Security Directory

P

Physio- und Rehazentrum Hafencity

pz-hafencity.de

50

Physio- und Rehazentrum Hafencity is a small healthcare business specializing in physiotherapy, rehabilitation, and sport-related therapies located in Hamburg, Germany. The company emphasizes holistic patient care using modern diagnostic and therapeutic methods, serving both general patients and elite athletes. Their market position is that of a reputable local provider with a professional online presence and clear service offerings. Technically, the website is built on WordPress using modern plugins such as Smart Slider 3 and Contact Form 7, with a Genesis Framework theme, providing good SEO and mobile responsiveness. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are absent. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-structured, supporting the business's credibility and customer engagement.

N

Nomago

nomago.si

54

Nomago is a large Slovenian transportation and travel services company established in 2017. The company offers a wide range of services including bus tickets, vehicle rentals, travel packages, bike rentals, airport shuttle services, and driving school programs. The website is professionally designed with excellent content quality and clear navigation, targeting general travelers and commuters in Slovenia and Europe. Technically, the site uses modern web technologies such as Bootstrap, Leaflet.js, and Cookiebot for cookie consent management, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and consent management in place, though some security headers could be improved and explicit security policies are not published. WHOIS data confirms the domain's legitimacy and consistent registration with a Slovenian registrar. Overall, the website is trustworthy, secure, and compliant with GDPR requirements, providing a positive user experience.

L

Land Tirol, p.A. DVT-Daten-Verarbeitung-Tirol GmbH

meteo.report

45

Meteo.report is a regional weather information service operated by Land Tirol, p.A. DVT-Daten-Verarbeitung-Tirol GmbH, providing weather station data, precipitation, webcams, mountain weather, and model forecasts for the Euregio region. The website targets the general public interested in accurate and localized weather information. The technical infrastructure is based on the Hugo static site generator, Bootstrap for styling, and Leaflet.js for interactive maps, indicating a modern and maintainable digital platform. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks DNSSEC and security headers, which are recommended for enhanced protection. Privacy and cookie policies are absent, which is a compliance gap. Overall, the website is professional, trustworthy, and serves its informational purpose well, but could improve in privacy compliance and security best practices.

F

Flori Radlherr / Gerhard Keuschnig

foto-webcam.eu

43

Foto-Webcam.eu is a specialized website offering a comprehensive overview of live webcams primarily focused on Alpine and European regions including Austria, Germany, Italy, Switzerland, and Greenland. The site provides high-quality webcam images for tourism, nature observation, and general public interest. The business operates as a niche service provider with a small-scale footprint, focusing on delivering reliable live image feeds and related product information. Technically, the website employs modern web technologies including responsive design, JavaScript, CSS, and Bootstrap framework, ensuring good user experience across devices. The site supports dark mode and uses manifest files indicating progressive web app capabilities. Security posture is moderate with HTTPS usage but lacks visible security headers and cookie consent mechanisms. WHOIS data is privacy protected by EURid, which is typical for .eu domains, but limits transparency regarding domain registration details. Overall, the website is professional, content-rich, and trustworthy for its intended audience.

R

Rowohlt Verlag

rowohlt.de

66

Rowohlt Verlag is a well-established German publishing company specializing in a wide range of books including literature, crime, thrillers, and non-fiction. The website serves as a digital storefront and information portal for their catalog, authors, and new releases, targeting German-speaking readers and book buyers. The business model revolves around publishing and direct online sales, supported by a professional and consistent brand presence. Technically, the website leverages modern web technologies including Drupal CMS, Astro framework, Cloudflare DNS, and integrates consent management via Usercentrics, ensuring GDPR compliance mechanisms are in place. The site is mobile-optimized and features good SEO practices, although accessibility could be improved. Security posture is strong with HTTPS enforced and Cloudflare protection, but lacks explicit security headers and published security policies. No privacy policy or terms of service pages were detected in the provided content, which is a compliance gap. Overall, the domain and website appear legitimate and trustworthy with active social media engagement and e-commerce capabilities.

M

Mein-Office Webdesign

webagentur-fuer-aerzte.de

63

Mein-Office Webdesign is a specialized web design and development agency focused on serving healthcare professionals including doctors, dentists, clinics, and other medical practitioners. Established since 2002, the company offers tailored website solutions emphasizing professional design, SEO optimization, and GDPR compliance. Their market position is that of a niche expert with a strong reputation and long-standing client relationships. Technically, the website is built on the Redaxo CMS platform, utilizing modern frontend technologies such as jQuery and Swiper.js for interactive elements. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enforced and a cookie consent mechanism in place, though there is room for improvement in security headers and explicit security policies. Overall, the website demonstrates a solid digital maturity level appropriate for a small specialized agency. The business credibility is high, supported by transparent contact information and trust signals such as customer satisfaction claims. No critical vulnerabilities or compliance gaps were detected, and the content is safe for general audiences.

M

Mein-Office Webdesign

arzt-website-hessen.de

63

Mein-Office Webdesign is a specialized web design and development agency focused on serving medical professionals such as doctors, dentists, clinics, and other healthcare providers primarily in Germany. Established in 2002, the company offers tailored website solutions including SEO optimization, mobile responsiveness, and ongoing maintenance services. Their market position is that of a niche expert with over two decades of experience, emphasizing quality and customer satisfaction. Technically, the website is built on the Redaxo CMS platform, utilizing modern frontend technologies like Swiper.js and jQuery, and demonstrates good SEO and mobile optimization practices. Security-wise, the site enforces HTTPS and includes a GDPR-compliant cookie consent mechanism, though it lacks explicit security headers and incident response information. Overall, the website is professional, trustworthy, and safe for general audiences, with clear contact information and a consistent brand presence.

