Security Directory

N

Nachhaltigkeitsabkommen (NAT)

nachhaltigkeitsabkommen.de

54

Nachhaltigkeitsabkommen Thüringen (NAT) is a voluntary agreement network between the Thüringen state government and local businesses focused on sustainable economic development, environmental protection, resource conservation, energy efficiency, and social sustainability. It serves as Thüringen's largest network for sustainable business practices, supported by relevant state ministries. The website is built on WordPress with modern plugins and technologies, offering good performance and mobile optimization. Contact information and social media integration are well implemented, though explicit privacy and terms of service policies are missing, representing a compliance gap. Security posture is solid with HTTPS and caching plugins, but security headers and incident response policies are absent. WHOIS data confirms domain legitimacy and consistency with the business. Overall, the site is professional, trustworthy, and focused on sustainability networking in Germany.

S

Stiftung DeineWelt

stiftung-deinewelt.de

46

Stiftung DeineWelt is a German non-profit foundation dedicated to supporting children and youth who face disadvantages due to financial, social, physical, or mental conditions. The foundation primarily funds existing projects and occasionally supports individuals with financial aid. The website is built on TYPO3 CMS and employs modern web technologies such as Bootstrap and jQuery, with Matomo used for analytics. The site is well-structured, mobile-optimized, and includes a cookie consent mechanism compliant with GDPR standards. Security posture is moderate with HTTPS enabled but lacks explicit security headers and published security policies. No contact emails or phone numbers are directly available on the homepage, and no terms of service or incident response policies are published. Overall, the website presents a professional and trustworthy image appropriate for a small non-profit organization.

V

VDL Groep

orderon.com

66

OrderOn.com is an online platform operated by VDL Groep, specializing in on-demand metalworking services including laser cutting, tube laser cutting, bending, engraving, and edge rounding. The platform leverages VDL's 70 years of expertise and modern automated production facilities to offer fast, transparent, and high-quality metalworking solutions primarily targeting businesses and professionals in the manufacturing sector. The website is well-designed, mobile-optimized, and integrates modern marketing and analytics tools with GDPR-compliant consent management. However, the absence of WHOIS registration data for the domain raises concerns about domain legitimacy and ownership verification. Security posture is strong with HTTPS and security headers, but lacks explicit security policy and incident response information. Overall, the site presents a professional and trustworthy business presence with room for improvement in transparency and domain registration clarity.

B

Buncker - Advanced Thermal Runaway Packaging

buncker.com

60

Buncker is a specialized company founded in 2015 in the Netherlands, providing patented advanced thermal runaway packaging solutions for lithium batteries. Their products are UN-certified and designed to ensure safe transport, storage, and handling of lithium batteries, addressing critical safety concerns in the energy and transportation sectors. The company emphasizes sustainability and user convenience in its packaging designs. Technically, the website is built on WordPress with modern plugins and includes Google Analytics and reCAPTCHA for security and analytics. The security posture is good with HTTPS and spam protection, but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is addressed with clear policies and cookie consent mechanisms. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives.

V

VDL Groep

werkenbijvdl.nl

62

VDL Groep is a large international industrial family business headquartered in the Netherlands, specializing in manufacturing and technology solutions across sectors such as Hightech, Mobility, Energy, Infratech, and Foodtech. The website serves primarily as a career portal targeting job seekers and students interested in joining the company. The digital infrastructure employs modern web technologies including Bootstrap, FontAwesome, Google reCAPTCHA, and Google Maps API, indicating a mature technical setup. Security posture is solid with HTTPS enforced and use of CAPTCHA, though explicit security policies and incident response contacts are absent. Privacy compliance is partially addressed via cookie consent mechanisms but lacks a visible privacy policy or terms of service. Overall, the website is professional, trustworthy, and well-optimized for user experience and SEO.

M

McDelivery® | McDonald’s Lieferservice

mcdelivery.de

64

McDelivery® is the official McDonald’s food delivery service in Germany, offering customers the ability to order McDonald’s products online and have them delivered to their location via trusted delivery partners such as Lieferando, Uber Eats, and Wolt. The website is well-branded, professionally designed, and targets a broad audience seeking convenient fast food delivery. The business model leverages partnerships with established delivery platforms to extend McDonald’s reach without operating its own delivery fleet exclusively. Technically, the site uses modern web technologies including Vue.js and integrates Matomo analytics with a strong cookie consent mechanism, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforced and consent-based tracking, though explicit security headers should be verified and a vulnerability disclosure policy could enhance trust. Overall, the site is accessible, performant, and compliant with GDPR requirements, supporting McDonald’s strong market position in the German fast food delivery sector.

