Security Directory

F

Firstlead GmbH

adcell.com

63

ADCELL, operated by Firstlead GmbH since 2003, is a well-established affiliate marketing network targeting the German-speaking markets. It offers a comprehensive platform for publishers, advertisers, and agencies with over 2400 partner programs and a large active publisher base. The website demonstrates a professional and modern technical infrastructure, leveraging popular JavaScript libraries and frameworks, and is hosted behind Cloudflare DNS with HTTPS enforced. Security posture is strong with consent management implemented, though explicit privacy and terms of service policies are not clearly linked. The site is mobile-optimized and provides a good user experience with clear navigation and rich content. Multiple industry awards and certifications enhance trust and credibility.

D

DEMISPORT

demisport.eu

56

DEMISPORT is a Slovak-based e-commerce business specializing in sports equipment and apparel for various sports including football, handball, tennis, basketball, and more. The company has established partnerships with national sports federations such as the Slovak Football Association and Slovak Handball Association, positioning itself as a trusted supplier for athletes, clubs, and schools. Their business model focuses on retail and wholesale sales, complemented by printing and branding services for sports teams. The website is professionally designed, mobile-optimized, and provides clear navigation and contact information, supporting a positive user experience. Technically, the website is built on the Shoptet e-commerce platform and incorporates common web technologies including jQuery, Google Analytics, Google Tag Manager, and Facebook SDK. While the site performs moderately well and includes essential SEO and accessibility features, it uses an outdated version of jQuery (1.11.3), which poses a potential security risk. The site employs HTTPS and cookie consent mechanisms, demonstrating compliance with GDPR requirements, although explicit security headers and detailed security policies are not evident. From a security perspective, the website maintains a good baseline with HTTPS and no visible sensitive data exposure. However, the outdated JavaScript library and lack of comprehensive security headers suggest room for improvement. The absence of a public WHOIS record due to privacy protection is common for small businesses and does not raise immediate concerns. Overall, the site is safe, trustworthy, and compliant with privacy norms but would benefit from technical updates and enhanced security practices. Strategically, DEMISPORT should prioritize updating its JavaScript libraries, implementing robust security headers, and publishing clear terms of service and security policies to strengthen trust and compliance. These steps will enhance the security posture and support sustainable growth in the competitive sports retail market.

M

Mizuno EU

mizuno.com

65

Mizuno Europe operates an official regional e-commerce website targeting customers across the EMEA region, offering a wide range of sporting goods and apparel. The website is built on a modern e-commerce platform (Salesforce Commerce Cloud) and integrates advanced marketing and analytics tools such as Google Tag Manager and Visual Website Optimizer. The site demonstrates a professional design and consistent branding aligned with Mizuno's global presence. Technically, the site employs HTTPS with a Content Security Policy header, uses reCAPTCHA for bot mitigation, and loads various trusted external libraries to enhance user experience and security. However, the site lacks explicit privacy and cookie policies within the analyzed content, which may impact compliance and user trust. No contact information or security incident response details were found, limiting direct user support avenues. Overall, the site is secure, functional, and professionally maintained but could improve transparency and compliance documentation.

D

DampfAlarm - alles für guten Dampf

dampfalarm.de

46

DampfAlarm.de is a German e-commerce website specializing in vaping products including devices, e-liquids, and accessories. The site targets vaping enthusiasts and customers in Germany, operating as a niche online retailer. The website is built on a modern tech stack including jQuery, Bootstrap, and integrates third-party search services like Doofinder. Hosting is provided by Timme Hosting, a reputable German hosting provider. The site demonstrates good mobile optimization and accessibility features, including a dedicated accessibility tool, enhancing user experience for diverse audiences. Security posture is adequate with HTTPS enabled and no visible sensitive data exposure, though security headers are missing and privacy compliance documentation is absent. The WHOIS data is consistent and transparent, indicating a legitimate domain registration aligned with the business. Overall, the site is professional and functional but would benefit from improved privacy and security policy disclosures and enhanced SEO metadata. Strategic recommendations include adding comprehensive privacy and cookie policies, security headers, and clear contact information to improve trust and compliance.

B

Bauministerkonferenz

bauministerkonferenz.de

53

The Bauministerkonferenz website serves as an official governmental platform for coordinating housing and building policies among German federal states. It provides information about the conference's activities, including a welcome message from the Bavarian State Minister for Housing, Construction and Transport, who holds the chairmanship for 2024/25. The site targets government officials, policy makers, and stakeholders interested in housing policy. Technically, the site is built on legacy ASP.NET WebForms technology with Telerik UI components and uses older JavaScript libraries such as jQuery 1.12.2. While the site is functional and contains relevant content, it lacks modern technical optimizations and visible security headers. The cookie consent mechanism and privacy policy indicate GDPR compliance, but no terms of service or security policies are publicly available. No contact emails or phone numbers are explicitly provided on the analyzed page, limiting direct communication channels. Overall, the site is moderately professional and trustworthy as a government resource but would benefit from technical and security improvements.

L

Lebensmittelklarheit

lebensmittelklarheit.de

38

Lebensmittelklarheit is a German consumer information portal dedicated to providing clarity and transparency about food labeling. It is closely associated with the Verbraucherzentrale, a reputable consumer advice organization, positioning it as an authoritative source for consumers seeking to understand food product information and report misleading products. The website offers services such as question submission, product complaint reporting, surveys, and educational content, targeting German-speaking consumers interested in food safety and labeling clarity. Technically, the website is built on the Drupal CMS platform, utilizing modern web technologies including jQuery UI, Slick Carousel for content sliders, and Blazy for lazy loading images. It employs Matomo analytics for user tracking with privacy considerations. The site is mobile-optimized and accessible, with good SEO practices and structured data enhancing search engine visibility. From a security perspective, the site enforces HTTPS and uses asynchronous loading for analytics scripts, minimizing performance impact. While explicit security headers were not fully visible in the provided content, the overall SSL configuration is good, and no vulnerabilities or exposed sensitive data were detected. Privacy policies and cookie consent mechanisms are comprehensive and GDPR compliant, reflecting a strong commitment to user privacy. Overall, Lebensmittelklarheit demonstrates a high level of professionalism, trustworthiness, and technical maturity. It serves as a valuable resource for consumers in Germany, with a solid security posture and compliance framework. Strategic recommendations include enhancing security headers, continuous auditing of third-party scripts, and ensuring robust form security to maintain and improve its security and compliance standing.