Linksnet.de is a German-language digital platform operated by the Rosa-Luxemburg-Stiftung, serving as a hub for over 50 left-wing political and scientific magazines. It provides curated access to articles on politics, society, culture, and related themes, targeting politically engaged readers and academics interested in leftist discourse. The platform is built on Drupal 9 and integrates Matomo analytics with privacy-conscious settings. The website demonstrates good content quality, clear navigation, and mobile optimization, reflecting a mature digital presence for a non-profit media entity. Security posture is adequate with HTTPS and privacy-aware analytics, though improvements in security headers and explicit cookie consent are recommended. The absence of direct contact information and formal security policies suggests areas for enhancement in transparency and compliance. Overall, the domain and website appear legitimate and consistent with the stated organizational affiliation.

E

Equifax

equifax.com

81

Equifax is a leading credit bureau providing credit reports, scores, and identity protection services to consumers and businesses primarily in the United States. The website reflects a mature digital presence with comprehensive service offerings, clear navigation, and extensive support resources. The company leverages modern web technologies including React, Adobe Target, and multiple analytics and marketing tools to optimize user experience and marketing effectiveness. Security posture is strong with HTTPS enforcement and security headers, though no public vulnerability disclosure or incident response contacts were found. The absence of WHOIS data is notable but likely due to registry policies rather than malicious intent. Overall, the site demonstrates professionalism and trustworthiness consistent with a major financial services provider.

F

Freundeskreis des Deutschen Handballs e.V.

fddh.de

36

Freundeskreis des Deutschen Handballs e.V. is a small non-profit organization dedicated to supporting German handball through funding, event support, and promotion of inclusion, particularly for deaf athletes. The website serves as an information hub with news, newsletters, and downloadable resources targeting handball enthusiasts and community members. Technically, the site is built on WordPress 6.8.2, hosted on a German hosting provider, and demonstrates good mobile optimization and accessibility. Security posture is adequate with HTTPS enforced but lacks security headers and cookie consent mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site is trustworthy and professionally maintained but could improve privacy compliance and security best practices.

T

TeamPlus

spielerplus.de

59

TeamPlus is a well-established digital platform specializing in sports team management, offering a comprehensive app that facilitates communication, event organization, and team administration for coaches, players, parents, and clubs. The company enjoys a strong market position with over 350,000 teams and 4.5 million users, supported by a professional and user-friendly website and mobile applications available on major app stores. Technically, the website employs modern frameworks and technologies, including Yii PHP framework, JavaScript, and a consent management platform, hosted securely via Cloudflare. Security posture is solid with HTTPS and privacy compliance mechanisms in place, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

H

Handball4all AG

handball4all.de

53

Handball4all AG is a German-based IT solutions provider specializing in software and services for handball associations and related sports organizations. Their offerings include various management tools such as SpielberichtOnline, SpielplanOnline, and PassOnline, targeting handball clubs, referees, and sports administrators. The company positions itself as a niche provider with a focused market presence in the sports technology sector. Technically, the website is built on TYPO3 CMS, integrates modern video playback and advertising technologies, and employs consent management for GDPR compliance. The hosting is provided by Hetzner, a reputable German hosting provider. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and published policies. Overall, the website is professional, well-structured, and provides relevant content for its target audience, with moderate trustworthiness and good technical implementation.

S

Sponsoo GmbH

sponsoo.de

59

Sponsoo GmbH operates Europe's largest online marketplace for sports sponsorship, connecting thousands of athletes, teams, clubs, associations, and events with sponsors across more than 300 sports disciplines. The platform facilitates profile creation, offer listings, and supports deal negotiation, targeting athletes and companies seeking sponsorship opportunities. The company is positioned as a leading player in the European sports sponsorship market with a medium-sized business footprint and a founding year of 2014. Technically, the website employs modern web technologies including AngularJS, Google Tag Manager, Google Analytics, and Facebook Pixel for analytics and marketing. Hosting is provided by netcup, a reputable provider. The site is mobile-optimized with good SEO practices and a professional design, though accessibility features are basic. From a security perspective, the site uses HTTPS and implements CSRF tokens in forms, but lacks visible security headers and explicit security policies. Privacy compliance is partially addressed with a comprehensive GDPR privacy policy but lacks a cookie consent mechanism. No vulnerability disclosure or incident response contacts are published. Overall, the website is professional, trustworthy, and safe for general audiences. Strategic improvements in security headers, cookie consent, and transparency around security policies would enhance the security posture and compliance standing.

