Security Directory

NT-net is a regional internet and telephony service provider operated by Stadtwerke Nürtingen GmbH, serving primarily the Nürtingen area in Germany. The company offers highspeed internet packages with various bandwidth options and telephone flat rates, emphasizing local customer support and transparency. The website is professionally designed, mobile-optimized, and provides comprehensive product information, discounts, and customer support details. The business model focuses on regional utility and telecommunications services with preferential treatment in fiber optic rollout, positioning NT-net as a trusted local provider. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, incorporating modern JavaScript and CSS technologies. It integrates cookie consent management, analytics tools like Google Analytics and Matomo, and provides secure mail server configuration details. The site demonstrates good SEO, accessibility, and performance characteristics, with no blocking or WAF challenges detected. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and publicly available security policies or incident response information. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is unavailable due to privacy or technical reasons, but the website's consistent business information and local contact details support its legitimacy. Overall, NT-net's website presents a trustworthy and professional digital presence suitable for its regional telecommunications business. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure could further enhance its security posture and customer trust.

D

DJK-Sportverband e.V.

djk.de

57

DJK-Sportverband e.V. is a well-established non-profit sports federation in Germany, founded in 1920, that promotes sports activities underpinned by Christian and inclusive values. The organization targets sports clubs, athletes of all ages and abilities, and community members interested in ethical and inclusive sportsmanship. Their key services include diverse sports offerings, inclusion initiatives, prevention of sexualized violence, and organizing major sports events such as the Bundessportfest. The website reflects a strong community focus and a commitment to social responsibility.

B

Bund der St. Sebastianus Schützenjugend

bdsj.de

59

Bund der St. Sebastianus Schützenjugend (BdSJ) is a large non-profit youth organization in Germany with approximately 30,000 members. The organization focuses on social, sporting, and religious youth work, emphasizing cultural and political education within the framework of the Schützenjugend tradition. The website serves as an information hub for the federal association, providing news, project details, and resources for members and interested parties. The organization is well-established, founded in 1961, and maintains a strong presence through its six diocesan associations and over 1,200 brotherhoods. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including HTML5, CSS3, JavaScript, and jQuery. Accessibility features are implemented via the EyeAble plugin, and the site is mobile-optimized with good SEO practices. The site uses HTTPS with an excellent SSL configuration, ensuring secure communications. Privacy and cookie policies are comprehensive and GDPR compliant, with a consent mechanism in place. Security posture is solid with no visible vulnerabilities or exposed sensitive data. However, the site lacks explicit security policy or incident response information and does not publish a security.txt file. Contact information is clearly presented, including email, phone, physical address, and a contact form with privacy consent. Social media sharing is integrated but no direct official social media profiles are linked. Overall, the website is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to its members. Strategic improvements could include adding explicit security policies and enhancing security headers to further strengthen the security posture.

G

Greatnet.de GmbH

greatnet.de

54

Greatnet.de GmbH is a small German webhosting provider specializing in affordable domain registration and webspace services with servers located in Germany. Their offerings target small to medium businesses and individuals seeking professional web presence solutions. The website presents clear pricing and service descriptions, emphasizing .de domains and webhosting packages with included email and FTP services. Technically, the site uses basic HTML, CSS, and JavaScript without advanced frameworks or CMS detected. Performance and mobile optimization are moderate to basic. Security posture is average with cookie consent implemented but lacking advanced security headers and explicit HTTPS confirmation in the provided data. WHOIS data is limited due to DENIC privacy policies but shows consistent domain status and nameservers aligned with the business domain. Overall, the site is professional, trustworthy, and safe with no adult or questionable content detected.

N

Niedersächsischer Basketballverband e.V.

nbv-basketball.de

59

The Niedersächsischer Basketballverband e.V. is a regional sports association dedicated to basketball activities in Niedersachsen, Germany. The website serves as an official portal providing news, event schedules, educational and registration portals for basketball players, clubs, and fans within the region. It positions itself as a key information hub for basketball in Niedersachsen, operating as a non-profit entity. The site is primarily targeted at the local basketball community and stakeholders involved in the sport's development and organization. Technically, the website is built on the AmphiCMS platform, featuring responsive design and accessibility features. It integrates a consent management platform to comply with cookie regulations and includes social media links to official channels, enhancing community engagement. Security-wise, the site uses HTTPS and implements basic consent mechanisms but lacks explicit security headers and detailed privacy or security policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the website is professional, trustworthy, and well-structured but would benefit from enhanced privacy and security documentation to meet higher compliance standards.

R

RSG Langenhagen 82 e.V.

rsg-langenhagen.de

57

RSG Langenhagen 82 e.V. is a well-established non-profit sports club specializing in wheelchair sports in the Hannover region of Germany. The organization offers a variety of sports activities including badminton, wheelchair basketball, swimming, and self-defense workshops targeted primarily at children, youth, and individuals with physical disabilities. The club holds a strong regional position as a founding member of the German Wheelchair Sports Association and maintains partnerships with local foundations and organizations. The website content is comprehensive and well-structured, providing detailed information about events, workshops, and club news in German. Technically, the site is built on the IONOS MyWebsite CMS platform, uses modern web technologies, and is hosted by IONOS. It is mobile-optimized and provides a good user experience, though accessibility features could be improved. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is trustworthy and professional but could benefit from enhanced security and privacy features.