Lernwerk Hund Mensch is a small German dog training service provider offering a range of activities including individual coaching, workshops, and specialized training such as Ruhetraining. The website is built on the Jimdo CMS platform and hosted by Jimdo GmbH, leveraging their CDN and widget services. The digital infrastructure is modern and mobile-optimized, with basic accessibility and SEO features implemented. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though additional security headers and explicit incident response policies are absent. The website content is professional, relevant, and trustworthy, targeting dog owners interested in training and leisure activities with their pets. Overall, the site presents a low-risk profile with no detected vulnerabilities or suspicious WHOIS data.

V

Verkehrsverbund Tirol

vvt.at

63

Verkehrsverbund Tirol (VVT) operates as the regional public transportation platform for Tirol, Austria, coordinating, planning, financing, and ordering public transit services. The website reflects a mature, well-established organization celebrating 30 years of service, offering a broad range of ticketing options and mobility services tailored to the regional audience. Their market position is strong within the regional transportation sector, supported by comprehensive service offerings and active community engagement through news and social media channels. Technically, the website employs modern JavaScript libraries, consent management tools like Cookiebot, and integrates Google Tag Manager and Hotjar for analytics, indicating a digitally mature infrastructure. Security posture is robust with HTTPS enforced and consent mechanisms in place, though some security headers could be further enhanced. Privacy compliance is well addressed with clear policies and user consent options. Overall, the site is professional, trustworthy, and user-friendly, serving its public service mission effectively.

The website aesopcanada.com serves as a login portal for Frontline Absence Management, a service focused on managing employee absences primarily within educational institutions. The business is positioned as an established provider in the education sector, with a domain age dating back to 2008, supporting its legitimacy. The site offers basic content focused on user authentication and links to corporate resources, reflecting a SaaS business model targeting educational organizations and their staff. Technically, the site employs legacy JavaScript libraries such as jQuery 1.2.6 and jQuery UI, hosted on infrastructure indicated by AWS DNS nameservers. While HTTPS is enforced and a Thawte SSL certificate is referenced, the site lacks modern security headers and uses outdated libraries, which may expose it to vulnerabilities. Performance and mobile optimization are basic, with limited SEO and accessibility features. From a security perspective, the site demonstrates some best practices like HTTPS and masked password inputs but lacks comprehensive security policies, incident response information, and cookie consent mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and no privacy protection, enhancing trustworthiness. However, the absence of updated security controls and privacy compliance features suggests room for improvement. Overall, the website is functional and moderately trustworthy but would benefit from modernization of its technical stack, enhanced security headers, explicit privacy and cookie policies, and improved user experience to strengthen its security posture and compliance standing.

S

Stadt Aichach

aichach.de

59

The website www.aichach.de is the official digital presence of the city of Aichach, Germany. It serves as a comprehensive portal for residents, visitors, and businesses, offering detailed information about city administration, local services, cultural events, tourism, and community news. The site is well-structured with clear navigation and multiple service categories, reflecting a mature municipal digital infrastructure. The presence of accessibility tools like ReadSpeaker and EyeAble indicates a commitment to inclusivity. Technically, the site uses a variety of JavaScript libraries and the iKISS CMS platform, hosted on GoDaddy name servers, with HTTPS enabled and cookie consent mechanisms in place. Security posture is solid with no critical vulnerabilities detected, though there is room for improvement in publishing explicit security policies and incident response contacts. Overall, the site is trustworthy, professional, and compliant with GDPR requirements.

T

Team KULTUR.GEMEINSCHAFTEN bei der Kulturstiftung der Länder

kulturgemeinschaften.de

48

KULTUR.GEMEINSCHAFTEN is a German government-backed funding program aimed at supporting small and non-profit cultural institutions in developing digital content offerings. The program is administered by the Kulturstiftung der Länder and focuses on enabling cultural organizations to acquire production technology, receive expert project support, and build competencies in digital content production. The website presents a professional and consistent brand image, targeting cultural institutions across Germany. Technically, the site is built on WordPress, hosted on AWS infrastructure, and uses common JavaScript libraries and plugins such as jQuery and Slick Slider. While HTTPS is enforced and cookie consent is managed via Borlabs Cookie, the site lacks explicit privacy policy and terms of service pages, and security headers are not detected in the provided data. Analytics are implemented using Google Tag Manager, indicating moderate user tracking. Overall, the website is well-designed, content-rich, and trustworthy, but could improve its privacy and security posture by publishing comprehensive policies and implementing additional security headers.

A

AGIL Bamberg

agil-bamberg.de

62

AGIL Bamberg is a small, specialized tourism service provider offering city tours, museum pedagogical programs, and cultural events primarily in Bamberg and surrounding regions. The website is well-structured and targets a broad audience including adults, children, and individual guests. The business positions itself as a leading local operator with a focus on authentic cultural experiences. Technically, the site uses common JavaScript libraries such as jQuery and integrates Google Analytics and Tag Manager for tracking. The presence of a cookie consent banner and links to privacy and terms pages indicate a reasonable level of privacy compliance. Security posture is adequate with HTTPS enforced but lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences.

