Security Directory

T

The Unbrexit

unbrexit.pub

61

The Unbrexit is a small hospitality business operating a British-style pub located in Ahaus, Germany. It offers authentic British pub culture, including original beers, food, and various events such as Pub Quiz, live music, and themed dinners. The business also collaborates with nearby venues like Sherlock’s Steakhouse and smartel hotel, enhancing its service offerings. The website is built on the chayns platform, leveraging modern web technologies and providing a good user experience with mobile optimization and event management features. However, the absence of privacy and cookie policies indicates compliance gaps. Security posture is generally good with HTTPS enforced, but security headers are missing. WHOIS data is privacy protected, which slightly reduces transparency but does not strongly impact legitimacy given the business type. Overall, the website and business appear legitimate and professionally managed, serving a mature audience interested in nightlife and hospitality in the local region.

T

TKWY

tkwy.de

56

TKWY is a small hospitality business based in Germany, specializing in fresh, high-quality regional food products with an emphasis on digital ordering and customer engagement. The company operates a modern website built on the chayns platform, integrating various digital services such as online ordering, voucher sales, and package delivery. The website reflects a digital-first approach, positioning TKWY as an innovative showcase business within the hospitality sector, supported by Tobit.Software's technology ecosystem. Technically, the site employs modern web technologies including React and Stripe.js for payment processing, hosted via Gandi.net with secure HTTPS configuration. However, the site lacks explicit privacy and cookie policies, and no direct contact emails or phone numbers are provided, which may impact user trust and compliance. Security posture is generally good with HTTPS and no exposed sensitive data, but the absence of security headers and incident response information suggests room for improvement. Overall, TKWY presents a professional and user-friendly digital presence with moderate risk, primarily due to incomplete privacy compliance and limited contact transparency.

B

BamBoo!

bamboo-ahaus.de

66

BamBoo! is a hospitality business operating an urban beach and restaurant in Ahaus, Germany, offering a unique dining and event experience with a subtropical theme. The website showcases their offerings including organic food, cocktails, event hosting, and family-friendly amenities. The business leverages the chayns platform for digital reservations, ordering, and content management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS and domain protections, but lacks some security headers and formal privacy and cookie policies. Overall, the website is professional and trustworthy but could improve compliance and security transparency.

O

offsite Ahaus

offsite-ahaus.de

70

offsite Ahaus is a modern sports bar and lounge located in Ahaus, Germany, offering a unique blend of hospitality services including live sports broadcasting on multiple OLED screens, digital ordering of drinks and food, and entertainment options such as gaming and cinema experiences. The business leverages digital technologies and is integrated within the Tobit software ecosystem, indicating a strong digital maturity. The website is professionally designed, mobile-optimized, and uses modern web technologies including React and the Chayns framework. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure, though there is room for improvement in security headers and privacy compliance. Overall, the site is trustworthy and well-positioned in its local hospitality market, targeting a mature audience interested in nightlife and sports entertainment.

S

scio s.r.o.

scioskola.cz

66

ScioŠkoly is a Czech Republic-based network of innovative primary and secondary schools focused on preparing students for the challenges of the 21st century. The organization operates multiple schools across the country, emphasizing freedom, responsibility, and modern educational methods. The website reflects a mature and well-established educational institution with a strong market position supported by accreditations and positive community feedback. Technically, the site uses modern web technologies including Umbraco CMS, Bootstrap, and Google Tag Manager for analytics and consent management. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the website is professional, trustworthy, and compliant with GDPR requirements.

S

staatsministerium.de is available for purchase - Sedo.com

staatsministerium.de

8

The website is a domain parking and sales landing page hosted by Sedo.com for the domain staatsministerium.de. It primarily serves domain buyers and investors interested in acquiring this domain. The platform operates as a domain marketplace and brokerage service, with a business model centered on domain sales and parking. The website content is minimal and focused on domain availability rather than providing organizational or business information related to the domain name itself. Technically, the site uses modern web technologies including JavaScript modules and Cloudflare DNS services, ensuring moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and domain transfer restrictions in place, but lacks advanced security headers and published security policies. Privacy compliance is limited, with no privacy or terms of service policies found, though a cookie consent mechanism is present. Overall, the domain registration is legitimate and consistent with the domain marketplace business model. The site is safe with no adult content or suspicious elements detected.

T

TUI

tui.com

72

TUI.com is the official website of TUI, a leading European travel and tourism company offering a wide range of services including package holidays, hotel bookings, flights, cruises, car rentals, and additional travel-related services. The website is professionally designed, mobile-optimized, and provides a comprehensive user experience targeting a general audience interested in travel. Technically, the site employs modern web technologies such as Web Components, asynchronous JavaScript loading, and integrates third-party services like Tealium for tag management and Gigya for customer identity management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though explicit security headers and policies are not fully confirmed in the provided data. Privacy compliance is moderate due to the absence of clearly identified privacy and cookie policies in the analyzed content. WHOIS data is unavailable, which limits domain registration verification, but the website's professional presentation and branding strongly indicate legitimacy. Overall, TUI.com represents a mature, enterprise-level digital platform in the hospitality sector with good security and technical implementation but could improve transparency around privacy and security policies.