G

Genoverband e.V.

genoverband.de

54

Genoverband e.V. is a well-established German cooperative association providing auditing, consulting, education, and advocacy services to approximately 2,600 member cooperatives across 14 federal states. The organization specializes in the legal form of registered cooperatives (eG) and offers a broad range of services including economic, tax, and legal advice. The website reflects a professional and comprehensive digital presence with detailed information about the association, its services, news updates, events, and multiple physical office locations. The target audience includes cooperative members, founders, banks, and political stakeholders. Technically, the website uses modern web technologies such as HTML5, CSS3, JavaScript, and Swiper.js for interactive elements, and it is well optimized for mobile devices with good accessibility and SEO practices. Security-wise, the site enforces HTTPS and uses secure forms but lacks explicit security policies and vulnerability disclosure mechanisms. Privacy compliance is partial, with a privacy policy present but no visible cookie consent mechanism. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

M

MTB GmbH

mtb-bau.de

61

MTB GmbH is a modern, medium-sized construction company specializing in complex infrastructure projects in Germany, particularly in railway construction and civil engineering. They serve as a general contractor for Deutsche Bahn AG and offer services including platform construction, cable civil engineering, track superstructure, and structural engineering. The company emphasizes digital planning, precision, and fair communication, positioning itself as an innovative and reliable partner in the transportation and construction sectors. Their website reflects a professional and consistent brand image with good content quality and SEO optimization. Technically, the website is built on WordPress using popular plugins such as Yoast SEO and WPBakery Page Builder, indicating a mature digital infrastructure. The site is mobile-optimized and includes GDPR-compliant privacy and cookie policies with a consent mechanism. Performance is moderate, with room for improvement in accessibility and security headers. Security posture is solid with HTTPS enforced and no exposed sensitive data detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests areas for enhancement. The domain WHOIS data aligns well with the business claims, supporting legitimacy and trustworthiness. Overall, MTB GmbH presents a credible and professional online presence with a strong business focus on transportation infrastructure. Strategic improvements in security practices and transparency could further enhance trust and compliance.

Idea-sketch.com is a small business operated by Jan Böhme & Uwe Schützenmeister GbR, focusing on software and operational services tailored for education and development cooperation sectors. The website presents a minimalistic design with basic navigation and content primarily in German. The business appears niche-focused, serving educational institutions and development organizations, with a domain age of over a decade supporting its established presence. Technically, the website is simple, built with standard HTML and CSS, without detected CMS or advanced frameworks. Hosting utilizes Cloudflare DNS services, but no advanced security headers or DNSSEC are enabled, indicating room for improvement in technical security and performance optimization. The site lacks analytics, tracking, or marketing tools, reflecting a low digital marketing footprint. From a security perspective, the site uses domain status protections to prevent unauthorized changes but lacks visible HTTPS enforcement details and security headers. No incident response or security policies are published, and no contact information is explicitly provided on the main page, which may affect user trust and compliance. Privacy policy exists but cookie consent mechanisms are absent, indicating partial GDPR compliance. Overall, the website is functional but basic, with moderate trustworthiness and business credibility. Strategic improvements in security posture, privacy compliance, and contact transparency would enhance the site's professionalism and user confidence.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) indicating that the requested website content is not accessible or blocked. No actual website content, metadata, or business information is present. The page primarily contains embedded Chromium offline game scripts and styling for the offline error display. Due to the lack of accessible content, no privacy, cookie, or terms of service policies are found, and no contact or security policy information is available. This limits the ability to assess the business or security posture of the intended website. The page is safe in terms of content safety as it contains no adult or questionable material but is not a functional website page.

S

Stiftung Kunst und Natur

kunst-und-natur.de

63

Stiftung Kunst und Natur is a German non-profit foundation focused on fostering interdisciplinary engagement with art, culture, nature, and landscape. It operates at two main locations: Nantesbuch in Bavaria and the Museum Sinclair-Haus in Bad Homburg. The foundation offers cultural events, workshops, and environmental conservation activities, targeting art and nature enthusiasts as well as the regional community. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern JavaScript libraries, integrates Google Analytics for visitor insights, and employs Cookiebot for GDPR-compliant cookie consent management. Security posture is solid with HTTPS and error tracking, though additional security headers could enhance protection. Privacy compliance is well addressed with accessible policies and consent mechanisms. However, no explicit contact information or terms of service were found, which could be improved to enhance business credibility.

K

KirchnerHaus Aschaffenburg

kirchnerhaus.com

63

KirchnerHaus Aschaffenburg is a specialized cultural institution and museum dedicated to the life and works of Ernst Ludwig Kirchner and modern artists. The website provides detailed information about exhibitions, events, guided tours, and a retail shop offering art catalogs, posters, and postcards. The target audience includes art enthusiasts, families, and scholars interested in expressionism and modern art. The business model is primarily non-profit with revenue from ticket sales and merchandise. Technically, the website is built on WordPress using the Avada theme and WooCommerce for e-commerce functionality. It employs modern web technologies including jQuery and Google Analytics for tracking. The site is mobile-optimized and offers good user experience with clear navigation and professional design. From a security perspective, the site uses HTTPS and has cookie consent mechanisms in place, indicating compliance with GDPR. However, some security headers like Content-Security-Policy and X-Frame-Options are missing, which could be improved to enhance security posture. No vulnerabilities or exposed sensitive data were detected. Overall, the website is professional, content-rich, and trustworthy from a user perspective. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership transparency. This discrepancy should be investigated further to ensure full trustworthiness.

F

Frankfurter Sparkasse

frankfurter-sparkasse.de

69

Frankfurter Sparkasse is a major regional financial institution in Germany offering a comprehensive range of banking and financial services to private and business customers. Their website serves as a digital branch providing secure online banking, product information, and customer support. The site is well-structured, professionally designed, and targets a broad audience including retail clients and firms. The business model focuses on retail banking, loans, investments, insurance, and real estate services, positioning the bank as a trusted local financial partner. Technically, the website uses modern web technologies, likely built on Adobe Experience Manager, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforcement, session management, and cookie consent mechanisms, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR and cookie regulations.

