Security Directory

S

ST. JAKOB

jakobskirche-nuernberg.de

36

ST. JAKOB is a historic Evangelical Lutheran church located in Nuremberg, Germany, with a rich heritage of approximately 950 years. The website serves as a community portal offering information about religious services, cultural events, a kindergarten, and community support initiatives. The target audience includes local residents, church members, pilgrims, and families. The business model is non-profit, focusing on community engagement and religious activities. Technically, the website is built on WordPress 4.7.31 using the Hi-Response theme, with embedded multimedia content and Google Analytics for visitor tracking. While the site is functional and well-structured with good mobile optimization, it uses outdated software components that pose potential security risks. Security posture is moderate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. Overall, the website is trustworthy and professional but would benefit from technical updates and enhanced security measures.

E

Evangelischer Presseverband für Bayern e.V. (EPV)

sonntagsblatt.de

45

Sonntagsblatt is a German-language media website operated by the Evangelischer Presseverband für Bayern e.V. (EPV), focusing on news and articles related to church, religion, politics, society, culture, and social issues primarily in Bavaria, Germany. The site targets German-speaking audiences interested in religious and societal topics and offers news, interviews, podcasts, event information, and newsletters. Technically, the website is built on a Drupal-based CMS with integrations including Google Tag Manager, Matomo analytics, and a consent management platform, hosted by Mittwald. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforced and privacy-conscious analytics configurations, though it lacks explicit privacy and security policies. Overall, the domain registration and hosting details align well with the business entity, indicating legitimacy and trustworthiness.

O

Offene Tür Erlangen

offene-tuer-erlangen.de

58

Offene Tür Erlangen is a small non-profit counseling and advisory center affiliated with the Erzdiözese Bamberg, serving the local community in Erlangen, Germany. The organization offers open counseling, adult education, exhibitions, and support for individuals facing difficult life situations or mental health challenges. The website reflects a professional and consistent brand image, providing clear contact information and a comprehensive cookie consent mechanism, demonstrating good privacy compliance. Technically, the site uses a modern tech stack including jQuery, Bootstrap, and Matomo analytics, hosted on infrastructure associated with the Diocese of Bamberg. Security posture is solid with HTTPS enforced and privacy-respecting analytics, though some security headers could be improved. No critical vulnerabilities or suspicious content were detected, and the site is fully accessible without WAF or blocking mechanisms.

The website serves as the official service portal for the Outsourcing Data Center (OSRZ) managed by AKDB, a government IT service provider in Bavaria, Germany. It offers a range of services including user and contact management, password self-service, technical downloads, FAQs, token activation, and user registration. The portal targets authorized personnel and customers requiring access to OSRZ services. The business model focuses on providing specialized IT outsourcing and data center services primarily to governmental entities, positioning AKDB as a trusted regional government IT partner. Technically, the site is built on Microsoft ASP.NET Web Forms technology, hosted on Colt Technology Services infrastructure. The site demonstrates moderate performance and basic mobile optimization. Navigation and content structure are clear and consistent with government service portals. However, the site lacks modern CMS features and advanced SEO or accessibility enhancements. From a security perspective, the site uses HTTPS and standard ASP.NET security features but lacks explicit security headers such as CSP, HSTS, and X-Frame-Options. There is no visible privacy or cookie policy, nor vulnerability disclosure or incident response information, which are important for compliance and trust. No exposed sensitive data or vulnerable libraries were detected in the provided content. Overall, the website is professional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, improved security headers, and clearer contact and incident response information to strengthen its security posture and user trust.

stadtplan.net is a German-language website providing precise city maps, cartography, route planning, and local business directory services. Operated by Verwaltungs-Verlag GmbH & Co. Betriebs OHG, it targets local residents and visitors seeking up-to-date regional information. The website offers user-friendly features such as autocomplete search and a cookie consent mechanism, reflecting a moderate level of digital maturity. Technically, it relies on older but stable JavaScript libraries like jQuery and jQuery UI, with no detected CMS or advanced frameworks. Security posture is adequate with HTTPS enforced and cookie consent implemented, though the absence of explicit security headers and incident response policies suggests room for improvement. The lack of WHOIS data for the domain introduces some trust concerns despite the professional presentation and comprehensive legal pages. Overall, the site is functional, trustworthy, and compliant with GDPR, but would benefit from enhanced transparency and security practices.

M

mediaService Fuchshuber

panotour.info

46

mediaService Fuchshuber operates the website mediaservice360.com, providing specialized services in creating 360° virtual tours, panorama photography, video production including drone and 360° videos, graphic design, and web design primarily targeting hotels, businesses, tourism, and real estate sectors in Germany. The company positions itself as a niche provider with a strong focus on immersive virtual experiences and integrated marketing solutions. Their offerings include Google StreetView integration, enhancing visibility and customer engagement. Technically, the website is built using Nicepage CMS with jQuery and integrates Google Tag Manager and Google Analytics for tracking. The site employs Elfsight widgets for chatbot, accessibility, and appointment booking functionalities, indicating a moderate level of digital maturity. The website is mobile-optimized, accessible, and SEO-friendly, though performance is moderate. HTTPS is enabled, but security headers are lacking, suggesting room for improvement in security hardening. From a security and compliance perspective, the site demonstrates good privacy practices with a comprehensive privacy policy, cookie consent mechanisms, and GDPR compliance indicators. However, no explicit security policy, incident response contacts, or vulnerability disclosure policies are published. The WHOIS data is unavailable, which raises some concerns about domain legitimacy, though the professional content and consistent branding mitigate immediate risks. Overall, mediaservice360.com is a professional and trustworthy business website with solid content and compliance posture but could enhance its security posture by adding security headers and publishing security-related policies. Monitoring domain registration status is recommended to ensure ongoing legitimacy.