B

BSP Magnetica

magnetica.sk

40

BSP Magnetica is a Slovak regional web development and online marketing agency specializing in creating effective websites, content, and digital marketing strategies. The company operates multiple branch offices in Bratislava, Liptovský Mikuláš, and Spišská Nová Ves, targeting businesses and individuals seeking professional web presence and marketing services. Their website reflects a professional and consistent brand image with clear service offerings and customer testimonials, positioning them as a trusted local provider. Technically, the website is built on WordPress CMS, utilizing common technologies such as jQuery, Google Tag Manager, and SmartEmailing for email marketing. Performance optimization techniques like lazy loading are employed, and the site is mobile-optimized with good SEO practices. However, some accessibility features appear basic, and hosting details are not explicitly identified. From a security perspective, the site uses HTTPS and some basic security headers but lacks comprehensive security policies, incident response contacts, and vulnerability disclosures. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is weak due to the absence of privacy and cookie policies, which is a notable compliance gap. Overall, the website is functional, professional, and trustworthy for its business purpose but would benefit from enhanced privacy compliance and security transparency to improve user trust and regulatory adherence.

N

Národné centrum zdravotníckych informácií

sllk.sk

53

Slovenská lekárska knižnica is a Slovak national medical library operated under the Národné centrum zdravotníckych informácií, providing specialized medical literature and database access to healthcare professionals and institutions. The website serves as a portal for accessing online catalogs, registration services, and medical databases such as EBSCO and OVIDSP. The organization holds a strong position in the healthcare and government sectors within Slovakia, focusing on educational and research support. Technically, the site is built on Microsoft SharePoint with legacy components and uses older JavaScript libraries, indicating moderate digital maturity. The site is accessible, professionally designed, and provides relevant content, but lacks modern privacy and security features such as cookie consent and updated libraries. Security posture is adequate with HTTPS and form protections but could be improved with modern headers and updated dependencies. Overall, the site is trustworthy and serves its audience well but would benefit from modernization and enhanced privacy compliance.

N

Národné centrum zdravotníckych informácií

ezdravotnictvo.sk

54

The website www.ezdravotnictvo.sk is the official Slovak national electronic healthcare portal operated by the Národné centrum zdravotníckych informácií. It provides a range of electronic health services including electronic prescriptions, electronic health booklets, electronic sick leaves, and related support for healthcare professionals and patients. The site targets healthcare providers, patients, and government stakeholders, positioning itself as a critical infrastructure for Slovakia's healthcare digital transformation. Technically, the site is built on the Liferay CMS platform, leveraging modern JavaScript libraries such as jQuery and Bootstrap, and integrates Google Tag Manager and Google Maps API for analytics and location services. The site is mobile-optimized and accessible with good SEO practices. Security-wise, the site enforces HTTPS and uses some security headers but lacks comprehensive security policies and advanced headers. Privacy compliance is partially addressed with a privacy information page but lacks cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, serving an essential government function.

G

Gesellschaft für Naturschutz und Ornithologie Rheinland-Pfalz e.V.

gnor.de

40

The Gesellschaft für Naturschutz und Ornithologie Rheinland-Pfalz e.V. (GNOR) is a well-established non-profit organization founded in 1977, dedicated to nature conservation and ornithology in the German state of Rheinland-Pfalz. The organization conducts ecological research, manages conservation projects, and publishes scientific materials to support biodiversity and environmental protection. Their website reflects a strong regional presence with active community engagement and volunteer opportunities. Technically, the website is built on a modern WordPress platform with commonly used plugins for galleries and sliders, hosted by pixeldiversity GmbH. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. However, there is room for improvement in accessibility and SEO. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks advanced security headers and explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the website is trustworthy and professional, serving its non-profit mission effectively. Strategic improvements in privacy compliance and security policies would enhance user trust and regulatory adherence.

N

NaturFreunde Rheinland-Pfalz

naturfreunde-rlp.de

58

NaturFreunde Rheinland-Pfalz is a regional non-profit organization dedicated to environmental protection, culture, tourism, and sports within the German state of Rheinland-Pfalz. The website serves as an information hub for members and interested parties, offering news, event listings, and project details. The organization maintains an active community presence and promotes sustainable and social activities. Technically, the website is built on Drupal 7 with common JavaScript libraries and is hosted on a stable infrastructure likely provided by 1&1 IONOS. The site is mobile-optimized and includes SEO best practices, though some accessibility features are basic. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response or security policies. Privacy compliance is partially met with a privacy policy page but no visible cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its non-profit mission.

B

BUND Landesverband Rheinland-Pfalz e. V.

bund-rlp.de

60

BUND Landesverband Rheinland-Pfalz e. V. is a regional non-profit environmental organization dedicated to protecting nature and promoting sustainability in the German state of Rheinland-Pfalz. The website serves as an information hub for their projects, advocacy efforts, and community engagement, including membership and donation drives. The organization maintains a strong presence with educational resources and active social media channels. Technically, the website is built on TYPO3 CMS, uses Matomo for analytics, and implements a cookie consent mechanism via tarteaucitron.js, reflecting a modern and privacy-conscious infrastructure. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though there is room for improvement in publishing explicit security policies and incident response information. Overall, the site is professional, trustworthy, and well-optimized for users interested in environmental issues in Rheinland-Pfalz.