Museum Angewandte Kunst is a reputable cultural institution based in Germany, specializing in applied arts, design, and cultural exhibitions. The website serves as a comprehensive portal for visitors, offering detailed information about current and upcoming exhibitions, educational programs, and digital collections. The museum targets a broad audience including art enthusiasts, students, and educators, positioning itself as a key player in the cultural sector of Frankfurt. Technically, the website is built on a CMS likely Redaxo, employs modern web technologies, and is hosted via DomainControl nameservers. It features a cookie consent mechanism and uses Matomo analytics, reflecting a commitment to privacy compliance. Security posture is good with HTTPS enforced, though some security headers are not explicitly detected. No critical vulnerabilities or blocking mechanisms are present, indicating a stable and accessible platform. Overall, the site demonstrates excellent content quality, user experience, and professionalism, supporting the museum's mission and public engagement effectively.

I

Institut für Stadtgeschichte Frankfurt

stadtgeschichte-ffm.de

50

The Institut für Stadtgeschichte Frankfurt is a prominent municipal archive and cultural institution in Frankfurt, Germany, with a historical legacy dating back to 1436. It serves as a key repository for historical documents related to the city and offers public access through archives, exhibitions, events, publications, and educational programs. The website reflects a well-structured and content-rich platform targeting researchers, historians, and the general public interested in Frankfurt's history. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and lazy loading for images, hosted on domaincontrol.com nameservers. The site is mobile-optimized with good SEO practices but lacks some advanced security headers and cookie consent mechanisms. No major vulnerabilities or exposed sensitive data were detected. From a security perspective, the site uses HTTPS and shows no signs of WAF or blocking mechanisms. However, it lacks explicit security policies, incident response contacts, and cookie consent banners, which are recommended for compliance and user trust. The WHOIS data indicates a legitimate domain registration consistent with the institution's profile. Overall, the website is professional, trustworthy, and serves its audience well, but could improve in privacy compliance and security posture by adding cookie consent, security headers, and incident response information.

D

Deutsches Romantik-Museum – Frankfurt am Main

deutsches-romantik-museum.de

57

The Deutsches Romantik-Museum website serves as an online presence for a cultural museum located in Frankfurt am Main, Germany, dedicated to Romanticism art and culture. The site targets general visitors interested in art and cultural heritage, providing information about exhibitions and events. The business model is that of a cultural institution with a focus on education and public engagement. Technically, the website employs modern web standards with HTML5 and CSS3, uses Matomo for analytics with privacy-conscious cookie management via Cookiebot, and is hosted on a multimedia service provider's infrastructure. The site is mobile-optimized and provides a good user experience with consistent branding and clear navigation. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, but lacks published security policies and incident response contacts. Overall, the site is trustworthy and compliant with GDPR cookie consent requirements but could improve transparency by publishing privacy and security policies.

C

Caricatura Museum Frankfurt

caricatura-museum.de

53

Caricatura Museum Frankfurt is a specialized cultural institution dedicated to comic and caricature art, offering exhibitions, events, guided tours, and a museum shop. The website presents clear and relevant information targeting art enthusiasts and the general public interested in humorous art. The museum maintains an active social media presence and provides comprehensive visitor information. Technically, the website uses modern web standards with responsive design and optimized images, hosted on standard infrastructure with GoDaddy name servers. Security posture is adequate with HTTPS enabled but lacks advanced security headers and cookie consent mechanisms. Privacy compliance is partially met with a privacy policy page but no visible cookie consent. Overall, the site is professional, trustworthy, and well-positioned in its niche.

L

Landesbauernverband Baden-Württemberg mbh

lbv-smg-reisen.de

41

The website www.lbv-smg-reisen.de represents a specialized travel service provider affiliated with the Landesbauernverband Baden-Württemberg mbh, focusing on group and club travel with an agricultural theme. The site offers a variety of travel programs to diverse destinations, emphasizing cultural and agricultural experiences. The business operates in Germany and targets agricultural professionals and groups interested in thematic travel. Technically, the site is built on Drupal 10, with good mobile optimization and accessibility, and moderate performance. Security posture is adequate with HTTPS enabled but lacks explicit security headers and incident response information. Privacy compliance is good with a clear privacy and cookie policy in German. Overall, the site is professional, trustworthy, and content-rich, though contact information is not explicitly found in the provided content.

I

Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern

rpz-bayern.de

39

The Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern (IRL) is a specialized educational institution focused on religious pedagogy and teacher training within Bavaria, Germany. It serves as a regional hub for professional development of religious education teachers, offering courses, events, and resources tailored to various school types. The institute is newly founded in 2025 and operates under the auspices of the Freisinger Bischofskonferenz, emphasizing innovation and quality in religious education. Technically, the website is built on TYPO3 CMS with modern web technologies including Bootstrap and jQuery. It is hosted by Alfahosting, a reputable German hosting provider. The site demonstrates good mobile optimization and user experience, with clear navigation and professional design. However, performance is moderate and accessibility features are basic. From a security perspective, the site uses HTTPS but lacks visible security headers and formal vulnerability disclosure mechanisms. Privacy and cookie policies are not present on the analyzed page, indicating gaps in GDPR compliance. Contact information is comprehensive, including email, phone, physical address, and a contact form with validation. Overall, the website is trustworthy and professional, serving a niche educational market. Strategic improvements in privacy compliance, security headers, and transparency would enhance its security posture and user trust.

