Security Directory

B

Budafok-Tétény Városfejlesztő Kft.

zold22.hu

45

The website zold22.hu serves as an official local government platform for Budapest's 22nd district, focusing on environmental initiatives and community engagement. It provides residents with news, events, and useful information related to green programs and local government activities. The site is positioned as a trusted community resource with clear contact information and consistent branding. Technically, the site is built on WordPress 6.8.1 with custom themes and scripts. It demonstrates moderate performance and good mobile optimization, though accessibility and SEO could be improved. The absence of advanced analytics or tracking scripts suggests a privacy-conscious approach, but the lack of a cookie consent mechanism is a compliance gap. From a security perspective, the site uses HTTPS and secure form inputs but lacks important security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's local government identity, supporting legitimacy. Overall, the site is safe, professional, and trustworthy with room for improvement in privacy compliance and security hardening. Strategic recommendations include implementing security headers, adding cookie consent, and publishing incident response information.

P

Pfarrei Heiligste Dreifaltigkeit Beverungen

heiligstedreifaltigkeit-beverungen.de

41

Pfarrei Heiligste Dreifaltigkeit Beverungen is a local parish organization serving multiple communities in the Weserbergland region of Germany. Founded in 2013, it provides religious services, community events, and pastoral care to its congregation. The website is well-structured, offering event schedules, news updates, and contact information tailored to parishioners and local residents. The target audience includes families, children, and church members seeking spiritual and community engagement. The business model is non-profit and community-focused, with a strong emphasis on local religious and social activities. Technically, the website is built on TYPO3 CMS with Bootstrap for responsive design, hosted on SchlundTech servers. The site demonstrates moderate performance and good mobile optimization. SEO and accessibility are adequately addressed, though accessibility features could be enhanced. The technical infrastructure is modern and stable, supporting the parish's digital presence effectively. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks several security headers and does not publish a formal security or incident response policy. No cookie consent mechanism is present, which is a GDPR compliance gap. No analytics or tracking scripts are detected, indicating minimal user tracking. Overall, the security posture is solid but could be improved with additional headers and privacy controls. The overall risk assessment is low, with no signs of malicious activity or suspicious domain registration. Strategic recommendations include implementing cookie consent, adding security headers, and publishing security policies to enhance trust and compliance. The website is trustworthy, professional, and serves its community well, but there is room for improvement in privacy and security transparency.

I

IBTC

eopac.net

54

BVS eOPAC is a specialized online library catalog service operated by IBTC, targeting libraries and their users primarily in Germany. The platform offers media research, user account management, and mobile app access, positioning itself as a niche SaaS provider in the education sector. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, it uses modern web technologies including HTMX and supports mobile platforms via dedicated apps. Security posture is moderate with some gaps such as missing DNSSEC and security headers, and no published security or incident response policies. Privacy compliance is basic with a cookie consent mechanism and a privacy policy page present, but no terms of service or vulnerability disclosure. Overall, the domain is well-established and trustworthy, with a good business credibility score.

I

IT-Kommunal

hinweisportal.at

60

IT-Kommunal operates a Hinweisportal website tailored for the public administration sector in Austria, providing IT solutions to help organizations detect and address issues proactively. The website is built on the Wix platform, leveraging Wix Thunderbolt technology, and demonstrates a basic but consistent design and content quality suitable for a small business focused on government clients. The technical infrastructure is modern and mobile-optimized, though performance is moderate and accessibility features are basic. Security posture is adequate with HTTPS enabled and good SSL configuration, but lacks advanced security headers and formal security policies. Privacy compliance is weak due to absence of privacy and cookie policies and no visible consent mechanisms. Business credibility is moderate, supported by consistent WHOIS data and domain legitimacy, but contact information and trust signals are missing. Overall, the site is functional and safe but requires improvements in privacy, security policies, and contact transparency to enhance trust and compliance.

P

podspace

podspace.de

52

Podspace is a specialized podcast studio and workspace located in Berlin Mitte, Germany, offering professional podcast recording facilities and related services such as post-production, consulting, workshops, hosting, and marketing. The business is positioned as a key player in the German podcasting ecosystem, leveraging its affiliation with the Podcast Plattform network to provide comprehensive podcasting solutions. The website is well-structured, professionally designed, and targets podcasters, speakers, and companies seeking high-quality podcast production services. Technically, the website uses modern web standards with HTML5, CSS3, and JavaScript, hosted on INWX servers. It is mobile-optimized and SEO-friendly but lacks some advanced security headers and cookie consent mechanisms. The site uses HTTPS with a valid SSL certificate, ensuring secure communication. No analytics or tracking scripts were detected, indicating a privacy-conscious approach. From a security perspective, the site demonstrates good practices such as secure forms and no exposed sensitive data. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. The WHOIS data aligns well with the website's German location and business focus, indicating legitimacy and consistency. Overall, Podspace presents a trustworthy and professional online presence with room for improvement in privacy compliance and security transparency. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

D

de Jeugdbibliotheek

jeugdbibliotheek.nl

62

The website www.jeugdbibliotheek.nl serves as the official digital platform for the Dutch youth library service, targeting children and young adults aged 0-18 years. It offers a broad range of services including e-books, audiobooks, printed books, reading videos, magazines, and online learning resources. The site is well-branded, consistent, and provides clear navigation tailored to its audience. Technically, it is built on Adobe Experience Manager, uses modern web technologies, and integrates Matomo analytics for user tracking. The site is mobile optimized and accessible, with good SEO practices. Security-wise, the site enforces HTTPS and uses asynchronous script loading but lacks explicit security headers and published security policies. Privacy compliance is basic, with a cookie policy present but no active consent mechanism. Overall, the site is trustworthy and professionally maintained, with room for improvement in security transparency and privacy controls.