S

Stadt Lichtenfels

lichtenfels.de

60

The website www.lichtenfels.de serves as the official online portal for the city of Lichtenfels, Germany. It provides residents and visitors with comprehensive information about city administration, public services, local news, events, and urban planning. The site targets a general audience including local citizens and stakeholders interested in municipal affairs. The business model is that of a government municipal service platform, focusing on transparency and accessibility. The website is well-branded with consistent use of official logos and colors, and it integrates a robust accessibility tool to support users with disabilities.

F

Forchheim Erleben: Königsstadt Forchheim - das Tor zur Fränkischen Schweiz

forchheim-erleben.de

42

The website www.forchheim-erleben.de serves as the official tourism portal for the city of Forchheim and the surrounding Fränkische Schweiz region in Germany. It provides comprehensive information about local hotels, gastronomy, breweries, events, city tours, and brochures to assist visitors in planning their trips. The site targets tourists and visitors interested in cultural, culinary, and outdoor activities in the region. The business model focuses on regional tourism promotion and supporting local hospitality and retail sectors. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and incorporates modern web libraries such as jQuery, Slick Carousel, and FontAwesome Pro. It uses Google Analytics for visitor tracking and CookieFirst for cookie consent management, indicating a moderate level of digital maturity. The site appears to be mobile-optimized with a responsive design and provides a clear navigation structure. From a security perspective, the site uses HTTPS and anonymizes IP addresses in Google Analytics, but lacks visible security headers and published privacy or terms of service policies in the provided content. There is no evidence of a security.txt file or explicit incident response contacts. While no critical vulnerabilities or suspicious patterns were detected, the absence of some security best practices and compliance documentation suggests room for improvement. Overall, the website is a trustworthy and professional regional tourism portal with good content quality and user experience. However, enhancing privacy compliance, security headers, and providing clear contact and policy information would strengthen its security posture and user trust. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, and establishing a vulnerability disclosure process.

ITAPA is a well-established Slovak technology conference platform operated by Information Technologies And Public Administration (APEL). It organizes major events focused on innovation, digitalization, and AI, serving technology professionals, government officials, and businesses. The website reflects a mature digital presence with professional design, clear navigation, and active content updates. Technically, it uses modern web technologies including Bootstrap, jQuery, Google Tag Manager, and CDN services to ensure performance and responsiveness. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and policies could be improved. The domain registration aligns with the business claims, enhancing trustworthiness. Overall, ITAPA demonstrates a strong market position in Slovakia's technology event sector with good compliance and user engagement.

U

UzemnePlany.sk

uzemneplany.sk

39

UzemnePlany.sk is a specialized Slovak information portal dedicated to urban planning, territorial development, and related legislative and architectural topics. It serves a professional and public audience including architects, urban planners, local governments, and students. The portal offers extensive resources such as urban plans, articles, legal documents, and event information, positioning itself as the largest information source in Slovakia for this sector. Technically, the site uses a custom CMS with JavaScript libraries like jQuery and jQuery UI, providing moderate performance and basic mobile optimization. Security-wise, the site employs HTTPS but lacks advanced security headers and explicit security policies, which could be improved to enhance protection and compliance. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy practices.

L

Landratsamt Bamberg

landkreis-bamberg.de

63

The Landkreis Bamberg website serves as the official digital portal for the regional government authority in Bamberg, Germany. It provides comprehensive information and services related to local politics, administration, citizen services, cultural events, tourism, and economic development. The site targets residents, local businesses, and visitors, offering a broad range of public sector services including online appointment scheduling and access to administrative forms. The website is professionally designed with consistent branding and clear navigation, supporting German language primarily with Google Translate integration for other languages. Technically, the site is built on the ikiss CMS platform, utilizing legacy but stable JavaScript libraries such as jQuery 1.10.2 and UI components like Flexslider and Highslide. The site demonstrates moderate performance and good mobile optimization, though some accessibility features are basic. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the website uses HTTPS and implements a cookie consent mechanism aligned with GDPR requirements. However, it lacks explicit security headers and published security policies or incident response contacts. No vulnerability disclosure or security.txt files are present, indicating room for improvement in transparency and security maturity. The WHOIS data aligns with the website developer Advantic Systemhaus GmbH, supporting legitimacy though registrant details are minimal. Overall, the website is a trustworthy and professional government portal with good content quality and privacy compliance. Strategic enhancements in security policy publication, security headers, and incident response readiness would strengthen its security posture and user trust.

S

Stadtwerke Aschaffenburg

stwab.de

60

Stadtwerke Aschaffenburg is a regional municipal utility company providing a broad range of essential services including electricity, gas, water, district heating, public transport, parking, waste management, and leisure facilities. The website reflects a well-established business with a clear focus on serving residential and commercial customers in the Aschaffenburg region. Their digital presence includes a service portal, online shop, and mobile apps, indicating a moderate level of digital maturity. The site is built on a specialized CMS platform tailored for municipal utilities, with modern JavaScript libraries and accessibility features integrated. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers could be improved and formal security policies are not published. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the company's credibility and customer engagement.

N

neusta destination one

et4.de

58

neusta destination one operates a specialized B2B tourism data management platform primarily targeting tourism industry professionals in Germany and related markets. The platform offers a framework for managing tourism experiences and related data, accessible via a secure login portal. The website content is primarily in German with multi-language support, reflecting a regional focus with potential international reach. The business maintains a professional online presence with clear contact information and links to privacy and terms documents, supporting trust and compliance. Technically, the platform is built on legacy ASP.NET WebForms technology with jQuery and CKEditor integrations, indicating a mature but somewhat dated infrastructure. While HTTPS is enforced and cookie consent mechanisms are in place, the use of outdated JavaScript libraries and absence of modern security headers highlight areas for improvement in security posture. The lack of WHOIS data limits domain trust assessment, but the overall website professionalism and contact transparency suggest a legitimate business. Strategic recommendations include updating technology stack components, enhancing security headers, and conducting security audits to mitigate vulnerabilities and improve compliance.