D

dm-drogerie markt GmbH + Co. KG

lust-an-zukunft.de

68

The website 'Lust an Zukunft' is a community engagement platform operated by dm-drogerie markt GmbH + Co. KG, a large retail company in Germany. The site focuses on supporting local initiatives for a livable and open society, aligning with the company's corporate social responsibility efforts. The platform is well-branded and consistent with dm's retail and community values, targeting a general audience interested in social initiatives and retail services. Technically, the site employs modern web technologies including JavaScript modules and CSS, with a self-hosted Matomo analytics solution integrated via Cookiebot for GDPR-compliant user tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms effectively, though it lacks explicit security headers and a published security policy. No critical vulnerabilities or suspicious content were detected, and the domain registration aligns with the brand identity. Overall, the website demonstrates a mature digital presence with strong privacy compliance and a trustworthy business profile.

B

buechler.pro gmbh

buechler.pro

46

buechler.pro gmbh is a specialized TYPO3 CMS agency based in Switzerland, offering professional web development, web application development, and agency services. The company positions itself as a partner for digital projects and transformation, targeting businesses and agencies seeking high-quality TYPO3 solutions. Their market position is supported by certifications such as TYPO3 Certified Developer and TYPO3 Bronze Membership, along with a portfolio of client references. Technically, the website is built on TYPO3 CMS with Bootstrap and modern web technologies, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers are missing and no explicit incident response or security policies are published. Privacy compliance is partially addressed with a privacy policy present but lacking cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-structured, though WHOIS data is unavailable, slightly reducing domain trustworthiness.

Wirkstatt evangelisch is a newly established institution within the Evangelical Lutheran Church in Bavaria, formed by merging three church departments to provide consolidated support, training, and consulting services to church employees and communities. The website presents a clear mission focused on collaboration, spirituality, and organizational efficiency within the church context. Technically, the site is built on WordPress with a modern theme, showing good mobile optimization and accessibility, though some SEO and security header improvements are possible. Security posture is solid with HTTPS and no visible vulnerabilities, but lacks some advanced security headers and a cookie consent mechanism. Overall, the site is trustworthy, compliant with GDPR, and professionally presented, reflecting its non-profit church affiliation.

B

BelWü-Koordination

belwue.de

60

BelWü is a regional data network provider serving scientific and educational institutions in Baden-Württemberg, Germany. It connects universities, colleges, schools, and public libraries, offering a range of network and internet services tailored to the academic sector. The website presents a clear and professional overview of its services and organizational structure, targeting institutional users within the region. Technically, the website is built with standard HTML, CSS, and JavaScript, featuring a responsive design and clear navigation, though it lacks advanced frameworks or CMS indications. Security posture is moderate with HTTPS assumed but missing explicit security headers and cookie consent mechanisms. The WHOIS data aligns with the academic nature of the service, using university name servers and Deutsche Telekom infrastructure, supporting legitimacy. Overall, the site is trustworthy and functional but could improve privacy compliance and security best practices.

O

Orchestre de Paris

monsieur-onde.com

48

Monsieur Onde is a culturally focused website dedicated to promoting classical music and the repertoire of the Orchestre de Paris through interactive games, videos, and educational content. The site targets a general audience interested in music education and classical symphonic works. The business model appears to be educational and promotional, leveraging multimedia content to engage users and enhance their knowledge of classical music. The website is professionally designed with consistent branding aligned with the Orchestre de Paris, indicating a strong association with this reputable cultural institution. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript, Google Tag Manager, and Google Analytics. It is hosted by OVH sas, a well-known hosting provider. The site is mobile optimized and includes SEO best practices such as meta tags and Open Graph data. However, there is room for improvement in accessibility and security headers implementation. Performance is moderate, and the site is fully accessible without any blocking or WAF challenges. From a security perspective, the site uses HTTPS and protects the domain with registrar status flags. However, it lacks security headers and a cookie consent mechanism, which are important for GDPR compliance and overall security posture. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is transparent and consistent with the website's claims, enhancing trustworthiness. Overall, the website presents a moderate risk profile with good business credibility but some gaps in privacy compliance and security best practices. Strategic improvements in cookie consent, security headers, and contact transparency would enhance trust and compliance.

O

Orchestre de Paris

orchestredeparis.com

58

Orchestre de Paris is a prestigious French symphony orchestra presenting concerts primarily at the Philharmonie de Paris. The organization offers a rich cultural experience with over 150 years of history and a roster of 120 musicians. Their services include live concerts, subscription sales, educational outreach, and digital concert streaming. The website reflects a mature digital presence with professional design, clear navigation, and integration with social media and ticketing partners. Technically, the site uses modern web technologies and includes cookie consent and privacy policies, indicating awareness of GDPR compliance. Security posture is generally good with HTTPS enforced, though the absence of visible security headers suggests room for improvement. The WHOIS data for the domain is missing or unavailable, which is unusual and slightly reduces trustworthiness, but the overall content and external affiliations support legitimacy. No adult or explicit content is present, making the site safe for general audiences.

A

Ambulante Ethikberatung für Hochfranken e.V.

ethikberatung-hochfranken.de

44

Ambulante Ethikberatung für Hochfranken e.V. is a small non-profit association founded in 2022, providing ambulatory ethics consultation services in the Hochfranken region of Germany. The organization focuses on supporting patients, their families, and healthcare professionals in ethical decision-making related to end-of-life care. The website presents a professional and consistent brand image, with clear contact information and detailed descriptions of services and team members. Technically, the site uses modern web technologies including Bootstrap and jQuery, hosted by a regional provider, and is mobile-optimized with good SEO practices. Security posture is moderate with HTTPS implied but lacking explicit security headers and policies. Privacy compliance is good with a privacy policy available, though no cookie consent mechanism is present. Overall, the website is trustworthy and well-suited for its target audience.