D

de online Bibliotheek

onlinebibliotheek.nl

67

The online Bibliotheek is a prominent Dutch digital library platform offering subscription-based access to e-books, audiobooks, and digital magazines. It targets a broad audience of readers and listeners in the Netherlands, providing 24/7 access through web and mobile applications. The platform is well-positioned as a leading national digital lending service with clear subscription models and a professional online presence. Technically, the website is built on a modern CMS likely Adobe Experience Manager, with good mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and cookie consent implemented, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site demonstrates high trustworthiness and professionalism.

The website www.miteinander-im-quartier.de is an official German government platform supporting the cross-departmental strategy 'Soziale Stadt - Nachbarschaften stärken, Miteinander im Quartier' under the Federal Ministry for Housing, Urban Development and Building. It provides comprehensive information about model programs, community projects, events, and resources aimed at strengthening neighborhoods and social cohesion. The site targets government officials, urban planners, social workers, and the general public interested in urban development. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries including Modernizr, and integrates Matomo analytics for privacy-conscious user tracking. It is hosted on agenturserver infrastructure, with HTTPS enforced and a cookie consent mechanism implemented. The site demonstrates good mobile optimization, accessibility, and SEO practices. From a security perspective, the site employs HTTPS and cookie consent but lacks explicit security headers like Content-Security-Policy and does not publish a security policy or incident response contacts. No vulnerabilities or suspicious elements were detected. The WHOIS data aligns with the hosting and website content, indicating legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR requirements. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure information to improve security posture and transparency.

Z

Za horami, za dolami v Banskobystrickom kraji

zahoramizadolami.sk

59

The website zahoramizadolami.sk serves as a regional tourism and cultural promotion platform focused on the Banskobystrický kraj region in Slovakia. It offers information about local events, experiences, and regional products, targeting a general audience interested in tourism and cultural activities. The site is multilingual, supporting Slovak, English, and Hungarian languages, enhancing accessibility for diverse visitors. The business model revolves around content promotion, experience booking, and e-commerce for regional goods, positioning itself as a key regional tourism resource.

M

Musement

musement.com

72

Musement is an online platform specializing in booking tickets for attractions, museums, and various fun activities. The website targets a general audience interested in travel and leisure experiences. It positions itself as a medium-sized e-commerce business with a consistent brand and good content quality. Technically, the site uses modern JavaScript frameworks such as Vue.js and integrates third-party services like Riskified for fraud prevention. The site is mobile-optimized and includes structured data to enhance SEO. Security-wise, the site enforces HTTPS and uses some security best practices but lacks visible security headers and explicit security policies. The absence of WHOIS data and registrant information reduces domain trustworthiness, although the website content and design appear professional. Privacy and cookie policies are not evident, indicating potential compliance gaps. Overall, the site is functional and professional but would benefit from enhanced transparency and security documentation.

:

:data factory GmbH

rathaus.io

54

Rathaus.io is a specialized CMS website solution provider targeting municipalities such as cities, towns, and counties in Germany. The company, :data factory GmbH, founded in 2020, offers modular and flexible digital solutions tailored to the needs of local governments, including integration with external tools and services. Their market position is niche but well-defined, focusing on digitalization and accessibility for public sector clients. Technically, the website is built on Pimcore CMS with modern frameworks like Bootstrap and includes accessibility and consent management tools, reflecting a mature digital infrastructure. Security posture is solid with HTTPS, clientTransferProhibited domain status, and consent mechanisms, though DNSSEC is not enabled and some security headers could be improved. Overall, the site is professional, GDPR compliant, and trustworthy, with clear contact channels and social media presence. No critical vulnerabilities or suspicious indicators were found.

S

Stadtbücherei St. Pankratius

buecherei-gescher.de

49

The Stadtbücherei St. Pankratius is a public library serving the community of Gescher, Germany, operated under the Catholic parish and supported by local government and cultural institutions. It offers a broad range of physical and digital media, including books, CDs, DVDs, games, and eMedia via the bibload.de portal. The library also organizes educational and cultural events, supports reading promotion projects, and provides various services such as guided tours and media lending. The website is professionally designed using TYPO3 CMS, with good navigation and mobile optimization, reflecting a mature digital presence for a small public institution. Security measures include HTTPS and email obfuscation, with cookie consent managed by Usercentrics, though some security headers and policies are absent. Overall, the site is trustworthy, accessible, and compliant with GDPR requirements.

G

Große Kreisstadt Neuburg an der Donau - Amt für Kultur & Tourismus

neuburg-ist-kultur.de

46

The website 'neuburg-ist-kultur.de' serves as the official cultural portal for the city of Neuburg an der Donau, Germany. It provides comprehensive information on cultural institutions such as the Stadttheater, the Bücherturm library, museums, galleries, and cultural events including a summer academy. The site targets residents and visitors interested in cultural activities and promotes the city's cultural offerings effectively. The business model is government-driven cultural service and tourism promotion, positioning itself as the primary official source for cultural information in the region. Technically, the website is built on the Pimcore CMS platform, utilizing modern web technologies including Bootstrap 5 for responsive design, JavaScript libraries for consent management (Consentmanager CMP), accessibility (EyeAble), and analytics (Matomo). The site demonstrates good mobile optimization and basic accessibility features, with moderate performance. SEO practices are well implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and uses a consent management platform to comply with privacy regulations. No critical vulnerabilities or exposed sensitive data were detected. However, security headers like CSP or HSTS are not explicitly observed and could be improved. Privacy compliance is good, with a clear privacy policy and cookie consent mechanism. Contact information is clearly provided, enhancing trust. Overall, the site is trustworthy, professionally designed, and well-maintained, with no signs of malicious content or blocking mechanisms. It effectively serves its purpose as a government cultural information portal. Strategic recommendations include enhancing security headers, publishing explicit security policies, and maintaining up-to-date third-party scripts to further strengthen security posture.