The website wald-rlp.de currently serves a 404 error page indicating no site configuration found, which means the actual business content is inaccessible. The page is built on TYPO3 CMS as indicated by the error branding, but no business information, contact details, or policies are present. The technical infrastructure appears minimal with no detected scripts or analytics. Security posture cannot be fully assessed due to lack of HTTPS and security headers information. Overall, the site is non-functional from a user perspective and lacks essential compliance and trust elements.

B

Bundesvereinigung Kulturelle Kinder- und Jugendbildung e. V. (BKJ)

bkj.de

45

The Bundesvereinigung Kulturelle Kinder- und Jugendbildung e. V. (BKJ) is a German non-profit umbrella organization dedicated to cultural education for children and youth. The website serves as a comprehensive platform offering information about the organization, its projects, events, publications, and advocacy efforts. It targets educators, cultural institutions, and youth organizations, positioning itself as a leading authority in the cultural education sector in Germany. The site is well-branded, professionally designed, and regularly updated with relevant content.

S

Sharkness Media GmbH & Co. KG

sharkness-media.de

58

Sharkness Media GmbH & Co. KG is a specialized full-service agency focused on providing information systems, website hosting, marketing, and design services primarily for political entities associated with the CDU/CSU parties in Germany. With over 15 years of experience, the company offers tailored solutions including integrated newsletters, social media integration, SSL security, and media servers for video and podcasts. Their market position is that of a niche provider with a strong focus on political clients and associations. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, and various UI plugins, delivering a responsive and user-friendly experience optimized for mobile devices. Security posture is adequate with SSL encryption and no visible vulnerabilities, though improvements are recommended in security headers and incident response transparency. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

S

Stadt Neustadt an der Weinstraße

neustadt.eu

69

The website www.neustadt.eu is the official digital presence of the city Neustadt an der Weinstraße, Germany. It serves as a comprehensive portal for citizens, businesses, and tourists, offering extensive information on city administration, cultural programs, tourism, environmental initiatives, and public services. The site is well-structured with clear navigation and a professional design consistent with municipal branding. Technically, the site employs modern JavaScript libraries such as jQuery and Mustache.js, and uses HTTPS with cookie consent mechanisms, indicating a mature digital infrastructure. However, no explicit security policies or incident response contacts are published, which could be improved to enhance trust and transparency. The domain WHOIS data is privacy protected by EURid, a common practice for EU domains, and no suspicious patterns are detected, supporting the legitimacy of the site. Overall, the site demonstrates a good security posture and privacy compliance, with moderate user tracking via Google Tag Manager. Strategic recommendations include implementing security headers, publishing a security policy and incident response information, and adding a vulnerability disclosure mechanism to further strengthen security and compliance.

1

1&1 Versatel GmbH

versatel.de

71

1&1 Versatel GmbH is a leading German telecommunications provider specializing in fiber optic internet, telephony, networking, and security solutions for business customers. The company operates under the umbrella of United Internet AG and targets medium to large enterprises seeking high-performance digital infrastructure. Their website reflects a mature digital presence with comprehensive service offerings and strong branding consistency. Technically, the site is built on Drupal CMS with modern frontend technologies, optimized for mobile and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though some improvements in security headers and vulnerability disclosure are recommended. Overall, the domain's WHOIS data is unavailable, which slightly impacts trust but does not detract from the company's legitimacy given the strong business signals and market position.

R

Refokus

refokus.io

66

Refokus is a boutique digital agency specializing in high-end web design, branding, and development services primarily targeting B2B startups, venture capital firms, and large innovative organizations. The company leverages modern technologies such as Webflow, AI, and proprietary frameworks to deliver fast, scalable, and visually compelling websites. Their market position is that of a high-quality, award-nominated agency focused on speed and quality. Technically, the website is built on Webflow with integrations of advanced JavaScript libraries like GSAP and ThreeJS, and uses analytics tools including Google Analytics and Ahrefs. The site is well-optimized for performance, mobile responsiveness, and SEO, reflecting a mature digital infrastructure. Security-wise, the site uses HTTPS and some consent management for analytics but lacks explicit security headers and published privacy or cookie policies, which are areas for improvement. The WHOIS data is missing or indicates the domain may be very new or unregistered, which slightly reduces trustworthiness despite the professional site content. Overall, the website presents a strong business and technical profile but should address privacy and security policy transparency and clarify domain registration details to enhance trust.

Massif Central is a vibrant urban cultural and hospitality venue located in Frankfurt am Main, Germany. It functions as a melting pot for diverse urban activities including design, architecture, fan culture, street art, and e-mobility, complemented by food and beverage services such as organic food, daily menus, BBQ, and drinks. The venue hosts a variety of events, workshops, and cultural programs targeting urban creatives and the local community. Technically, the website is built on WordPress using modern frameworks like Foundation and integrates marketing tools such as MailerLite. The site is mobile-optimized with good SEO and accessibility basics. Security posture is solid with HTTPS and no visible vulnerabilities, though security headers and incident response information are lacking. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the website presents a professional and trustworthy business presence with room for security and compliance improvements.