E

Erzbistum München und Freising

erzbistum-muenchen.de

51

Erzbistum München und Freising is a large, established religious non-profit organization serving the Catholic community in the Munich and Freising region of Germany. The website provides comprehensive information about religious services, spiritual guidance, educational programs, and social support initiatives. It targets a general audience including families, youth, and adults interested in Catholic life and community activities. The organization maintains a consistent and professional online presence with clear branding and well-structured content.

The analyzed website is currently inaccessible beyond a Cloudflare security verification page that performs bot detection and user verification. The domain azs.forsaledomain.net lacks any verifiable WHOIS registration data, indicating it may be a parked or placeholder domain rather than an active business website. No business information, contact details, or privacy policies are present, severely limiting the ability to assess the site's purpose or legitimacy. The technical infrastructure is minimal, relying on basic HTML, CSS, and JavaScript with Cloudflare's challenge platform scripts. Security posture is weak due to lack of visible security headers and absence of SSL configuration details. Overall, the site appears to be a non-operational or parked domain with no meaningful content or business presence.

K

Kindertagesstätte St. Anna Bad Staffelstein

kita-stanna-badstaffelstein.de

59

Kindertagesstätte St. Anna Bad Staffelstein is a small, local childcare and early education provider affiliated with the Catholic Church (Erzbistum Bamberg) serving families in Bad Staffelstein, Germany. The website provides comprehensive information about childcare services including nursery (Krippe), kindergarten, parental fees, daily routines, and contact details. The business model is non-profit and community-focused, targeting parents seeking trusted childcare solutions. The site is well-branded and consistent with the parent organization’s identity. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies such as JavaScript, SVG icons, and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and includes strong accessibility features via the eyeAble plugin. Performance is moderate with good SEO and metadata implementation. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. No critical vulnerabilities or exposed sensitive data were detected. However, security headers are not explicitly observed and no incident response or vulnerability disclosure information is provided, which could be improved. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. It effectively serves its target audience with clear contact information and relevant content. Strategic improvements in security policy transparency and technical security headers would enhance its posture further.

K

Kur und Tourismus Service der Adam Riese Stadt Bad Staffelstein

bad-staffelstein.de

64

The website 'bad-staffelstein.de' serves as the official tourism and municipal service portal for the city of Bad Staffelstein, Germany. It provides comprehensive information about local tourism, health and wellness services, cultural events, accommodations, and city services. The site targets tourists, visitors, and local citizens, positioning itself as a regional tourism and public service provider. The business model is focused on promoting tourism and providing municipal information, supported by a medium-sized organizational structure. Technically, the site is built on the Weblication CMS platform, employs modern web standards, and integrates Google Tag Manager for analytics. The design is professional, mobile-optimized, and offers clear navigation, although accessibility features are basic. Security posture is moderate with HTTPS usage implied but lacks visible security headers and explicit privacy or cookie policies. No critical vulnerabilities or adult content were detected. Overall, the site is trustworthy and professional but would benefit from enhanced privacy compliance and security best practices.

P

Permanent Service for Mean Sea Level (PSMSL)

psmsl.org

61

The Permanent Service for Mean Sea Level (PSMSL) operates as a global data bank specializing in long-term sea level change information derived from tide gauges and bottom pressure recorders. Based in the United Kingdom and supported by the National Oceanography Centre and the UK's Natural Environment Research Council (NERC), PSMSL serves a specialized audience of researchers, scientists, and environmental agencies. The organization provides open access to sea level data, derived products, and training resources, positioning itself as a trusted and authoritative source in the oceanographic research community. Technically, the website employs a straightforward HTML and CSS infrastructure with hosting supported by Microsoft Azure DNS services. The site demonstrates moderate performance and basic mobile optimization and accessibility features. However, it lacks advanced technical frameworks or CMS platforms and does not implement DNSSEC or security headers, which are recommended for enhanced security. From a security perspective, the site uses HTTPS but does not present security headers or privacy and cookie policies, indicating gaps in compliance with modern data protection standards such as GDPR. No incident response or vulnerability disclosure mechanisms are visible, which could impact the organization's readiness to handle security incidents. The absence of tracking or analytics tools suggests minimal user data collection, aligning with privacy-conscious practices. Overall, PSMSL's website is professional, content-rich, and trustworthy, but it would benefit from improved security configurations, privacy compliance documentation, and enhanced mobile and accessibility features to strengthen its digital maturity and user trust.

I

Intersolute GmbH

intersolute.de

55

Intersolute GmbH is a German technology partner specializing in IT infrastructure, digital transformation, cloud solutions, AI integration, software development, and design services. The company targets businesses seeking professional and solution-oriented IT and digital services, positioning itself as a regional expert with strong partnerships and certifications. The website reflects a mature digital presence with comprehensive content and clear navigation. Technically, the site uses a custom CMS, modern web standards, and integrates analytics tools like Matomo and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though additional security headers and a published security policy would enhance trust. WHOIS data is limited due to DENIC privacy policies but shows consistent domain control. Overall, the site is professional, trustworthy, and well-optimized for its audience.

E

esistfreitag

esistfreitag.store

67

esistfreitag is a small German e-commerce business specializing in urban-themed gifts and lifestyle products such as prints, posters, pins, postcards, greeting cards, city maps, magazines, fashion, and notebooks. The website is built on the Shopify platform, leveraging modern web technologies and integrations with marketing and analytics tools like Facebook Pixel and Mailchimp. The site is well-structured, mobile-optimized, and provides comprehensive privacy and cookie policies compliant with GDPR. Security posture is good with HTTPS enforced and domain registration consistent with business claims, although additional security headers and a formal security policy could enhance trust. Overall, the website presents a professional and trustworthy online retail presence targeting a general audience interested in urban lifestyle products.

