Security Directory

O

Open-Access-Tage: Open Access Days

open-access-days.de

56

The Open-Access-Tage website serves as the central hub for the annual Open Access and Open Science conference in the German-speaking region. It provides comprehensive information about the event, including past conference documentation and resources for interested hosting institutions. The site targets academic and research institutions and individuals engaged in Open Access initiatives. Technically, the website is built on TYPO3 CMS, uses modern JavaScript libraries like jQuery, and is hosted on a reputable academic hosting provider (GWDG). The site demonstrates good mobile optimization and SEO practices, though accessibility features are basic. Security posture is solid with HTTPS enforced and no exposed sensitive data, but could be improved by adding security headers and a vulnerability disclosure policy. Privacy compliance is adequate with a clear privacy policy, but lacks a cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its non-profit educational mission.

E

EP NEO

kitaportal-sh.de

54

The KitaPortal Schleswig-Holstein is an official government online platform designed to facilitate the search and registration for childcare places within the Schleswig-Holstein region of Germany. It serves parents, childcare facilities, and daycare providers by offering a centralized, user-friendly interface for place search, selection, pre-registration, and status tracking. The portal is mandatory for all childcare facilities since August 2020, ensuring comprehensive coverage and streamlined processes for childcare placement. Technically, the website is built using modern web technologies, primarily Angular 19.2.14, with Bootstrap for styling and custom SVG icons. The platform is hosted via INWX nameservers, indicating professional hosting arrangements. The site is mobile-optimized and accessible, with good navigation and content relevance. However, some SEO and privacy compliance aspects such as cookie consent mechanisms and security headers could be improved. From a security perspective, the site enforces HTTPS and uses secure form inputs, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The privacy policy is comprehensive and GDPR compliant, but cookie consent is missing. Overall, the security posture is solid but could benefit from enhancements in headers and transparency. The overall risk assessment is low, with the site presenting a trustworthy and professional government service. Strategic recommendations include implementing cookie consent, adding security headers, publishing security policies, and conducting regular security audits to maintain compliance and trust.

S

Stadt Bad Segeberg

bad-segeberg.de

57

The website www.bad-segeberg.de serves as the official municipal portal for the city of Bad Segeberg in Germany. It provides comprehensive information about local government, city services, tourism, culture, social programs, and community engagement. The site targets residents, visitors, and local businesses, offering a broad range of resources including digital city maps, event calendars, and administrative contacts. The business model is that of a government entity focused on public service and community support. Technically, the website is built on TYPO3 CMS, a robust open-source content management system widely used in government and enterprise environments. It employs modern web technologies such as Bootstrap for responsive design, OpenLayers for mapping, and FontAwesome for icons. The site is hosted via INWX, a reputable domain and hosting provider. Performance is moderate with good mobile optimization and accessibility features, ensuring a positive user experience across devices. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms compliant with GDPR. It uses Matomo analytics with user consent to track usage while respecting privacy. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. However, security headers could be improved, and a formal security policy or incident response contact is not evident. The domain registration data is consistent and transparent, reinforcing the legitimacy of the site. Overall, the website demonstrates a solid security posture and good privacy compliance for a government portal. It offers trustworthy and professional content with clear navigation and user-friendly design. Strategic recommendations include enhancing security headers, publishing a security policy, and adding a security.txt file to facilitate vulnerability disclosures. These steps would further strengthen the site's security maturity and trustworthiness.

O

Open-Access-Tage: Open-Access-Tage

open-access-tage.de

56

The Open-Access-Tage website serves as the central platform for the annual Open Access and Open Science conference in the German-speaking region. It provides extensive documentation of past events, program details, and organizational information, targeting academic institutions, libraries, and Open Access advocates. The site is hosted on servers managed by GWDG and built on the TYPO3 CMS platform, utilizing modern web technologies such as jQuery and Bootstrap for responsive design. The website demonstrates good content quality, clear navigation, and multilingual support, enhancing user experience for its target audience. Security posture is adequate with HTTPS enabled and no visible vulnerabilities, though the absence of security headers and cookie consent mechanisms suggests room for improvement in compliance and security best practices. Overall, the domain registration and hosting align well with the academic and non-profit nature of the conference, indicating a trustworthy and legitimate online presence.

M

Muzeum Karla Zemana

muzeumkarlazemana.cz

56

Muzeum Karla Zemana is a specialized cultural and educational institution dedicated to showcasing the life and work of the renowned Czech filmmaker Karel Zeman. The museum offers interactive exhibitions, workshops on animation and film techniques, and an e-commerce platform for related merchandise. It targets families, children, and film enthusiasts, positioning itself as a niche museum with a strong cultural heritage focus. Technically, the website is built on WordPress with modern libraries and plugins, ensuring a good user experience and mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks some advanced HTTP security headers and explicit incident response policies. Overall, the site is professional, trustworthy, and compliant with GDPR, with active social media engagement and clear contact information.