O

Obermain Therme Bad Staffelstein

obermaintherme.de

51

Obermain Therme Bad Staffelstein operates a well-established thermal spa and wellness center in Bavaria, Germany, offering a variety of services including thermal baths, sauna facilities, therapy treatments, and wellness cosmetics. The website reflects a strong regional market position with a focus on customer experience and engagement through newsletters and social media channels. Technically, the site is built on WordPress with modern integrations such as Sendinblue for marketing automation and Cookiefirst for cookie consent management. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security posture is solid with HTTPS and cookie consent, though improvements could be made by implementing additional security headers and publishing incident response information. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, supporting the business's credibility and customer trust.

K

Kinderhaus St. Johannes der Täufer Uetzing

kinderhaus-uetzing.de

57

Kinderhaus St. Johannes der Täufer Uetzing is a small local childcare and kindergarten provider located in Bad Staffelstein/Uetzing, Germany. The organization offers a range of early childhood education services including nursery, kindergarten, musical early education, children's church, and afternoon workshops. It operates under the Erzbistum Bamberg umbrella, indicating a religious affiliation and non-profit status. The website is well-structured, accessible, and provides comprehensive information for parents and families about enrollment, fees, and pedagogical concepts. Technically, the website is built on the alkacon Mercury CMS platform, leveraging JavaScript and Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and includes accessibility features, demonstrating a commitment to inclusive design. Performance is moderate with no major technical issues detected. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and incident response policies are not published, representing an area for improvement. No vulnerabilities or suspicious content were found, and the WHOIS data shows partial consistency with the business identity, though registrant details are limited. Overall, the website presents a trustworthy, professional, and privacy-aware digital presence for a small educational institution. Strategic enhancements in security policy transparency and technical security headers would further strengthen its posture.

K

Kindertagesstätte St. Michael Ebensfeld

kita-ebensfeld.de

57

Kindertagesstätte St. Michael Ebensfeld is a local childcare and early education provider in Ebensfeld, Germany, operating multiple specialized locations including Krippe, Kindergarten, Waldkindergarten, and others. The website serves parents and families seeking childcare services, offering detailed organizational information, event updates, and contact details. The business appears community-focused with a clear educational mission and local market presence. Technically, the website is built on the Alkacon Mercury CMS platform, leveraging modern JavaScript, Matomo analytics for privacy-conscious tracking, and accessibility enhancements via the Eye-Able plugin. Hosting is provided by internet1.de, with domain nameservers pointing accordingly. Security posture is good with HTTPS enforced and cookie consent implemented, though explicit security headers and incident response policies are absent. Privacy compliance is strong with a comprehensive privacy policy and cookie banner. Overall, the website is professional, accessible, and trustworthy, suitable for its target audience. Recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure mechanisms to further improve trust and compliance.

The website for Pfarrei Altenbanz und Pfarrei Banz serves as the official online presence of the Catholic parish in Altenbanz and Banz, Germany. It provides parishioners and visitors with information about religious services, sacraments, community events, and contact details. The site is clearly targeted at local community members and those interested in church activities. The business model is non-profit, focusing on spiritual and community services. The website content is well-structured, professionally presented, and consistent with the parish's mission. Technically, the site employs a modern frontend stack including jQuery, Bootstrap, Font Awesome, and specialized plugins like Revolution Slider and JWPlayer. It uses a CMS likely based on FlexiWeb, hosted on servers associated with internet1.de. The site is mobile responsive and includes accessibility features, though these could be enhanced. Analytics are handled via Matomo with privacy-conscious anonymous tracking fallback, and Google reCAPTCHA is used to protect forms. From a security perspective, the site enforces HTTPS and implements a detailed cookie consent mechanism compliant with GDPR. However, it lacks explicit security headers and incident response contact information. No vulnerabilities or suspicious elements were detected in the content or WHOIS data. The domain registration is consistent with the website's purpose, though registrant details are minimal. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic improvements include adding security headers, publishing incident response contacts, and enhancing accessibility. These steps would further strengthen trust and security posture.

DPSG SG Nahost is a small non-profit organization focused on fostering connections and cultural exchange among scouts in the Middle East. The website serves as an informational and community hub, providing resources, tips, and updates about scouting adventures and partnerships in the region. The site is built on a WordPress platform with a modern but moderate technical infrastructure, leveraging common libraries such as Bootstrap and jQuery. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, but lacks advanced security headers and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-targeted to its audience, though improvements in privacy compliance and security policies are recommended.

R

Rüsthaus GmbH & Co. KG

ruesthaus.de

49

Rüsthaus GmbH & Co. KG operates a specialized e-commerce platform focused on scouting and outdoor equipment, serving primarily the German market. The website offers a broad range of products including scouting uniforms, tents, outdoor gear, and related accessories, targeting scouting groups and outdoor enthusiasts. The company maintains a medium-sized retail operation with a clear brand presence and consistent messaging. Technically, the website is built on the Shopware CMS platform, leveraging modern web technologies and providing a responsive user experience optimized for mobile devices. Security is well-managed with HTTPS enforced and CSRF protections in place, although some standard security headers are missing. Privacy compliance is addressed with a GDPR-compliant privacy policy and cookie consent mechanism. The site uses Piwik (Matomo) for analytics, reflecting a moderate level of user tracking. Overall, the website is professional, trustworthy, and well-positioned within its niche market.