The website ulf-lichtenfels.de presents itself as a deal aggregator primarily featuring affiliate product listings from Amazon across various consumer categories such as electronics, home & kitchen, beauty, clothing, and toys. The domain is currently marked as for sale, indicating it may not be an active business entity but rather a parked domain monetized through affiliate marketing. The site is designed with a modern aesthetic using Google Fonts and responsive layouts, providing a good user experience for deal seekers. However, it lacks fundamental business and compliance information such as privacy policies, contact details, and terms of service. Technically, the site employs standard web technologies including HTML5, CSS3, and JavaScript with asynchronous fetch calls for search and tracking. It uses affiliate tracking mechanisms with delayed link activation to mitigate bot traffic. Despite these, there is no visible HTTPS enforcement or security headers in the provided data, which weakens the security posture. The absence of WHOIS registration data and the domain's for-sale status raise concerns about legitimacy and trustworthiness. From a security perspective, the site shows minimal implementation of best practices. The lack of privacy and cookie policies, no contact or incident response information, and missing security headers represent compliance and security gaps. The affiliate marketing model is evident but without transparency or user data protection assurances. Overall, the risk level is moderate to high due to these factors. Strategically, the site should prioritize establishing clear business identity, implementing HTTPS and security headers, publishing privacy and cookie policies, and providing contact and incident response information to improve trust and compliance. These steps will enhance user confidence and reduce potential legal and security risks.

Ö

Ökumenische Kur- und Urlauberseelsorge Bad Staffelstein

kurseelsorge-bad-staffelstein.de

10

The Ökumenische Kur- und Urlauberseelsorge Bad Staffelstein website serves as a digital platform for spiritual care and community engagement in Bad Staffelstein, Germany. It provides detailed event information, pastoral contacts, and resources for visitors and locals interested in ecumenical services and cultural activities. The site is positioned as a small non-profit entity focused on local community support and spiritual well-being. Technically, the website is built on the Alkacon Mercury CMS platform, utilizing modern web technologies including JavaScript and Matomo analytics for privacy-conscious user tracking. The site demonstrates good mobile optimization and excellent accessibility features, ensuring broad usability. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR requirements. However, explicit security headers and incident response policies are not evident, suggesting areas for improvement. No critical vulnerabilities or suspicious activities were detected. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations. Strategic enhancements in security policies and technical optimizations could further strengthen its posture and user trust.

C

Churchpool GmbH

churchpool.com

58

Churchpool GmbH operates a digital platform focused on religious communities, offering a mobile app that connects local and global faith groups. The website presents a well-structured, multilingual interface emphasizing community engagement features such as news, groups, chat, and event management. The business targets church members and religious organizations primarily in Germany, positioning itself as a niche community app provider. Technically, the site uses standard web technologies including Bootstrap and jQuery, with moderate performance and good mobile optimization. However, there is no evidence of advanced CMS or hosting details. Security posture is limited by lack of visible HTTPS enforcement and missing security headers, which should be addressed to improve trust and compliance. Privacy and cookie policies are present, indicating awareness of GDPR requirements, but no explicit incident response or security policy pages are found. WHOIS data is unavailable, reducing domain trustworthiness, though the website content and footer copyright suggest a legitimate small business entity. Overall, the site is functional and professional but would benefit from enhanced security measures and transparency.

S

Space X-Chimp

mycyberuniverse.com

69

My Cyber Universe is a specialized technology blog founded in 2013 by Arthur Gareginyan, focusing on web development, cybersecurity, and software engineering topics. The site serves a niche audience of developers and tech enthusiasts, providing educational content, tutorials, and insights. It is supported by the Space X-Chimp team, which also manages related digital properties and an online store. The website demonstrates a consistent brand identity and maintains active content updates, reflecting a stable presence in its niche. Technically, the website employs standard web technologies including HTML5, CSS3, JavaScript, and integrates third-party services such as Google Analytics, Google Adsense, and Disqus for comments. The site is well-structured with responsive design elements, good SEO practices, and moderate performance. However, it lacks some advanced security headers and a cookie consent mechanism, which are important for compliance and user trust. From a security perspective, the site uses HTTPS with a strong SSL configuration, and no obvious vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a notable anomaly that reduces overall trustworthiness, although the website content and business information appear legitimate. Privacy policies and terms of use are present and comprehensive, but cookie policy and incident response information are missing. Overall, the website presents a low-risk profile with good content quality and technical implementation but would benefit from improved privacy compliance and enhanced security headers. The lack of WHOIS transparency is a concern that should be addressed to improve trust and legitimacy perception.

D

DIGITALBROTHERS_

digitalbrothers.cz

43

DIGITALBROTHERS_ is a creative digital studio based in Prague, Czech Republic, specializing in brand identity, design, and web development services. Established in 2014, the company offers comprehensive solutions including logotype creation, corporate identity, UX design, and web design aimed at enhancing brand visibility and sales effectiveness. Their portfolio showcases diverse projects, reflecting a strong market presence in the creative digital agency sector. Technically, the website is built on modern web technologies including Webflow CMS, JavaScript, and integrates analytics tools such as Google Analytics and Smartlook, indicating a mature digital infrastructure. The site is mobile optimized and demonstrates good SEO practices, although accessibility features are basic. Security posture is moderate with HTTPS usage but lacks visible security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is professional and trustworthy but would benefit from enhanced compliance and security measures.

The Deutsch-Tschechischer Club Bamberg operates as a small non-profit cultural organization dedicated to fostering German-Czech relations through community events and activities. The website serves as an informational portal for members and interested parties, providing event details, club structure, and contact avenues. The technical infrastructure is based on standard web technologies including Bootstrap and jQuery, hosted likely by a German provider, ensuring basic responsiveness and usability. However, the site lacks advanced CMS features and modern security implementations such as HTTPS enforcement and security headers. Privacy compliance is minimal with a basic privacy policy present but no cookie consent mechanisms or GDPR explicit indicators. Overall, the security posture is weak, with recommendations to improve HTTPS usage, security headers, and privacy compliance. The domain WHOIS data is minimal but consistent with the website's regional focus, supporting legitimacy. The site is safe for general audiences and does not contain any adult or questionable content.