S

Spreewelten Lübbenau

spreewelten.de

48

The website spreewelten.de represents a hospitality business located in Germany, specifically focused on leisure and wellness services such as swimming with penguins, sauna experiences, and hotel accommodations in the Spreewald region. The site is primarily in German and targets general audiences interested in wellness tourism. The business model appears to be service-oriented hospitality with a niche attraction. Technically, the website uses standard web technologies including HTML5, CSS3, and JavaScript libraries like FontAwesome and Swiper. The site is moderately optimized for mobile and SEO but lacks advanced technical frameworks or CMS identification. Security-wise, the website lacks critical security headers, privacy and cookie policies, and active analytics tracking, indicating a low maturity level in security and privacy compliance. There are no signs of WAF or content blocking, and the site is accessible. Overall, the risk is moderate due to missing privacy and security best practices, but the business content is legitimate and safe for general audiences.

W

Weiterbildung Brandenburg

weiterbildung-brandenburg.de

63

Weiterbildung Brandenburg is a regional platform providing connected vocational training and continuing education advisory services for companies and employees in Brandenburg, Germany. It is supported by key regional partners including the Federal Employment Agency, the Brandenburg Economic Development Corporation, and the Brandenburg Future Center. The website offers free, independent, and practical advice on professional development, funding opportunities, and digitalization. It also provides a searchable portal for educational offerings and event information. The platform targets businesses and working individuals seeking to enhance their skills and qualifications.

S

Stadt Lindau

stadtlindau.de

57

Stadt Lindau operates as the official municipal government website for the city of Lindau (Bodensee), Germany. It provides comprehensive information and services to residents, tourists, and businesses, including administrative services, cultural events, tourism, and mobility information. The website is well-structured and professionally designed, targeting a broad audience including local citizens and visitors. The business model centers on public service and community engagement, positioning the city as a well-organized local government entity. Technically, the site uses a variety of JavaScript libraries and appears to be built on the IKISS CMS platform, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced, but lacks some modern security headers and explicit incident response information. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, with clear contact information and no suspicious content detected.

Frauennotruf Leverkusen e.V. operates as a specialized non-profit organization providing counseling and support services to women and girls affected by sexualized violence. The organization offers free, confidential, and anonymous support via telephone and online channels, including legal advice and prevention programs. Their market position is local and focused on social support within Leverkusen, Germany. The website is multilingual, enhancing accessibility for diverse audiences. Technically, the site uses a modern frontend stack with Bootstrap and jQuery, hosted on a domain managed via GoDaddy nameservers. The site is mobile-optimized and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and cookie consent implemented, though security headers and explicit security policies are lacking. Overall, the site demonstrates a strong commitment to privacy and user safety, including an exit button for quick navigation away from the site. The domain registration appears legitimate and consistent with the organization's profile.

Frauenberatung 'Frauen-Zimmer' e.V. Burscheid is a specialized non-profit organization providing counseling and support services to women and girls affected by sexualized violence in the Rheinisch-Bergischer Kreis region of Germany. The organization offers a range of services including crisis intervention, accompaniment to authorities, online counseling, and self-defense courses. It operates with clear contact channels and donation mechanisms, supported by recognized partner organizations. Technically, the website employs a modern tech stack including jQuery, Bootstrap, and Font Awesome, ensuring a responsive and accessible user experience. The site is well-structured with clear navigation and basic SEO practices. Cookie consent and privacy policies are implemented, reflecting GDPR compliance. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. However, security headers are not explicitly detected, and no formal security or incident response policies are published. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a trustworthy and professional front for a small non-profit organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party libraries to strengthen security posture further.

W

Wildwasser Bochum e.V.

wildwasserbochum.de

65

Wildwasser Bochum e.V. is a specialized non-profit counseling center based in Bochum, Germany, focused on supporting girls (from age 16) and women who have experienced sexualized violence. The organization offers confidential, anonymous, and low-threshold services including personal counseling, prevention, self-help facilitation, and legal accompaniment. The website is built on the Jimdo Creator CMS platform, hosted by Jimdo GmbH, and features a clear structure with German language content tailored to its target audience. Technical infrastructure includes integration of third-party widgets such as POWr.io and Google Maps, with a cookie consent mechanism compliant with GDPR standards. Security posture is adequate with HTTPS enforced, though security headers are not explicitly detected. No forms or email contacts are present on the main page, with contact primarily via phone and physical address. Overall, the website presents a professional and trustworthy digital presence for a small non-profit organization.

W

Wirtschaftsförderung Land Brandenburg GmbH

wdb-brandenburg.de

62

Wirtschaftsförderung Land Brandenburg GmbH operates a professional website focused on workforce development, training, and integration services in the Brandenburg region of Germany. The site offers comprehensive information and personalized consulting services to businesses and individuals seeking to enhance skills and qualifications. The organization positions itself as a regional government-related economic development agency with a strong emphasis on supporting local labor markets and educational initiatives. Technically, the website is built on Drupal 10 CMS with modern JavaScript libraries including jQuery UI and Blazy for image lazy loading. It employs Matomo analytics for privacy-conscious user tracking and features a responsive design with good accessibility and SEO practices. The site uses HTTPS with excellent SSL configuration, though security headers are not explicitly detected, indicating room for improvement. From a security perspective, the website demonstrates good privacy compliance with a clear privacy policy, cookie consent mechanisms, and no visible vulnerabilities or exposed sensitive data. However, it lacks a published security policy or incident response contact details. The WHOIS data shows standard domain registration with GoDaddy name servers, consistent with the business purpose, though registrant details are minimal. Overall, the website is trustworthy, professional, and well-maintained, serving its target audience effectively. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular vulnerability assessments to further strengthen the security posture.