G

GMK GmbH & Co. KG

gmk.de

55

GMK GmbH & Co. KG is a professional advertising agency based in Bayreuth, Germany, specializing in creative and strategic marketing services including corporate design, content creation, web development, online marketing, and brand building. The company serves a diverse clientele ranging from medium-sized businesses to global players, positioning itself as a full-service agency with a strong regional presence and multiple industry awards. Technically, the website is built on TYPO3 CMS with modern web technologies and integrates advanced analytics and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and privacy compliance mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

B

Bayreuther Land

bayreutherland.de

48

Bayreuther Land is a regional branding initiative jointly run by the Landkreis and Stadt Bayreuth in Germany. The website promotes local producers and products to strengthen regional economic value and preserve local specialties. It targets consumers interested in authentic regional goods and provides resources such as producer listings, recipes, event information, and thematic nature trails. The site is built on WordPress using the Avada theme and several plugins including Slider Revolution and Contact Form 7. The technical infrastructure is modern and supports good SEO and mobile responsiveness. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though improvements are recommended in cookie consent and security headers. Overall, the website is trustworthy and professionally maintained, serving a niche regional market effectively.

M

MEDICLIN GmbH & Co. KG

mediclin.de

69

MEDICLIN GmbH & Co. KG is a large German healthcare provider operating 32 clinics, six nursing homes, and ten medical care centers nationwide. The company specializes in rehabilitation, medical care, and therapy services, supported by approximately 10,000 employees and over 8,000 beds. Their digital therapy platform MEDICLIN HOME highlights their commitment to innovative healthcare delivery. The website is professionally designed, well-structured, and optimized for mobile users, reflecting a mature digital presence. Technically, the site runs on TYPO3 CMS with integrations for Google Tag Manager, reCAPTCHA, and Usercentrics consent management, indicating a modern and privacy-conscious infrastructure. Security posture is strong with HTTPS enforced and anti-bot protections, though explicit security headers and incident response policies are not publicly documented. Overall, the site demonstrates high professionalism, GDPR compliance, and trustworthy business practices, positioning MEDICLIN as a reputable healthcare entity in Germany.

P

Praxis am Main

praxis-am-main.de

43

Praxis am Main is a small, local medical practice specializing in general and sports medicine located in Bayreuth, Germany. The website clearly communicates the practice's services, contact information, and partnerships with local sports organizations, positioning it as a trusted healthcare provider in the community. The business model focuses on personalized patient care with an emphasis on health, well-being, and performance. The site content is well structured and professionally presented in German, targeting local patients seeking medical services in general and sports medicine. Technically, the website is built on WordPress with Yoast SEO plugin and uses jQuery for interactivity. It is hosted by agenturserver with proper HTTPS configuration, indicating a modern and secure infrastructure. Mobile optimization and SEO practices are good, although accessibility features are basic. No advanced analytics or tracking scripts are detected, reflecting a privacy-conscious approach. From a security perspective, the site benefits from HTTPS but lacks important security headers and does not provide explicit incident response or security policy information. There is no cookie consent mechanism, which may pose GDPR compliance risks. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data is partially consistent with the business claims, though registrant details are minimal. Overall, the website is professional, trustworthy, and suitable for its healthcare audience. Strategic improvements in privacy compliance and security headers would enhance its security posture and regulatory adherence.

G

Gesundheitsregion Bayreuth

gesundheitsregion-bayreuth.de

45

Gesundheitsregion Bayreuth is a regional health and wellness promotion organization based in Northern Bavaria, Germany. The website serves as a portal for health-related tourism, medical and wellness service information, and career opportunities in healthcare. It targets tourists, health-conscious individuals, and healthcare professionals, positioning itself as a regional hub for health and wellness services. The business model focuses on collaboration with regional partners and public health initiatives such as Gesundheitsregion Plus. Technically, the website uses a Foundation CSS framework, jQuery 1.9.1, jQuery UI, and cookie consent scripts, with etracker analytics for user tracking. The site is moderately optimized for performance and mobile devices, with good SEO and navigation clarity. However, the use of outdated JavaScript libraries and lack of visible security headers indicate areas for improvement. From a security perspective, the site implements cookie consent and privacy policies consistent with GDPR. No direct contact emails or phone numbers are exposed, reducing spam risk. However, the outdated jQuery version and missing security headers pose potential vulnerabilities. No incident response or security policy information is provided. The domain WHOIS data is consistent and legitimate, with no privacy protection, indicating transparency. Overall, the website is professional, trustworthy, and content-rich, but would benefit from technical and security updates to enhance protection and compliance. Strategic recommendations include updating JavaScript libraries, implementing security headers, publishing security policies, and improving mobile optimization.

B

Bayerisches Rotes Kreuz – Kreisverband Bayreuth

brk-bayreuth.de

47

The Bayerisches Rotes Kreuz – Kreisverband Bayreuth website represents a well-established regional non-profit organization focused on social, health, and emergency services within the Bayreuth area in Germany. The organization provides a broad range of services including emergency rescue, elderly care, social support, childcare, first aid training, and volunteer community groups. The website content is comprehensive, professionally designed, and clearly targeted at residents and stakeholders seeking assistance or engagement with the Red Cross in Bayreuth. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and WP Rocket for optimization. It employs standard web technologies including jQuery and FontAwesome, and demonstrates good mobile responsiveness and SEO practices. The site loads quickly and provides a positive user experience with clear navigation and structured content. From a security perspective, the site uses HTTPS with an excellent SSL configuration but lacks visible security headers and does not provide public information on security policies, incident response, or vulnerability disclosure. No cookie consent mechanism was detected, which may present a GDPR compliance gap. Analytics are implemented via WP Statistics with minimal user tracking. Overall, the website is trustworthy and professional, with strong business credibility and content quality. Strategic recommendations include implementing security headers, adding cookie consent mechanisms, publishing security and incident response policies, and enhancing privacy compliance disclosures to further strengthen the security posture and regulatory adherence.