H

Hamburger Judo Team e.V.

hamburger-judo-team.de

42

Hamburger Judo Team e.V. is a small, regional sports club based in Hamburg, Germany, focused on competitive Judo participation in the national Bundesliga leagues. The website serves as an information hub for news, match results, schedules, and supporter engagement. The club maintains partnerships with regional and national Judo organizations and sponsors, reflecting a stable market position within the sports community. Technically, the website is built on TYPO3 CMS with standard JavaScript and Foundation framework components, offering a moderate performance and good mobile optimization. Security posture is basic with HTTPS enabled but lacking advanced security headers and formal security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism or GDPR explicit indicators. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

E

EGT Energievertrieb GmbH

egt-energievertrieb.de

71

EGT Energievertrieb GmbH is a well-established German energy company with over 120 years of history, specializing in providing comprehensive energy solutions for business customers including industry, commerce, and medium-sized enterprises. Their services encompass energy purchasing, visualization, and generation, supported by a professional and user-friendly website built on TYPO3 CMS. The company maintains a strong market position within the regional energy sector and operates under the parent company EGT AG with several related subsidiaries. Technically, the website leverages modern technologies such as TYPO3 CMS, Google Tag Manager, and Cookiebot for consent management, hosted on AWS infrastructure. The site demonstrates good performance, mobile optimization, and accessibility, with a clear navigation structure and professional design. Privacy compliance is well addressed through detailed cookie consent mechanisms and GDPR-aligned policies. From a security perspective, the website enforces HTTPS and employs cookie consent blocking for tracking scripts, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the company's business claims, indicating a legitimate and consistent domain registration. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include publishing explicit security policies and enhancing HTTP security headers to further strengthen the security posture.

E

EE Infratec GmbH

ee-infratec.de

68

EE Infratec GmbH is a medium-sized joint venture company specializing in the installation and operation of intelligent metering technology and communication infrastructure for renewable energy supply in Germany. The company benefits from strong partnerships with EGT Energie GmbH and Elektrizitätswerke Schönau eG, positioning it well in the regional energy market. Their website reflects a professional business model focused on smart meter operation, market communication, and comprehensive customer service. Technically, the site is built on TYPO3 CMS, hosted on AWS infrastructure, and employs modern consent management tools like Cookiebot and Google Tag Manager, indicating a mature digital presence. Security-wise, the website enforces HTTPS, uses cookie consent mechanisms, and displays certifications such as ISO 27001 and BSI affiliations, though it lacks explicit security headers and an incident response contact. Overall, the site is secure, compliant with GDPR, and trustworthy, with room for improvement in security header implementation and incident response transparency.

The website at locationexplorer.de is currently inaccessible, returning a 404 error page with minimal HTML content and no visible business or service information. The lack of metadata, structured data, or any contact details indicates the site is either under development or abandoned. The domain's WHOIS data shows generic name servers without registrant details, limiting trust and legitimacy assessment. Technically, the site uses Next.js and React frameworks but does not serve any meaningful content or SEO metadata. Security posture is poor due to absence of HTTPS enforcement, security headers, or privacy policies. Overall, the site does not provide any business or compliance information, resulting in a very low trust and credibility score.

D

Dynamic Lines GmbH

sicherheitsexpo.de

48

SicherheitsExpo.de is the official website for the SicherheitsExpo trade fair held in Munich, Germany, focusing on security technology for various sectors including industry, banking, healthcare, transportation, and public authorities. The site serves as an information and promotional platform for exhibitors, visitors, and partners, showcasing the event's offerings and associated programs. The business positions itself as an innovator in security technology with a strong emphasis on economic benefits and practical applications. Technically, the website is built on TYPO3 CMS, hosted via SchlundTech, and employs Cookiebot for GDPR-compliant cookie management. The site is accessible, mobile-optimized, and uses HTTPS, reflecting a moderate to good level of digital maturity. Security-wise, the site enforces HTTPS and cookie consent but lacks explicit security policies, incident response contacts, or vulnerability disclosure mechanisms, indicating room for improvement in transparency and security posture. Overall, the website is professional, trustworthy, and compliant with privacy regulations, serving its business purpose effectively.

S

Swiss Medtech Expo

medtech-expo.ch

68

Swiss Medtech Expo is a professional event and content platform focused on the medical technology industry in Switzerland. It offers a trade fair, symposium, and year-round digital engagement for medtech providers, suppliers, and professionals. The platform provides news, networking opportunities, and educational content, positioning itself as a leading Swiss medtech event. Technically, the website employs modern web technologies including Bootstrap, FontAwesome, and Google Tag Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policies and vulnerability disclosure channels. Overall, the site is well-designed, professional, and trustworthy, with strong GDPR compliance and a clear business focus.

M

Matrix42

matrix42.com

61

Matrix42 is a European enterprise software company specializing in IT service management, software asset management, endpoint security, and identity governance solutions. The company positions itself as a leader in European service management, offering AI-powered and cloud-flexible platforms tailored to enterprise needs. Their website reflects a mature digital presence with professional design, comprehensive content, and a focus on compliance and customer engagement through events and partnerships. Technically, the site leverages HubSpot CMS, modern JavaScript libraries, and integrates marketing and analytics tools such as Google Analytics and Facebook Pixel. Security posture is strong with HTTPS and security headers, though explicit security policies and incident response details are not publicly disclosed. The absence of WHOIS data is a notable anomaly but does not detract significantly from the overall legitimacy given the professional branding and content. Strategic recommendations include publishing detailed security policies, adding vulnerability disclosure mechanisms, and improving transparency on certifications and incident contacts.

