platform, leveraging modern web technologies including JavaScript, SVG icons, and Matomo analytics for privacy-conscious user tracking. The site is hosted on infrastructure associated with the Archdiocese of Bamberg, ensuring regional relevance and control. Performance and mobile optimization are good, with strong accessibility support via the Eye-Able plugin. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a clear privacy policy and GDPR adherence. Overall, the website is trustworthy, professional, and well-aligned with the organization's mission. Strategic improvements could include adding security headers, publishing a security policy, and providing incident response contact details to enhance security posture and user trust.

R

Radio ffn

ffn-history.de

54

The website www.ffn-history.de serves as a historical timeline archive commemorating 38 years of radio ffn, a German radio broadcasting station. It targets German-speaking listeners and fans interested in the station's history and moderators. The site is built on TYPO3 CMS and employs modern web technologies including Turbo Frames and SVG icons, providing a good user experience with clear navigation and mobile optimization. The content is professionally presented and consistent with the brand identity of radio ffn. From a technical perspective, the site uses HTTPS with a Content-Security-Policy header to upgrade insecure requests, ensuring a secure browsing environment. However, additional security headers could be implemented to enhance protection. The site includes tracking scripts from script.ioam.de, indicating moderate user tracking without explicit cookie consent mechanisms, which may affect GDPR compliance. The WHOIS data aligns well with the website's business history and domain age, supporting the legitimacy of the site. Contact information is limited to an email address in the footer, with no phone numbers or physical addresses provided. No forms or incident response contacts are found, and no vulnerability disclosure or security policy pages are evident. Overall, the website is safe, professional, and trustworthy, with room for improvement in privacy compliance and security header implementation. Strategic recommendations include adding cookie consent, enhancing security headers, and providing clearer security and incident response information.

R

rentitnow

rentitnow.de

65

rentitNOW is a German-based event equipment rental company specializing in non-food catering supplies such as rental furniture, bars, kitchen technology, glassware, porcelain, and cutlery. The company operates multiple sales channels including Berlin and Hannover, serving event organizers and catering businesses nationwide. The website demonstrates a professional digital presence with clear business descriptions, regional sales options, and a user-friendly interface. Technically, the site uses modern JavaScript frameworks, Google Tag Manager, and a consent management platform to comply with GDPR requirements. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. Overall, the site is well-structured, mobile-optimized, and trustworthy, supporting a medium-sized business in the hospitality and e-commerce sectors.

E

Ecofleet CZ s.r.o.

ecofleet.cz

11

Ecofleet CZ s.r.o. is a well-established company founded in 2014, specializing in advanced vehicle monitoring and fleet management solutions primarily serving the Czech Republic, Slovakia, and over 25 European countries. The company operates under the parent company Fleet Complete, offering a modular SaaS platform with comprehensive tools including real-time vehicle tracking, automated electronic logbooks, reporting, and mobile applications for iOS and Android. The website reflects a professional and consistent brand image with clear navigation and detailed product information, targeting fleet managers and logistics companies. Technically, the site employs modern JavaScript libraries and tracking tools such as Google Analytics, Microsoft Clarity, and Smartlook, with a cookie consent mechanism ensuring GDPR compliance. Security posture is solid with HTTPS enforced and secure form handling, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the website is trustworthy, well-optimized for mobile, and provides multiple contact channels, supporting a high level of business credibility.

A

a. hartrodt

hartrodt.com

47

a. hartrodt is a large, established international logistics and transport company with over 2,000 employees and a global network spanning more than 100 locations. Their business focuses on providing comprehensive transport and forwarding services including sea freight, airfreight, land transport, project logistics, and warehousing. The company emphasizes reliability and customer service, offering tracking and tracing capabilities to ensure shipment visibility. Technically, the website is well-constructed with modern web technologies including SVG icons and Matomo analytics for privacy-respecting user tracking. The site is mobile-optimized and accessible, with good SEO practices and a professional design. Security posture is solid with HTTPS enforced and secure form handling, though explicit security headers and published security policies are absent. The WHOIS data is unavailable from the queried source, which raises some concerns about domain registration transparency. However, the professional presentation, comprehensive content, and consistent branding strongly indicate a legitimate and trustworthy business. Privacy compliance is well addressed with a clear privacy policy and cookie consent mechanism. Overall, the website represents a mature digital presence for a global logistics provider with minor areas for improvement in security transparency and WHOIS data availability.

B

Bayerische Landeszentrale für neue Medien (BLM)

blm.de

61

The Bayerische Landeszentrale für neue Medien (BLM) is the official regulatory authority overseeing private radio, television, and online media offerings in Bavaria, Germany. The website serves as a comprehensive portal providing information on licensing, youth and user protection, advertising regulation, media research, and public communication. It targets media professionals, private broadcasters, and the general Bavarian public. The site is well-positioned as a trusted government entity with a clear mission and extensive service offerings. Technically, the website is built on the CONTENS CMS platform, utilizing modern web technologies including JavaScript, CSS, and SVG icons. It features responsive design optimized for mobile devices and includes accessibility considerations. The site employs HTTPS and integrates etracker analytics with a user consent mechanism, reflecting a mature digital infrastructure. From a security perspective, the site enforces HTTPS and includes basic security headers, though there is room for enhancement with additional headers like Content-Security-Policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies and a consent banner. However, no explicit incident response or vulnerability disclosure policies were found. Overall, the website demonstrates a high level of professionalism, security, and compliance appropriate for a government regulatory body. Strategic recommendations include enhancing security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to further strengthen trust and security posture.

M

Media Broadcast

media-broadcast.com

64

Media Broadcast is a leading German full-service provider specializing in broadcast and media solutions for television, radio, and digital platforms. The company offers a comprehensive range of services including signal transmission, network planning, professional services, and innovative 5G campus network solutions. Their market position as a leader in Germany's media infrastructure sector is supported by a professional and content-rich website that clearly targets broadcasters, media companies, and industrial clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and optimized for mobile devices. The site demonstrates good SEO practices and moderate performance, with a cookie consent mechanism in place to comply with privacy regulations. However, the absence of a privacy policy and terms of service pages indicates gaps in privacy compliance. From a security perspective, the site enforces HTTPS with HSTS and uses standard security headers, reflecting a good security posture. No vulnerabilities or exposed sensitive data were detected. The lack of a security policy or incident response contact information suggests room for improvement in security transparency and readiness. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security disclosures. The missing WHOIS data raises questions about domain registration legitimacy, warranting further verification. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contacts, and improving accessibility features to strengthen compliance and user trust.