Security Directory

V

Vereinigung zur Förderung des Deutschen Brandschutzes e.V.

vfdb.de

58

The website www.vfdb.de represents the Vereinigung zur Förderung des Deutschen Brandschutzes e.V., a German non-profit association dedicated to advancing fire protection. The organization provides research, education, statistical data, and geodata services primarily targeting professionals and institutions involved in fire safety. The site is professionally designed using TYPO3 CMS, with a clear navigation structure and mobile optimization. Cookie consent is managed comprehensively via Cookiebot, ensuring GDPR compliance. The technical infrastructure is modern and secure, with HTTPS enforced and appropriate security headers in place. However, explicit security policies and incident response contacts are not published, representing an area for improvement. Overall, the domain registration and hosting details align well with the organization's profile, indicating legitimacy and trustworthiness.

D

Dundee and Angus College

dundeeandangus.ac.uk

71

Dundee and Angus College is a well-established further education institution in the United Kingdom, serving the Dundee and Angus regions since 1996. The college offers a broad range of courses and apprenticeships aimed at improving study and employment prospects for a diverse student body. The website reflects a professional and comprehensive digital presence with clear navigation, rich content, and strong branding consistency. The institution positions itself as a key regional educational provider with a focus on student success and community engagement. Technically, the website employs modern JavaScript libraries, analytics, and user engagement tools such as Google Tag Manager, Monsido, Freshchat, and Survicate, indicating a mature digital infrastructure. The site is mobile-optimized and accessible, supporting a positive user experience. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security policies and incident response information, which could be improved. Overall, the domain registration and WHOIS data support the legitimacy and trustworthiness of the college. The website scores highly on content quality, technical implementation, security posture, privacy compliance, and business credibility, making it a reliable and professional online presence for the institution.

The Deutscher Pflegerat e.V. is a well-established German non-profit association representing the interests of nursing professionals and midwives at the federal level. Founded in 1998, it serves as a political and professional voice advocating for healthcare policy improvements, professional education, and workforce development. The website offers comprehensive resources including press releases, event information, podcasts, and official documents, targeting healthcare professionals, policymakers, and the public in Germany. Technically, the site uses standard web technologies such as jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though it lacks some advanced security headers and a cookie consent mechanism. WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the site is professional, trustworthy, and content-rich, supporting the organization's mission effectively.

P

Home - philippka

philippka.de

63

The website philippka.de appears to be a professionally designed WordPress site using WooCommerce for e-commerce capabilities and Rank Math PRO for SEO optimization. The site employs performance enhancements such as WP Rocket and EWWW Image Optimizer, indicating a focus on speed and user experience. However, the site lacks explicit privacy and cookie policies, which are critical for GDPR compliance and user trust. Contact information is not clearly provided, limiting direct communication channels. The domain WHOIS data shows a 'connect' status with nameservers pointing to DomainControl.com, suggesting the domain is registered but with limited public WHOIS information. Overall, the site is accessible and safe for general audiences but would benefit from improved transparency and compliance documentation.

S

Studo GmbH

studo.com

78

Studo GmbH is a medium-sized technology company specializing in digital solutions for students and universities primarily in the DACH region and Slovenia. Their flagship product, the Studo App, supports over 500,000 students daily and offers a suite of modules aimed at improving academic communication, administration, and student engagement. The company positions itself as a trusted partner for universities, emphasizing quality, sustainability, and personal collaboration. Their market presence is reinforced by partnerships with over 50 universities and student unions and multiple industry certifications including TÜV SÜD and ISO standards. Technically, the website is well-constructed with modern web technologies, hosted on Cloudflare, and uses privacy-conscious analytics (Piwik PRO). The site is mobile-optimized, accessible, and SEO-friendly. Security posture is strong with HTTPS enforced, domain transfer protection, and annual accessibility audits. However, DNSSEC is not enabled, and some security headers are not explicitly detected. Privacy compliance is good with a comprehensive privacy policy and GDPR adherence, though no explicit cookie consent mechanism was found. Overall, the security posture is robust with no visible vulnerabilities or exposed sensitive data. The company demonstrates a mature approach to data protection and software quality, supported by certifications and awards. The domain WHOIS data is consistent and supports the legitimacy of the business. The website content is safe for general audiences and professionally presented. Strategic recommendations include enabling DNSSEC, implementing a cookie consent banner, publishing a security.txt file, and adding more explicit security headers to further enhance trust and compliance.

E

Elektromarken. Starke Partner. e.V.

elektromarken.de

58

Elektromarken. Starke Partner. e.V. is a German association uniting 16 leading electrical brands to promote quality, innovation, and partnerships within the German electrical industry. The organization supports apprentices and master craftsmen through scholarships and recognizes outstanding electrical craft businesses with the ELMAR award. The website is professionally designed using HubSpot CMS, featuring modern technologies and good mobile optimization. Privacy and cookie policies are implemented with GDPR compliance, and the site uses HubSpot analytics and marketing tools for user engagement. Security posture is solid with HTTPS and cookie consent, though some security headers and policies could be improved. Overall, the domain registration and DNS setup are consistent with the business claims, indicating a legitimate and trustworthy entity.