A

Ackermann-Gemeinde

ackermann-gemeinde.cz

10

The Ackermann-Gemeinde website serves as a digital platform for a non-profit organization focused on fostering cultural and social ties between Germans and Czechs. It provides information on events, youth activities, and educational projects, targeting young people and culturally interested audiences. The site is built on the Webnode CMS platform, leveraging modern web technologies and CDN services to deliver content efficiently. The presence of cookie consent and privacy policies indicates a baseline compliance with privacy regulations. Security posture is adequate with HTTPS enforced, though improvements in security headers and incident response transparency are recommended. Overall, the website is professional, trustworthy, and well-aligned with its mission, though the absence of public contact details may limit direct engagement.

D

decide

decide.de

40

Decide is a small German technology company specializing in web design, development, CMS integrations (notably Typo3 and Wordpress), online shops with Magento, professional hosting, and comprehensive online marketing consulting and implementation. Established since 1996, the company positions itself as a professional and experienced digital agency serving businesses seeking tailored internet solutions. The website content is well-structured, professional, and clearly communicates the company's services and contact information. Technically, the website uses standard modern web technologies including HTML5, CSS, JavaScript, and Matomo analytics for privacy-conscious user tracking. The hosting appears to be managed via odn.de nameservers, consistent with the company's German location. The site is mobile optimized with good SEO practices and basic accessibility features. Performance is moderate with no evident technical debt or errors. From a security perspective, the website uses HTTPS with good SSL configuration, but lacks visible security headers and explicit cookie consent mechanisms. No forms or data collection inputs are present on the homepage, reducing attack surface. The use of Matomo analytics indicates a privacy-aware approach. WHOIS data is limited but consistent with the website's claims and hosting. No suspicious patterns or vulnerabilities were detected. Overall, the website presents a low-risk profile with good business credibility and technical maturity. Recommendations include adding security headers, implementing cookie consent, publishing a security policy and incident response contacts, and considering a vulnerability disclosure policy to enhance trust and compliance.

K

Kath. Arbeitnehmerpastoral im Erzbistum Bamberg

arbeitnehmerpastoral-bamberg.de

60

The Katholische Arbeitnehmerpastoral im Erzbistum Bamberg operates as a regional non-profit church organization providing social and pastoral support services including unemployment counseling, workplace pastoral care, conflict and bullying counseling, and truck driver pastoral care. The website serves as an information and engagement platform for its target audience of employees, unemployed persons, and those seeking social support within the Bamberg diocese. The organization maintains a clear market position as a trusted regional church entity with a focus on social welfare and pastoral care. Technically, the website is built on the Alkacon Mercury CMS platform, leveraging modern web technologies and accessibility features, with moderate performance and good mobile optimization. Privacy compliance is well addressed with comprehensive cookie and privacy policies and a consent mechanism. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers and policies could be improved. Overall, the website is professional, trustworthy, and well-aligned with its mission and audience.

The website medienzentrale-bamberg.de is currently a parked domain landing page primarily offering the domain for sale. It lacks any substantive business content, contact information, or privacy and security policies. The site embeds multiple third-party advertising and tracking scripts, including iframes from external domains, which may pose privacy concerns. The technical infrastructure is minimal, with no detected HTTPS or security headers, and the design and content quality are poor. Overall, the site does not represent an active business or service and appears to be a placeholder for domain resale. From a technical perspective, the site uses basic HTML and JavaScript with no modern frameworks or CMS detected. Hosting appears to be provided by intername.eu based on nameservers. Performance and mobile optimization are basic, and accessibility features are lacking. The presence of multiple external ad and tracking domains indicates extensive user tracking without visible privacy compliance mechanisms. Security posture is weak due to the absence of HTTPS, security headers, and privacy policies. No forms or user input fields are present, reducing attack surface but also indicating no active user engagement. The WHOIS data is minimal and unusual, with domain status 'connect' and no registrant details, consistent with a parked domain. This reduces trust and legitimacy. Overall risk is moderate to high for users due to tracking and lack of security controls. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, removing or auditing third-party tracking content, and providing clear business and contact information to improve trust and compliance.

C

Cyklokáva

cyklokava.sk

53

Cyklokáva is a small Slovakian business specializing in mobile coffee services delivered via a unique three-wheeled bicycle, targeting event organizers and attendees. The website presents a professional and consistent brand image, emphasizing mobility, ecological operation, and quality coffee service at events. Technically, the site is built on WordPress using modern block editor technology, hosted likely by WebSupport, with HTTPS and DNSSEC enabled, reflecting a good security baseline. However, the absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Security posture is solid but could be improved with additional headers and incident response information. Overall, the website is trustworthy, well-designed, and serves its niche effectively.

D

Don Bosco Mission

donbosco-engagement.de

45

Don Bosco Engagement is a German-based non-profit organization dedicated to improving the lives of disadvantaged children and youth worldwide through donations, foundations, and project support. The organization operates under the Deutsche Provinz der Salesianer Don Boscos and maintains a professional online presence with clear calls to action for donors and supporters. Their market position is strong within the charitable sector, with outreach in over 130 countries. The website is well-structured, mobile-optimized, and uses modern technologies such as Bootstrap, Leaflet maps, and Matomo analytics to provide a user-friendly experience. Security posture is solid with HTTPS enforced and secure forms, though some improvements in security headers and explicit policies could be made. Privacy compliance is generally good, with a comprehensive privacy policy present, but lacks a cookie consent mechanism. Overall, the website is trustworthy and professional, supporting its mission effectively.