C

Caritas gGmbH St. Heinrich und Kunigunde

caritasheim-hof.de

62

Caritas gGmbH St. Heinrich und Kunigunde is a well-established non-profit organization providing comprehensive social care services in Bavaria, Germany. Their offerings include senior care, disability support, childcare, and educational services, positioning them as a regional leader in healthcare and social services. The website reflects a professional and consistent brand image with clear navigation and relevant content tailored to seniors, people with disabilities, children, and youth. Technically, the site uses modern JavaScript libraries, consent management tools, and tracking services, hosted likely on infrastructure associated with Deutsche Telekom AG. Security posture is good with HTTPS enforced and no visible vulnerabilities, though explicit security headers and privacy disclosures are lacking. Overall, the site is trustworthy and serves its audience effectively but would benefit from enhanced privacy compliance and security transparency.

K

Kindergarten und Kinderkrippe "Regenbogen" Naila

kiga-regenbogen-naila.de

59

Kindergarten und Kinderkrippe "Regenbogen" Naila is a small, community-focused childcare and educational institution located in Naila, Germany. Affiliated with the Catholic Archdiocese of Bamberg, it provides kindergarten and nursery services with a strong emphasis on pedagogical concepts, parental cooperation, and community engagement. The website serves as an information portal for parents and guardians, detailing operational hours, fees, registration procedures, and educational philosophy. Technically, the website is built on the alkacon Mercury CMS platform, leveraging modern web technologies including HTML5, CSS3, JavaScript, and Matomo analytics for privacy-conscious user tracking. The site is well-optimized for mobile devices and accessibility, featuring a cookie consent mechanism and structured data for enhanced SEO and user experience. From a security perspective, the site enforces HTTPS and employs cookie consent for external content, but lacks explicit security headers and incident response information. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with a comprehensive privacy policy and GDPR-aligned cookie management. Overall, the website presents a trustworthy, professional, and user-friendly digital presence for a local educational institution. Strategic improvements could focus on enhancing security headers, publishing a security policy, and adding incident response contacts to further strengthen trust and compliance.

D

Durchstarter - Freiwilliges Schuljahr

freiwilligennet.de

41

Durchstarter - Freiwilliges Schuljahr is a German non-profit educational initiative aimed at engaging students from the 8th grade onwards in voluntary social and active school year programs. The website serves as an informational and engagement platform, offering a variety of social, cultural, and ecological volunteer opportunities in cooperation with local organizations. The platform targets young students seeking meaningful extracurricular experiences and supports partnerships with local social institutions. Technically, the website is built on a modern stack including Vue.js, Bootstrap, and Pimcore CMS, with privacy-conscious analytics via Matomo and a compliant cookie consent mechanism. Security posture is adequate with HTTPS enforced and privacy best practices observed, although explicit security headers and incident response policies are not published. Overall, the site is professional, accessible, and trustworthy, with a clear focus on educational and social engagement.

K

Kreative Kommunikation GbR

kreative-kommunikation.com

47

Kreative Kommunikation GbR is a small German marketing and advertising agency with over 30 years of experience, specializing in creative marketing and advertising solutions across classic and digital media. Their services include strategy and consulting, classic media marketing, online marketing, direct marketing, and promotional items. The website is primarily in German and targets business clients seeking tailored marketing concepts. Technically, the website uses Bootstrap for responsive design and standard web technologies but lacks advanced CMS or analytics integrations. Security posture is basic with no detected security headers or incident response policies, and DNSSEC is not enabled on the domain. Privacy compliance is minimal with a basic privacy policy but no cookie consent mechanism. Overall, the website is functional but could benefit from improved security and privacy practices to enhance trust and compliance.

F

Freies Deutsches Hochstift

freies-deutsches-hochstift.de

59

Freies Deutsches Hochstift is a German cultural and educational institution dedicated to German literature and history, operating museums and archives. The website presents a professional and consistent brand image with good content quality targeted at the general public interested in German culture. Technically, the site uses modern tools such as Matomo for analytics and Cookiebot for GDPR-compliant cookie consent management, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and no obvious vulnerabilities, though security headers and explicit security policies are missing. Privacy compliance is supported by a comprehensive cookie consent mechanism but lacks a visible privacy policy page. Overall, the site is trustworthy and safe with no adult or questionable content detected.

C

Diese Webseite befindet sich im Aufbau

commonworks.de

35

The website commonworks.de is currently under construction and presents only a placeholder page with minimal content. There is no business description, contact information, or legal policies available, which limits the ability to assess the company's market position or services. The site uses basic HTML, CSS, and JavaScript with custom fonts and canvas effects, hosted on cloudpit servers. No CMS or advanced frameworks are detected. Security posture is weak due to lack of HTTPS information, security headers, and privacy compliance indicators. No forms or data collection mechanisms are present, and no analytics or tracking scripts are detected. Overall, the site is in an early development stage with low trust and credibility indicators.