Z

Zweckverband Lausitzer Seenland Brandenburg

senftenberger-see.de

45

Senftenberger-see.de is a professionally maintained tourism and hospitality website focused on the Senftenberger See region in Germany. It offers a variety of accommodation options including holiday homes, camping sites, hotel rooms, and unique tree houses, targeting families and leisure travelers. The site integrates an external booking platform for seamless reservations and provides comprehensive information about leisure activities, gastronomy, and events in the area. Technically, the website employs modern JavaScript libraries such as jQuery and Masonry, with responsive design and conditional loading of Google Maps respecting user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers and explicit policies could be improved. The domain registration data aligns well with the business claims, enhancing trustworthiness. Overall, the site presents a reliable and user-friendly platform for regional tourism promotion.

Unna Marketing Gesellschaft für Veranstaltungen und Stadtmarketing mbH is a small local company specializing in event organization, city marketing, tourism, and economic promotion for the city of Unna, Germany. Their website provides comprehensive information about local events, fairs, markets, and the Stadthalle venue, targeting residents, visitors, and local businesses. The company maintains partnerships with local businesses and institutions, enhancing its community presence. Technically, the website is built on the Contao Open Source CMS platform and utilizes common JavaScript libraries and Google APIs for charts and maps. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. The presence of a cookie consent mechanism and privacy policy indicates attention to GDPR compliance, although terms of service and security policies are absent. From a security perspective, the site uses HTTPS and includes some privacy-focused tools but lacks explicit security headers and incident response information. No critical vulnerabilities or suspicious content were detected. The WHOIS data is limited but consistent with the business focus, supporting legitimacy. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic recommendations include enhancing security headers, adding detailed security and incident response policies, improving mobile optimization, and expanding analytics and marketing transparency to strengthen digital maturity and compliance.

L

Leviceonline.sk

leviceonline.sk

50

Leviceonline.sk is a regional news and information portal serving the Levice district and surrounding areas in Slovakia. It provides a broad range of local content including news, sports, culture, classifieds, job offers, and event listings. The site leverages Joomla CMS and integrates multimedia content such as videos and photo galleries, supported by advertising revenue primarily through Google Adsense and eTarget. The target audience is local residents and visitors interested in regional updates and community events. The website maintains a consistent brand presence with active social media engagement, mainly on Facebook.

D

Dachverband der autonomen Frauenberatungsstellen NRW e.V.

frauenberatungsstellen-nrw.de

52

The website www.frauenberatungsstellen-nrw.de represents the Dachverband der autonomen Frauenberatungsstellen NRW e.V., a well-established non-profit umbrella organization supporting autonomous women's counseling centers in North Rhine-Westphalia, Germany. The organization provides comprehensive support, advocacy, and educational services aimed at empowering women and girls, promoting gender equality, and combating violence. The site reflects a strong regional presence with a clear mission and professional presentation. Technically, the website is built on Drupal 10, leveraging modern web technologies including jQuery, Matomo Analytics for privacy-conscious tracking, and lazy loading for performance optimization. The site is mobile-optimized, accessible, and SEO-friendly, indicating a mature digital infrastructure. Hosting details are limited but DNS points to vegasystems.de nameservers. From a security perspective, the site enforces HTTPS and employs cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, security headers could be enhanced to improve protection. Privacy policies and cookie documentation are comprehensive and clearly accessible, demonstrating a commitment to data protection and user privacy. Overall, the website scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility. It serves its target audience effectively with trustworthy and relevant content. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers and considering a vulnerability disclosure policy to further strengthen security posture.

S

Stadtwerke Waltrop GmbH & Co. KG

stadtwerke-waltrop.de

46

Stadtwerke Waltrop GmbH & Co. KG is a regional municipal energy provider based in Waltrop, Germany, offering electricity and natural gas services with a focus on renewable energy sources. The company targets both private and business customers within the local area, providing a range of energy tariffs and an online customer portal for account management. The website reflects a solid market position as a trusted local utility with a customer-centric approach. Technically, the website is built on the TYPO3 CMS platform and incorporates common web technologies such as jQuery and Google Analytics. While the site is functional and moderately optimized for performance and SEO, it uses an outdated jQuery version which poses a security risk. The site includes basic accessibility and mobile optimization features but could benefit from modernization and enhanced security headers. From a security perspective, the site enforces HTTPS and uses CAPTCHA on contact forms to mitigate spam. Privacy and cookie policies are present and indicate GDPR compliance. However, the absence of explicit security policies, incident response contacts, and the use of outdated libraries reduce the overall security posture. No WAF or blocking mechanisms were detected, and no suspicious content or vulnerabilities were found in the visible content. Overall, the website is professional, trustworthy, and serves its business purpose well. Strategic improvements in security practices, technology updates, and enhanced privacy disclosures would strengthen the site’s compliance and resilience against threats.

L

Lausitzer Seenland

lausitzerseenland.de

48

Lausitzer Seenland is a regional tourism website promoting a young holiday region located between Dresden and Berlin in Germany. The site offers comprehensive information on outdoor activities such as cycling, skating, water sports, and cultural experiences, alongside accommodation and activity booking services. The business operates as a regional tourism authority, targeting families, tourists, and outdoor enthusiasts. The website is well-structured with clear navigation and good content quality, supporting a positive user experience. Technically, it employs modern JavaScript libraries like Swiper and jQuery UI, with responsive design and moderate performance. Security posture is adequate with HTTPS enforced and secure form handling, though it lacks some security headers and a cookie consent mechanism. Privacy compliance is supported by a comprehensive privacy policy and terms of service, but cookie consent is missing. The domain registration data is consistent and trustworthy, aligning with the website's regional focus. Overall, the site is professional, trustworthy, and suitable for general audiences seeking tourism information.