P

Paul-Ehrlich-Institut

pei.de

71

The Paul-Ehrlich-Institut (PEI) is a German federal institute under the Federal Ministry of Health, specializing in the regulation, research, and safety monitoring of vaccines and biomedicines. The website serves as an authoritative source for pharmaceutical companies, healthcare professionals, and the public, providing regulatory guidance, safety information, and research insights. It maintains a strong market position as a national regulatory authority with active international collaborations. Technically, the website is built on the Government Site Builder CMS, featuring modern HTML5, CSS3, and JavaScript technologies. It demonstrates good mobile optimization, accessibility, and SEO practices, though some security headers could be improved. The site uses HTTPS exclusively and implements a cookie consent mechanism aligned with GDPR requirements. From a security perspective, the site shows a mature posture with no visible vulnerabilities or exposed sensitive data. However, explicit security policies and incident response contacts are not published, and security headers could be enhanced. The WHOIS data is restricted per DENIC policy but consistent with the official nature of the domain and its nameservers. Overall, the PEI website is a professional, trustworthy, and secure platform that effectively supports its regulatory and informational mission. Strategic improvements in security policy transparency and header implementation would further strengthen its security posture.

D

DSB-Shop

dsb-shop.net

52

DSB-Shop is a specialized German e-commerce platform focused on retailing shooting sports merchandise, including official event products, training equipment, and fan articles. The website targets members and enthusiasts of German shooting sports, offering a niche product catalog with a clear market position. The business has been established since 2009, indicating a mature presence in its sector. Technically, the website is built on the Shopware CMS platform, utilizing modern web technologies such as HTML5, CSS3, and JavaScript with libraries like Modernizr. The site demonstrates good mobile optimization and basic accessibility features, though there is room for improvement in SEO and performance tuning. Hosting and domain registration are consistent with the German market focus. From a security perspective, the site enforces HTTPS and has domain status protections to prevent unauthorized transfers or deletions. However, it lacks DNSSEC and visible security headers, and does not publish a dedicated security policy or incident response contacts. Privacy compliance is addressed with a privacy policy, cookie consent mechanism, and terms of service, aligning with GDPR requirements. Overall, the website presents a trustworthy and professional e-commerce presence with moderate technical and security maturity. Strategic improvements in security headers, DNSSEC, and incident response transparency would enhance its posture and trustworthiness.

K

Kreissparkasse Rottweil

sparkasse-rottweil.de

69

Kreissparkasse Rottweil is a regional German savings bank providing a broad range of financial services including retail banking, online banking, investment products, insurance, and financing solutions. The website targets both private and corporate customers, offering modern digital banking tools such as the Sparkassen-App and online banking with secure TAN procedures. The bank maintains a strong local presence and positions itself as a reliable financial partner in the Rottweil region. Technically, the website is built on a modern web framework likely based on Adobe Experience Manager, with responsive design and good accessibility features. It uses HTTPS and includes cookie consent mechanisms compliant with GDPR. The site integrates tracking and analytics tools such as Google Analytics and employs marketing tools including PAYBACK affiliate programs. From a security perspective, the site enforces HTTPS and session management best practices but lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious content were detected. The WHOIS data aligns with the business claims, indicating a legitimate domain registration consistent with a regional bank. Overall, the website demonstrates a good balance of business credibility, technical implementation, privacy compliance, and security posture, suitable for a financial institution serving a regional market.

P

phg Peter Hengstler GmbH + Co. KG

phg.de

52

phg Peter Hengstler GmbH + Co. KG is a medium-sized German company specializing in customized connection and data technology solutions, serving system integrators and manufacturers with a broad portfolio of OEM components and cable assemblies. The company emphasizes engineering competence and high manufacturing depth, supported by certifications such as UL, ISO 13485, and EHEDG. Their website is professionally designed, multilingual, and provides comprehensive product and service information. Technically, the site is built on TYPO3 CMS with modern JavaScript frameworks and includes marketing and analytics tools like LinkedIn Insight and Google Analytics. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and explicit incident response policies are absent. Overall, the site reflects a trustworthy and professional business with good compliance and technical maturity.

W

WERMA

werma.com

65

WERMA is a medium-sized manufacturing company specializing in industrial signaling products such as signal towers, stack lights, and integrated signaling solutions. The company targets industrial and manufacturing sectors with a B2B business model. The website is professionally designed, multilingual, and built on the Shopware 6 platform, indicating a moderate level of digital maturity. Technical infrastructure includes modern analytics tools like Matomo and Google Tag Manager, and a cookie consent mechanism via Cookiebot, reflecting awareness of privacy compliance requirements. Security posture is generally good with HTTPS enforced and no exposed sensitive data, though explicit security headers are missing and privacy policy pages are not found in the provided content. The domain WHOIS data is unavailable, which limits the ability to fully verify domain legitimacy. Overall, the website presents a trustworthy and professional front for the business but would benefit from enhanced transparency in privacy and security policies.

METZ CONNECT GmbH is a German-based company specializing in high-quality contact technology and connection elements for electrical engineering and electronics sectors. Their product portfolio includes cabling solutions, connectors, and intelligent system components targeting building automation, industrial automation, and transportation industries. The company positions itself as a technological leader with a strong international presence across Europe, America, and Asia. Their website reflects a professional and comprehensive digital presence with detailed product information, configurators, and support resources. Technically, the website uses modern JavaScript frameworks and a proprietary CMS, delivering a good user experience with mobile optimization and SEO best practices. Security posture is solid with HTTPS enforcement and secure forms, although some security headers and explicit incident response policies are missing. Privacy compliance is well addressed with clear privacy and cookie policies and GDPR adherence. Overall, the website is trustworthy and professionally maintained, though the lack of WHOIS data introduces some uncertainty about domain registration details.