R

reha team Nordbayern Gesundheitstechnik GmbH

rehateam-nordbayern.de

47

reha team Nordbayern Gesundheitstechnik GmbH is a regional healthcare provider specializing in orthopaedic technology, mobility aids, compression therapy, and prosthetics with 19 branches across Northern Bavaria. The company targets patients and customers requiring rehabilitation and medical aids, positioning itself as a trusted regional leader with a comprehensive service offering. The website is built on TYPO3 CMS with modern frontend technologies, providing a professional and user-friendly experience optimized for mobile devices. Security posture is strong with HTTPS, cookie consent, and email obfuscation, though some security headers and explicit incident response contacts are missing. Overall, the site demonstrates good privacy compliance and business credibility, with clear contact information and partner affiliations. No critical vulnerabilities or blocking mechanisms were detected, indicating a stable and trustworthy online presence.

K

Klinikum Bayreuth

klinikum-bayreuth.de

49

Klinikum Bayreuth operates as a regional healthcare provider in Germany, offering comprehensive hospital and ambulatory services across multiple locations. The website is built on TYPO3 CMS with modern frontend technologies, providing a professional and user-friendly experience targeted at patients and healthcare consumers. While the technical infrastructure is solid, the site lacks explicit privacy, cookie, and security policies, which are critical for compliance and trust in the healthcare sector. Security posture is moderate with no detected blocking or WAF, but improvements in security headers and incident response documentation are recommended. Overall, the site is functional and credible but would benefit from enhanced privacy and security transparency.

M

Mittwald CM Service GmbH & Co. KG

mittwald.de

74

Mittwald CM Service GmbH & Co. KG is a German-based hosting provider specializing in managed hosting solutions tailored for agencies and freelancers. With over 20 years of experience, the company offers a broad portfolio including webhosting, virtual servers, dedicated servers, and a proprietary cloud management platform called mStudio. Their market position is strong within the German hosting industry, supported by high customer satisfaction and certifications such as ISO 27001. The website reflects a professional and user-friendly digital presence, emphasizing performance, security, and customer service. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, integrating modern JavaScript libraries and analytics tools like Google Tag Manager and eTracker. The site is optimized for performance, mobile responsiveness, and accessibility, with clear SEO practices. Hosting is managed in their own TÜV-certified data center in Germany, ensuring data sovereignty and compliance with GDPR. Security posture is robust, with enforced HTTPS, comprehensive security headers, and GDPR-compliant cookie consent mechanisms. The company demonstrates strong trust signals through certifications, customer testimonials, and transparent contact information. No critical vulnerabilities or blocking mechanisms were detected, indicating a mature security environment. Overall, Mittwald presents a low-risk profile with a well-structured business model, solid technical infrastructure, and a strong commitment to security and privacy. Strategic recommendations include enhancing incident response transparency and publishing a vulnerability disclosure policy to further strengthen security maturity.

I

Ivo-Hennemann Grundschule Bad Staffelstein

ivo-hennemann-grundschule.de

56

Ivo-Hennemann Grundschule Bad Staffelstein is a medium-sized educational institution in Germany, operating as a school association comprising four school buildings. The school emphasizes inclusive education and community involvement, positioning itself as the first primary school with an inclusion profile in its district. The website is built on a modern WordPress infrastructure with common plugins and themes, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. The site is free from suspicious content and maintains GDPR compliance with a comprehensive privacy policy. Overall, the website reflects a trustworthy and professional educational institution with clear contact information and relevant content for its audience.

K

kitafino GmbH

kitafino.de

60

Kitafino GmbH operates a specialized online platform focused on simplifying lunch ordering and invoicing for daycare centers, schools, and related administrations in Germany. The service streamlines administrative tasks by providing parents with an easy-to-use interface for meal ordering and account management, while also facilitating timely communication with caterers and kitchens. The company positions itself as a service provider that reduces operational burdens for educational institutions and enhances transparency for parents. Technically, the website is built using modern web technologies including React and Next.js, hosted on Amazon AWS infrastructure. The site demonstrates good mobile optimization and a professional design, though some SEO and accessibility features could be improved. The absence of cookie consent mechanisms and security headers indicates room for enhancement in privacy and security compliance. From a security perspective, the site uses HTTPS and does not exhibit signs of vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response information, and vulnerability disclosure mechanisms, which are important for mature security posture. The WHOIS data aligns well with the business claims, showing consistent domain registration and hosting details. Overall, Kitafino presents a trustworthy and professional online presence with a solid business model in the education sector. Strategic improvements in privacy compliance and security transparency would further strengthen its risk profile and user trust.

H

Heimvolkshochschule Gottfried Könzgen KAB/CAJ gem. GmbH

hvhs-haltern.de

42

The KönzgenHaus is a German non-profit educational institution affiliated with the KAB and CAJ organizations, focusing on political and value-oriented education. It offers seminars, conference facilities, and promotes social justice and community engagement. The website is well-structured, professionally designed, and targets adults interested in political education and social causes. The institution holds certifications such as Ökoprofit and Serqua, enhancing its credibility. Technically, the website is built on TYPO3 CMS, uses modern web technologies including Font Awesome and Bootstrap, and integrates privacy-compliant tools like Usercentrics for cookie consent and Matomo for analytics with privacy settings enabled. The site is mobile-optimized and performs moderately well. From a security perspective, the site enforces HTTPS, uses a consent manager, and disables cookies in analytics to respect privacy. However, some security headers could be improved or explicitly implemented. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy, privacy-conscious, and professional digital presence for the KönzgenHaus educational institution, with clear contact information and compliance with GDPR. Strategic recommendations include enhancing security headers, adding explicit security policies, and maintaining regular audits of third-party scripts.