F

Frederik Steen

steen.in

49

Frederik Steen operates a professional media services website based in Bonn, Germany, offering moderation for online and live events, podcast and video hosting, and comprehensive media training. The site targets a general audience interested in media communication and training services. The business is positioned as a niche local media professional with a small company size and a clear focus on media and communication sectors. Technically, the website is built on WordPress with modern plugins like Elementor and Yoast SEO, showing good digital maturity and SEO optimization. Security posture is solid with HTTPS enforced and GDPR compliance via cookie consent mechanisms, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-maintained, with no signs of malicious activity or content safety concerns.

P

Polarlicht Mediengestaltung GmbH

polarlicht.com

59

Polarlicht Mediengestaltung GmbH is a small media design company based in Wiesbaden, Germany, specializing in web and logo design services. The company targets businesses and individuals seeking professional media design solutions. The website is built on the Wix platform, indicating a moderate level of digital maturity with use of modern JavaScript libraries and error monitoring via Sentry. However, the absence of WHOIS registration data raises concerns about domain legitimacy, although the professional website and structured data suggest a genuine business presence. Security posture is moderate with HTTPS usage and some security best practices, but lacks security headers and formal privacy or cookie policies. Overall, the site is accessible and functional but would benefit from enhanced compliance and security measures.

E

Evangelischer Pressedienst (epd)

epd.de

49

The Evangelischer Pressedienst (epd) is a well-established, independent news agency affiliated with the Evangelical Church in Germany, providing high-quality news, photos, and videos focused on church, religion, ethics, culture, media, education, society, and social development. The agency operates a federated structure with regional offices and international correspondents, serving a broad media audience including newspapers, radio, TV, and online platforms. The website reflects a mature digital presence with comprehensive content and professional design. Technically, the site is built on Drupal 8, uses modern JavaScript libraries, and integrates a consent management platform to ensure GDPR compliance. The site is mobile-optimized, accessible, and SEO-friendly. Hosting details are not explicit but domain registration is standard and consistent with the organization's profile. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, some recommended security headers are not explicitly detected and no public security policy or incident response information is provided. Privacy compliance is strong with clear privacy and cookie policies and active consent mechanisms. Overall, the site is trustworthy, professional, and well-maintained, with no signs of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts.

G

GMM AG

g-m-m.de

51

GMM AG is a well-established German media and communication agency with over three decades of experience, specializing in integrated 360-degree communication solutions including film production, web projects, social media, branding, and live streaming. The company targets businesses and organizations seeking comprehensive media and communication services, positioning itself as a reliable partner with a broad service portfolio and strong client references. Technically, the website is built on TYPO3 CMS with modern frontend frameworks and analytics tools such as Matomo and Google Analytics, demonstrating a mature digital infrastructure. The site is mobile-optimized and features a professional design with clear navigation and rich content. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security headers and incident response information. Overall, the site is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities, reflecting a strong security posture and business credibility.

R

Radio/Tele FFH GmbH und Co. Betriebs KG

harmonyfm.de

75

80er-Radio harmony is a German radio station specializing in nonstop 80s hits, complemented by news, weather, and traffic updates. It operates under the parent company Radio/Tele FFH GmbH und Co. Betriebs KG and targets German-speaking audiences who enjoy 80s music. The website is professionally designed, leveraging TYPO3 CMS and modern web technologies, providing a good user experience with clear navigation and mobile optimization. The station also promotes events and ticket giveaways, enhancing audience engagement. Technically, the site uses privacy-focused analytics (Matomo) and complies with GDPR through a consent manager, reflecting a mature digital infrastructure. Security posture is solid with HTTPS and standard security headers, though explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, safe, and well-positioned in its niche media market.

R

Radio/Tele FFH GmbH und Co. Betriebs KG

planetradio.de

75

Planet Radio is a German media company operating an online radio station focused on contemporary music genres such as pop, dance, house, hip hop, and R'n'B. The website offers live streaming, playlists, music discovery, and lifestyle content targeting a general audience interested in entertainment. The company is part of Radio/Tele FFH GmbH und Co. Betriebs KG, a recognized media entity in Germany. Technically, the site is built on TYPO3 CMS and integrates modern streaming and advertising technologies, including JWPlayer and Adswizz SDK. Privacy is respected through GDPR-compliant cookie consent managed by consentmanager.net and the use of Matomo analytics, a privacy-focused tracking solution. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the site is professional, well-branded, and trustworthy with good mobile optimization and user experience.

R

Radio/Tele FFH GmbH und Co. Betriebs KG

ffh.de

75

HIT RADIO FFH is a prominent regional radio broadcaster serving the Hessen region in Germany, offering music, news, traffic updates, and entertainment content. The website reflects a mature digital presence with a comprehensive content offering tailored to a general audience interested in charts, hits, and local news. The company operates under the legal entity Radio/Tele FFH GmbH und Co. Betriebs KG and maintains a consistent brand image across its digital platforms and social media channels. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and privacy-focused analytics tools like Matomo, ensuring a balance between user experience and data protection. Security posture is solid with HTTPS enforced and GDPR-compliant cookie consent mechanisms, although explicit security policies and incident response contacts are not publicly disclosed. Overall, the website demonstrates a professional, trustworthy, and user-friendly platform with good compliance and technical standards.