P

PressMedia.net

pressmedia.net

55

PressMedia.net is a small media business specializing in article writing and publication services targeted at the Czech and Slovak markets. The company offers various packages for SEO optimized lifestyle articles and publication in a network of partner magazines and websites. The website is professionally designed with good navigation and mobile optimization, supporting e-commerce transactions through a custom platform. Technically, the site uses modern tools such as Google Analytics, Google Tag Manager, and reCAPTCHA for security on login forms. However, the absence of WHOIS registration data raises concerns about domain legitimacy. Security posture is moderate with HTTPS enforced but lacks security headers and explicit cookie consent mechanisms. Overall, the business appears operational and credible but would benefit from improved transparency and privacy compliance.

The website siecpieniny.net is a placeholder landing page hosted by Cyberfolks, a Polish hosting provider. It serves as an instruction page for the domain owner to upload their website files and remove the default index.html file. The site references Cyberfolks support and knowledge base resources, indicating it is not an independent business site but a hosting customer placeholder. The domain is well aged, created in 2008, and uses Cyberfolks name servers, consistent with the hosting provider. The site is simple, with basic HTML and CSS, mobile responsive design, and no advanced frameworks or CMS detected. There are no forms or data collection mechanisms, and no privacy or cookie policies are present. Contact information is limited to a generic Cyberfolks support email. Security posture is minimal with no visible security headers or HTTPS enforcement details in the provided data. No WAF or blocking mechanisms were detected, and the site content is fully accessible.

The website at st-michaelsbund-bamberg.de is a domain parking and sales landing page with minimal content focused on offering the domain for sale. It provides a categorized interface for navigation but no actual business services or products. The site includes basic bot detection and a captcha challenge to prevent automated access, indicating some minimal security awareness. However, there is no evidence of HTTPS enforcement or security headers, and no contact or business information is provided, limiting trust and credibility. Technically, the site uses standard HTML, CSS, and JavaScript with a modern responsive design and basic accessibility features. The performance is moderate, and SEO optimization is basic. The lack of WHOIS data and domain registration details raises concerns about the domain's legitimacy and age, suggesting it may be recently registered or parked without active use. Security posture is limited to client-side bot detection and captcha, with no visible advanced security measures or compliance indicators. Privacy compliance is minimal, with only a basic privacy policy page and no cookie consent mechanism. Overall, the site presents a low trust profile with limited business credibility. Strategically, the domain appears to be held for resale rather than active business use, and the lack of transparency and security features should be addressed if the domain is to be developed into a legitimate business site.

The website is a domain sales landing page hosted as a subdomain of forsaledomain.net, offering a domain for sale alongside a curated list of discounted product deals primarily sourced from Amazon. The business model appears to be a combination of domain sales and affiliate marketing targeting German-speaking consumers interested in bargain shopping. The site uses basic modern web technologies including Google Fonts and JavaScript for live search and affiliate link tracking. However, it lacks critical business and security information such as privacy policies, contact details, and HTTPS enforcement. The WHOIS data for the domain is missing, indicating the domain is likely unregistered or parked, which significantly reduces trustworthiness. Overall, the site is functional but minimalistic and lacks professional business credibility and security maturity.

The website is a domain sales and affiliate marketing landing page offering various product deals across multiple categories such as electronics, home & kitchen, beauty, clothing, and toys. It promotes Halloween deals for 2025 and indicates that the domain is currently for sale. The site targets general consumers looking for discounted products and operates primarily as an affiliate marketing platform with domain sales as a secondary focus. Technically, the site uses modern web standards including HTML5, CSS3, JavaScript, and Google Fonts, with a responsive design optimized for mobile devices. However, it lacks advanced security headers and privacy policies, which reduces its compliance posture. The security posture is basic with HTTPS assumed but no explicit security headers or contact information for incident response. The WHOIS data is unavailable, indicating the domain or subdomain is either unregistered or dynamically assigned, which raises questions about legitimacy and trustworthiness. Overall, the site is functional and safe for general audiences but lacks transparency and compliance features expected from professional e-commerce platforms.

F

Fliesen Lang GmbH & Co KG

fliesen-lang-gmbh.de

56

Fliesen Lang GmbH & Co KG is a small, established tile laying specialist operating in Kirchheim unter Teck, Germany. The company offers a range of services including consultation, planning, and installation of tiles and natural stone for residential and commercial properties. Their website reflects a professional local business with clear service descriptions and contact information. Technically, the site is built on the IONOS MyWebsite CMS platform, uses modern web technologies like HTML5, CSS3, and JavaScript libraries such as jQuery and swipebox, and is hosted by IONOS with HTTPS enabled, ensuring secure connections. However, the site lacks privacy and cookie policies, security headers, and incident response information, which are important for compliance and security posture. Overall, the website is functional, well-branded, and trustworthy but could improve in privacy compliance and security best practices.