H

HAJ Reisen

haj.de

51

HAJ Reisen operates as a regional travel agency closely affiliated with Hannover Airport, offering a broad range of travel services including flight tickets, package tours, cruises, and city trips. The website targets travelers primarily from the Hannover region, providing curated travel offers with partner agencies and reputable travel brands. The business model leverages the airport's infrastructure and regional presence to serve customers seeking convenient travel options. Technically, the website is built on TYPO3 CMS, hosted on Hetzner servers, and demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is moderate with HTTPS usage but lacks visible security headers and formal policies. Privacy compliance is weak due to missing privacy and cookie policies. Contact information is comprehensive with numerous partner agency addresses and phone numbers. Overall, the site is professional and trustworthy but would benefit from enhanced privacy and security disclosures.

P

Pulary Group s.r.o.

pulary.cz

43

Pulary Group s.r.o. is a Czech-based marketing and communication agency with a long-standing tradition of over 30 years, offering professional services in communication, marketing, advertising, and public relations. The company focuses on activating marketing tools to enhance client effectiveness and strengthen brand performance in performance marketing. The website is professionally designed, mobile-optimized, and built on WordPress, hosted by WEDOS, a Czech hosting provider. Social media presence on Facebook and Instagram supports their digital footprint. However, the site lacks explicit privacy and cookie policies, security headers, and incident response information, which are important for compliance and security transparency. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and stability.

P

PURPOSIA Group a.s.

purposia.eu

47

PURPOSIA Group a.s. is a well-established European investment holding company with Czech origins, managing a diversified portfolio of 42 companies primarily in the construction and real estate sectors. The group offers comprehensive services covering the entire lifecycle of construction projects, including design, property management, industrial flooring, aluminium systems, and manufacturing of concrete prefabricates. Their operations span multiple European countries, reflecting a strong regional presence and market leadership. The website presents a professional and consistent brand image with clear business information and subsidiary links. Technically, the website employs modern web technologies such as Swiper.js for interactive content and Bootstrap components for responsive design. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there is a lack of visible privacy and cookie policies, which is a compliance gap. Security headers are not evident, and no explicit vulnerability disclosure or incident response information is provided. The security posture is moderate with HTTPS usage implied but no detailed security headers or policies visible. No forms collect sensitive data, reducing immediate risk, but improvements in security best practices and compliance documentation are recommended. The WHOIS data is not publicly available due to EURid privacy policies for .eu domains, which is typical and does not raise suspicion. Contact information is clearly provided, enhancing business credibility. Overall, the website is professional and trustworthy from a business perspective but would benefit from enhanced privacy compliance and security transparency to improve its risk profile and user trust.

Y

YES Forum

yes-forum.eu

46

YES Forum is a European non-profit network dedicated to empowering young people with fewer opportunities by promoting social inclusion and professional skill development. The organization operates primarily in Germany and targets youth organizations, social workers, and policymakers across Europe. Their services include advocacy, project coordination, publications, and membership networking. The website reflects a professional and consistent brand image with clear contact information and social media presence, supporting their legitimacy and trustworthiness. Technically, the website uses standard web technologies (HTML5, CSS3, JavaScript) with no explicit CMS detected. It is mobile-optimized and performs moderately well, though accessibility features are basic. The site uses HTTPS with no visible security vulnerabilities but lacks some security headers and a cookie consent mechanism, which are recommended for enhanced security and GDPR compliance. From a security perspective, the site shows a good posture with encrypted connections and no exposed sensitive data. However, the absence of published security policies, incident response contacts, and vulnerability disclosure mechanisms indicates room for improvement. The WHOIS data is unavailable due to privacy protection, which is common for non-profits but slightly reduces trust signals. Overall, YES Forum's website is a credible and professional platform supporting its mission, with moderate technical maturity and a solid security baseline. Strategic improvements in privacy compliance and security transparency would further enhance trust and compliance.

MarineRegions.org is a specialized marine geospatial data platform operated by the Flanders Marine Institute (VLIZ). It provides authoritative marine georeferenced place names, maritime boundaries, and related geographic information to researchers, policymakers, and maritime stakeholders. The platform integrates data from established sources such as the VLIMAR Gazetteer and MARBOUND database, positioning itself as a trusted resource in marine geographic information. The website is professionally designed with clear navigation and regularly updated content, including news and user testimonials, enhancing its credibility within the marine science community. Technically, the site employs standard web technologies including HTML5, CSS3, JavaScript, jQuery, and JWPlayer for media content. It uses Piwik (Matomo) analytics with cookies disabled, reflecting a moderate privacy-conscious approach. However, the site lacks explicit privacy and cookie policies, which is a compliance gap. Security-wise, HTTPS is enabled with no exposed sensitive data, but security headers are absent, and DNSSEC is not enabled, indicating room for improvement in security hardening. Overall, the site is trustworthy and functional but would benefit from enhanced privacy compliance and security best practices.

E

European Ocean Biodiversity Information System (EurOBIS)

eurobis.org

52

EurOBIS operates as the European node of the Ocean Biodiversity Information System, providing a valuable open-access platform for marine species distribution data within European waters. The website serves primarily researchers, data providers, and policy makers interested in marine biodiversity. It offers dataset downloads, quality control information, and links to related marine data initiatives. The platform is managed by VLIZ, a reputable marine research institute in Belgium, reinforcing its credibility and scientific focus. Technically, the website employs standard web technologies such as HTML, CSS, JavaScript with jQuery, and Font Awesome for icons. The site is moderately optimized for performance and mobile use, with clear navigation and structured content. However, there is room for improvement in accessibility and SEO optimization. Hosting appears to be managed by a research institution, ensuring stable infrastructure but lacking advanced modern CMS or frameworks. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. No forms or analytics scripts reduce attack surface and privacy risks, but the absence of privacy and cookie policies indicates incomplete compliance with GDPR best practices. The domain registration is consistent and long-standing, supporting the site's legitimacy. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, EurOBIS is a credible, scientifically focused data portal with good business credibility and content quality. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance its security posture and user trust.