B

Brugger GmbH

brugger-magnet.de

59

Brugger GmbH is a medium-sized German manufacturer specializing in industrial magnetic systems and fastening solutions. The company emphasizes sustainable and economically produced magnets tailored for industrial applications. Their website reflects a professional B2B focus, targeting industrial clients seeking innovative magnetic solutions. The site is well-branded and consistent, providing clear information about their products and services, though direct contact details are limited to forms rather than explicit emails or phone numbers. Technically, the website is built on a modern stack including Pimcore CMS, uses HTTPS with strong security headers, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. Performance and mobile optimization are good, and accessibility features are present. The site employs Cookiebot for GDPR-compliant cookie consent management, indicating a mature approach to privacy. From a security perspective, the site demonstrates good practices with HTTPS, security headers, and no visible vulnerabilities or exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure information, which are recommended for enhanced trust and compliance. The domain registration aligns with the company's geographic location and business sector, supporting legitimacy. Overall, Brugger GmbH's website is professional, secure, and privacy-conscious, suitable for its industrial B2B audience. Strategic improvements include publishing terms of service, security policies, and incident response contacts to further strengthen trust and compliance.

H

Henke Sass Wolf

henkesasswolf.de

51

Henke Sass Wolf is a leading OEM manufacturer specializing in medical endoscopy, veterinary products, and human and dental syringes. The company targets healthcare professionals and OEM partners, positioning itself as a key player in the healthcare manufacturing sector in Germany. The website reflects a professional and consistent brand image, leveraging TYPO3 CMS for content management and providing detailed product line information. Technically, the site is hosted on Strato servers, uses HTTPS, and integrates Google reCAPTCHA for form security, indicating a moderate level of digital maturity. However, the absence of explicit privacy policies, terms of service, and direct contact information limits transparency and user trust. Security posture is adequate but could be improved by implementing security headers and publishing incident response policies. Overall, the site is accessible, well-structured, and safe for general audiences, with room for enhancements in privacy compliance and security best practices.

V

Volksbank Schwarzwald-Donau-Neckar eG

vbsdn.de

63

Volksbank Schwarzwald-Donau-Neckar eG operates as a regional cooperative bank in Germany, providing a range of retail banking and financial services to its customers. The website is professionally designed with a focus on banking services and customer engagement. The technical infrastructure leverages modern web technologies including Angular Material and Dynatrace for performance monitoring, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enforced and monitoring scripts in place; however, the absence of explicit security headers and privacy policies suggests room for improvement in compliance and security best practices. Overall, the website presents a trustworthy and professional front for the bank, though enhancements in privacy compliance and security transparency are recommended.

G

Gemeinde Dunningen

dunningen.de

52

Gemeinde Dunningen operates as the official municipal government website for the town of Dunningen, Germany, serving approximately 6,330 residents across three districts. The website provides comprehensive local information including news, events, public announcements, and municipal services. It targets local citizens and visitors, offering online services and community engagement resources. The business model is focused on public service and community information dissemination, positioning itself as a trusted local government authority. Technically, the website is built on the cEasy CMS platform, leveraging JavaScript libraries such as jQuery and Swiper.js for UI components, and Matomo for privacy-conscious analytics. The site is hosted with domaincontrol.com DNS services and employs HTTPS with a good SSL configuration. The site demonstrates good mobile optimization, accessibility, and SEO practices, though there is room for improvement in security headers and explicit security policy documentation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, the absence of security headers and incident response contact information suggests opportunities to enhance the security posture. The WHOIS data is consistent and legitimate, supporting the trustworthiness of the domain. Overall, the website presents a professional, secure, and privacy-conscious platform for municipal services. Strategic recommendations include implementing security headers, publishing security policies, and providing incident response contacts to further strengthen trust and compliance.

L

LFK Partner Bußhardt Huber Partnerschaft mbB Wirtschaftsprüfungsgesellschaft Steuerberater . Rechtsanwälte

lfkvs.de

58

LFK PARTNER is a professional partnership based in Villingen-Schwenningen, Germany, offering auditing, tax consulting, legal, and business consulting services. The company targets businesses and professionals requiring comprehensive financial and legal advisory services. The website reflects a regional professional services provider with a solid market position in finance and legal sectors. Technically, the website is built on WordPress with modern JavaScript libraries such as GSAP for animations and employs a GDPR-compliant cookie consent mechanism, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies. Overall, the website presents a trustworthy and professional digital presence suitable for its business domain.

H

Hamburger Triathlonverband

triathlonhamburg.de

54

The Hamburger Triathlonverband website serves as the official digital presence of the regional triathlon association in Hamburg, Germany. It provides comprehensive information about triathlon events, youth programs, training, and organizational matters. The site targets athletes, clubs, and sports enthusiasts within the Hamburg region, offering event calendars, news updates, and resources for members. The business model is that of a non-profit sports federation focused on community engagement and sport promotion. Technically, the website is built on Drupal 10, leveraging modern web standards and technologies. It is hosted on servers associated with rzone.de, indicating a professional hosting environment. The site is mobile-optimized, accessible, and SEO-friendly, with structured navigation and rich content. Google Analytics is used for anonymized statistical tracking, integrated with a GDPR-compliant cookie consent mechanism. From a security perspective, the site enforces HTTPS and includes a Content-Security-Policy nonce, indicating attention to security best practices. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are not present, representing areas for improvement. No vulnerabilities or suspicious content were detected, and the domain registration appears consistent with the organization's profile. Overall, the website is professional, trustworthy, and well-maintained, with strong compliance to privacy regulations. Strategic recommendations include publishing security and incident response policies, adding terms of service, and enhancing security headers to further strengthen the security posture.