K

Kreissparkasse Esslingen-Nürtingen

ksk-es.de

69

Kreissparkasse Esslingen-Nürtingen operates a comprehensive online banking platform serving both private and corporate customers in Germany. The website offers a wide range of financial products including checking accounts, credit cards, loans, insurance, investment products, and real estate services. The bank positions itself as a trusted regional financial partner with a strong local presence and multiple customer engagement channels including phone, chat, and social media. The site is professionally designed with clear navigation and mobile optimization, reflecting a mature digital infrastructure. Technically, the website leverages modern web technologies and likely uses Adobe Experience Manager as its CMS. It employs JavaScript, CSS, and React components for dynamic content delivery. The site is well-optimized for SEO and accessibility, with a moderate performance profile. Security measures include HTTPS enforcement, session timeout warnings, and cookie consent management, although explicit security headers could be further verified. The security posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is robust, featuring comprehensive privacy and cookie policies aligned with GDPR requirements. However, no explicit security policy or incident response contact information was found. The domain WHOIS data is consistent with the website's branding and location, supporting legitimacy and trustworthiness. Overall, the website demonstrates a high level of professionalism, security, and user experience suitable for a major regional bank. Strategic recommendations include enhancing transparency around security policies, publishing vulnerability disclosure information, and verifying security headers to further strengthen the security posture.

K

KÖ8 Shopping Center Köngen

koe8.de

55

KÖ8 Shopping Center Köngen is a local retail and family activity center based in Germany, targeting general audiences with offers and events for families. The website presents a professional and consistent brand image with good content quality and clear navigation. Technically, the site uses modern web technologies including service workers, Cookiebot for consent management, and responsive design, hosted on UI-DNS infrastructure. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and incident response policies are not published. Privacy compliance is good with a clear privacy policy and cookie consent dialog. Overall, the site is trustworthy and well-maintained for its business scope.

S

Stadtverwaltung Schifferstadt

schifferstadt.de

65

The website www.schifferstadt.de serves as the official digital presence of the Stadtverwaltung Schifferstadt, the local government administration of Schifferstadt, Germany. It provides comprehensive information and services related to living, governance, culture, tourism, economy, and environmental initiatives in the city. The site targets residents, visitors, and local businesses, offering structured navigation and a broad range of municipal services. The business model is that of a government entity focused on public service delivery and community engagement. Technically, the website employs modern web technologies including AngularJS, SystemJS, and the Ionas CMS platform. It is hosted on German infrastructure with nameservers indicating regional providers. The site demonstrates good mobile optimization, accessibility, and SEO practices, with a moderate performance profile. Security is robust with HTTPS enforced and script integrity checks, although explicit security headers and policies could be enhanced. From a security and compliance perspective, the site implements a cookie consent mechanism and uses an accessibility tool (eye-able). However, it lacks explicit privacy policy, terms of service, and vulnerability disclosure pages, which are recommended for full GDPR compliance and transparency. No critical vulnerabilities or suspicious activities were detected. The WHOIS data aligns well with the website's government nature, showing consistent registration and hosting. Overall, the site is professional, trustworthy, and well-suited for its public service role. Strategic improvements include publishing comprehensive privacy and security policies, enhancing security headers, and providing incident response contacts to strengthen compliance and user trust.

S

Stadt Speyer

speyer.de

62

The website www.speyer.de is the official digital presence of the city of Speyer, Germany, serving as a comprehensive portal for tourism, culture, city services, and public information. It positions itself as a trusted source for residents and visitors, highlighting Speyer's UNESCO World Heritage status and providing rich content on local attractions, events, and services. The site targets tourists, local citizens, and cultural enthusiasts, offering multilingual support and accessible design. Technically, the site employs modern web technologies including the ionas4 CMS, SystemJS module loader, AngularJS directives, and integrates analytics tools such as Google Analytics and Matomo. It features responsive design and accessibility enhancements, including the eye-able accessibility tool and cookie consent management compliant with GDPR. Performance is moderate, with good mobile optimization and SEO practices. From a security perspective, the site enforces HTTPS and implements privacy and cookie policies with user consent mechanisms. However, it lacks explicit security headers and published incident response or vulnerability disclosure policies. No critical vulnerabilities or suspicious content were detected. The WHOIS data is minimal but consistent with a legitimate municipal domain. Overall, the website demonstrates a strong business credibility and technical maturity suitable for a government entity, with room for improvement in security policy transparency and technical security headers. The risk profile is low, with no indications of malicious activity or compliance failures.

A

art kaleidoscope | Das Kunstmagazin für Frankfurt/Main und dem Rhein-Main Gebiet

artkaleidoscope.de

58

The website artkaleidoscope.de serves as a regional art magazine focused on Frankfurt/Main and the Rhein-Main area, providing quarterly publications, interviews, stories, and reports on current art events, artists, and exhibitions in museums, galleries, and off-spaces. The target audience primarily consists of art enthusiasts and cultural consumers within the region. The business model revolves around media publication and digital content delivery, including a mobile app. Technically, the site is built on Weblication CMS, uses HTTPS, and integrates etracker analytics for user tracking with a cookie consent mechanism. The design and content quality are good, with clear navigation and mobile optimization. Security posture is moderate, with HTTPS enabled but lacking explicit security headers and detailed privacy policies. Contact is available via a web form, but no direct emails or phone numbers are provided. Overall, the site is safe, professional, and trustworthy for general audiences.

K

k/c/e Marketing GmbH

museumsufercard.de

53

The MuseumsuferCard website represents a well-established cultural offering managed by k/c/e Marketing GmbH in cooperation with the Kulturamt der Stadt Frankfurt am Main. It provides annual access cards to 39 museums and cultural events in Frankfurt and surrounding areas, targeting culture enthusiasts, families, and tourists. The site is professionally designed with clear navigation, mobile optimization, and rich content describing the product offerings and benefits. Technically, the site uses modern JavaScript libraries such as Swiper.js, integrates Google Tag Manager and Facebook Pixel for analytics and marketing, and employs Usercentrics for GDPR-compliant consent management. Security posture is strong with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. Privacy compliance is good with a clear privacy policy and cookie consent mechanism. Contact information is comprehensive, enhancing business credibility. Overall, the site scores high on professionalism, trustworthiness, and user experience.