H

HSE

hse.de

59

HSE operates a comprehensive e-commerce platform primarily serving the German-speaking market, offering a wide range of products including fashion, beauty, jewelry, and home living items. The platform integrates modern digital shopping experiences such as livestream shopping and daily promotional campaigns, positioning itself as a large and established player in the retail e-commerce sector. The website demonstrates a high level of digital maturity with a React-based frontend, integration of consent management via Usercentrics, and advanced analytics through Google Tag Manager and Tealium. Hosting and content delivery leverage Akamai infrastructure, ensuring reliable performance and security. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and active consent mechanisms. Overall, the site is professional, user-friendly, and trustworthy, with no indications of blocking or WAF interference.

U

UPLINK Network GmbH

uplink-network.de

54

UPLINK Network GmbH is a prominent German telecommunications and broadcasting service provider specializing in the planning, construction, and operation of critical decentralized IT and radio technology infrastructure. They hold a leading market position as Germany's largest operator of FM radio frequencies, serving a broad range of private and public radio broadcasters. Their key services include broadcasting network operation, audio streaming via their subsidiary UPLINK DIGITAL GmbH, radio technology solutions, and Industry 4.0 IoT network deployments such as LoRaWAN. The company targets broadcasting companies, telecom clients, and industrial IoT customers with a service-oriented business model focused on infrastructure and technology solutions. Technically, the website is built on WordPress with modern plugins and frameworks such as WPBakery and Bootstrap, ensuring good mobile optimization and SEO. The site uses HTTPS with Google Analytics and reCAPTCHA for user interaction and tracking, complemented by a GDPR-compliant cookie consent mechanism. Performance is moderate with a professional design and clear navigation. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, though security headers are not explicitly present. The WHOIS data aligns well with the website's claims, indicating a trustworthy domain registration. Overall, UPLINK Network GmbH presents a professional and credible online presence with good privacy compliance and technical implementation. Strategic improvements in security policy transparency and vulnerability disclosure could further enhance trust and security posture.

M

Media Broadcast

media-broadcast.com

64

Media Broadcast is a leading German full-service provider specializing in broadcast and media solutions for television, radio, and digital platforms. The company offers a comprehensive range of services including signal transmission, network planning, professional services, and innovative 5G campus network solutions. Their market position as a leader in Germany's media infrastructure sector is supported by a professional and content-rich website that clearly targets broadcasters, media companies, and industrial clients. Technically, the website is built on the Squarespace platform, leveraging modern web technologies and optimized for mobile devices. The site demonstrates good SEO practices and moderate performance, with a cookie consent mechanism in place to comply with privacy regulations. However, the absence of a privacy policy and terms of service pages indicates gaps in privacy compliance. From a security perspective, the site enforces HTTPS with HSTS and uses standard security headers, reflecting a good security posture. No vulnerabilities or exposed sensitive data were detected. The lack of a security policy or incident response contact information suggests room for improvement in security transparency and readiness. Overall, the website presents a trustworthy and professional image but would benefit from enhanced privacy and security disclosures. The missing WHOIS data raises questions about domain registration legitimacy, warranting further verification. Strategic recommendations include publishing comprehensive privacy and security policies, adding incident response contacts, and improving accessibility features to strengthen compliance and user trust.

F

Freiwillige Selbstkontrolle der Filmwirtschaft (FSK) GmbH

fsk.de

51

The website www.fsk.de represents the Freiwillige Selbstkontrolle der Filmwirtschaft (FSK) GmbH, a German organization responsible for youth protection and film age classification. It serves as an authoritative platform providing transparent and legally compliant information about film ratings, youth media protection, and services for families and the film industry. The site is well-positioned in the German government sector as a trusted regulatory body. Technically, the website is built on WordPress with a modern tech stack including Google Analytics, Google Tag Manager, Vimeo embeds, and security plugins like Wordfence. The site employs a comprehensive cookie consent mechanism and uses HTTPS with good SSL configuration, ensuring secure data transmission and user privacy. Security measures include spam protection via Google reCAPTCHA and firewall protections. Overall, the website demonstrates a strong security posture with no critical vulnerabilities detected. The content is professionally presented, mobile-optimized, and accessible, targeting a general audience with a focus on families and youth protection. The domain registration data aligns with the business identity, indicating legitimacy and transparency. Strategic recommendations include enhancing security headers with Content-Security-Policy, maintaining up-to-date software, and conducting regular security audits to sustain and improve the security posture.