U

United Internet AG

united-internet.de

69

United Internet AG is a leading European internet specialist operating a broad portfolio of internet access, cloud applications, email services, domain registration, and media brands. The company serves both consumer and business markets with approximately 29 million customer contracts and 39 million free accounts. Their market position is strong, supported by multiple well-known subsidiaries such as 1&1, GMX, WEB.DE, and IONOS. The website reflects a mature enterprise with comprehensive investor relations and corporate governance disclosures. Technically, the website is built on TYPO3 CMS, leveraging modern web standards including HTML5 video and responsive design. The site is well-optimized for mobile and accessibility, with good SEO practices and a moderate performance profile. Hosting appears to be managed internally or through trusted infrastructure, with no signs of performance bottlenecks or outdated technology. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with opt-in for analytics, demonstrating GDPR compliance. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not publicly available, which could be improved to enhance transparency and trust. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The domain WHOIS data aligns with the business claims, reinforcing legitimacy. Strategic recommendations include publishing dedicated security and incident response policies and enhancing security headers to further strengthen the security posture.

R

reitbuch.com GmbH

hundeplan.com

48

hundeplan.com is a specialized online booking platform designed for dog schools and dog boarding facilities, enabling streamlined customer self-service for booking, credit management, and invoicing. It is a spin-off of the well-established reitbuch.com platform, which serves equestrian businesses. The website is professionally designed, mobile-optimized, and provides clear business and contact information, supporting trust and usability. Technically, it uses modern front-end frameworks like Bootstrap and MDB, with no detected CMS or complex backend technologies visible from the HTML. Security posture is moderate with room for improvement, particularly in DNSSEC and HTTP security headers. Privacy compliance is strong, with explicit cookie consent and a privacy policy in place. No blocking or WAF challenges were detected, allowing full content access.

K

Kanopy

kanopy.com

61

Kanopy is a specialized streaming platform that provides access to classic cinema, independent films, and documentaries primarily targeting educational institutions and public libraries. The service operates on a subscription and institutional licensing model, positioning itself as a niche player in the media streaming industry with a focus on educational and curated film content. The website is professionally designed, mobile-optimized, and accessible, reflecting a mature digital presence. Technically, Kanopy leverages modern JavaScript frameworks such as Vue.js and video playback technologies like Video.js, ensuring a smooth user experience across web and mobile platforms. Security-wise, the site enforces HTTPS and includes standard security headers, but lacks publicly available detailed security policies or incident response information. The absence of WHOIS data for the domain is a notable gap in transparency, though the overall site presentation and privacy compliance suggest legitimacy. Strategic recommendations include enhancing transparency around security and incident response, publishing vulnerability disclosure information, and improving domain registration visibility to strengthen trust.

K

Kliniken an der Paar

klipa.de

62

Kliniken an der Paar operates as a regional healthcare provider in Bavaria, Germany, managing two hospitals: Krankenhaus Friedberg and Krankenhaus Aichach. The website serves as an informational portal for patients, visitors, and healthcare professionals, offering updates on hospital news, visitor regulations, and career opportunities. The business model focuses on providing hospital and emergency medical services within the local community. Technically, the website is built on Joomla CMS with Smart Slider 3 for dynamic content presentation. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit incident response policies. Privacy compliance is supported by a privacy policy and cookie banner with opt-out options. Overall, the website is professional, trustworthy, and well-aligned with its healthcare mission.

M

Multum in Parvo Opernhaus

papiertheater.bayern

63

Multum in Parvo Opernhaus is a small cultural institution based in Mering, Germany, specializing in puppet theater with a focus on music drama. The website serves as an informational platform showcasing their artistic performances and cultural events. The business operates in a niche market, targeting audiences interested in traditional and musical puppet theater. The site is built on the Wix platform, leveraging Wix's content management and video hosting capabilities to present multimedia content effectively. Technically, the website is moderately optimized with good mobile responsiveness and basic SEO features, but lacks advanced accessibility and security headers. Security posture is adequate with HTTPS enforced and some script-based security hardening, but the absence of privacy and cookie policies indicates compliance gaps. Overall, the domain is privacy protected, which is reasonable for a small cultural entity, and no suspicious patterns are detected. Strategic improvements in privacy compliance and security headers would enhance trust and regulatory adherence.

STRATO GmbH operates the website strato.se, providing a comprehensive suite of web hosting, domain registration, email services, cloud storage, and digital marketing tools primarily targeting the Swedish market. The company positions itself as a professional and environmentally conscious hosting provider, emphasizing green energy usage and strict data privacy with data centers located exclusively within the EU. The website is well-designed, mobile-optimized, and offers clear navigation and rich content tailored for small to medium businesses and individual professionals seeking to establish or enhance their online presence. Technically, the site leverages modern JavaScript frameworks and a Strapi CMS backend, integrating advanced consent management and analytics tools such as Jentis, Mouseflow, and Kameleoon. The infrastructure appears robust with ISO 27001 certification and a strong focus on GDPR compliance, including a detailed cookie consent mechanism and privacy policy. No security vulnerabilities or exposed sensitive data were detected, and HTTPS is enforced site-wide. While WHOIS data for the subdomain www.strato.se is not available, the overall domain legitimacy is supported by consistent branding, certifications, and trust signals. The absence of explicit incident response or vulnerability disclosure information is noted but does not detract significantly from the security posture. Overall, STRATO demonstrates a mature digital presence with a strong security and privacy focus, suitable for its target audience. Strategic recommendations include enhancing transparency by publishing incident response contacts and security headers, and maintaining continuous compliance with evolving data protection regulations.