P

Pavel Leonidov

pavel-leonidov.de

51

Pavel Leonidov operates as a freelance software and web developer based in Stuttgart, Germany, specializing in custom software solutions and web development primarily for small businesses and non-profit organizations. The website serves as a professional portfolio showcasing skills, certifications, and open-source projects, emphasizing affordable and tailored solutions. The business model is focused on individual freelance services with continuous client support and hosting. Technically, the website employs a modern technology stack including PHP, Java, JavaScript, and popular CMS platforms like TYPO3 and WordPress. Hosting is managed via domaincontrol.com nameservers, likely GoDaddy, with AWS mentioned for hosting infrastructure. The site is mobile-optimized and uses Google Analytics with privacy-conscious settings such as IP anonymization and cookie consent mechanisms. From a security perspective, the site enforces HTTPS and includes a cookie consent banner compliant with GDPR. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected. The site demonstrates good privacy compliance but could improve by adding security policies and vulnerability disclosure information. Overall, the website is professional, trustworthy, and well-structured with a good balance of content quality, technical implementation, and privacy compliance. The risk level is low, with recommendations focusing on enhancing security headers and formalizing security policies to further strengthen the security posture.

S

Specto, Informacijske tehnologije d.o.o.

specto.si

40

Specto, Informacijske tehnologije d.o.o. is a Slovenian IT development company founded in 2008, specializing in web and mobile application development as well as advanced IT solutions. The company targets businesses seeking custom software solutions to enhance their digital presence and operational efficiency. Their website reflects a professional and consistent brand image with modern design elements and clear service offerings. Technically, the site uses contemporary web technologies including Bootstrap, jQuery, GSAP, and SVG graphics, supported by Google Analytics and Tag Manager for user tracking. However, explicit HTTPS usage is not confirmed in the HTML content, and no security headers or privacy policies are present, indicating room for improvement in security and compliance. The domain registration data is consistent with the company's location and business claims, supporting legitimacy. Overall, the website is well-structured and user-friendly but would benefit from enhanced security practices and privacy compliance documentation.

W

Webtasy, d.o.o.

dravabike.si

55

Drava Bike is an official regional tourism website promoting the Drava Bike cycling route that spans four countries including Slovenia. The site provides comprehensive information about the cycling stages, accommodations, services, and experiences along the route. It targets cyclists of various skill levels and tourists interested in outdoor activities and cultural experiences. The website is multilingual and includes an online shop hosted on a partner domain. Technically, the site uses modern JavaScript frameworks like Alpine.js and Vite, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS and anonymized Google Analytics tracking, but lacks some security headers and cookie consent mechanisms. Privacy compliance is basic with a privacy policy present but no explicit cookie consent. Overall, the domain registration data is consistent and supports the legitimacy of the business.

N

Najstarejša trta

najstarejsatrta.si

40

The website 'Najstarejša trta' appears to be a small Slovenian site focused on the theme of the oldest vine, likely related to wine or viticulture. The domain is recently registered in 2023 with a Slovenian registrar, consistent with the website's Slovenian language content. The site is built on WordPress, using standard web technologies such as PHP, JavaScript, and CSS, and includes common libraries like Google Fonts and Font Awesome. The technical infrastructure is basic but functional, with moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled and good SSL configuration; however, the absence of security headers and privacy policies indicates room for improvement. No contact or incident response information is provided, which limits transparency and trust. Overall, the site is safe for general audiences and does not contain adult or explicit content.

D

Dresdner Verkehrsbetriebe AG

dvb.de

58

Dresdner Verkehrsbetriebe AG operates as the primary public transportation provider in Dresden, Germany, offering a comprehensive range of services including tram, bus, ferry, and shared mobility options. The website serves residents and visitors by providing route planning, ticketing, and real-time service updates. The company maintains a strong market position as the main transit operator in the region. Technically, the website employs modern JavaScript libraries, integrates Matomo analytics for privacy-conscious tracking, and uses OpenStreetMap for geographic data. The site is accessible, well-structured, and provides a good user experience with basic mobile optimization and accessibility features. Security-wise, the site enforces HTTPS and uses cookie consent mechanisms but lacks explicit security headers and a published security policy or incident response contact. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, though it could improve its security posture by adding missing headers and vulnerability disclosure information.

S

Sächsische Dampfschifffahrt

saechsische-dampfschifffahrt.de

51

Sächsische Dampfschifffahrt operates as a regional transportation and tourism company specializing in river cruises along the Elbe river in Germany. The company offers scheduled cruises, charter events, conference hosting, and onboard gastronomy services, targeting tourists and local travelers interested in scenic river journeys. The website is built on WordPress with multilingual support and employs modern web technologies including JavaScript and CSS. It features a cookie consent mechanism via the Borlabs Cookie plugin and uses Google Tag Manager for analytics. Security posture is adequate with HTTPS enabled, but lacks visible security headers and formal security policies. Privacy compliance is partial, with no explicit privacy or terms of service pages detected. Overall, the website is professional, user-friendly, and trustworthy, though improvements in privacy disclosures and security practices are recommended.

The Friends of Kensal Green Cemetery is a UK-based registered charity dedicated to the preservation and restoration of the historic Kensal Green Cemetery. The organization operates through community engagement, guided tours, events, and collaboration with the cemetery's owning company. Their market position is that of a niche heritage non-profit with a strong local and historical focus. Technically, the website is built with basic HTML, CSS, and JavaScript, with no detected CMS or advanced frameworks. The site is moderately optimized for mobile and accessibility but lacks advanced SEO and performance enhancements. Security posture is limited, with no visible HTTPS confirmation or security headers, and no public security or incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional and trustworthy but could improve in security and privacy practices.