C

CK Kramolín

ck-kramolin.cz

42

CK Kramolín is a small, local cycling club based in the Czech Republic, focused on organizing cycling events and supporting its members. The website provides event news, photos, and contact information primarily in Czech language, targeting cycling enthusiasts in the region. The domain age and WHOIS data align well with the club's history and activities, indicating a legitimate and stable organization. Technically, the website uses Bootstrap and jQuery with a basic but functional design. However, it lacks modern security features such as HTTPS enforcement and security headers, and does not provide privacy or cookie policies, which are important for GDPR compliance. Overall, the site is functional and informative but requires improvements in security and privacy compliance to enhance trust and protect users.

N

Nadační fond Rozum a Cit

rozumacit.org

58

Nadační fond Rozum a Cit is a well-established Czech non-profit foundation dedicated to supporting foster families and children with psychological and social challenges. With over 27 years of experience, it provides key services such as funding psychotherapies, organizing support meetings, and managing donations through trusted platforms. The website reflects a professional and consistent brand image with clear contact information and GDPR compliance indications. Technically, the site is built on Joomla CMS with modern libraries and frameworks, offering good mobile optimization and moderate performance. Security posture is solid with HTTPS and CSRF protections, though improvements in security headers and cookie consent are recommended. WHOIS data is unavailable due to privacy protection, which is typical for non-profits and does not detract from the site's legitimacy. Overall, the site is trustworthy, user-friendly, and serves its target audience effectively.

V

Vision Zero e.V.

vision-zero-oncology.de

57

Vision Zero Oncology is a German non-profit initiative focused on reducing avoidable cancer deaths through collaboration among scientific, medical, and industrial stakeholders. The website serves as a platform for information dissemination, event promotion, and publication sharing, targeting healthcare professionals, researchers, and the public. Technically, the site uses a modern Bootstrap framework, integrates Cookiebot for GDPR-compliant cookie management, and employs Google reCAPTCHA for form security. The hosting is managed via One.com with HTTPS enforced, indicating a secure baseline. Security posture is solid with room for improvement in security headers and incident response transparency. Overall, the site is professional, trustworthy, and compliant with privacy regulations, supporting its mission effectively.

E

EHiP - Europäische Hochschule für Innovation und Perspektive

ehip.eu

59

EHiP - Europäische Hochschule für Innovation und Perspektive is a private German university specializing in flexible, fully digital and dual study programs primarily at the bachelor level. The institution emphasizes personalized student support, state recognition, and multiple accreditations to position itself as a modern and trustworthy educational provider. The website is professionally designed, content-rich, and targets prospective students seeking flexible higher education options in Germany and German-speaking regions. Technically, the site uses Contao CMS, Bootstrap, and integrates modern analytics and cookie consent tools, reflecting a mature digital infrastructure. Security posture is good with HTTPS and cookie consent implemented, though some security headers and explicit security policies are missing. WHOIS data is privacy protected by EURid, which is common and justified for this business type, though it limits transparency. Overall, the website and business present a credible, professional, and trustworthy profile with minor areas for security and compliance improvement.

M

Media India Group

mediaindia.eu

42

Media India Group is a well-established global media platform founded in 2004, operating primarily in Europe and India. The company focuses on publishing, communication, consultation services, and event management, targeting a broad audience interested in culture, business, tourism, and education. The website demonstrates a solid market position with consistent branding and a professional content presentation. Technically, the site is built on WordPress with modern web technologies including jQuery, Bootstrap, and Owl Carousel, and integrates Google services for analytics and advertising. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the domain registration is consistent and trustworthy, registered via GoDaddy.com, LLC, aligning with the business's legitimacy. Strategic improvements in privacy compliance and security hardening are recommended to enhance trust and regulatory adherence.

T

THÜRINGER TENNIS VERBAND

ttv-tennis.de

48

The Thüringer Tennis Verband e.V. operates as a regional non-profit sports association dedicated to tennis activities in the German state of Thüringen. The website serves as an information hub for tennis players, clubs, and enthusiasts, offering details on match operations, club services, youth development, training, and facilities. The organization maintains partnerships with recognized tennis and sports entities, enhancing its regional influence and service offerings. The website branding is consistent and professional, reflecting the association's official status. Technically, the site is built on WordPress with Bootstrap for responsive design and uses common plugins such as Yoast SEO and WP Statistics. The infrastructure is hosted on a German hosting provider, with HTTPS enforced ensuring secure communications. The site demonstrates moderate performance and good mobile optimization, though accessibility features are basic. SEO practices are well implemented with structured data and meta tags. From a security perspective, the site benefits from HTTPS and absence of exposed sensitive data or vulnerable libraries. However, it lacks explicit security headers and does not provide visible security policies or incident response contacts. Privacy compliance is partial; a privacy policy page exists but no cookie consent mechanism is detected, which is a GDPR compliance gap. Analytics usage is moderate via WP Statistics, with basic privacy compliance. Overall, the website is trustworthy and professionally maintained with a solid business credibility score. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance the security posture and compliance standing, reducing risk and increasing user trust.