D

Deutscher Hockey-Bund

hockey.de

62

The website magazin.hockey.de serves as the official online presence of the Deutscher Hockey-Bund (German Hockey Federation), providing comprehensive information about national hockey teams, competitions, and related news. It targets hockey enthusiasts and stakeholders within Germany, positioning itself as the authoritative source for hockey-related content in the country. The business model centers on information dissemination and fan engagement rather than commercial transactions. Technically, the site employs modern web technologies including Cookiebot for GDPR-compliant cookie management and Google Publisher Tags for advertising. The site is well-structured with good SEO and mobile optimization, though explicit CMS or hosting details are not evident. Performance is moderate, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and integrates a robust cookie consent mechanism, reflecting good privacy compliance. However, explicit security headers are not visible in the HTML content, and no dedicated security or incident response policies are published. The use of multiple third-party tracking and advertising services is transparent and consent-based, aligning with GDPR requirements. Overall, the website demonstrates a solid security posture and privacy compliance suitable for a national sports federation. The absence of contact details and terms of service pages slightly limits business credibility transparency. Strategic recommendations include enhancing security headers, publishing security policies, and providing clearer contact information to improve trust and compliance.

S

Slowenischer Kulturverein Lipa München e.V.

skdlipa.de

56

Slowenischer Kulturverein Lipa München e.V. is a small non-profit cultural association based in Munich, Germany, serving the Slovenian community and cultural enthusiasts. The organization focuses on cultural events, Slovenian language education, folklore activities, and community engagement. The website reflects these activities with event announcements, contact information, and cultural content primarily in German and Slovenian. Technically, the site is built on the IONOS MyWebsite CMS platform, using standard web technologies such as HTML, CSS, JavaScript, and jQuery. The site is hosted by IONOS and uses HTTPS, but lacks advanced security headers and privacy compliance documentation. Security posture is basic with room for improvement in policy publication and technical safeguards. Overall, the site is functional and professional but would benefit from enhanced privacy, security, and compliance measures.

P

Pengeluaran HK Lotto 4D: Data Keluaran HK Malam Ini, Live Draw Togel Hongkong, Paito HK Pools

petrofed.org

56

The website cit2024.org is a niche information portal providing live lottery results and data related to the Hong Kong lottery (Togel Hongkong). It targets Indonesian users interested in lottery outcomes and related statistics. The site is relatively new, with domain registration in September 2023, and operates with a basic technical infrastructure leveraging Cloudflare DNS and several Alibaba CDN and analytics services. The content is primarily in Indonesian and focuses on delivering timely lottery data without additional business or contact information. Security posture is basic with HTTPS enabled but lacks advanced security headers and privacy disclosures. No privacy policy, cookie consent, or terms of service are present, which impacts compliance and trust. Overall, the site serves a specific informational purpose but would benefit from enhanced security, privacy, and transparency measures.

SPORTVEREINonline is an online platform providing access to a wide range of sports and fitness courses primarily targeted at members of sports clubs in Germany. The platform offers over 2,000 courses including muscle building, back training, yoga, cardio, and more, delivered by qualified trainers. It serves as a digital extension for clubs to engage their members with quality-supported fitness content. Technically, the website uses a modern JavaScript stack with frameworks like Tapestry5, Bootstrap 4, and integrates Google Tag Manager and Analytics for tracking. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security policy or incident response disclosures. WHOIS data is minimal but consistent with the website's German focus. Overall, the platform is trustworthy, well-structured, and compliant with GDPR requirements.

PATE Hamburg operates a specialized web platform designed to systematically capture offerings, participants, and outcomes for selected social programs managed by the Hamburg Social Authority. The platform supports programs such as Jugendhilfe reporting and ESF+ participant tracking, serving a niche government and social services audience. The business model centers on providing a digital tool for data management and reporting within public social programs, positioning itself as a trusted service for Hamburg's social sector. Technically, the website is built using the Hugo static site generator combined with Bootstrap for responsive design, hosted on Hetzner infrastructure. The site demonstrates good performance and mobile optimization, with a clean and consistent branding approach. However, there is room for improvement in SEO and accessibility features, as well as the implementation of security headers. From a security perspective, the site benefits from HTTPS and uses integrity attributes on scripts and stylesheets, indicating attention to content security. Nonetheless, the absence of explicit security headers, cookie consent mechanisms, and vulnerability disclosure policies suggests moderate security maturity. No critical vulnerabilities or blocking mechanisms were detected, and the domain registration aligns well with the platform's public service nature. Overall, the platform presents a professional and trustworthy digital presence for Hamburg's social programs, with recommendations to enhance privacy compliance, security posture, and user contact accessibility to further strengthen trust and regulatory adherence.

D

dmg events

dmgevents.com

71

dmg events is a prominent organizer of face-to-face events and publisher of trade magazines, operating over 80 events across 25 countries in diverse sectors such as Construction, Energy, Coatings, Transport, Hospitality, and Design. The company targets industry professionals and businesses seeking networking and industry insights through events and publications. The website reflects a mature digital presence with multiple integrated analytics and marketing tools, indicating a focus on data-driven engagement and audience reach. Security posture is adequate with HTTPS and cookie consent mechanisms, though explicit privacy and security policies are not evident in the provided content. The absence of WHOIS registration data raises some concerns about domain transparency but does not detract significantly from the professional presentation and business legitimacy. Strategic improvements in privacy disclosures and security headers would enhance trust and compliance.