Z

Zoho

maillist-manage.eu

61

Zoho Campaigns is a component of Zoho Corporation's suite of online marketing tools, focusing on email and social marketing campaigns. The website content analyzed is a specialized explainer page clarifying the email sending domains used by Zoho Campaigns and emphasizing compliance with anti-spam laws. The site targets businesses and marketers who use Zoho's marketing software. Technically, the site uses Zoho's own content delivery networks and tag management services, with basic mobile optimization and SEO practices. Security posture is moderate, with clear abuse contact information but lacking visible security headers and privacy policies. The WHOIS data for the domain www.zoho.com is unavailable, likely due to registry restrictions, but the website's branding and content strongly indicate legitimacy. Overall, the site is functional and professional but could improve transparency and security disclosures.

Z

Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke

dmh-eh.de

52

The Zentralverband der Deutschen Elektro- und Informationstechnischen Handwerke (ZVEH) operates the website dmh-eh.de to promote and organize the Deutsche Meisterschaften der E-Handwerke, a national competition for electrical trade apprentices and professionals. The site serves as an information hub for participants, sponsors, and the general public interested in the electrical trade sector in Germany. It is well-positioned as a central association with a clear focus on vocational excellence and youth development in the energy sector. Technically, the website uses a TYPO3 CMS platform hosted on rzone.de servers, leveraging modern JavaScript libraries and a consent management platform (Usercentrics) to comply with GDPR. The site integrates Google Tag Manager and TikTok analytics for tracking, with a moderate level of user tracking balanced by explicit consent mechanisms. The site is mobile-optimized and presents good SEO and accessibility basics. From a security perspective, the site enforces HTTPS and uses consent management for privacy compliance. However, it lacks explicit security headers and published security policies or incident response contacts, which could be improved to enhance trust and resilience. No vulnerabilities or exposed sensitive data were detected in the content. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its audience effectively. Strategic improvements in security policy transparency and technical security headers would further strengthen its posture.

GRITH AG is a small German technology company founded in 2003 specializing in project management, process management, IT infrastructure consulting, and custom software development. Their market position is niche-focused, targeting associations, clubs, and organizations with tailored intranet solutions and project management training. The website content is primarily in German and provides detailed descriptions of their services and partner platforms. Technically, the website is built with basic HTML and CSS, with some references to technologies used in their software development services such as C#/.NET and PHP/MySQL. However, the website lacks modern web practices such as mobile optimization and advanced SEO features. Security posture is weak due to the absence of HTTPS, security headers, and privacy compliance mechanisms, which poses risks for user data protection and trust. Overall, the site is functional but dated, with room for significant improvements in security and privacy compliance.

I

INSURVISION

insurvision.de

53

INSURVISION is a German-based company specializing in digital sales solutions for insurance companies and brokers. The website targets insurance professionals and offers digitalization services for insurance sales processes. The company positions itself as a niche digital service provider within the finance sector, focusing on enhancing insurance distribution through technology. The website is built on WordPress using Elementor and Yoast SEO, indicating a moderate level of digital maturity with good SEO practices and mobile optimization. However, the absence of visible privacy and cookie policies, security headers, and contact information suggests room for improvement in compliance and security transparency. The security posture is moderate with no detected blocking or WAF mechanisms, but lacks advanced security best practices. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and security measures.

R

Rosa-Luxemburg-Stiftung Gesellschaftsanalyse und politische Bildung e. V.

rosaluxemburg.org

52

The website rosaluxemburg.org is a non-profit political education platform operated by the Rosa-Luxemburg-Stiftung Gesellschaftsanalyse und politische Bildung e. V., commemorating the 150th birthday of Rosa Luxemburg. It provides rich educational content focused on socialist theory, historical analysis, and political positions related to Rosa Luxemburg's legacy. The site targets politically engaged individuals, activists, and scholars interested in social justice and political education. Technically, the site is built on WordPress with modern SEO and font loading optimizations, delivering a good user experience with mobile responsiveness and clear navigation. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers and DNSSEC are missing. No direct contact emails or phone numbers are published, but social media channels are actively linked. The domain registration is consistent with the organization's identity and shows no suspicious patterns. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

S

SPM SPORTPLATZ MEDIA GMBH

teamtip.net

49

Teamtip is a German-based online platform specializing in football prediction games, offering users the ability to create private prediction groups for major European leagues and international tournaments. The platform supports a free-to-use model with additional white label solutions for companies seeking marketing and user engagement tools. The business is positioned as a niche player in the sports media sector, targeting football fans, social groups, and corporate clients. Technically, the website employs modern web technologies including Vue.js and integrates a consent management platform to ensure GDPR compliance. The platform is accessible via web and mobile apps on iOS and Android, providing a good user experience with live score updates and customizable game rules. Security posture is solid with HTTPS enforced and domain transfer protections, though formal security policies and incident response contacts are not publicly documented. Overall, the website demonstrates good content quality, technical implementation, and privacy compliance, supporting a trustworthy and professional online presence.

S

SportlerPlus

sportlerplus.com

70

SportlerPlus is a German e-commerce retailer specializing in sports nutrition products such as protein powders and dietary supplements. The website is built on the Shopify platform, leveraging various third-party apps for customer reviews, product labeling, and upselling. The target audience primarily consists of fitness enthusiasts and athletes seeking high-quality nutrition products to enhance their performance. The site presents a professional design with good mobile optimization and clear navigation, supporting a positive user experience.