V

Verschenkmarkt

verschenkmarkt.info

50

The website 'Verschenkmarkt' is a German-language regional non-profit reuse marketplace platform that facilitates gifting, swapping, sharing, lending, repairing, and second-hand transactions. It targets a general audience interested in sustainability and waste reduction. The platform is actively moderated and provides user notifications for listing approvals or rejections. Technically, it is built on the Osclass CMS with common web technologies such as jQuery, Bootstrap, and FineUploader, and includes a chatbot for user assistance. The site is mobile responsive with good navigation and content quality. Security-wise, HTTPS is enforced and Matomo analytics is used with cookies disabled, but the site lacks security headers and a cookie consent mechanism. WHOIS data is not publicly available, indicating privacy protection, which is reasonable for this non-commercial entity. Overall, the site is trustworthy and functional but could improve security and privacy compliance aspects.

R

rku.it GmbH

rku-it.de

72

rku.it GmbH is a medium-sized German IT service provider specializing in tailored IT solutions for the energy, public transport, and municipal sectors. The company positions itself as a knowledgeable partner combining market expertise with IT competence to deliver digital transformation and managed services. Their website reflects a professional and modern digital presence powered by TYPO3 CMS, featuring comprehensive service descriptions, customer references, and partner networks. Technically, the site uses modern JavaScript libraries and includes bot protection on contact forms. Security posture is solid with HTTPS and CAPTCHA, though security headers and explicit incident response policies are absent. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the website and domain data indicate a legitimate, established business with a strong market position and credible digital infrastructure.

L

Landesvermessung und Geobasisinformation Brandenburg

geobasis-bb.de

58

The Landesvermessung und Geobasisinformation Brandenburg (LGB) operates as the official geospatial data and mapping authority for the Brandenburg region in Germany. The website serves as a comprehensive portal offering a wide range of geodata products, including 3D models, aerial imagery, cadastral data, and thematic maps. It targets government agencies, geospatial professionals, and the general public interested in regional geoinformation. The business model is that of a public sector service provider, delivering authoritative geospatial data and digital services to support regional planning and administration. Technically, the website is built on a modern stack utilizing HTML5, CSS3 with the Foundation 5 framework, JavaScript, and jQuery UI. It is powered by the SixCMS content management system and hosted likely by Deutsche Telekom, ensuring reliable infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy is well-managed through a GDPR-compliant cookie consent mechanism and the use of Matomo analytics activated only upon user consent. From a security perspective, the site enforces HTTPS and employs a clear cookie consent opt-in mechanism. While explicit security headers are not visible in the provided data, the overall posture is good with no exposed sensitive data or vulnerabilities detected. However, the site could improve by publishing explicit security policies and incident response information and implementing additional security headers. Overall, the website presents a professional, trustworthy, and privacy-conscious digital presence for a government entity. It effectively balances user experience, compliance, and security, making it a reliable source for geospatial information in Brandenburg.

B

BEST Tausch- und Verschenkmarkt

bottroper-verschenkmarkt.de

45

The website www.bottroper-verschenkmarkt.de operates as a local classified ads platform primarily serving the Bottrop region in Germany. It facilitates community-driven exchange, gifting, and barter of goods, targeting local residents interested in sustainable and cost-free transactions. The platform leverages the Osclass CMS with a frontend built on Bootstrap 5 and jQuery, supplemented by a chatbot for user assistance. The site structure is clear, with categorized listings and user-friendly navigation, supporting a positive user experience for its target audience. From a technical perspective, the website employs modern web technologies and is mobile-optimized, though performance is moderate. The absence of advanced security headers and cookie consent mechanisms indicates room for improvement in security and privacy compliance. The site uses HTTPS, ensuring encrypted communications, but lacks explicit incident response or vulnerability disclosure information. Contact options are limited to a web form, with no direct emails or phone numbers provided. Security posture is adequate but not robust; the site would benefit from implementing security best practices such as security headers and cookie consent to enhance GDPR compliance. No adult or explicit content is present, making the site safe for general audiences. WHOIS data is minimal but does not raise immediate concerns, though the lack of detailed registrant information limits full trust evaluation. Overall, the site is a functional, community-focused marketplace with good content quality and usability but requires enhancements in security and privacy practices to strengthen trust and compliance.

F

Förderverein für regionale Entwicklung e.V.

mobile-ansichten.de

57

The website www.mobile-ansichten.de represents a service initiative by the Förderverein für regionale Entwicklung e.V., focused on providing mobile-optimized web views tailored for smartphones and tablets. The service targets municipalities and organizations seeking to improve mobile user experience and Google search rankings without additional costs or complex app installations. The business model is non-profit oriented, offering free creation and reduced licensing fees for project partners, supported by personalized telephone assistance and continuous updates. Technically, the website employs a custom CMS platform with common JavaScript libraries such as jQuery, jQuery UI, and parallax effects. It integrates cookie consent management and basic analytics cookies, ensuring GDPR compliance. The site is moderately optimized for mobile devices and SEO, with a clear navigation structure and good content quality. Hosting appears to be managed via domaincontrol.com DNS services, typical for small organizations. From a security perspective, the site lacks explicit HTTP security headers and does not provide a public security policy or incident response contacts. The contact form includes CAPTCHA and GDPR consent, but no vulnerability disclosure or security.txt is present. SSL configuration details are not directly visible in the provided data, and no WAF or blocking mechanisms were detected. Overall, the website demonstrates a solid business credibility and privacy compliance posture, with room for improvement in security best practices and transparency. The domain registration data is minimal but consistent with the business claims. No suspicious or malicious indicators were found, and the content is safe for general audiences.