B

Bitly, Inc.

bobfin.in

75

Bitly, Inc. is a well-established technology company founded in 2003, specializing in link management solutions including branded links, URL shortening, QR codes, and analytics. The company serves businesses and marketers globally, providing SaaS products that enhance digital marketing efforts and customer engagement. Bitly holds a strong market position as a trusted provider, evidenced by its association with major brands and comprehensive service offerings. The website demonstrates a mature technical infrastructure built on WordPress, leveraging modern analytics and consent management tools to ensure compliance and performance. Security posture is robust with HTTPS enforcement, domain protection, and privacy policies in place, though some improvements such as explicit security.txt publication and enhanced security headers could further strengthen defenses. Overall, Bitly's digital presence reflects professionalism, trustworthiness, and compliance with privacy regulations, supporting its enterprise-scale operations and market leadership.

B

Bitly, Inc.

bobcard.io

74

Bitly, Inc. is a well-established technology company founded in 2003, specializing in URL shortening and branded link management services. The company serves businesses and marketers globally, providing tools to customize, share, and track links effectively. Bitly holds a strong market position as a trusted provider, evidenced by its clientele including major brands like BuzzFeed and The New York Times. The website demonstrates a mature digital infrastructure built on WordPress, leveraging modern analytics and marketing technologies such as Snowplow Tracker, Google Tag Manager, and ProfitWell. Content is professionally presented with good mobile optimization and accessibility features. Security posture is robust with enforced HTTPS, domain registration protections, and consent management via OneTrust, although DNSSEC is not enabled, which is a recommended enhancement. Privacy compliance is strong, with comprehensive policies and consent mechanisms in place. Overall, Bitly's website reflects a professional, secure, and trustworthy online presence aligned with its business objectives.

B

BOBCARD

bobcard.co.in

80

BOBCARD is a financial services website specializing in credit card offerings tailored for the Indian market. The site presents a wide variety of credit cards targeting different customer segments such as corporates, women, value shoppers, professionals, and defense personnel. The business positions itself as a top contender in the Indian credit card space, offering exclusive deals, rewards, and benefits. Technically, the website is built on modern frameworks like Next.js and React, with good mobile optimization and SEO practices. Security posture is strong with HTTPS and security headers implemented, though privacy and cookie policies are missing, indicating compliance gaps. Contact information is primarily via web forms without explicit emails or phone numbers visible. Overall, the website is professional and trustworthy but would benefit from enhanced privacy compliance and published security policies.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

masernschutz.de

67

The website www.masernschutz.de serves as an official information portal managed by the Bundesinstitut für Öffentliche Gesundheit (BIÖG) to educate the public about the Masernschutzgesetz (Measles Protection Act) in Germany. It targets parents, healthcare workers, and institutional leaders by providing comprehensive, accessible, and authoritative content on measles vaccination requirements and legal obligations. The site is well-branded with official government logos and maintains a high level of trustworthiness. Technically, the site is built on TYPO3 CMS and employs Matomo for privacy-conscious analytics. It demonstrates good mobile optimization, accessibility features including easy language and sign language options, and moderate performance. The cookie consent mechanism is robust and GDPR compliant, reflecting a mature approach to privacy. From a security perspective, the site uses HTTPS and anonymizes IP addresses in analytics. However, it lacks explicit security policy pages, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and readiness. No critical vulnerabilities or suspicious content were detected. Overall, the website presents a low-risk profile with strong compliance and professional presentation. Strategic improvements in security transparency and contact information would further strengthen its posture.

S

Stadt Offenbach am Main

offenbach.de

62

Stadt Offenbach am Main operates an official municipal website providing comprehensive information and services to its citizens, businesses, and visitors. The site features news, event listings, online services, and resources related to city governance and community engagement. It maintains a strong market position as the authoritative digital presence of the city government. The website is well-branded, professionally designed, and targets a broad audience including residents and tourists. The business model is focused on public service and information dissemination.

The website id-medienservice.de is currently inaccessible due to a Cloudflare Turnstile human verification challenge page, which blocks direct access to any business or content information. This prevents a full analysis of the company's services, contact details, or compliance documentation. The domain uses Cloudflare nameservers and security services, indicating an intent to protect the site from automated access or attacks. However, the lack of visible content and registrant data limits the ability to assess the business or security posture comprehensively. The technical infrastructure relies on Cloudflare's security platform, but no additional technologies or CMS platforms are detectable. Security headers and policies are not visible due to the blocked content. Overall, the site currently presents as inaccessible and lacking public-facing business or compliance information.

A

ASV Köln e.V.

asv-koeln.de

53

ASV Köln e.V. is a well-established sports club based in Cologne, Germany, with a history spanning over 90 years. The organization offers a broad range of sports and fitness activities, including fitness courses, children's sports, various sports disciplines, and community events. The club targets a diverse audience including families, seniors, and sports enthusiasts, positioning itself as a central hub for active living in the Cologne region. The business model is primarily membership-based, supported by partnerships and sponsorships from local companies. The website reflects a professional and community-focused brand with strong trust indicators such as testimonials and partner logos. Technically, the website employs modern web technologies including HTML5, CSS3, JavaScript, and SVG graphics, with AJAX-enabled forms and a responsive design optimized for mobile devices. Hosting appears to be managed via your-server.de, and the site uses HTTPS with a valid SSL configuration. While no explicit CMS or major frameworks are detected, the site demonstrates good SEO and accessibility practices, though some improvements in security headers could be made. From a security perspective, the site enforces HTTPS, uses CSRF tokens in forms, and provides a cookie consent mechanism compliant with GDPR. However, no dedicated security policy or incident response contact information is found, and security headers are not evident in the provided data. There are no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong with clear privacy and cookie policies, and user data collection is limited to necessary contact and newsletter forms. Overall, ASV Köln's website is a secure, professional, and user-friendly platform that effectively supports its community sports mission. Strategic improvements in security headers and incident response transparency would further enhance its security posture and trustworthiness.