M

Ameise

maklerinfo.biz

56

The website www.maklerinfo.biz/maklerportal/dashboard appears to be a minimal content dashboard or portal page with no publicly accessible business information or user-facing content. The page title is 'Ameise' and the site uses the Aurelia JavaScript framework with multiple deferred script bundles, indicating a modern single-page application architecture. However, the lack of visible content, metadata, or structured data limits the ability to assess the business or its services. The WHOIS data is completely unavailable, which reduces trust and transparency. No privacy policies, contact information, or security policies are present on the page, indicating low compliance with common web standards. Security posture is weak due to missing HTTPS and security headers information. Overall, the site appears to be an internal or restricted access portal rather than a public business website.

Krankenhaus-CIRS-Netz Deutschland 2.0 is a specialized German healthcare platform focused on reporting and learning from safety-relevant incidents in hospitals. It serves as an interprofessional and interdisciplinary tool to promote overregional learning and risk management in clinical settings. The website targets hospital staff and medical professionals, providing a structured environment for incident reporting and knowledge sharing. The platform is positioned as a niche service within the German healthcare sector, supported by recognized partner organizations.

P

Pflegeausbildungsfonds Niedersachsen GmbH

ausbildungsfonds-niedersachsen.de

48

Pflegeausbildungsfonds Niedersachsen GmbH is a government-related entity responsible for managing the financing of the new nursing training profession in Lower Saxony, Germany. The website serves as an information hub providing legal foundations, procedural details, and official publications related to nursing education financing. The company operates a secure online portal for data collection, accessible via an external login link. The organization holds ISO 9001 certification, indicating a commitment to quality management. Technically, the website is built on TYPO3 CMS with Bootstrap, offering good mobile responsiveness and accessibility. The site is well-structured with clear navigation and professional design, although no advanced analytics or advertising tools are detected, reflecting a focus on information dissemination rather than marketing. Security posture is moderate with HTTPS enforced but lacking explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were found. Privacy compliance is adequate with a privacy policy and cookie consent mechanism present, though no terms of service or incident response contacts are published. Overall, the website is trustworthy and professional, serving its niche government function effectively. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security maturity and stakeholder confidence.

B

Breitbandzentrum Niedersachsen und Bremen

bznb.de

52

The Breitbandzentrum Niedersachsen und Bremen website serves as a central advisory and information hub for broadband and mobile network expansion in the German regions of Niedersachsen and Bremen. It targets municipalities, businesses, and citizens, providing expert guidance on planning, implementation, and funding of digital infrastructure projects. The site is professionally designed, leveraging TYPO3 CMS and SEO tools, and offers comprehensive content relevant to its public service mission. Technically, the site is hosted by webhosting-franken.de, uses HTTPS, and includes cookie consent mechanisms, reflecting a moderate to good digital maturity level. Security posture is adequate with HTTPS and no visible vulnerabilities, though it lacks explicit security policies or incident response information. Overall, the domain registration and hosting details align well with the website's public sector role, indicating legitimacy and trustworthiness.

A

AutoCheck.com | Homepage | AutoCheck.com

autocheck.com

59

AutoCheck.com is an online service providing vehicle history reports primarily targeting vehicle buyers and automotive industry stakeholders. The website offers key services such as vehicle history data and analytics to assist in used vehicle assessments. The site demonstrates a moderate level of digital maturity, utilizing modern web technologies including Bootstrap, Google Analytics, and Google reCAPTCHA for user experience and security. The website is well-designed with good navigation and mobile optimization, supporting a positive user experience. Security posture is solid with HTTPS and Content Security Policy implemented, though additional security headers could enhance protection. Privacy compliance is lacking, with no visible privacy or cookie policies, which is a notable gap. Overall, the website appears professional and trustworthy, but the absence of WHOIS data and privacy documentation suggests areas for improvement in transparency and compliance.

Anolisgroup is a Slovenian-based creative and technology company established in 2010, specializing in visual communication, web and mobile application development, VR & AR solutions, and product design. Their portfolio showcases a variety of projects involving graphic design, programming, 3D modeling, and content preparation, targeting businesses seeking integrated digital and visual solutions. The website reflects a small-sized enterprise with a niche market position focused on creative technological services. Technically, the website employs traditional web technologies including HTML5, CSS, and JavaScript with libraries such as jQuery, Isotope, and Fancybox. The presence of older technologies like Cufon indicates some legacy components. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. No CMS is explicitly identified, though custom CMS development is mentioned in project descriptions. From a security perspective, the website lacks HTTPS enforcement and security headers, which are critical for protecting user data and ensuring trust. There are no visible privacy or cookie policies, nor contact information for data protection or incident response, indicating gaps in compliance with GDPR and best practices. No forms or analytics scripts are detected, reducing data collection risks but also limiting user engagement tracking. Overall, the website is functional and professional in design and content but requires significant improvements in security posture, privacy compliance, and contact transparency to enhance trustworthiness and regulatory adherence. Strategic recommendations include implementing HTTPS, adding privacy and cookie policies, improving security headers, and providing clear contact information.