D

Deutscher Landwirtschaftsverlag GmbH

hetairos.com

66

The website hetairos.com/sorten is a German-language agricultural seed variety guide operated under the brand agrarheute, part of Deutscher Landwirtschaftsverlag GmbH. It provides comprehensive data on seed varieties, including regional yield data, official recommendations, and news updates relevant to farmers and agricultural professionals in Germany. The platform supports user engagement through newsletters and social recruiting services. Technically, the site is built on modern frameworks such as Next.js and React, with strong mobile optimization and good SEO practices. Security posture is robust with HTTPS, security headers, and cookie consent mechanisms in place. However, the WHOIS data for the domain is missing, which raises concerns about domain registration legitimacy despite the professional content and branding. Overall, the site is trustworthy and well-maintained but would benefit from clearer domain registration transparency.

I

ILK Internet GmbH

ilk.de

60

ILK Internet GmbH is a specialized technology and internet service provider based in Karlsruhe, Germany, offering tailored solutions including internet access, network connectivity, hosting, private cloud, server housing, colocation, and professional IT services. The company targets business clients and tenants of the Karlsruhe Technology Park, positioning itself as a regional expert in connectivity and IT infrastructure services. The website content is professional and well-structured, reflecting a focused B2B business model with clear service offerings. Technically, the website is built on WordPress using the Avada theme and jQuery libraries, indicating a modern and maintainable platform. The site is mobile-optimized and provides a good user experience with clear navigation and relevant meta tags. Hosting details are not explicitly disclosed, but the site uses HTTPS with a good SSL configuration, contributing to secure communications. From a security perspective, the site enforces HTTPS but lacks visible security headers such as Content-Security-Policy or X-Frame-Options. There is no explicit incident response or security policy published, and no cookie consent mechanism is detected, which may impact GDPR compliance. The WHOIS data for the domain is missing or indicates the domain is unregistered, which raises concerns about domain legitimacy and requires further verification. Overall, the website presents a trustworthy and professional front for ILK Internet GmbH, but improvements in security headers, privacy compliance mechanisms, and domain registration transparency are recommended to enhance trust and security posture.

G

German Federation for Biological Data e.V.

gfbio-ev.de

50

The German Federation for Biological Data e.V. (GFBio e.V.) is a small non-profit organization based in Germany focused on collecting, preserving, and distributing biological and environmental data for research purposes. It plays a key role as a coordinating partner in the National Research Data Infrastructure (NFDI), particularly in the biodiversity sector. The website presents a professional and consistent brand image, targeting researchers, academic institutions, and data centers involved in biological data management. Key services include service development, data curation, software development, and project management within research data infrastructures. Technically, the website uses a modern front-end stack including Bootstrap, various icon libraries, and JavaScript libraries such as jQuery and Glightbox. It is hosted on a domain registered with DomainDiscount24, with no privacy protection on WHOIS, indicating transparency. The site is mobile-optimized and has good SEO practices, though some technical improvements are possible, such as updating jQuery and adding security headers. From a security perspective, the site uses HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance. No explicit security or incident response policies are published. Google Analytics is used for user tracking, with moderate tracking levels but no visible cookie consent banner. Overall, the website is trustworthy, professional, and well-positioned within its niche, but could improve privacy compliance and security posture by implementing cookie consent, security headers, and publishing security policies.

C

Caritas München und Oberbayern

caritas-nah-am-naechsten.de

54

Caritas München und Oberbayern is a well-established non-profit organization providing a broad range of social services including care for the elderly, support for children and families, assistance for people with disabilities, migration and integration services, and volunteer engagement opportunities. The organization maintains a strong regional presence in Munich and Upper Bavaria, supported by a professional website that reflects its mission and services. The website features comprehensive contact information, official branding, and active social media channels, reinforcing its credibility and community engagement. Technically, the website employs modern web technologies such as Bootstrap for responsive design, Matomo for privacy-conscious analytics, and Klaro for cookie consent management. The site is mobile-optimized and accessible, with good SEO practices evident. The use of HTTPS and privacy-focused analytics demonstrates a mature approach to user privacy and security. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks publicly available security policies or incident response contacts. No critical vulnerabilities or suspicious domains were detected. The WHOIS data is limited but does not raise significant concerns, aligning with the organization's profile. Overall, the website presents a trustworthy, professional, and privacy-compliant digital presence for a reputable non-profit social service provider. Strategic improvements could include publishing explicit security policies and incident response information to enhance transparency and trust further.

C

Codevibrant

codevibrant.com

39

Codevibrant is a small technology company specializing in WordPress themes and plugins, offering customizable and user-friendly web solutions primarily targeting WordPress users and businesses seeking web development services. The company has been operational since 2017 and maintains a professional online presence with a focus on SEO and user experience. Technically, the website is built on WordPress with a modern tech stack including jQuery, Easy Digital Downloads, and various performance and UI libraries. The site is optimized for mobile and SEO, with fast loading times and clear navigation. Security posture is good with HTTPS enabled and standard domain protections, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the website demonstrates a solid business credibility and technical maturity suitable for its market niche.