R

Rüsthaus GmbH & Co. KG

ruesthaus.de

49

Rüsthaus GmbH & Co. KG operates a specialized e-commerce platform focused on scouting and outdoor equipment, serving primarily the German market. The website offers a broad range of products including scouting uniforms, tents, outdoor gear, and related accessories, targeting scouting groups and outdoor enthusiasts. The company maintains a medium-sized retail operation with a clear brand presence and consistent messaging. Technically, the website is built on the Shopware CMS platform, leveraging modern web technologies and providing a responsive user experience optimized for mobile devices. Security is well-managed with HTTPS enforced and CSRF protections in place, although some standard security headers are missing. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The site uses Piwik (Matomo) for analytics, reflecting a moderate level of user tracking. Overall, the website is professional, trustworthy, and well-positioned within its niche market.

Z

Zlaté šperky s dušou: Ručne vyrobené príbehy od roku 1957

zlatokov.sk

50

The website represents a small Slovakian business specializing in handcrafted gold jewelry with a long heritage dating back to 1957. The site is designed with modern responsive technologies such as Bootstrap 5, providing a good user experience and clear navigation for its target audience. However, the website lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact information or social media presence was detected in the provided content, limiting direct communication channels. The domain registration data is consistent and supports the business's legitimacy and history, enhancing trustworthiness. Overall, the website is functional and professionally designed but requires improvements in security and privacy compliance to meet modern standards.

Brill Audio Visual Kft. is a well-established Hungarian audiovisual service provider specializing in event technology solutions including sound, lighting, projection, LED walls, interpretation, voting systems, IT solutions, and stage design. Founded in 1995, the company has expanded its presence across Central Europe through the Brill AV Media European Group. The website reflects a professional business with a clear focus on corporate and international event clients. Technically, the site is built on Drupal 7 with standard web technologies and moderate performance and mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and updated CMS versions, which could pose risks. Privacy and cookie policies are absent, indicating compliance gaps. Overall, the site is trustworthy and business credible but would benefit from enhanced security and privacy practices.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

perspektiven-schaffen.de

65

The website perspektiven-schaffen.de is an official German government platform managed by the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It focuses on promoting equality in the labor market, providing comprehensive information, tools, and resources for employees, employers, and other stakeholders. The site features various programs such as the GAPS action program, online courses, calculators, and curated content like podcasts and publications. The platform is well-positioned as a trusted government resource with a clear mission to support labor market equality and integration.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

lokale-buendnisse-fuer-familie.de

63

The website lokale-buendnisse-fuer-familie.de represents a German federal government initiative under the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend. It serves as a platform to promote and support local family alliances across Germany, aiming to improve family-friendly working and living conditions through networking, project development, and information dissemination. The initiative is well-established since 2004 and targets political actors, civil society, businesses, and families. Technically, the website employs standard web technologies including JavaScript and CSS, with Matomo analytics integrated in a privacy-conscious manner requiring user consent. The site is well-structured, accessible, and optimized for mobile devices, reflecting a mature digital presence. However, no explicit CMS or hosting provider details are evident, and security headers are not explicitly detected. From a security perspective, the site uses HTTPS (implied by the URL), enforces cookie consent, and avoids exposing sensitive data. There is no public security policy or incident response information, and no vulnerability disclosure mechanism is found. The WHOIS data is minimal but consistent with a government entity, supporting legitimacy. Overall, the site is professional, trustworthy, and compliant with GDPR, with good privacy practices. Recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve transparency and security posture.

B

Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend

starkimberuf.de

67

The website represents the official German Federal Ministry for Family Affairs, Senior Citizens, Women and Youth, focusing on programs to support families with migration backgrounds, particularly mothers seeking employment. It provides comprehensive information on integration initiatives, labor market participation, and related studies, positioning itself as a key government resource in this domain. The site is well-structured, professionally designed, and targets families, policymakers, and labor market stakeholders. Technically, the site employs modern web technologies including JavaScript and CSS frameworks, with Matomo analytics integrated for user behavior tracking under strict privacy controls. The site is mobile-optimized and accessible, with good SEO practices. Hosting and CMS details are not explicitly disclosed but the site performs moderately well. Security posture is strong with HTTPS enforced and privacy-compliant cookie consent mechanisms. However, explicit security headers and incident response contacts are not evident, suggesting room for improvement in transparency and security policy communication. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR, serving as a reliable government information portal with low risk exposure.

B

Bundesstiftung Mutter und Kind

bundesstiftung-mutter-und-kind.de

64

The Bundesstiftung Mutter und Kind is a German government-affiliated foundation dedicated to supporting pregnant women in distress through financial aid and counseling services. It operates under the Bundesministerium für Bildung, Familie, Senioren, Frauen und Jugend (BMBFSFJ) and has a longstanding history of over 40 years. The website provides comprehensive information on available aids, application procedures, and educational materials targeting pregnant women, families, and counseling centers. The foundation maintains a strong market position as a trusted social support entity within Germany.