STRATO GmbH operates a professional French-language website offering domain registration, web hosting, email services, and online storage solutions. The company positions itself as a climate-friendly and GDPR-compliant hosting provider with ISO certifications and data centers located in Germany, ensuring strong data protection. The website is well-designed, mobile-optimized, and provides clear navigation and cookie consent mechanisms. Technically, the site uses modern JavaScript frameworks and Google Tag Manager for analytics, with no detected security vulnerabilities or blocking mechanisms. However, WHOIS data is unavailable due to AFNIC restrictions, which is typical for .fr domains. Overall, STRATO presents a trustworthy and mature digital presence in the European hosting market.

STRATO GmbH operates a professional hosting and cloud storage service targeting experts and businesses primarily in the UK and Europe. The company emphasizes climate-friendly hosting powered by 100% green electricity and maintains ISO-IEC-27001 certified data centers located exclusively in the EU, ensuring strong data protection compliance. The website offers domain registration, email, hosting, and cloud storage services with transparent pricing and a 30-day money-back guarantee. Technically, the site uses modern JavaScript frameworks, Google Tag Manager for analytics, and Jentis for consent management, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforced and certified data centers, though some security headers could be improved and explicit incident response contacts are not provided. Overall, the website is professional, well-structured, and trustworthy, but the domain WHOIS data is unavailable due to domain naming rules, which slightly reduces domain registration trustworthiness. Strategic recommendations include enhancing security headers, publishing vulnerability disclosure policies, and providing clearer contact information for security incidents.

STRATO GmbH is a well-established European hosting provider offering a comprehensive suite of online services including domain registration, email hosting, web hosting, VPS and dedicated servers, cloud storage, and marketing tools. The company targets small and medium businesses and individuals seeking reliable and professional online presence solutions. STRATO emphasizes environmental responsibility with 100% green energy usage and ISO 27001 certified data centers located in Germany, ensuring high standards of security and data protection. The website is professionally designed, mobile-optimized, and provides clear navigation and rich content to support its business offerings. Technically, the site uses modern JavaScript frameworks, Strapi CMS, and integrates consent management and analytics tools, reflecting a mature digital infrastructure. Security posture is strong with HTTPS enforcement, cookie consent mechanisms, and certifications, though some security headers could be improved and explicit incident response policies are not publicly visible. Overall, the website and business present a trustworthy and credible profile with no detected vulnerabilities or suspicious content.

STRATO GmbH is a well-established technology company specializing in domain registration, web hosting, email services, website building, cloud storage, and online marketing tools primarily serving the Dutch market. The company is recognized for its strong market position, evidenced by awards such as the MT1000 Best Hosting Company 2024 and certifications including ISO 27001. STRATO operates under the parent company Cronon GmbH and emphasizes climate-friendly hosting with data centers located exclusively in the EU. Technically, the website leverages modern technologies including the Strapi CMS, JavaScript frameworks, and integrates analytics and marketing tools such as Google Tag Manager, Mouseflow, and Kameleoon. The site is fast, mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. From a security perspective, STRATO demonstrates a robust posture with enforced HTTPS, ISO 27001 certification, GDPR compliance, and a comprehensive cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site could improve transparency by publishing a vulnerability disclosure policy and incident response contacts. Overall, STRATO presents a low-risk profile with strong business credibility, technical maturity, and compliance adherence. Strategic recommendations include enhancing security transparency and incident response readiness to further strengthen trust and resilience.

W

Werbeagentur Falkner Clemens

werbeagentur-falkner.at

44

Werbeagentur Falkner Clemens is a small, regionally focused web agency based in Landeck, Austria, specializing in accessible and barrier-free web design compliant with WCAG and BFSG standards. The company offers a comprehensive suite of services including web design, hosting, content creation, graphic design, and print media, targeting hotels, apartments, and businesses primarily in the Tirol region. The website demonstrates a professional and consistent brand presence with a clear portfolio showcasing client references. Technically, the site is built on TYPO3 CMS with modern web technologies and emphasizes accessibility and responsive design. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some improvements such as security headers and incident response policies are recommended. Privacy compliance is partial due to the absence of a cookie consent mechanism. Overall, the website is trustworthy, well-structured, and serves its business purpose effectively.

F

Fürstlich und Gräflich Fuggersche Stiftungs-Administration

fuggerei-next500.de

47

The website www.fuggerei-next500.de represents the Fürstlich und Gräflich Fuggersche Stiftungs-Administration, a historic non-profit foundation providing social housing and social engagement initiatives rooted in the Fuggerei community in Augsburg, Germany. The site commemorates the 500-year legacy of the Fuggerei and promotes the global applicability of its core social ideas under the 'Fuggerei NEXT500' initiative. The foundation is positioned as a socially significant entity with a medium organizational size and a strong cultural heritage. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and SVG graphics, hosted on Schlundtech infrastructure. It integrates Matomo Analytics with privacy-conscious settings and provides a cookie consent mechanism compliant with GDPR. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital presence. Security-wise, HTTPS is enforced, and no critical vulnerabilities or exposed sensitive data were detected. However, formal security policies and incident response contacts are absent, suggesting room for improvement in transparency and security governance. Overall, the website is professional, trustworthy, and aligned with its non-profit mission, with recommendations to enhance security documentation and incident response readiness.