Q

QVC

qvc.de

69

QVC Germany operates a comprehensive online shopping platform offering a wide range of consumer products with a focus on convenience and secure purchasing options. The site integrates TV shopping and personalized product recommendations, targeting a broad general audience in Germany. The business is positioned as a leading e-commerce retailer with a large customer base and consistent branding. Technically, the website leverages Adobe Experience Manager CMS, Akamai CDN, and modern analytics tools such as Google Analytics and Adobe Analytics, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced, multiple security headers, and secure cookie practices, although explicit security policies and incident response contacts are not publicly detailed. Overall, the site demonstrates high professionalism, good content quality, and compliance with GDPR, supported by visible privacy and cookie policies. The WHOIS data aligns with the business claims, showing legitimate domain registration and hosting. Strategic recommendations include publishing explicit security and incident response policies and implementing a vulnerability disclosure program to enhance trust and compliance.

K

Kinowelt TV

kinowelt.tv

50

Kinowelt TV is a German-language media company operating a specialized TV channel focused on high-quality feature films. The website serves as a digital platform providing programming schedules, film series information, and subscription options through various cable and IPTV providers. The company targets movie enthusiasts in the German-speaking market, positioning itself as a trusted source for curated cinematic content. Technically, the site is built on WordPress with modern JavaScript libraries such as jQuery and Slick Carousel, and employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is well-optimized for SEO and accessibility, with a responsive design and clear navigation. Security-wise, the site uses HTTPS and incorporates some best practices, but lacks visible security headers and a cookie consent mechanism, which are areas for improvement. The absence of WHOIS data due to privacy protection limits transparency but is not uncommon for media businesses. Overall, the website is professional, trustworthy, and user-friendly, with moderate room for enhancing privacy compliance and security posture.

The website gemeindewahlen.be is currently inaccessible due to a Cloudflare Turnstile security challenge page that blocks direct content access. The domain is registered to Demetec Sprl, a Belgian company, since 2017, which aligns with the .be domain and suggests a legitimate registration. However, no business information, contact details, or policies are visible on the page due to the security mechanism. The technical infrastructure includes Cloudflare protection but no detectable CMS or additional technologies. Security posture cannot be fully assessed because of the blocked content. Overall, the site appears to be protected by strong WAF measures but lacks publicly accessible content for further analysis.

Ostbelgienfamilie.be is an official government portal serving the German-speaking community of Belgium, focusing on family-related services such as child benefits, childcare, and family support. The website is professionally designed with clear navigation and provides comprehensive information and online tools to its target audience of families and service providers. The site is built on a modern ASP.NET framework using the contentXXL CMS, supported by Demetec Sprl, a known CMS provider. It employs standard web technologies including jQuery and Telerik UI components, and integrates etracker analytics with respect for user privacy.

Ostbelgien Europa is an official governmental portal serving the German-speaking Community of Belgium, focusing on European Union funding, regional projects, and cooperation. The website provides comprehensive information about EU programs such as Interreg, Erasmus+, and others, targeting residents, organizations, and institutions within the community. The portal is developed and maintained by Demetec Sprl, a company credited in the website footer, and uses the contentXXL CMS platform. The site is well-structured, with clear navigation and a consistent branding approach, reflecting its official status and purpose. Technically, the website employs ASP.NET WebForms technology, jQuery, and modern JavaScript libraries like Modernizr. It integrates a cookie consent mechanism via Klaro and uses etracker for analytics, indicating a moderate level of digital maturity and compliance with privacy regulations. The site is mobile-optimized and accessible, with good SEO practices evident from meta tags and structured navigation. From a security perspective, the website enforces HTTPS and includes some security headers, though there is room for improvement by adding explicit Content-Security-Policy and other headers. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong, with clear privacy and cookie policies and consent mechanisms in place. However, no explicit security or incident response policies are published. Overall, Ostbelgien Europa presents a trustworthy and professional online presence for its governmental function. The domain registration aligns with the website's developer, and no suspicious patterns were found. Recommendations include enhancing security headers, publishing incident response information, and adding clearer contact details to improve user trust and compliance.

Ostbelgien Live is an official government information portal serving the German-speaking Community of Belgium. It provides comprehensive public information, access to government services, and community updates tailored to residents and citizens. The website is well-structured, primarily in German, and integrates multiple partner sites covering various regional topics such as education, tourism, and local governance. The platform uses a commercial CMS (contentXXL) and standard web technologies including ASP.NET and jQuery, indicating a mature technical infrastructure. Analytics and cookie consent mechanisms are implemented to comply with GDPR requirements. Security posture is solid with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government entity.

R

Rosendahl Borngräber

rosendahl-berlin.de

63

Rosendahl Borngräber is a Berlin-based agency specializing in brand and communication design, serving a diverse clientele including companies, institutions, and non-profit organizations. Established in 1998, the agency offers a broad range of services such as branding, corporate design, digital and publication design, signage, and website development. Their market position is reinforced by multiple prestigious design awards, reflecting a strong reputation in the media and design industry. Technically, the website is built on the CELLMS content management system and employs a modern technology stack including jQuery, Lottie animations, and device detection scripts. The site is hosted on flatservice.de nameservers, optimized for mobile devices, and demonstrates good SEO and accessibility practices, though some improvements in accessibility and security headers could be made. From a security perspective, the site uses HTTPS with a good SSL configuration and implements a cookie consent mechanism compliant with GDPR. However, explicit security policies and incident response information are not published, and security headers are not detected, indicating areas for enhancement. No vulnerabilities or exposed sensitive data were found. Overall, the website presents a professional, trustworthy, and well-maintained digital presence with a strong focus on privacy compliance and user experience. Strategic improvements in security policy transparency and technical security controls would further strengthen the site's security posture and trustworthiness.