A

Auswärtiges Amt

auswaertiges-amt.de

60

The Auswärtiges Amt website serves as the official digital presence of the German Federal Foreign Office, providing authoritative information on German foreign policy, consular services, travel safety advisories, and career opportunities within the foreign service. It targets a broad audience including travelers, diplomats, and the general public interested in Germany's international relations. The site maintains a strong market position as a trusted government source with consistent branding and comprehensive content.

S

SCIO

scio.cz

40

SCIO is a well-established Czech education services provider specializing in entrance exams, preparatory courses, and educational testing products for students and schools. With over 30 years of experience, SCIO holds a strong market position in the Czech education sector, offering a broad portfolio of services including national comparative exams for universities and secondary schools, as well as professional tools for educators. The website reflects a professional and user-friendly digital presence with clear navigation and comprehensive content tailored to its target audience of students, parents, and educational institutions. Technically, the site employs modern web technologies, including JavaScript, Google Tag Manager, and CookieHub for privacy compliance, and is optimized for mobile devices with good accessibility and SEO practices. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in publishing explicit security policies and incident response information. The absence of WHOIS data limits domain trust analysis, but the overall digital footprint and professional presentation support legitimacy. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and compliance.

B

BRNO OPEN 2023

brnoopen.eu

37

The website brnoopen.eu serves as the official platform for the BRNO OPEN 2023 dance sport event, specifically hosting the WDSF World Championships in Latin and Showdance Standard categories. The site targets dance sport enthusiasts, competitors, and attendees primarily in the Czech Republic. The business model revolves around event organization and promotion within the niche of competitive dance sport. Technically, the site is built on WordPress using the Divi theme, leveraging modern web fonts and structured data for SEO. Performance and mobile optimization are adequate, though accessibility features are basic. Security posture is limited, with no evident security headers or policies, and privacy compliance is minimal due to the absence of privacy and cookie policies. The domain registration is consistent with the business location and nature, registered through a reputable Czech registrar, ZONER a.s. Overall, the site is professional and relevant but would benefit from enhanced security and compliance measures.

C

C O R E 1

core1.agency

54

C O R E 1 is a Czech digital agency specializing in AI and advanced web technologies, operating since 2007. They position themselves as leaders in their field, offering services including AI integration, web design, UI/UX, and digital marketing. Their website reflects a professional and modern digital presence with strong branding and client testimonials, targeting businesses seeking innovative web solutions. Technically, the site uses modern web technologies, including Video.js for media, Google Tag Manager, and various marketing and retargeting tools, with a custom CMS named core1/BasicCMS. The site is well-optimized for performance, mobile responsiveness, and SEO. Security-wise, HTTPS is enforced and cookie consent mechanisms are implemented, but there is a lack of published security policies or incident response information. WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the site demonstrates a mature digital infrastructure and credible business presence.

B

B&B. Markenagentur GmbH

bundb.de

65

B&B. Markenagentur GmbH is a medium-sized branding agency based in Hannover, Germany, specializing in strategic, creative, and communicative brand development. The company integrates human creativity with AI technologies to deliver innovative marketing and branding solutions, targeting businesses and public sector clients. Their service portfolio includes brand management, employer branding, change communication, and AI marketing, positioning them as a forward-thinking agency in the branding industry. Technically, the website demonstrates a modern and performant infrastructure with responsive design, multimedia integration (YouTube, Vimeo videos), and advanced cookie consent mechanisms. The use of Google Tag Manager with a custom domain, A/B testing tools, and lazy loading images reflects a mature digital presence. Hosting is likely provided by kasserver.com, consistent with the domain's nameservers. From a security perspective, the site enforces HTTPS, employs cookie consent compliant with GDPR, and uses CSRF tokens for form protection. However, explicit security headers are not detected, and no public security or incident response policies are found. No vulnerabilities or exposed sensitive data are evident in the content, indicating a solid security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, with a high-quality user experience and clear business information. Strategic recommendations include enhancing security headers, publishing security policies, and implementing vulnerability disclosure mechanisms to further strengthen trust and compliance.

T

Troester GmbH & Co. KG

x-compound.ch

57

Troester GmbH & Co. KG is a medium-sized German manufacturing company specializing in the design, development, and production of Continuous Kneaders and compounding technology for rubber and plastics processing. Established since 1997 in this niche, the company holds a worldwide leading market position with a strong focus on quality and innovation. Their website reflects a professional B2B orientation targeting industrial manufacturers requiring advanced compounding solutions. The company offers a broad range of services including spare parts supply, process engineering, electrical equipment, and refurbishment services. The digital presence is supported by structured data and social media integration, enhancing discoverability and trust. Technically, the website is built on WordPress with a custom theme by B&B Markenagentur, employing modern web standards including responsive design and privacy-conscious analytics via Matomo. Hosting is managed through Deutsche Telekom's DNS infrastructure, indicating a stable and reliable environment. Performance and SEO are well addressed, though some improvements in security headers and cookie consent mechanisms could be made. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for maturity in security governance. Privacy compliance is generally good, supported by a comprehensive privacy policy, but lacks a visible cookie consent banner which is important for GDPR adherence. Overall, the website and company demonstrate a high level of professionalism and trustworthiness suitable for their industrial market segment. Strategic enhancements in security transparency and privacy mechanisms would further strengthen their digital risk management and compliance posture.