B

BWH Hotels

bwhhotels.de

57

BWH Hotels is a hospitality brand focused on providing hotel branding and franchise services with a worldwide network. The website presents a professional image with consistent branding and a clear business focus on the hotel industry in Germany. The technical infrastructure is based on TYPO3 CMS, Bootstrap framework, and includes modern tracking and consent management tools such as Google Tag Manager, eTracker, and ConsentManager. The site is mobile optimized and performs moderately well. Security posture is good with HTTPS enforced and cookie consent mechanisms in place, though explicit security policies and headers could be improved. No blocking or WAF challenges were detected, allowing full content access. Overall, the website is trustworthy and professional but lacks visible privacy and terms of service documentation.

The website aesopcanada.com serves as a login portal for Frontline Absence Management, a service focused on managing employee absences primarily within educational institutions. The business is positioned as an established provider in the education sector, with a domain age dating back to 2008, supporting its legitimacy. The site offers basic content focused on user authentication and links to corporate resources, reflecting a SaaS business model targeting educational organizations and their staff. Technically, the site employs legacy JavaScript libraries such as jQuery 1.2.6 and jQuery UI, hosted on infrastructure indicated by AWS DNS nameservers. While HTTPS is enforced and a Thawte SSL certificate is referenced, the site lacks modern security headers and uses outdated libraries, which may expose it to vulnerabilities. Performance and mobile optimization are basic, with limited SEO and accessibility features. From a security perspective, the site demonstrates some best practices like HTTPS and masked password inputs but lacks comprehensive security policies, incident response information, and cookie consent mechanisms. The WHOIS data aligns well with the business claims, showing consistent registration details and no privacy protection, enhancing trustworthiness. However, the absence of updated security controls and privacy compliance features suggests room for improvement. Overall, the website is functional and moderately trustworthy but would benefit from modernization of its technical stack, enhanced security headers, explicit privacy and cookie policies, and improved user experience to strengthen its security posture and compliance standing.

K

Krefelder Textweber

krefelder-textweber.de

58

Krefelder Textweber is a small literary group based in Germany, focused on writing and sharing poems and short stories since 2010. Their website serves as a platform to announce events and share their literary work, targeting a general audience interested in cultural and literary activities. The site is hosted on IONOS MyWebsite platform, indicating a modest but functional technical infrastructure. The website is mobile optimized and offers clear navigation, though it lacks advanced SEO and accessibility features. Security posture is basic with HTTPS enabled but missing important security headers and privacy compliance elements such as privacy and cookie policies. No contact emails or phone numbers are explicitly provided, which may affect user trust and engagement. Overall, the site is functional and relevant for its niche but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

M

Mediothek Krefeld

mediothek.blog

61

Mediothek Krefeld operates as a modern media library serving the local community in Krefeld, Germany. The website functions as a blog and information portal providing book reviews, media tips, community projects, and event information. The organization positions itself as a cultural and educational institution with a focus on engaging local readers and library users. The business model is non-profit and community-oriented, with a clear emphasis on education and media access.

D

Devitec ApS

devitec.dk

55

Devitec ApS is a Danish IT solutions provider specializing in custom software development, system integration, data analysis, and process monitoring primarily for process and food production industries. Established in 2008, the company positions itself as a niche provider focused on delivering tailored IT applications that improve operational efficiency and reduce costs for its clients. The website content is primarily in Danish and targets a professional B2B audience within Denmark. Technically, the website is built using basic HTML, CSS, and JavaScript without modern frameworks or CMS platforms. The site lacks mobile optimization and accessibility features, indicating a need for modernization. Performance is moderate, with no advanced analytics or tracking scripts detected, reflecting a minimalistic digital footprint. From a security perspective, the site lacks important security headers, DNSSEC is not enabled, and there is no visible HTTPS enforcement or HSTS headers, which lowers the security posture. Privacy compliance is addressed through linked privacy and cookie policies hosted on Iubenda, indicating awareness of GDPR requirements. However, there is no visible incident response or security policy information, and no terms of service page is present. Overall, the website is functional and provides essential business information but would benefit from technical and security improvements to enhance trust and compliance. The domain registration is consistent and long-standing, supporting the legitimacy of the business. Strategic recommendations include improving security headers, enabling DNSSEC, enforcing HTTPS, enhancing mobile responsiveness, and publishing security and incident response policies.

B

Budapest Brand Nonprofit Zrt.

budapestinfo.hu

72

Budapestinfo.hu is the official tourism website for Budapest, managed by Budapest Brand Nonprofit Zrt. It provides comprehensive information about the city's attractions, events, cultural programs, and the Budapest Card, which offers tourists discounts and benefits. The site targets tourists and visitors seeking authoritative and up-to-date travel information. Technically, the website employs modern web technologies including Vue.js, Laravel backend, and integrates Google Tag Manager and Cookiebot for analytics and privacy compliance. The site is well-optimized for mobile and desktop, with fast loading times and clear navigation. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the site demonstrates a mature digital presence with good privacy compliance and business credibility.