nuLiga is a specialized platform operated by nu Datenautomaten GmbH, focused on providing automated internet-based network solutions for tennis associations and leagues primarily in Germany and Austria. The website serves as a portal for various regional tennis associations, offering both public and administrative access. The business targets tennis clubs and associations, providing league and club management services through a network of regional subdomains. The company has been established since 2003, indicating a mature presence in its niche market. Technically, the website uses basic HTML, CSS, and JavaScript without modern frameworks or CMS detected. The site performance and mobile optimization are basic, with no advanced SEO or accessibility features evident. The error page analyzed is minimalistic, with no forms or tracking scripts, and no evidence of advanced security headers or HTTPS enforcement from the provided data. From a security perspective, the site lacks visible security headers and privacy or cookie policies, which are important for GDPR compliance and user trust. No incident response or vulnerability disclosure information is provided. The domain registration data is consistent with the business claims, showing a legitimate and stable domain age. No WAF or blocking mechanisms were detected, allowing full content access. Overall, the website is functional but basic, with room for improvement in security posture, privacy compliance, and technical modernization. The risk level is moderate due to missing security best practices but no critical vulnerabilities were found in the analyzed content.

B

Bundesinstitut für Öffentliche Gesundheit

rauchfrei-info.de

64

The website www.rauchfrei-info.de is a professionally maintained, government-affiliated public health portal focused on tobacco cessation and related health education. It offers a variety of support services including forums, chat, telephone counseling, and educational resources, targeting smokers and individuals seeking to quit smoking in Germany. The site is well-positioned as a trusted source in the healthcare and non-profit sector with consistent branding and high-quality content. Technically, it is built on TYPO3 CMS with Matomo analytics, indicating a modern and privacy-conscious infrastructure. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and secure forms, though some security headers and explicit security policies are not evident. Overall, the site is safe, mature content-wise, and trustworthy with no signs of blocking or WAF interference.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

impfen-info.de

70

The website www.impfen-info.de is a comprehensive public health information portal operated by the Bundesinstitut für Öffentliche Gesundheit (BIÖG) in Germany. It provides authoritative, up-to-date, and scientifically grounded information on vaccinations for various demographics including children, adolescents, adults, and pregnant women. The site supports public health goals by educating the population on immunization benefits, vaccination schedules, and legal frameworks such as the Masernschutzgesetz. It also offers interactive tools like vaccination checks and media resources to enhance user engagement. Technically, the site is built on the TYPO3 CMS platform, leveraging Matomo analytics configured with strong privacy protections such as IP anonymization and consent-based data collection. The design is modern, mobile-optimized, and accessible, ensuring a positive user experience. The site integrates social media channels for broader outreach and maintains consistent branding aligned with its government affiliation. From a security perspective, the site enforces HTTPS and employs privacy-conscious analytics but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or suspicious elements were detected. Privacy compliance is robust, with clear cookie consent mechanisms and GDPR adherence. The absence of direct contact emails or phone numbers on the main pages suggests a focus on information dissemination rather than direct user support. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government health information service. Strategic improvements could include publishing detailed security policies and enhancing security header implementation to further strengthen its security posture.

C

codecentric AG

codecentric.de

66

codecentric AG is a prominent IT consulting and agile software development company based in Germany, positioning itself as a leader in the German IT consulting market. The company offers IT management and consulting services with a focus on modern technologies and agile methodologies, targeting IT professionals and businesses seeking digital transformation. The website reflects a professional and consistent brand image with good content quality and clear navigation. Technically, the site is built on modern frameworks such as Next.js and React, hosted on AWS infrastructure, indicating a mature digital infrastructure. Security-wise, the site uses HTTPS and Google reCAPTCHA v3, but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the website is accessible without WAF or blocking mechanisms, and no suspicious content or vulnerabilities were detected in the provided data.

Nature Office is a small real estate business specializing in luxury office rentals in the Masaki area of Dar Es Salaam, Tanzania. The company emphasizes biophilic design, integrating nature into office environments to enhance employee well-being and productivity. Their market position targets businesses seeking premium office spaces with natural aesthetics and modern amenities. The website provides detailed visual content, contact information, and social media links to engage potential clients. Technically, the website uses standard web technologies including HTML5, CSS3, JavaScript, and jQuery, with Google Analytics for user tracking. The site is mobile optimized and has a moderate performance profile. However, it lacks advanced security headers and cookie consent mechanisms, which are important for compliance and security. From a security perspective, the site uses HTTPS but does not implement additional security headers or publish security policies. The absence of WHOIS data for the domain raises concerns about domain legitimacy and transparency, which impacts trustworthiness. No forms or sensitive data collection points were detected, reducing immediate risk exposure. Overall, the website is functional and professional but would benefit from enhanced security practices, privacy compliance improvements, and domain registration transparency to strengthen trust and reduce risk.