I

Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern

irl-bayern.de

41

The Institut für Religionspädagogik und Lehrkräftefortbildung in Bayern (IRL) is a recently founded educational institution (2025) focused on religious pedagogy and teacher training within Bavaria, Germany. It serves religious education teachers across multiple school types by providing professional development courses, resources, and events. The website reflects a professional and regionally focused organization with clear affiliations to the Archdiocese of Munich and Freising. Technically, the website is built on TYPO3 CMS with modern frontend frameworks such as Bootstrap and MDBootstrap, ensuring good mobile responsiveness and user experience. Hosting is provided by Alfahosting, a reputable German hosting provider. The site uses standard web technologies including jQuery and FontAwesome, and employs a contact form with client-side validation. From a security perspective, the site uses HTTPS and secure form submission but lacks visible security headers and explicit privacy or cookie policies, which are important for GDPR compliance. No analytics or tracking scripts were detected, indicating minimal user tracking. WHOIS data is consistent with the business identity, supporting legitimacy. Overall, the website is well-structured and professional but would benefit from enhanced privacy compliance and security header implementation to improve trust and regulatory adherence.

B

Bürgernetz Dillingen e.V.

dillingen.de

39

Bürgernetz Dillingen e.V. is a German non-profit association focused on communication and information technologies, established in 1995. The website serves primarily its members, offering services such as cloud storage (ownCloud), webmail, and association management tools. The site is built on Joomla! CMS and uses JavaScript libraries including jQuery and MooTools. The content is well-structured, mobile responsive, and presented in German, targeting local members. However, contact information is limited to an email address, with no phone or physical address details visible. Privacy policy is present but cookie consent mechanisms are missing. Security posture is moderate with CSRF tokens implemented but lacking security headers and explicit HTTPS enforcement details. No advertising or tracking technologies are detected, indicating a privacy-conscious approach. WHOIS data is minimal but does not raise suspicion.

NonProfit-Link.org is a specialized SaaS platform designed to empower non-profit organizations and mission-driven individuals by providing customized link-in-bio pages to centralize their digital presence, fundraising, and supporter engagement. Powered by HeyLink.me, the platform offers tools for easy customization, real-time analytics, and integration with donation and event promotion services. The website demonstrates a professional design and clear messaging targeted at the non-profit sector. Technically, it uses modern frameworks such as Next.js and React, with Google Analytics for user tracking. Security posture is generally good with HTTPS enabled, but lacks visible security headers and privacy compliance documentation. WHOIS data is privacy-protected, which is typical for SaaS providers, and no suspicious patterns were detected. Overall, the site is trustworthy and functional but would benefit from enhanced privacy and security disclosures.

HeyLink.au is a technology-focused business offering Australian customers the ability to register .AU domains combined with a smart link-in-bio page platform. The service targets Australian businesses, creators, and professionals seeking a localized and credible digital presence. The website is well-designed, mobile-optimized, and leverages modern web technologies such as Next.js and React. It integrates Google Analytics for user tracking but lacks explicit privacy and cookie policies, which is a compliance gap. Security posture is generally good with HTTPS enforced, but the absence of security headers and incident response policies suggests room for improvement. Overall, the domain registration data is limited but consistent with a legitimate Australian-based service. The risk profile is low, with recommendations to enhance privacy compliance and security headers to strengthen trust and regulatory adherence.

KODE.link is a newly launched technology platform specializing in instant QR code generation and digital business card creation, integrated with the HeyLink.me ecosystem. The service targets business professionals and marketers seeking fast, customizable, and trackable QR code solutions. The website is built on modern web technologies including React and Next.js, hosted with Cloudflare DNS services, and employs Google Tag Manager for analytics. While the site demonstrates good design quality and mobile optimization, it lacks explicit privacy, cookie, and terms of service policies, which impacts its privacy compliance score. Security posture is solid with HTTPS and domain transfer protections, but could be improved by enabling DNSSEC and adding security headers. No contact emails or phone numbers are explicitly provided, limiting direct communication channels. Overall, the platform appears legitimate and professionally presented but would benefit from enhanced transparency and security disclosures.

P

Persollo

persollo.com

56

Persollo is a technology company specializing in AI-powered influencer marketing analytics and instant checkout solutions. Their platform enables brands and agencies to analyze social media accounts across Instagram, TikTok, and YouTube, discover influencers with targeted audiences, and facilitate social media sales with a streamlined one-click checkout process. Positioned as a leading solution in influencer marketing, Persollo targets marketing professionals seeking transparency and efficiency in influencer campaigns. Technically, the website is built on modern frameworks such as React and Semantic UI, with integrations including Stripe for payments and Cloudfront for content delivery. The infrastructure is hosted with DigitalOcean DNS and leverages multiple external services for analytics and social media engagement. The site is mobile-optimized and demonstrates good SEO and accessibility practices, though some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with a good SSL configuration and domain registration protections. However, it lacks DNSSEC and explicit security headers, and does not publicly disclose incident response or vulnerability handling policies. Privacy compliance is partially addressed with a comprehensive privacy policy and terms of service, but cookie consent mechanisms are absent. Overall, Persollo presents a professional and trustworthy online presence with a solid business model and technical foundation. Strategic enhancements in security policies, privacy compliance, and transparency would further strengthen their risk posture and customer trust.

P

pdir GmbH

contao-themes.net

56

Contao-Themes.net is a specialized digital agency project by pdir GmbH, offering a curated collection of free and premium Contao CMS themes. The company leverages over 15 years of experience in Contao development to provide high-quality themes, installation, support, and consulting services. The website is well-positioned in the niche market of Contao CMS themes, targeting web agencies, freelancers, and businesses seeking professional Contao templates. Technically, the site uses a modern stack including Contao CMS, Bootstrap, jQuery, and integrates Google Adsense and Matomo analytics, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements like enabling DNSSEC and adding CSP headers are recommended. Privacy compliance is strong with clear cookie consent mechanisms and GDPR-aligned policies. Overall, the site demonstrates professionalism, trustworthiness, and a clear business model focused on theme sales and related services.