D

Datenschutz Pöllinger GmbH

datenschutz-poellinger.de

56

Datenschutz Pöllinger GmbH is a specialized German company providing comprehensive data protection consulting, information security, and IT security services. They combine expert advisory with proprietary software solutions for data protection management, targeting businesses needing GDPR compliance and security certifications such as ISO 27001 and TISAX. The company also offers training and whistleblower system implementations, positioning itself as a trusted partner in the data protection ecosystem. Technically, the website is built on the auctores CMS platform, leveraging modern JavaScript libraries like jQuery and Slick Carousel, with good mobile optimization and SEO practices. Security posture is strong with HTTPS enforced and nonce usage in scripts, though some security headers and incident response details are missing. Overall, the site is professional and trustworthy, though it lacks explicit privacy and cookie policies, which impacts compliance scoring.

B

Bibliotheek.nl

bibliotheek.nl

58

Bibliotheek.nl serves as the national portal for public libraries in the Netherlands, providing access to a wide range of library services including physical and digital collections, membership information, educational resources, and community engagement opportunities. The platform supports a large network of 133 library organizations with 800 branches, positioning itself as a key public service in Dutch education and culture. The website is well-structured, user-friendly, and targets a broad audience from children to adults interested in reading, learning, and community activities. Technically, the website is built on Adobe Experience Manager CMS, leveraging modern web technologies such as JavaScript and CSS. It demonstrates good mobile optimization, accessibility, and SEO practices. The site uses HTTPS exclusively, ensuring secure communications, and implements cookie consent mechanisms aligned with GDPR requirements. Analytics are handled via Matomo, indicating a privacy-conscious approach to user tracking. From a security perspective, the site maintains a solid posture with HTTPS and secure form handling but lacks explicit security headers and a public security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website's public service nature, confirming legitimacy and consistency. Overall, Bibliotheek.nl is a trustworthy, professional, and well-maintained public service website with strong content quality and compliance. Opportunities exist to enhance security transparency and incident response readiness to further strengthen trust and resilience.

S

Sommerleseclub NRW

sommerleseclub.de

44

Sommerleseclub NRW is a regional educational initiative focused on promoting summer reading among children and families in North Rhine-Westphalia, Germany. It is supported by local public libraries and government cultural institutions, providing a structured summer reading program with creative and team-based activities. The website serves as an informational and engagement platform for participants and libraries, featuring online logbooks, registration information, and creative resources. The project is well-positioned as a trusted non-profit educational program with strong regional government backing. Technically, the website employs modern web technologies including Vue.js and HLS.js for video streaming, hosted on a professional hosting provider's infrastructure. The site is mobile-optimized with good SEO and accessibility basics, although some improvements could be made in accessibility and cookie consent compliance. Security posture is solid with HTTPS and CSRF protections, but lacks explicit security headers and incident response contacts. Overall, the security posture is good with no visible vulnerabilities or exposed sensitive data. Privacy compliance is adequate with a comprehensive privacy policy but missing cookie consent mechanisms. The business credibility is high due to government support and transparent contact information. No advertising or tracking scripts were detected, enhancing user privacy. Strategic recommendations include implementing cookie consent banners, adding terms of service and vulnerability disclosure pages, enhancing security headers, and publishing incident response contacts to improve trust and compliance further.

podcast.de is a German-language podcast directory and media portal established since 2004, offering a comprehensive platform for podcast discovery, news, tips, and related services. The website targets podcast listeners and creators primarily in Germany, providing millions of free audio and video downloads along with editorial content. Technically, the site uses modern web technologies such as Vue.js and Matomo analytics, hosted on Schlundtech servers, ensuring a stable and moderately performant user experience with good mobile optimization. Security posture is solid with HTTPS and CSRF protections, though lacking explicit security headers and published security policies. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is professional, trustworthy, and well-positioned in the German podcast media market.

P

PressReader.com - Digital Newspaper & Magazine Subscriptions

pressreader.com

58

PressReader.com is a digital newsstand platform offering subscriptions to over 7000 newspapers and magazines worldwide, enabling users to read content on multiple devices with a free trial period. The website presents a professional and consistent brand image with a focus on media content delivery. Technically, the site uses modern JavaScript libraries and a custom CDN infrastructure, with resources loaded over HTTPS, indicating a baseline of secure content delivery. However, the absence of WHOIS registration data raises concerns about domain transparency and trustworthiness. Security posture is moderate with HTTPS enforced but lacks visible security headers and formal privacy or cookie policies. Contact and incident response information are not present in the analyzed content, limiting user trust and compliance visibility. Overall, the site is functional and professionally designed but would benefit from enhanced transparency and compliance documentation.

O

OverDrive, Inc.

overdrive.com

75

OverDrive, Inc. operates a leading digital content distribution platform that partners with thousands of libraries, schools, and organizations to provide free access to ebooks, audiobooks, and streaming media. Their flagship apps such as Libby, Kanopy, and Sora facilitate easy access to digital reading and educational content for a broad audience including library patrons, students, and educators. The company holds a strong market position as a global leader in digital library services. Technically, the website employs modern JavaScript libraries, video embedding via Wistia, and uses Sentry for error monitoring, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with comprehensive privacy and cookie policies that demonstrate good privacy compliance and user consent mechanisms. From a security perspective, the site enforces HTTPS and uses cookie consent banners but lacks explicit security headers and published incident response policies. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data reduces transparency but does not detract significantly from the overall trustworthiness given the professional presentation and external trust signals. Overall, OverDrive.com presents a secure, professional, and user-friendly platform with strong business credibility in the education sector. Strategic improvements in security policy transparency and WHOIS data availability would further enhance trust and compliance.