L

Lokalna akcijska skupina Od Pohorja do Bohorja

las-pohorje-bohor.si

64

Lokalna akcijska skupina Od Pohorja do Bohorja is a Slovenian local action group focused on regional development initiatives between Pohorje and Bohorje. The organization facilitates community projects, public calls for funding, and workshops to support rural and cultural development. The website serves as an information hub for local municipalities, project applicants, and stakeholders, providing news updates and project details. Technically, the site is built on a CMS platform (BCMS) using modern web technologies like Bootstrap and FontAwesome, with good mobile optimization and accessibility features. Security posture is adequate with HTTPS, CAPTCHA on contact forms, and cookie consent mechanisms, though some security headers are missing. The domain registration is consistent with the business profile, and no suspicious patterns were detected. Overall, the website is professional, trustworthy, and compliant with basic privacy regulations, though it lacks explicit privacy and terms of service pages.

V

VKF Finanz GmbH

vdiep.de

62

VKF Finanz GmbH operates as a regional insurance broker in Germany, offering a range of private and commercial insurance products including liability, household, accident, building, vehicle, legal protection, and disability insurances. The company also provides financing services such as construction financing and loans. The website is professionally designed, well-structured, and targets German-speaking customers seeking insurance solutions. The business model focuses on personalized insurance brokerage with a regional market presence in Berlin, Buxtehude, Barnstorf, Hamburg, and Twistringen. Technically, the website is built using the 'cm Homepage-Baukasten' CMS platform, hosted on webgo.de servers, and employs modern web technologies including HTML5, CSS3, JavaScript, and FriendlyCaptcha for form security. The site is mobile-optimized with good SEO practices and basic accessibility features. Performance is moderate, with external dependencies on content delivery networks and partner domains. From a security perspective, the site enforces HTTPS and uses FriendlyCaptcha to protect forms from bots. Cookie consent mechanisms are implemented in compliance with GDPR. However, explicit security headers are missing, and there is no published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website presents a trustworthy and professional front for VKF Finanz GmbH with good privacy compliance and security posture. Recommendations include adding security headers, publishing a security policy, and implementing a vulnerability disclosure process to enhance trust and security maturity.

R

Razvojna agencija Kozjansko

ra-kozjansko.si

58

Razvojna agencija Kozjansko is a regional development agency based in Šentjur, Slovenia, focused on rural and community development programs. The agency has a strong local presence with 25 years of operational history and offers services including project management, entrepreneurial incubation, tourism information, and public procurement support. The website reflects a professional and consistent brand image targeting local stakeholders and community members. Technically, the site uses modern web technologies and a custom CMS, with good mobile optimization and accessibility features. Security posture is moderate with HTTPS usage and cookie consent implemented, but lacks explicit security headers and privacy policies. Overall, the domain registration and website content are consistent and trustworthy, with no signs of blocking or malicious activity.

H

Hüthig GmbH

lighting-jobs.de

55

HIGHLIGHT is a specialized media and job portal platform serving the lighting industry in Germany. The website offers job listings tailored to professionals and decision-makers in the lighting sector and has been active since 2008 under the Hüthig GmbH brand. The business model focuses on media publishing and providing a niche job market service, supported by advertising and subscription offerings. The site targets industry professionals seeking employment or recruitment opportunities within the lighting field. Technically, the website employs a modern technology stack including Bootstrap for responsive design, Matomo and Google Tag Manager for analytics, and Sourcepoint for GDPR-compliant consent management. The site is hosted with a reputable DNS provider (DomainControl) and uses HTTPS with strong SSL configuration. The site demonstrates good SEO practices with structured data and meta tags, and it is mobile optimized with basic accessibility features. From a security perspective, the site enforces HTTPS and uses consent management for cookies and tracking. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The site uses multiple third-party advertising and tracking services but manages user consent appropriately. Overall, the website presents a professional and trustworthy front for its niche market. It is well-structured and compliant with GDPR requirements. Strategic improvements could include publishing a formal security policy, adding incident response contacts, and implementing security headers to enhance protection. The risk profile is low, with no signs of malicious activity or content safety concerns.

C

CE-Markt

ce-markt.de

54

CE-Markt is a German business magazine focused on the consumer electronics and home appliances sectors, providing news, commentary, and industry insights. The website serves professionals and businesses in this niche, offering subscription-based magazine issues, newsletters, and event coverage such as IFA. The site demonstrates a solid market position within its industry segment, supported by consistent branding and quality content. Technically, the website employs modern JavaScript technologies, privacy-conscious analytics (Matomo), and a consent management platform (Sourcepoint) to comply with GDPR requirements. The site is mobile-optimized with good navigation and SEO practices, although the CMS is not explicitly identified. Hosting appears stable with dedicated nameservers. From a security perspective, the site enforces HTTPS and uses consent mechanisms but lacks explicit security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is minimal but consistent with the business profile, and no WAF or blocking mechanisms interfere with access. Overall, CE-Markt presents a professional and trustworthy online presence with room for improvement in privacy policy transparency, security header implementation, and direct contact information availability.

P

PHP Community Foundation

phpc.chat

56

The PHP Community Chat website serves as a dedicated platform for PHP developers and enthusiasts to engage via popular chat channels such as Discord and IRC. Operated by the PHP Community Foundation, the site supports community building and knowledge sharing within the PHP ecosystem. The platform is positioned as a niche community resource with a clear focus on developer engagement and support. Technically, the website is built with standard web technologies (HTML5, CSS3, JavaScript) and hosted on DigitalOcean, ensuring reliable performance and good mobile optimization. The site uses HTTPS with a valid SSL certificate, but lacks advanced security headers and DNSSEC, which could enhance its security posture. No analytics or tracking scripts are detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates a moderate security posture with HTTPS enabled and domain transfer protections in place. However, the absence of privacy and cookie policies, as well as missing security headers, represent compliance and security gaps. There is no evidence of incident response or vulnerability disclosure mechanisms, which could be improved to strengthen trust and security readiness. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in privacy compliance and security hardening would enhance its credibility and resilience against emerging threats.