K

Kommission für Jugendmedienschutz (KJM)

kjm-online.de

52

The Kommission für Jugendmedienschutz (KJM) website serves as the official platform for Germany's central regulatory authority for youth media protection. It provides comprehensive information on their mandate, regulatory activities, publications, and complaint mechanisms. The site targets children, youth, guardians, educators, and media providers, positioning itself as a trusted government entity in the youth protection sector. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and employs modern web technologies with good mobile optimization and accessibility. Privacy is well respected with Matomo analytics configured to disable cookies and honor DoNotTrack. Security posture is solid with HTTPS and some security headers, though improvements are recommended in header policies and incident response visibility. Overall, the site is professional, trustworthy, and compliant with GDPR, making it a reliable resource for its audience.

K

Kommission zur Ermittlung der Konzentration im Medienbereich (KEK)

kek-online.de

52

The Kommission zur Ermittlung der Konzentration im Medienbereich (KEK) is a German regulatory commission focused on ensuring media plurality and preventing concentration of opinion power among private television broadcasters. The website serves as an official platform providing transparency on media ownership, publishing concentration reports, and offering insights into media market developments. It targets regulators, media professionals, researchers, and the general public interested in media diversity. Technically, the site is built on TYPO3 CMS, hosted by agenturserver, and employs Matomo analytics configured with privacy considerations. The site is well-structured, mobile-optimized, and accessible, with clear navigation and professional design. Security posture is good with HTTPS enforced and privacy-respecting analytics, though some security headers and explicit policies could be improved. Contact information is clearly provided, including email, phone, and physical address. Overall, the site is trustworthy, compliant with GDPR, and safe for general audiences.

M

Page Not Found

medienpraktikum-hessen.de

32

The website medienpraktikum-hessen.de currently serves a 404 error page indicating that the site is not configured or accessible. There is no visible business content, contact information, or policies present on the site. The only identifiable technology is the TYPO3 CMS, inferred from the error page branding. The domain is registered with plausible name servers but lacks detailed WHOIS registrant information. Due to the lack of content and configuration, the website's digital maturity is very low, with minimal technical implementation and no privacy or security compliance evident. The security posture is weak, with no HTTPS or security headers detected in the provided data. Overall, the site is not operational and does not provide any business or user-facing services at this time.

S

Schule des Hörens und Sehens: Willkommen

schule-des-hoerens-und-sehens.de

36

The website represents a specialized educational institution focused on hearing and vision, likely serving students with sensory impairments. The site is built on TYPO3 CMS and uses jQuery for client-side scripting. The content is minimal, primarily a redirect landing page with an image and no substantive textual content or contact information. There are no privacy, cookie, or terms of service policies present, and no forms or data collection mechanisms are visible. Security posture is weak with no detected security headers and unknown SSL configuration. WHOIS data is partially available but lacks detailed registrant information, though no suspicious patterns are evident. Overall, the website is functional but lacks maturity in compliance, security, and user engagement features.

R

Ran an die Maus

rananmausundtablet.de

35

The website 'Ran an die Maus' is an educational platform primarily focused on media literacy and technology use within families and educational settings. It provides informational content, recommendations, and resources aimed at helping families and educators navigate media and technology effectively. The site is in German and targets a German-speaking audience, particularly families and educators interested in media education. The business model appears to be informational and educational without commercial transactions or services. From a technical perspective, the website uses a basic technology stack including HTML5, CSS3, Bootstrap, and jQuery. The site is moderately optimized for performance and mobile devices but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern backend platform. The site does not appear to use HTTPS, which is a significant technical and security shortcoming. Security posture is weak due to the absence of HTTPS, security headers, and privacy or cookie policies. No contact information or incident response mechanisms are provided, limiting trust and compliance with GDPR or other regulations. The site does not collect user data or use analytics or advertising scripts, which reduces privacy risks but also limits business insights. Overall, the website is a small-scale educational resource with basic technical implementation and limited security and privacy compliance. Strategic improvements should focus on implementing HTTPS, adding privacy and cookie policies, providing contact information, and enhancing security headers to improve trust and compliance.