T

TROESTER GmbH & Co. KG

troester-parts.de

56

TROESTER GmbH & Co. KG operates the TEESIS online platform, a specialized electronic spare parts catalog designed for industrial customers and partners. The website facilitates fast and intuitive identification of spare parts, supporting B2B transactions in the manufacturing sector. The platform includes user login and registration capabilities, enhancing secure access to detailed product information. The business positions itself as a niche supplier with a focus on quality and service in the manufacturing industry, primarily targeting German and European markets. Technically, the website is built on the CATALOGcreator® platform, leveraging modern web technologies such as HTML5, CSS3, and JavaScript. The site demonstrates moderate performance and basic mobile optimization, with a clean and professional design. SEO and accessibility features are present but could be improved. The hosting environment supports HTTPS, ensuring encrypted communications. From a security perspective, the site enforces HTTPS and employs secure login forms. However, it lacks advanced security headers and does not publish explicit security policies or incident response procedures. Privacy compliance is strong, with a comprehensive GDPR-compliant privacy policy accessible via an external link. No cookie consent mechanism or terms of service page was found. No tracking or advertising scripts were detected, indicating a privacy-conscious approach. Overall, the website is trustworthy, professional, and safe for its intended industrial audience. The domain registration data aligns well with the business identity, supporting legitimacy. Strategic improvements in security headers, cookie consent, and mobile optimization would enhance the platform's security posture and user experience.

A

ALEA Music

alea-music.com

41

ALEA Music is a small, professional live band service based in Germany specializing in event entertainment including background music and party performances. The website presents a well-structured, content-rich platform showcasing their services, band members, and multimedia content to engage potential clients. The technical infrastructure uses modern web technologies such as Bootstrap, jQuery, and Google Analytics, providing a responsive and user-friendly experience. However, the absence of WHOIS data raises concerns about domain registration legitimacy, though the website content itself is professional and consistent with a legitimate business. Security posture is moderate with HTTPS implied but lacking explicit security headers and cookie consent mechanisms, indicating room for improvement in compliance and security best practices.

T

Tobit Laboratories AG

tobit.com

72

Tobit Laboratories AG is a medium-sized German technology company specializing in the development and marketing of standard software solutions for digitalization, primarily through its chayns® cloud-based operating system. Established in 1986 and headquartered in Ahaus, Germany, Tobit serves a broad audience including enterprises, organizations, and municipalities. The company has a strong market position in Germany with a comprehensive portfolio of software products and services, supported by a large partner network. Technically, the website is built on modern web technologies including React and is hosted with Cloudflare services, ensuring good performance and mobile optimization. Security posture is solid with HTTPS enforcement and standard security headers, though DNSSEC is not enabled and no explicit security or incident response policies are published. Privacy compliance is partially addressed with a privacy and terms of service page but lacks a visible cookie consent mechanism. Overall, the domain registration data aligns well with the company's identity, supporting legitimacy and trustworthiness.

M

Museen der Stadt Aschaffenburg

christian-schad-museum.de

41

The website represents the Museen der Stadt Aschaffenburg, a municipal cultural institution in Germany offering a range of museums including the Christian Schad Museum. It provides comprehensive cultural and educational services with a strong focus on art history and local heritage. The museum is uniquely positioned as the only location worldwide presenting all periods of Christian Schad's work. The site targets a broad audience including local visitors, tourists, and art enthusiasts. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript with jQuery and Modernizr, and includes accessibility and SEO best practices. The site is multilingual and includes a newsletter subscription service. Security posture is moderate with HTTPS implied, but lacks explicit security headers and incident response information. Privacy compliance is good with clear privacy and cookie policies, though no active cookie consent mechanism is present. Overall, the site is professional, trustworthy, and well-maintained, with room for security and privacy enhancements.

S

significa GmbH

significa.de

46

significa GmbH is a German full-service marketing agency specializing in digital and classical marketing solutions primarily for medium-sized companies in the technology and industrial sectors. With over 20 years of experience, the company offers a broad range of services including design, digital marketing, classic advertising, content creation, consulting, and innovative marketing on demand. The website reflects a professional and consistent brand image supported by client testimonials and a diverse portfolio of reputable clients. Technically, the site is built on a modern stack including HTML5, CSS3, JavaScript, jQuery, and uses REDAXO CMS with Matomo for privacy-conscious analytics. The site is well-optimized for SEO, accessibility, and mobile devices, providing a positive user experience. Security posture is solid with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are not publicly disclosed. Overall, the site demonstrates high professionalism and trustworthiness with no signs of malicious content or blocking mechanisms.

T

Teatro alla Scala

teatroallascala.org

65

Teatro alla Scala is a prestigious cultural institution based in Milan, Italy, renowned globally for its opera, ballet, and concert performances. The website serves as a comprehensive portal for ticket sales, event calendars, educational programs, and streaming content via LaScalaTV. The site targets a broad audience including opera enthusiasts, families, and young audiences, offering rich multimedia content and detailed event information. The business model revolves around live performances, cultural education, and digital media distribution, supported by prominent sponsors such as Intesa San Paolo and Rolex. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, Bootstrap, and Swiper.js for interactive elements. It integrates analytics tools like Matomo and Google Tag Manager, ensuring data-driven insights while maintaining user privacy through a clear cookie consent mechanism. The site is mobile-optimized and accessible, with good SEO practices and a professional design that enhances user experience. From a security perspective, the site uses HTTPS with a strong SSL configuration and implements cookie consent for compliance with GDPR. However, explicit security headers and published security policies are absent, representing areas for improvement. The WHOIS data is unavailable due to a malformed query, but the domain appears legitimate and active, consistent with the institution's reputation. Overall, Teatro alla Scala's website is a high-quality, trustworthy platform that effectively supports its cultural mission. Strategic recommendations include enhancing security headers, publishing incident response and vulnerability disclosure information, and improving transparency around security practices to further strengthen trust and compliance.