I

Incsub, LLC

theedublogger.com

63

The Edublogger is a well-established educational community blog that supports the Edublogs and CampusPress platforms, providing educators and students with blogging resources, guides, and tips. It is operated by Incsub, LLC, a known entity in the educational technology space. The website demonstrates a strong market position as a trusted resource for educational blogging, targeting teachers, students, and schools. Technically, the site is built on WordPress with a modern tech stack including popular plugins and Google analytics tools, delivering a responsive and accessible user experience. Security posture is solid with HTTPS enforced and no exposed sensitive data, although some security headers are missing and no explicit incident response or vulnerability disclosure policies are published. Privacy compliance is partially addressed with a clear privacy policy and terms of service, but lacks a cookie consent mechanism. The absence of WHOIS data is a concern but may be due to privacy protection or registry issues. Overall, the site is professional, trustworthy, and safe for general audiences.

A

American International School in Chennai

aischennai.org

71

The American International School Chennai (AISC) operates as a private international educational institution offering IB World programs and Advanced Placement curricula for elementary through high school students. The website presents a professional and consistent brand image targeting parents and students seeking quality international education in Chennai, India. The business model focuses on delivering comprehensive international education services with a medium-sized operational scale. Technically, the website employs modern JavaScript libraries and analytics tools such as Microsoft Clarity, Hotjar, and Google Tag Manager, hosted on a CMS platform identified as Tiarc CMS. The site is mobile optimized with good SEO practices and moderate performance. However, accessibility features appear basic, and no advanced frameworks were detected. From a security perspective, the site uses HTTPS with excellent SSL configuration but lacks visible security headers and explicit privacy or cookie policies. The WHOIS data is unavailable due to a malformed query, which slightly reduces trustworthiness. No forms or contact emails were found on the homepage, limiting direct communication channels. The site uses multiple tracking scripts, indicating moderate user tracking. Overall, the website is safe, professional, and credible but would benefit from enhanced privacy compliance, explicit contact information, and improved security headers to strengthen trust and regulatory adherence.

B

BWH Hotels Central Europe GmbH

bestwestern.at

74

Best Western Hotels Central Europe GmbH operates a regional hotel booking platform targeting German-speaking countries including Austria, Germany, Luxembourg, and Switzerland. The website offers detailed hotel information and online booking capabilities for over 200 hotels. The platform supports multiple languages and provides accessibility features to accommodate users with disabilities. Technically, the site employs modern tracking and consent management tools such as Consentmanager.net, Google Tag Manager, and eTracker, ensuring compliance with GDPR and user privacy. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in security headers and incident response transparency. Overall, the site presents a professional and trustworthy online presence consistent with an established hospitality brand.

B

BWH Hotels Central Europe GmbH

bestwestern.ch

66

Best Western Switzerland (www.bestwestern.ch) is a regional website operated by BWH Hotels Central Europe GmbH, providing hotel booking services for over 200 hotels in Germany, Luxembourg, Austria, and Switzerland. The site targets both private leisure travelers and business customers, offering loyalty programs, travel packages, and business meeting services. The website is professionally designed with good content quality, clear navigation, and mobile optimization. It uses modern technologies including JavaScript libraries, consent management tools, and analytics platforms. Security posture is strong with HTTPS enforced, cookie consent mechanisms, and bot protection via Google reCAPTCHA. However, explicit security policies and incident response contacts are not published. Overall, the site is trustworthy, compliant with GDPR, and well-positioned in the hospitality market in Central Europe.

B

Bamberger Rundfunk GmbH & Co. Studiobetriebs KG

radio-bamberg.de

59

Radio Bamberg is a regional media company operating a local radio station focused on hits music for the Bamberg area in Germany. The website provides streaming and podcasting services, targeting local listeners. The technical infrastructure is modern, utilizing HTML5, CSS3, JavaScript libraries such as Video.js and Swiper.js, and Matomo analytics for user tracking. The site is mobile optimized and has good SEO practices, though accessibility features are basic. Security posture is adequate with HTTPS enabled but lacks important security headers and explicit privacy and cookie policies, which impacts compliance and user trust. No WAF or blocking mechanisms were detected, indicating full accessibility. Overall, the site is professional but could improve in privacy compliance and security best practices.

R

reitbuch.com GmbH

reitbuch.com

50

reitbuch.com GmbH operates a specialized online booking system tailored for riding schools and horse-related businesses. Established in 2013, it has grown to serve over 600 clients across 7 countries, offering features such as credit management, course booking, invoicing, and membership modules. The website is professionally designed, mobile-optimized, and provides clear contact information and client testimonials, reflecting a strong market position in its niche. Technically, the site uses modern frameworks like Bootstrap and MDB-Pro, with a moderate performance profile and good SEO practices. Security posture is adequate but could be improved by enabling DNSSEC and adding security headers. Privacy compliance is well addressed with a clear cookie consent mechanism and a GDPR-compliant privacy policy. Overall, the site presents a trustworthy and professional digital presence with room for enhanced security policies.

H

Hall-Wattens Tourismus

hall-wattens.at

57

Hall-Wattens Tourismus operates as the official tourism organization for the Hall-Wattens region in Tirol, Austria, providing comprehensive information and services to tourists including accommodation booking, event promotion, and activity guidance. The website is professionally designed with excellent content quality, targeting travelers interested in seasonal vacations and cultural experiences in the Austrian Alps. Technically, the site leverages modern web technologies such as Next.js and React, ensuring good performance and mobile optimization. Security measures include HTTPS enforcement and appropriate security headers, alongside a robust cookie consent mechanism aligned with GDPR requirements. However, the absence of WHOIS data limits domain trust assessment, though the website's professional presentation and clear contact details support its legitimacy. Overall, the site presents a low-risk profile with strong business credibility and privacy compliance.