M

MagentaCLOUD

magentacloud.de

54

MagentaCLOUD is a cloud storage service operated under the Magenta brand, associated with Deutsche Telekom, targeting general users seeking secure file storage and sharing solutions. The website is built on the Nextcloud platform, leveraging modern web technologies including Vue.js and hosted on the Open Telekom Cloud infrastructure. The platform integrates multiple security features such as two-factor authentication, password policies, and end-to-end encryption, reflecting a mature security posture. However, the absence of visible privacy and cookie policies, as well as contact information for security incidents, indicates areas for compliance and transparency improvement. Overall, the site demonstrates a professional and trustworthy presence aligned with a major telecommunications provider.

B

BHE Bundesverband Sicherheitstechnik e.V.

bhe-qm.de

63

The website www.bhe-qm.de serves as a specialized portal for quality management certification and support tailored to security providers in Germany. Operated by the BHE Bundesverband Sicherheitstechnik e.V., it offers a range of services including QM system certification assistance, norm and guideline management, webinars, calibration services, and dedicated QM software. The site targets security companies seeking to establish or maintain certified quality management systems, positioning itself as a long-standing and trusted resource with over a decade of experience. Technically, the site is built on the Neos CMS platform leveraging the Flow PHP framework, hosted by punkt.de GmbH. It employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile-optimized with good SEO practices and moderate performance. However, some security best practices such as security headers and cookie consent mechanisms are not fully implemented. From a security perspective, the site enforces HTTPS and uses privacy-friendly analytics, but lacks visible security headers and formal incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns with the hosting provider and business claims, indicating legitimacy and consistency. Overall, the website presents a professional, trustworthy, and business-focused presence with room for improvement in security headers and privacy compliance mechanisms. The risk profile is low with no indications of malicious activity or content safety concerns.

B

BHE Bundesverband Sicherheitstechnik e.V.

bhe-videoueberwachung.de

63

The website www.bhe-videoueberwachung.de serves as a specialized portal for video surveillance technology under the auspices of the BHE Bundesverband Sicherheitstechnik e.V., a recognized German industry association. It provides comprehensive resources including news, legal guidance, certification information, and a directory for specialist companies. The site targets professionals such as installers, planners, manufacturers, and users of video security systems, positioning itself as a trusted industry knowledge hub. Technically, the site is built on the Neos CMS platform with the Flow PHP framework, hosted by punkt.de GmbH, and employs modern web technologies including Matomo for privacy-conscious analytics. The site is well-structured, mobile-optimized, and SEO-friendly, though it lacks a cookie consent mechanism despite using tracking scripts.

B

BHE Bundesverband Sicherheitstechnik e.V.

din-14675.info

66

The website www.din-14675.info serves as an information portal dedicated to the DIN 14675 standard concerning fire alarm systems, operated by the BHE Bundesverband Sicherheitstechnik e.V., a German industry association. It provides comprehensive resources including certification information, specialist company searches, technical knowledge, and event announcements, targeting professionals and companies in the fire protection and security technology sectors. The site positions itself as a trusted industry resource within Germany's energy and government-related safety sectors. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries such as Select2 and Matomo analytics for user tracking, configured to disable cookies for privacy. The site is hosted by punkt.de GmbH and demonstrates good mobile optimization, clear navigation, and professional design. Performance is moderate with no critical technical issues detected. From a security perspective, the site enforces HTTPS and uses privacy-conscious analytics but lacks certain security headers and a cookie consent mechanism, which are recommended for enhanced GDPR compliance and security posture. No vulnerabilities or exposed sensitive data were found in the content. WHOIS data is unavailable due to privacy protection, but the domain's content and association with BHE indicate legitimacy. Overall, the website is a professional, secure, and trustworthy resource for fire protection standards in Germany, with room for improvement in privacy compliance and security header implementation.

哔

哔哩哔哩游戏

biligame.com

57

The website www.biligame.com serves as a gaming platform branded under 哔哩哔哩游戏 (Bilibili Games), targeting gaming enthusiasts and creators within the Bilibili community. It offers game reservation and download services, leveraging Bilibili's unique gaming culture. The site is technically modern, utilizing Vue.js and other contemporary web technologies, and is optimized for both PC and mobile platforms. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the branding and content strongly associate with the reputable Bilibili company. Security posture is moderate with no HTTPS or security headers explicitly confirmed, and privacy compliance is low due to missing policies and contact information. Overall, the site is functional and professional but requires improvements in transparency and security to enhance trust.

The website trainex25.de is currently inaccessible beyond a Cloudflare security challenge page that verifies visitors are human via a Turnstile captcha. No actual business content, branding, or contact information is available for analysis. The domain uses Cloudflare DNS and security services, indicating some level of protection but also blocking direct content access. Due to this, the technical infrastructure assessment is limited to the presence of Cloudflare services and basic HTML/CSS. Security posture cannot be fully evaluated, but the use of Cloudflare suggests baseline protection. No privacy or cookie policies are present, and no contact or business details are visible, limiting trust and compliance evaluation. Overall, the site appears to be either under protection or in a transitional state, preventing a full security and business analysis.