P

fordskladom.sk

prevereneauto.sk

43

Fordskladom.sk is a Slovakian online platform specializing in the sale of used Ford vehicles. Established in 2019, the website targets consumers interested in purchasing pre-owned Ford cars within Slovakia. The business operates a niche retail model focusing on vehicle listings, comparisons, and filtering to facilitate customer decision-making. The website demonstrates consistent branding and a professional design tailored to its target audience. Technically, the site is built on a modern JavaScript framework (likely Vue.js/Nuxt.js) and integrates common marketing and tracking tools such as Google Tag Manager and Facebook Pixel. Cookie consent is managed via Usercentrics, indicating some level of privacy compliance. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit privacy and terms of service documentation. Overall, the site presents a moderate risk profile with room for improvement in compliance and security best practices.

I

IJ Willtrinken e.U.

willtrinken.at

52

IJ Willtrinken e.U. operates an e-commerce platform focused on nighttime beverage delivery in Vienna, Austria. The website offers a wide range of alcoholic and non-alcoholic drinks including beer, wine, spirits, and party packages, targeting adult consumers seeking fast delivery services. The business positions itself as a local night delivery service with a focus on convenience and quick service. The website is professionally designed with consistent branding and clear navigation, supporting a positive user experience.

The website www.leteckezazitky.sk offers aviation experience services across Slovakia, including hot air balloon flights, acrobatic flights, and pilot training experiences. It targets a general audience interested in unique aviation activities and gifts. The site uses modern web technologies such as Vue.js and Bootstrap, with Google Tag Manager integrated for analytics and marketing purposes. Hosting assets are served via DigitalOcean Spaces CDN, indicating a cloud-based infrastructure. Security posture is moderate but lacks critical elements such as security headers and explicit privacy and cookie policies. No contact information or incident response details are provided, which may impact user trust and compliance. Overall, the site is functional and professionally designed but requires improvements in privacy compliance and security best practices.

S

Sviečky - zdravé sviečky zo Slovenska pre váš domov | svetlusa.sk

svetlusa.sk

59

The website svetlusa.sk is an e-commerce platform specializing in healthy candles produced in Slovakia, targeting general consumers interested in home decor and wellness products. The business appears to be a small local retailer established in 2021, with a clear focus on selling natural and healthy candles. The website uses modern web technologies including Bootstrap 5, Google Tag Manager, Microsoft Clarity, and other marketing and analytics tools, indicating a moderate level of digital maturity. Hosting is provided by websupport.sk, a Slovak hosting provider, and the domain is secured with HTTPS and DNSSEC, reflecting good technical infrastructure. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and explicit security policies. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy policy or terms of service pages. Overall, the website is functional and professional but could improve transparency and compliance by adding privacy and security policies and explicit contact information.

B

Bratiska

bratiska.sk

59

Bratiska.sk is an e-commerce website specializing in quality textiles and unique gifts primarily for home use, targeting a general audience in Slovakia. The business appears to be a small retail operation established in 2013, with a consistent brand presence and a focus on home-related products. The website uses modern web technologies including Bootstrap and integrates multiple marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Microsoft Clarity. Cookie consent is managed via CookieHub, indicating some level of privacy compliance. Security posture is adequate with HTTPS and DNSSEC enabled, but lacks advanced security headers and explicit security policies. No contact emails or phone numbers are explicitly visible, which may affect user trust and support accessibility. Overall, the site is functional and professionally designed but could improve in privacy transparency and security best practices.

Z

Zlaté šperky s dušou: Ručne vyrobené príbehy od roku 1957

zlatokov.sk

50

The website represents a small Slovakian business specializing in handcrafted gold jewelry with a long heritage dating back to 1957. The site is designed with modern responsive technologies such as Bootstrap 5, providing a good user experience and clear navigation for its target audience. However, the website lacks critical privacy and security documentation such as privacy policies, cookie consent mechanisms, and security headers, which impacts its overall security posture. No contact information or social media presence was detected in the provided content, limiting direct communication channels. The domain registration data is consistent and supports the business's legitimacy and history, enhancing trustworthiness. Overall, the website is functional and professionally designed but requires improvements in security and privacy compliance to meet modern standards.

The website curaproxpartner.sk appears to be a small business or partner site related to CURAPROX, likely targeting the Slovakian market. The site uses modern frontend technology such as Bootstrap 5.3.5 and is hosted behind Cloudflare DNS, indicating a standard and reliable hosting setup. However, the content is minimal and lacks substantive business descriptions, contact information, or privacy and security policies. The absence of privacy and cookie policies, contact details, and security headers suggests a low maturity level in compliance and security posture. The domain is registered since 2018 with a valid registrar and shows no suspicious WHOIS patterns, indicating legitimacy but limited business presence online. Overall, the site is accessible without WAF blocking or security challenges but requires significant improvements in content, compliance, and security to enhance trust and professionalism.