V

Verschenkmarkt Gelsenkirchen

verschenkmarkt-gelsenkirchen.de

43

Verschenkmarkt Gelsenkirchen operates a regional non-profit online marketplace focused on facilitating the free exchange of goods to reduce waste and promote sustainability within the Gelsenkirchen area and surrounding regions. The platform offers users the ability to publish, edit, and delete listings without requiring registration or displaying advertisements, emphasizing community engagement and environmental responsibility. The website is built on the Osclass CMS platform with a technology stack including jQuery, Bootstrap, and FineUploader, providing a functional and moderately performant user experience with good mobile optimization. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data or vulnerable libraries. However, it lacks important security headers and a cookie consent mechanism, which are recommended for enhanced protection and regulatory compliance. The absence of explicit contact emails or phone numbers limits direct communication channels, relying solely on a contact form. No vulnerability disclosure or security policy pages are present, indicating room for improvement in transparency and incident response readiness. Overall, the website presents a trustworthy and professional image consistent with its non-profit mission, supported by clear navigation, relevant content, and GDPR-compliant privacy and terms pages. The lack of advertising and tracking scripts further strengthens its privacy posture. Strategic enhancements in security headers, cookie consent, and contact information would elevate its compliance and security maturity.

CreativWerkstatt Herten is a local educational and creative workshop provider based in Herten, Germany. The organization offers a variety of courses spanning creative arts, environmental education, dance, theater, science, and media, targeting a broad audience including schools and the general public. The website is professionally designed using WordPress and modern web technologies, providing a good user experience with clear navigation and mobile optimization. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and incident response information are absent. Overall, the website and domain registration details are consistent and legitimate, reflecting a trustworthy and credible educational service provider.

The website nastavsitlak.cz is a Czech-language application designed to assist professionals in correctly setting the pressure of driving gas (Biogon®) used in beverage dispensing systems. It is branded under Linde Gas a.s., a well-known industrial gases supplier, indicating a strong business presence in the energy sector. The site provides interactive sliders for input parameters and displays calculated pressure values, targeting business users involved in beverage dispensing operations. Technically, the site uses a modern but basic tech stack including jQuery, Bootstrap, and Google Analytics for tracking. The site is mobile optimized and has basic SEO and accessibility features. Privacy and cookie policies are present and implemented with OneTrust consent mechanisms, reflecting compliance with GDPR requirements. However, no contact information or terms of service pages are provided, limiting direct user engagement and transparency. From a security perspective, the site uses HTTPS and cookie consent but lacks visible security headers and explicit security policies. The absence of WHOIS data for the domain reduces trustworthiness from a domain registration perspective, though the website content and branding strongly suggest legitimate business use. No critical vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website is functional and professional for its niche purpose but would benefit from enhanced security headers, clearer contact information, and domain registration transparency to improve trust and compliance posture.

U

UniCredit Factoring Czech Republic and Slovakia, a. s.

unicreditfactoring.cz

72

UniCredit Factoring Czech Republic and Slovakia, a. s. is a financial services company specializing in factoring and financing solutions for businesses primarily in the Czech Republic and Slovakia. The website presents a professional image with clear branding and structured data confirming company identity and contact information. The business targets companies needing receivables financing and supplier financing services. Technically, the site uses modern JavaScript libraries including jQuery and Google reCAPTCHA, and implements a cookie consent mechanism via Cookiebot, indicating awareness of privacy compliance requirements. However, the absence of a visible privacy policy and terms of service pages limits full compliance transparency. Security posture is moderate with HTTPS enforced but lacking explicit security headers. WHOIS data is unavailable, which raises some concerns about domain registration transparency but does not detract significantly from the site's legitimacy given the professional content and branding. Overall, the site is functional, secure, and business-appropriate but could improve in privacy and security documentation.

S

Stadt Castrop-Rauxel

castrop-rauxel.de

61

The website www.castrop-rauxel.de is the official municipal portal for the city of Castrop-Rauxel in Germany. It provides comprehensive information and services for residents, businesses, and visitors, including citizen services, event news, city planning, and digital applications. The site is built on Drupal 10 with modern frontend technologies and includes accessibility and mobile optimization features. The presence of a cookie consent mechanism via Klaro and the use of Matomo analytics with DoNotTrack respected indicate a privacy-conscious approach. However, explicit privacy policy and terms of service pages were not detected in the provided content. Security posture is moderate with HTTPS implied but lacking visible security headers or published security policies. The domain WHOIS data is consistent with a legitimate government entity, and no suspicious patterns were found. Overall, the site is professional, trustworthy, and serves as a key digital interface for the city government.

D

DVGW (Deutscher Verein des Gas- und Wasserfaches e.V.)

dvgw-regelwerk.de

58

The DVGW-Regelwerk Plus website serves as an authoritative platform for technical rules and standards in the gas and water sectors in Germany. Operated by the Deutscher Verein des Gas- und Wasserfaches e.V. (DVGW), a well-established organization founded in 1859, the site provides subscription-based access to regulatory documents and supports professionals in the energy industry. The business model centers on membership and paid access to technical standards, positioning DVGW as a key player in ensuring safety and compliance in the gas and water supply industry. Technically, the website is built on TYPO3 CMS with legacy JavaScript libraries such as jQuery 1.10.2 and Handlebars.js. The site is hosted on INWX nameservers and employs HTTPS with a cookie consent mechanism, reflecting a moderate level of digital maturity. Performance and mobile optimization are adequate but could benefit from modernization, particularly updating JavaScript libraries and enhancing accessibility features. From a security perspective, the site enforces HTTPS and uses cookie consent tools, but lacks explicit security headers and visible incident response policies. The login form uses POST method, and no sensitive data is exposed in the HTML. Analytics are handled via Matomo with moderate user tracking, aligned with privacy compliance. Overall, the security posture is good but could be improved by updating libraries, adding security headers, and publishing security policies. The overall risk assessment is low, with no signs of malicious content or suspicious domain registration. Strategic recommendations include modernizing the tech stack, enhancing security headers, publishing incident response and vulnerability disclosure information, and improving mobile and accessibility features to strengthen trust and compliance.