S

SPM Sportplatz Media GmbH

sportplatz-media.com

56

SPM Sportplatz Media GmbH is a German company specializing in digital sports marketing and software development. They operate Germany's largest sports media network and offer a range of digital solutions including apps, portals, and marketing campaigns targeted at sports fans, advertisers, and publishers. The company has a solid market position supported by award-winning products and a clear focus on sports-related digital services. Their website reflects a professional and consistent brand image with comprehensive content and clear navigation. Technically, the site uses modern JavaScript frameworks (Vue.js) and integrates multiple analytics and marketing tools with GDPR-compliant consent management. Security posture is good with HTTPS and domain transfer protections, though DNSSEC is not enabled and security headers are not explicitly detected. No incident response or security policy is published, which is a potential area for improvement. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

O

Oracle

selectminds.com

73

Oracle's website for social media marketing presents a comprehensive and professional digital presence, showcasing their leadership in enterprise technology and marketing automation solutions. The site is well-structured, mobile-optimized, and rich in relevant content targeting marketing professionals and businesses seeking advanced social media marketing tools. Technically, the site leverages modern JavaScript frameworks, tag management, and consent management solutions, ensuring a robust and scalable infrastructure. Security posture is strong with HTTPS enforcement, privacy policies, and consent mechanisms, although explicit security headers could be more visible. WHOIS data is unavailable likely due to registry restrictions, but the site's branding and content strongly affirm its legitimacy. Overall, the site reflects Oracle's enterprise-grade standards and market position.

V

VKF Finanz GmbH

vkf-finanz.de

59

VKF Finanz GmbH operates as a regional insurance broker in Germany, specializing in both private and commercial insurance products. Their website presents a professional and user-friendly interface, offering a range of insurance services including liability, household, accident, building, vehicle, legal protection, and disability insurances. The company also provides financing options such as construction financing and loans, indicating a diversified financial services portfolio. The site targets German-speaking customers primarily in regions like Berlin, Buxtehude, Barnstorf, Hamburg, and Twistringen. Technically, the website is built on the cm Homepage-Baukasten CMS platform, hosted via digidor.de with CDN support, and employs modern web standards including HTTPS and CAPTCHA protections to secure user interactions. Security posture is adequate with HTTPS and CAPTCHA usage, but lacks explicit security headers and incident response information. Privacy compliance is strong with clear privacy and cookie policies aligned with GDPR requirements. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

C

CONCORDIA Versicherungen

concordia.de

61

CONCORDIA Versicherungen is a well-established German insurance provider offering a wide range of insurance products including vehicle, health, legal protection, retirement, home, and business insurance. The company targets private individuals and businesses, emphasizing personalized consultation and tailored insurance solutions. The website reflects a strong market position with comprehensive product information and a professional digital presence. Technically, the site is built on TYPO3 CMS, uses modern web technologies, and is hosted by a reputable provider. It includes cookie consent management and Google Tag Manager for analytics, indicating a mature digital infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved and a formal security policy or incident response contact is absent. Overall, the site is trustworthy, professionally designed, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to further strengthen trust and security.

B

BHE Bundesverband Sicherheitstechnik e.V.

bhe.de

63

BHE Bundesverband Sicherheitstechnik e.V. is a leading German non-profit industry association specializing in security technology. The organization provides certifications, training programs, publications, and advocacy services to security professionals, companies, and planners. Their market position is strong within Germany, supported by multiple certification schemes and a broad network of industry partners. The website reflects a professional and consistent brand image targeting security technology stakeholders. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, hosted by punkt.de GmbH. It employs modern web technologies with a moderate performance profile and good mobile optimization. The site uses Matomo analytics with cookies disabled, indicating a privacy-conscious approach. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site enforces HTTPS and uses privacy-friendly analytics but lacks explicit incident response contacts and vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent and supports the legitimacy of the domain and business. Overall, the site demonstrates a solid security posture with room for improvement in security headers and privacy compliance. The overall risk assessment is low, with recommendations to enhance security headers, implement cookie consent, and publish incident response information to further strengthen trust and compliance.

R

Rasch

rasch.de

63

Rasch is a well-established German company specializing in wallpaper products, with a history dating back to 1861. The website serves as an e-commerce platform offering a wide range of wallpaper collections, including self-adhesive and photo wallpapers, targeting general consumers interested in home decoration. The site is professionally designed with clear navigation and good mobile optimization, reflecting a mature digital presence. Technically, the site uses modern JavaScript libraries, Google Tag Manager, and Mouseflow for analytics and user behavior tracking, hosted on Manitu servers. Security posture is solid with HTTPS enabled and domain verification via Google and Facebook, but lacks explicit security headers and incident response information. Privacy compliance is weak due to the absence of visible privacy and cookie policies. Overall, the site is trustworthy and credible but would benefit from enhanced privacy and security disclosures.