S

Sedačky na mieru a nábytok od slovenského výrobcu

sedacka.sk

59

The website sedacka.sk represents a Slovak small business specializing in custom sofa manufacturing and furniture retail. The site is designed with modern technologies such as Bootstrap 5 and integrates common marketing and tracking tools including Google Tag Manager and CookieHub for cookie consent management. The business appears to be locally focused with a domain age consistent with a company founded in 2019. The website content is relevant and professionally presented, targeting general consumers interested in custom furniture solutions. From a technical perspective, the website uses a solid tech stack with responsive design and moderate performance. Hosting is provided by SmartWeb, a known hosting provider in the region. Security posture is adequate with HTTPS and DNSSEC enabled; however, the absence of security headers and formal privacy or terms of service documents indicates room for improvement in compliance and security best practices. Security-wise, no WAF or blocking mechanisms are detected, and no vulnerabilities or suspicious patterns are evident from the data. The site uses tracking pixels from Pinterest, Facebook, and Google Ads, indicating moderate user tracking. Privacy compliance is basic, with a cookie consent mechanism present but lacking a visible privacy policy. Overall, the risk level is moderate with recommendations to enhance security headers, publish privacy and terms documents, and improve contact transparency. Strategic recommendations include implementing comprehensive privacy and security policies, adding security headers, establishing a vulnerability disclosure process, and enhancing accessibility and SEO features to improve trust and compliance. These steps will strengthen the website's security posture and business credibility in the competitive furniture retail market.

M

Kvalitné pletivo na plot a oplotenie domu

martinec.sk

59

The website martinec.sk is a Slovak-based business focused on providing quality fencing mesh and home fencing solutions. Established in 2004, the domain age and DNSSEC enabled status indicate a stable and legitimate online presence. The site targets homeowners or property owners interested in fencing products, with content primarily in Slovak. Technically, the website uses modern frontend technologies such as Bootstrap 5.3.3 and integrates analytics tools like Microsoft Clarity and Google Tag Manager. A cookie consent mechanism is implemented via CookieHub, indicating some level of privacy compliance. However, no explicit privacy policy or terms of service were found, which is a compliance gap. Security posture is moderate with HTTPS and DNSSEC enabled, but lacks visible security headers and explicit security policies. Contact information is not explicitly provided in the analyzed content, which may affect business credibility and user trust. Overall, the website is functional and moderately professional but would benefit from enhanced privacy disclosures, security headers, and clearer contact details.

E

Eifela

eifela.sk

53

Eifela is a newly established Slovak health-related business, as indicated by the domain registration date in early 2024 and the website title emphasizing health support. The website uses modern web technologies including Bootstrap 5 and integrates common marketing and cookie consent tools such as Google Tag Manager and CookieHub. The technical infrastructure is hosted on Websupport with DNSSEC enabled, indicating a baseline of security awareness. However, the website lacks visible privacy policies, terms of service, and contact information, which limits its compliance and trustworthiness from a user perspective. Security headers are not detected, suggesting room for improvement in hardening the web server configuration. Overall, the website is accessible without WAF or blocking mechanisms, and the content is safe and appropriate for a general audience.

A

act legal

actlegal.com

54

act legal is a German-based legal services provider established in 2014, offering legal advice and consultancy primarily to German-speaking clients. The website presents a professional design with moderate content quality and good user experience, targeting individuals and businesses seeking legal support. The technical infrastructure includes modern web technologies such as Bootstrap, Google Tag Manager, and CookieHub for cookie consent management. Hosting and domain registration are managed via GoDaddy.com, LLC, with a domain age consistent with a mature business presence. Security posture is moderate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is basic, with a cookie consent mechanism but no explicit privacy or terms of service pages detected. Overall, the website is functional and trustworthy but would benefit from enhanced privacy disclosures and security practices.

L

LX media GmbH

lx-media.at

75

LX media GmbH is a professional digital agency based in Austria, specializing in UX/UI design, digital communication, and development expertise. Founded in 2018, the company positions itself as a leading innovator in creating meaningful digital experiences for businesses undergoing digital transformation. Their website reflects a high level of professionalism, with clear business information, comprehensive privacy and cookie policies, and a modern technical infrastructure leveraging Next.js, React, and Storyblok CMS. The company actively uses marketing and analytics tools such as Google Analytics, Facebook Pixel, and LinkedIn Insight Tag, all managed with user consent mechanisms. Security posture is strong with HTTPS enforcement and standard security headers, though there is room for improvement in publishing explicit security policies and incident response information.

K

K-moto s.r.o.

chigee.sk

42

K-moto s.r.o. operates an e-commerce website specializing in motorcycle accessories and technology products under the brand Chigee. The website targets motorcycle enthusiasts primarily in Slovakia, offering a range of products including smart navigation systems, protective gear, and related accessories. The business model is retail-focused, leveraging an online platform built on PrestaShop CMS. The site demonstrates a moderate level of digital maturity with integration of modern tracking and marketing tools such as Google Tag Manager, Facebook Pixel, and Klaviyo. Security posture is solid with HTTPS enforced and secure form tokens, but lacks advanced security headers and visible privacy or cookie policies, which are compliance gaps. Overall, the website is professional and trustworthy, but could improve privacy compliance and security transparency.

S

Scrubdesignz

scrubdesignz.com

51

Scrubdesignz is a specialized e-commerce business focused on providing high-quality graphics kits, plastics kits, and seat covers for motocross and dirt bikes. Established in 2014 and based in Slovakia, the company targets motocross enthusiasts and professional riders globally. The website is built on the Magento platform, leveraging modern JavaScript libraries and tools such as RequireJS, KnockoutJS, and Slider Revolution to deliver a responsive and visually appealing user experience. Social media integration and Google Analytics are used for marketing and user behavior tracking. Security posture is adequate with HTTPS enabled and secure forms, but lacks DNSSEC and security headers, and no explicit privacy or cookie policies are present, indicating compliance gaps. Overall, the site is professional and trustworthy but could improve privacy compliance and security hardening.