B

Bad Hindelang

badhindelang.de

58

Bad Hindelang is a regional tourism website promoting vacation activities such as hiking, skiing, and family holidays in the Allgäu Alps region of Germany. The site targets tourists and families seeking outdoor recreational opportunities. Technically, the website is built on TYPO3 CMS, hosted behind Cloudflare, and uses modern web technologies with good mobile optimization and SEO practices. Security-wise, HTTPS is enabled and a consent management platform is implemented, but the site lacks visible security headers and explicit privacy and terms of service policies. Overall, the site is legitimate and professionally presented but would benefit from enhanced privacy disclosures and security hardening.

F

Fugger

fugger.de

48

The Fugger website represents a well-established non-profit cultural foundation dedicated to preserving and promoting the history and heritage of the Fugger family, particularly through the Fuggerei and related museums and archives. The site offers rich content in German with English support, targeting tourists, historians, and cultural enthusiasts. It provides key services such as ticket sales, guided tours, museum information, and foundation administration. The website is professionally designed with clear navigation and mobile optimization, reflecting a mature digital presence. Technically, the site uses modern web standards including HTML5, CSS3, and JavaScript, with Matomo Analytics implemented in a privacy-conscious manner. The site is served over HTTPS, ensuring secure communications. While no explicit CMS or hosting provider is identified, the site performance is moderate with good SEO and accessibility features. The cookie consent mechanism is comprehensive, offering granular control over analytics, video, maps, newsletter, and donation scripts. From a security perspective, the site enforces HTTPS and respects user privacy with DoNotTrack enabled and cookies disabled by default in analytics. However, it lacks visible security headers and formal security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The WHOIS data is consistent with a legitimate domain registration, supporting the site's credibility. Overall, the Fugger website demonstrates a strong cultural and business credibility with good technical and privacy compliance. Strategic improvements could focus on enhancing security headers, publishing security policies, and adding vulnerability disclosure information to further strengthen trust and security posture.

STRATO GmbH is a well-established German technology company specializing in cloud storage solutions under the HiDrive brand. The company emphasizes data security, compliance with GDPR, and hosting within Germany, supported by certifications such as ISO 27001 and Trusted Cloud. Their offerings target both consumers and businesses, providing flexible cloud storage plans with optional features like device backups and end-to-end encryption. The website reflects a mature digital presence with modern technologies, comprehensive product information, and strong trust signals. Security posture is robust, leveraging encrypted data storage, two-factor authentication, and certified data centers. Privacy compliance is well implemented with clear cookie consent mechanisms and GDPR-aligned policies. Overall, STRATO presents a credible and professional cloud storage service with a strong focus on security and compliance.

S

Stadt Friedberg

friedberg.de

65

The website www.friedberg.de serves as the official digital presence of the city of Friedberg in Germany, providing extensive information and services related to city administration, culture, tourism, public utilities, and economic development. It targets residents, local businesses, tourists, and government stakeholders, positioning itself as a comprehensive municipal portal. The site is built on the ionas4 CMS platform, hosted likely by Deutsche Telekom, and employs modern web technologies including SystemJS and Matomo analytics for privacy-conscious user tracking. Security measures include HTTPS enforcement, security headers, and invisible Google reCAPTCHA for form protection. Privacy and cookie policies are present and GDPR compliant, reflecting a strong commitment to data protection. However, the site lacks explicit security policy and incident response pages, and no vulnerability disclosure or security.txt files were found. Overall, the website demonstrates a good balance of content quality, technical implementation, and security posture, suitable for a government entity.

N

Nikita Hovratov

nikita-hovratov.de

47

Nikita Hovratov operates as a specialized TYPO3 CMS freelancer based in Hamburg, Germany, offering services including new TYPO3 website development, relaunches, updates, and custom extensions. The website positions the business as a niche expert with a strong focus on personalized client communication and technical excellence in TYPO3 implementations. The digital infrastructure is built on TYPO3 CMS with hosting provided by StratoServer, featuring a modern responsive design and good SEO practices. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements in security headers and incident response documentation are recommended. Privacy compliance is partially addressed with a GDPR privacy policy but lacks a cookie consent mechanism. Overall, the website reflects a trustworthy, professional small business with a clear market focus and good technical maturity.

R

run.events GmbH

runevents.net

68

run.events GmbH is a German-based technology company founded in 2021 that offers an AI-powered event management platform designed to streamline the entire event lifecycle from planning to post-event analysis. The platform targets event organizers, agencies, venues, and associations, providing services such as agenda management, marketing automation, ticketing, on-site check-in, attendee tracking, and event analytics. The company positions itself as a cost-effective and secure alternative to traditional event management tools, emphasizing AI-driven insights and European data privacy compliance. Technically, the website is built using modern JavaScript frameworks (Astro), hosted likely on Microsoft Azure, and integrates multiple analytics and marketing tools including Google Analytics, Microsoft Clarity, HubSpot, and LinkedIn Insight Tag. The site is well-optimized for mobile devices, fast loading, and features a professional design with clear navigation. From a security perspective, the site enforces HTTPS, uses clientTransferProhibited domain status, and implements cookie consent mechanisms aligned with GDPR. However, DNSSEC is not enabled, and some recommended security headers are not explicitly detected. No critical vulnerabilities or exposed sensitive data were found. Overall, run.events demonstrates a mature digital presence with strong business credibility and a good security posture. Strategic improvements include enabling DNSSEC, publishing a security.txt file, and enhancing security headers to further strengthen trust and compliance.