M

Medienanstalt Hessen

forum-medienzukunft.de

10

Forum Medienzukunft is a German media event organized by Medienanstalt Hessen, focusing on the future of media, communication, and democracy. The 2025 event is scheduled for July 1 in Frankfurt am Main and features prominent speakers from academia, media, and policy. The website serves as an informational platform for the event, providing program details, speaker profiles, sponsors, and contact information. The target audience includes media professionals, policymakers, journalists, and academics interested in media and democratic discourse. Technically, the website uses modern frontend technologies such as Bootstrap, AOS, Glightbox, and Swiper for responsive design and interactive elements. The site is mobile-optimized with good navigation and SEO practices. No major CMS is detected, suggesting a custom or lightweight PHP-based system. Performance is moderate with no critical errors or broken elements observed. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, no explicit security headers or incident response policies are publicly disclosed. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data is limited but consistent with the domain's purpose and branding. Overall, the website is professional, trustworthy, and well-suited for its informational and event promotion purposes. Strategic improvements could include enhanced security headers, public security policies, and more visible incident response contacts to strengthen trust and compliance.

M

m2 MedienMittwoch Stiftung

medienmittwoch.de

60

The m2 MedienMittwoch Stiftung operates a professional networking platform focused on media topics within the FrankfurtRheinMain region. The website serves as a hub for event information, academic cooperation, and media discourse, positioning itself as a regional think-tank and networking forum. The business model is non-profit, targeting media professionals, academics, and government officials. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Matomo analytics, hosted on Gandi.net infrastructure. The site demonstrates good design quality, mobile optimization, and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS and privacy-conscious analytics configuration, but lacks published security policies and cookie consent mechanisms. Overall, the domain registration aligns with the business history, supporting legitimacy. Strategic improvements include enhancing privacy compliance, publishing security and incident response policies, and implementing cookie consent.

N

Netzwerk Journalismus e.V.

medien-starter.de

49

Netzwerk Journalismus e.V. operates a specialized multimedia journalism training platform targeting young people in Germany. The website offers a year-long educational program supporting students and trainees in multimedia journalism, providing practical skills and networking opportunities. Technically, the site is built on WordPress with Elementor and employs modern security measures including Wordfence and Google reCAPTCHA. Privacy compliance is strong with a comprehensive privacy policy and cookie consent mechanism. The security posture is solid, though additional security headers could enhance protection. Overall, the site is professional, trustworthy, and well-suited for its educational mission.

S

Stiftung Zuhören

stiftung-zuhoeren.de

53

Stiftung Zuhören is a German non-profit foundation dedicated to promoting conscious listening in early childhood education and schools. The organization provides training and educational materials aimed at Kitas, primary and special schools, and after-school care. The website reflects a focused educational mission with a clear target audience and a niche market position. Technically, the site is built on WordPress using the Divi theme and incorporates modern plugins such as Yoast SEO and Real Cookie Banner Pro, indicating a mature digital infrastructure. The presence of Matomo analytics shows a commitment to privacy-conscious data collection. Security-wise, the site enforces HTTPS and employs a comprehensive cookie consent mechanism, though it lacks explicit security policy or incident response pages. Overall, the site demonstrates good security hygiene with room for improvement in security headers and formal policies. The domain registration data is consistent and trustworthy, supporting the legitimacy of the organization. The site is well-structured, mobile-optimized, and compliant with GDPR requirements, making it a reliable and professional platform for its educational mission.

M

Medien kindersicher

medien-kindersicher.de

58

Medien kindersicher is a German-language portal dedicated to informing parents about technical protection solutions for their children's devices, services, and apps. It offers a specialized assistant tool that creates tailored protection solutions based on the child's age and used devices. The website is supported by multiple German regional media authorities, indicating a strong institutional backing and trust. The content is professionally curated, highly relevant to its target audience of parents and guardians, and presented with excellent design and navigation.

I

Internet-ABC

internet-abc.de

46

Internet-ABC is a well-established German non-profit educational platform focused on promoting safe and responsible internet use among children, parents, and educators. The website offers a variety of learning modules, quizzes, news updates, and interactive features to engage its target audience effectively. It holds recognized trust certifications such as the Seitenstark Gütesiegel, reinforcing its credibility in the digital education sector. Technically, the site is built on TYPO3 CMS, leveraging modern web standards including responsive design, SVG graphics, and asynchronous JavaScript loading. The platform demonstrates good performance and accessibility, ensuring a positive user experience across devices. SEO practices are well implemented, supporting discoverability. From a security perspective, the site enforces HTTPS and employs secure form handling with anti-CSRF tokens. However, it lacks explicit security policies, incident response contacts, and enhanced security headers, which could be areas for improvement. Privacy compliance is strong with comprehensive privacy and cookie policies, though a cookie consent mechanism is not evident. Overall, Internet-ABC presents a low-risk profile with a strong focus on educational content and user trust. Strategic enhancements in security transparency and cookie consent would further solidify its position as a trusted resource for digital literacy.

F

FLIMMO - Elternratgeber für TV, Streaming & YouTube

flimmo.de

43

FLIMMO is a German educational website providing parental guidance on TV, streaming, and YouTube content suitable for children, including age recommendations and pedagogical tips. The site targets parents and families seeking to make informed media choices for their children. The business model appears to be informational and advisory, focusing on child-appropriate media content. Technically, the website is built using modern frontend technologies such as Angular and Material Design, with good mobile optimization and moderate performance. Security posture is adequate with HTTPS enabled, but lacks important security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the site is safe for general audiences and does not contain adult content.