I

Ingelheim am Rhein

ingelheim.de

66

The website www.ingelheim.de serves as the official digital presence for the city of Ingelheim am Rhein, Germany. It provides comprehensive information about city administration, politics, living environment, leisure activities, and municipal services. The site targets residents, visitors, and local businesses, offering a broad range of public services and community resources. The business model is that of a government municipal portal, focusing on transparency and citizen engagement. Technically, the website is built on the ionas4 CMS platform, utilizing modern web technologies such as JavaScript, SystemJS, and Web Components. It demonstrates good mobile optimization, accessibility, and SEO practices. Hosting is managed via agenturserver nameservers, indicating a professional hosting environment. Performance is moderate with a well-structured navigation system. From a security perspective, the site enforces HTTPS, uses security best practices like crossorigin and integrity attributes on resources, and integrates Google's invisible reCAPTCHA for bot protection. However, explicit privacy policies, terms of service, incident response contacts, and vulnerability disclosure mechanisms are not found, which are areas for improvement. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website is trustworthy and professional, suitable for its government function. Strategic recommendations include publishing clear privacy and security policies, adding a security.txt file, and enhancing HTTP security headers to further strengthen the security posture.

C

co.met GmbH

ablesen.de

60

The website ablesen.de represents co.met GmbH, a German company specializing in digital meter reading and consumption data management services. Their offering includes a full-service solution for meter data acquisition, customer self-reading, and support for various meter technologies such as OMS-Funk and LoRaWAN. The company targets energy providers and meter operators, positioning itself as a specialized service provider in the energy sector. The website content is professional, well-structured, and primarily in German, reflecting a focused business audience. Technically, the website is built with standard HTML5 and CSS3, hosted on servers associated with Stadtwerke Saarbrücken Konzern, indicating reliable local infrastructure. The site is moderately optimized for performance and mobile devices, with good SEO practices and basic accessibility features. No advanced frameworks or CMS platforms are detected, suggesting a lightweight and straightforward implementation. From a security perspective, the site uses HTTPS as indicated by canonical URLs, but lacks explicit security headers and a published security policy. The privacy policy is comprehensive and GDPR compliant, detailing data processing, retention, and user rights. No cookie consent mechanism or terms of service are found, which could be improved. No signs of WAF or blocking mechanisms are present, and no vulnerabilities or exposed sensitive data were detected in the provided content. Overall, the website demonstrates a solid business credibility and privacy compliance posture with room for improvement in security best practices and transparency. The risk level is low, but enhancing security headers, cookie management, and incident response information would strengthen trust and compliance.

V

VELA EU

vela.eu

64

VELA EU is a well-established company specializing in manufacturing and providing safety and self-reliance chairs for children and adults, particularly targeting seniors and disabled individuals. The company has a long history dating back to 1935 and operates primarily in the healthcare sector, focusing on mobility aids. Their website reflects a professional and consistent brand image with good content quality and user experience. Technically, the site is built on WordPress and leverages modern technologies including Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is hosted likely behind Cloudflare CDN, ensuring good performance and security. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not published. Privacy compliance is strong with a comprehensive privacy policy and GDPR-aligned cookie consent. Overall, the website and business appear legitimate and trustworthy, with no signs of malicious activity or content safety concerns.

V

VEMA Versicherungsmakler Genossenschaft eG

vemaeg.de

63

VEMA Versicherungsmakler Genossenschaft eG is a well-established German cooperative founded in 1997, serving as the largest cooperative network for insurance brokers in Germany. The organization focuses on digitalization, product development, and continuing education for insurance brokers, providing a comprehensive B2B platform and various services including events and training. Their market position is strong, supported by a large user base and extensive service offerings. Technically, the website uses modern JavaScript libraries like jQuery and Slick Slider, with good mobile optimization and SEO practices, though no CMS or hosting provider is explicitly identified. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks published security policies or incident response contacts. Overall, the site is professional, trustworthy, and compliant with GDPR, with clear contact information and active social media presence.

S

SLUB Dresden

arthistoricum.net

63

arthistoricum.net is a well-established digital platform dedicated to art history and art sciences, providing open access to scholarly publications, image collections, and research tools. It is affiliated with reputable German institutions such as SLUB Dresden and UB Heidelberg, and supported by the Deutsche Forschungsgemeinschaft, positioning it as a trusted academic resource in the education sector. The platform offers a variety of services including digital publishing, thematic portals, and podcasts aimed at researchers and the academic community. Technically, the website is built on TYPO3 CMS, employs Matomo for privacy-conscious analytics, and demonstrates good mobile optimization and accessibility. The site uses HTTPS with strong SSL configuration, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data is unavailable or not publicly accessible, which slightly reduces transparency but does not detract from the site's legitimacy given its institutional backing. Security posture is generally good with secure form handling and no exposed sensitive data, but the absence of explicit security policies and incident response information suggests room for enhancement in governance and compliance documentation. Overall, the site is professional, content-rich, and trustworthy, serving a specialized academic audience effectively.