K

Keim Farben GmbH

keimfarben.de

50

Keim Farben GmbH is a well-established German manufacturer specializing in mineral-based paints and coatings for both interior and exterior building applications. With a history spanning over 140 years, the company positions itself as a leader in sustainable and high-quality mineral colors, serving architects, private customers, real estate professionals, and craftsmen. Their product portfolio includes mineral paints, thermal insulation systems, and decorative coatings, supported by certifications such as Cradle to Cradle Certified® Silver. The website reflects a mature digital presence built on TYPO3 CMS, featuring modern JavaScript libraries and a responsive design optimized for mobile devices. Privacy and cookie policies are comprehensive and GDPR compliant, with active consent management mechanisms in place. Security posture is generally strong with HTTPS and CSRF protections, though the absence of explicit security headers and a lack of published incident response or vulnerability disclosure policies present areas for improvement. The domain WHOIS data is unavailable, which slightly reduces trust but does not detract significantly from the overall legitimacy given the professional website and business consistency. Strategic recommendations include enhancing security headers, publishing security policies, and establishing a vulnerability disclosure program to further strengthen trust and compliance.

F

Farben Walter

farben-walter.de

69

Farben Walter is a medium-sized German retail company specializing in paints, coatings, and related wall, floor, and ceiling products. The website serves professional painters, contractors, and retail customers with a broad product catalog and tools such as color selection and store locator. The business model focuses on retail and wholesale distribution within the paint and coatings sector. The website is built on the SAP Commerce (Hybris) platform, indicating a mature e-commerce infrastructure with multiple addons and integrations. Technical infrastructure includes modern JavaScript libraries, Piwik PRO analytics, and Cookiebot for consent management, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks visible security headers and explicit privacy or terms of service pages, which are important for compliance and trust. Overall, the website is professional and functional but could improve in privacy transparency and security best practices. The risk assessment is moderate with recommendations to enhance security headers, publish privacy and terms documents, and provide clear contact information to improve trust and compliance.

S

Software & Design Loos

ferienprogramm-online.de

58

Software & Design Loos operates the website www.ferienprogramm-online.de, offering SFP+, a specialized software platform designed to streamline the organization and management of leisure and holiday programs primarily for German municipalities, youth offices, clubs, and schools. The platform supports both online and offline registrations, automated fair allocation of limited spots, and integrated billing with ePayment options. With over 35 years of experience and a growing customer base exceeding 300 clients nationwide, the company holds a strong market position in this niche. The website presents comprehensive product information, customer testimonials, and references, reinforcing its credibility. Technically, the website is built on a modern stack including HTML5, CSS3, Bootstrap, and JavaScript libraries such as Swiper.js and FontAwesome. It is hosted on Strato servers and employs HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. No major performance issues or broken elements were detected. From a security perspective, the site uses HTTPS and secure forms with GDPR-compliant consent mechanisms. However, it lacks explicit security headers and published security or incident response policies. No vulnerabilities or exposed sensitive data were found in the HTML content. Privacy compliance is strong, with a clear privacy and cookie policy. No analytics or tracking scripts were detected, indicating minimal user tracking. Overall, the website is professional, trustworthy, and well-suited for its target audience. The absence of detailed WHOIS registrant information is a minor concern but does not detract significantly from legitimacy. Strategic recommendations include enhancing security headers, publishing incident response and security policies, and considering a security.txt file to improve transparency and trust.

Experian Switzerland AG operates as a leading provider of data-driven decisioning solutions focused on risk, fraud, and identity management. The company leverages advanced analytics and platform-based services to enable faster, data-based decisions primarily targeting financial institutions and enterprises. As part of the global Experian group, it maintains a strong market position in Switzerland and Europe with a comprehensive portfolio of services. The website reflects a mature digital presence with professional design and clear business messaging. Technically, the site is built on Adobe Experience Manager, integrates advanced analytics tools like Piwik PRO and Google Tag Manager, and employs robust cookie consent mechanisms ensuring GDPR compliance. Security posture is strong with HTTPS enforcement, security headers, and no detected vulnerabilities or exposed sensitive data. However, the absence of a dedicated security policy and vulnerability disclosure page suggests room for improvement in transparency and incident readiness. Overall, the site demonstrates high business credibility and technical maturity, suitable for its enterprise audience.

E

Experian

experian.co.uk

63

Experian UK is a leading credit reference agency and credit comparison service provider, offering consumers free credit scores, reports, and access to credit product comparisons including credit cards, loans, mortgages, and car finance. The website targets UK consumers and small businesses, providing trusted financial services and identity fraud monitoring. The digital infrastructure is built on modern web technologies including Bootstrap and SVG graphics, with a responsive design optimized for mobile devices. Security posture is strong with HTTPS enforcement, security headers, and secure login mechanisms. Privacy compliance is well addressed with comprehensive policies and consent mechanisms. Overall, the website demonstrates a high level of professionalism, trustworthiness, and technical maturity.

Experian Ireland operates as a key regional branch of Experian plc, providing business data, analytical, and marketing services primarily focused on credit information and consumer data in Ireland. The website reflects a mature enterprise-level digital presence with a professional design and comprehensive cookie consent management, indicating strong privacy compliance and user awareness. The technical infrastructure leverages Adobe Experience Manager CMS, Adobe Launch for tag management, and multiple analytics and marketing tools such as Piwik Pro, Hotjar, and Drift chat, demonstrating a modern and integrated technology stack. Security posture is robust with HTTPS enforced and bot detection cookies in use, though explicit security headers and incident response information are not evident, suggesting areas for improvement. Overall, the domain and website content align with a reputable financial services provider, though WHOIS data is privacy protected, limiting domain registration transparency.