U

UniCredit Leasing

ucleshop.cz

69

UniCredit Leasing operates an e-commerce platform focused on selling used vehicles from leasing contracts and providing leasing services, primarily targeting individuals and businesses in the Czech Republic. The website is professionally designed with consistent branding and clear navigation, reflecting a mature digital presence aligned with the parent company UniCredit. The technical infrastructure leverages modern JavaScript libraries, Google reCAPTCHA for bot protection, and Cookiebot for consent management, indicating a commitment to user experience and privacy compliance. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response policies are not publicly visible. The absence of WHOIS data limits domain trust verification but the overall site content and branding suggest legitimacy. Strategic recommendations include enhancing security headers, publishing security policies, and improving contact information visibility to strengthen trust and compliance.

U

UniCredit Fleet Management

unicreditfleet.cz

74

UniCredit Fleet Management CZ operates as a specialized leasing and fleet management service provider under the UniCredit Group umbrella, targeting business clients in the Czech Republic. The company offers operational leasing, fleet management, and sales of nearly new and used vehicles, positioning itself as a reliable and flexible partner in the fleet management sector. The website content is professionally presented in Czech, with clear navigation and consistent branding aligned with the parent group. Technically, the site uses modern JavaScript libraries such as jQuery and integrates Google reCAPTCHA and Cookiebot for security and privacy compliance. However, the absence of a visible privacy policy and WHOIS registrant data slightly reduces trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers and published incident response information. Overall, the website is functional and business-appropriate but would benefit from enhanced transparency and security best practices.

U

UniCredit Pojišťovací makléřská, spol. s. r. o.

unicreditbroker.cz

73

UniCredit Pojišťovací makléřská, spol. s. r. o. operates as an insurance brokerage service primarily serving the Czech and Slovak markets. The company offers insurance products related to financed items and other insurance services, targeting both individual and corporate clients. The website reflects a professional and consistent brand image aligned with the UniCredit group, indicating a stable market position within the finance sector. The digital presence is supported by modern web technologies and compliance with privacy regulations, including GDPR. Technically, the site uses contemporary JavaScript libraries and cookie consent management tools, ensuring a user-friendly and compliant experience. Security posture is adequate with HTTPS enforcement and use of reCAPTCHA, though there is room for improvement in security headers and explicit security policies. Overall, the website is trustworthy, well-structured, and compliant with relevant privacy standards, though direct contact information is not prominently displayed. The absence of WHOIS data is likely due to privacy protection, which is justified for this business type.

The website www.luxusni-bydleni-praha.com presents a professional online presence focused on luxury real estate sales, design, and development in Prague. It targets affluent buyers and investors interested in premium properties in prime locations. The site is built on Drupal 7 CMS and integrates modern marketing and tracking tools such as Google Tag Manager and Facebook Pixel. However, the absence of WHOIS registration data raises concerns about domain legitimacy and ownership transparency. The site implements cookie consent mechanisms but lacks explicit privacy policy and terms of service pages, indicating partial privacy compliance. Security posture is moderate with HTTPS usage but no visible security headers or advanced protections. Overall, the website is functional and well-designed but would benefit from improved security practices and clearer compliance documentation.

1

Galerie 100 dřevostaveb, které se vám líbí

100drevostaveb.cz

43

The website www.100drevostaveb.cz serves as an interactive catalog showcasing wooden houses favored by Czech users. It allows visitors to view various wooden house projects, vote on them, and engage with the content via social media plugins. The business model revolves around community engagement and providing inspiration for wooden house construction enthusiasts in the Czech Republic. The site targets a general audience interested in architecture and wooden homes. Technically, the site employs a range of JavaScript libraries including jQuery, Facebook SDK, Google Analytics, and advertising scripts from Google Adsense and Gemius. The site is served over HTTPS with no visible SSL issues, but lacks advanced security headers and formal privacy or cookie policies. No WHOIS data is available, which reduces trustworthiness from a domain registration perspective. Overall, the site is functional, moderately optimized for mobile, and provides a good user experience, but would benefit from improved privacy compliance and security transparency.

P

Pro-idea s.r.o.

koloshop.cz

64

Koloshop.cz is a professional e-commerce retailer specializing in bicycles, bicycle components, and related services such as servicing and rentals. The website targets cycling enthusiasts and general consumers primarily in the Czech Republic and neighboring countries, offering a wide range of products including mountain, road, trekking, and children's bikes. The company behind the site is Pro-idea s.r.o., a medium-sized retail entity with a consistent brand presence and a well-structured online platform. Technically, the website employs modern JavaScript frameworks and libraries, integrates Google Tag Manager for analytics, and uses several third-party services for recommendations, chat support, and user verification. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

U

UniCredit Leasing

unicreditleasing.cz

73

UniCredit Leasing is a financial services company operating in the Czech Republic, specializing in vehicle and equipment financing through leasing and loans. The website presents a professional image with clear branding consistent with the UniCredit Group, offering services such as operativní leasing, finanční leasing, and insurance brokerage. The target audience includes both individual and corporate clients seeking financing solutions. Technically, the website uses modern JavaScript libraries including jQuery, Modernizr, and Google reCAPTCHA, and implements GDPR-compliant cookie consent via Cookiebot. However, the absence of WHOIS data and registrant information reduces trustworthiness from a domain registration perspective. Security posture is generally good with HTTPS and reCAPTCHA, but lacks explicit security headers and published security policies. Contact information and privacy policy pages are not found in the provided content, which are areas for improvement.