The website www.1001saboresrm.es serves as an official regional tourism and gastronomy portal for the Region of Murcia, Spain. It promotes local culinary experiences, gastronomic events, and restaurants bearing the 1001 Sabores seal. The platform targets tourists, food enthusiasts, and local residents interested in regional gastronomy, positioning itself as a key government-backed resource for culinary tourism. The business model is primarily promotional, supported by regional government entities, aiming to boost tourism and local gastronomy awareness. Technically, the website employs a modern frontend stack including Bootstrap, jQuery, Slider Revolution, and Google Analytics for user tracking. The site is mobile-optimized with good navigation and content structure, though accessibility features are basic. Performance is moderate, with no major technical issues detected. Privacy policies and cookie policies are present, but the cookie consent mechanism is lacking, which could be improved for GDPR compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries visibly. However, security headers are not explicitly detected, and there is no visible vulnerability disclosure or incident response contact information. The WHOIS data for the domain is unavailable due to query restrictions, limiting the ability to fully verify domain legitimacy. Overall, the site appears trustworthy and professional, with a low risk profile but room for security and privacy enhancements. Strategically, the site should focus on enhancing security headers, implementing explicit cookie consent, and providing clear contact channels for security incidents. These improvements will strengthen compliance and user trust, supporting the site's role as a regional tourism authority.

H

Hotel Château Gütsch

chateau-guetsch.ch

64

Hotel Château Gütsch is a boutique hotel located in Luzern, Switzerland, offering scenic views over the city and Lake Lucerne. The website presents a professional and well-structured digital presence built on WordPress, integrating booking functionalities and analytics tools. The business targets travelers seeking a unique and tranquil hotel experience. Technically, the site uses modern web technologies and plugins to enhance user experience and SEO. Security measures include HTTPS and cookie consent mechanisms, though explicit privacy and terms policies are not found in the provided content. Overall, the site demonstrates a solid security posture with room for improvement in privacy transparency and contact information availability.

T

Transparency International Deutschland e.V.

transparency.de

55

Transparency International Deutschland e.V. is a reputable non-profit organization dedicated to combating corruption across Germany. The website serves as a comprehensive platform for advocacy, public awareness, research publications, and community engagement. It targets a broad audience including civil society, policymakers, and the general public. The organization maintains a strong market position as a leading anti-corruption NGO in Germany, supported by consistent branding and professional content. Technically, the website is built on TYPO3 CMS with modern front-end frameworks like Bootstrap and FontAwesome. It employs Matomo for analytics, ensuring privacy-conscious data collection. The site is well-optimized for mobile devices, accessible, and SEO-friendly. Hosting appears stable with multiple authoritative nameservers. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms aligned with GDPR. While some security headers are present, additional headers could enhance protection. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website demonstrates a high level of professionalism, security, and compliance, making it a trustworthy source for anti-corruption information. Strategic improvements in security headers and incident response transparency could further strengthen its posture.

H

Häfft Verlag

haefft.de

59

Häfft Verlag operates a German-language website focused on educational publishing products such as student planners, homework notebooks, and motivational content. The site targets students and young audiences in Germany, positioning itself as a niche leader in school-related publishing and retail. The business model includes direct product sales and affiliate marketing, notably through Amazon links. The website is professionally designed with good navigation, mobile optimization, and consistent branding. Technically, it employs modern web technologies including Bootstrap and Slick Slider, and uses Revive Adserver for advertising. Security posture is adequate with HTTPS enforced and cookie consent implemented, though security headers and incident response information are lacking. No critical vulnerabilities or suspicious content were detected. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency by adding contact and security policies.

B

Body Attack Sports Nutrition

body-attack.de

66

Body Attack Sports Nutrition operates a professional e-commerce platform specializing in fitness and sports nutrition products, targeting German-speaking fitness enthusiasts and athletes. The company leverages a mature digital infrastructure based on the Shopware platform, enhanced with modern performance optimizations such as lazy loading and integration with Google Tag Manager and Mollie payment services. The website demonstrates consistent branding and a clear market position as a trusted German fitness nutrition provider with over 30 years of experience. Security posture is solid with HTTPS and Cloudflare DNS/CDN usage, though explicit security headers and policies are not fully visible. Privacy compliance is limited due to missing visible privacy and cookie policies. Overall, the site is well-designed, user-friendly, and trustworthy for its target audience.

M

Misereor

misereor.de

66

Misereor is a well-established German Catholic non-profit organization dedicated to global development and social justice. The website serves as a comprehensive platform for informing the public, facilitating donations, and promoting advocacy campaigns. It targets donors, partners, and socially conscious individuals, offering detailed project information and engagement opportunities. The organization maintains a strong market position within the German and international development NGO sector, emphasizing transparency and partnership. Technically, the website is built on the TYPO3 CMS platform, leveraging modern web technologies including Bootstrap and FontAwesome Pro for styling and icons. It employs Usercentrics for cookie consent management, ensuring GDPR compliance. Hosting is inferred to be with NetCologne, a reputable German provider. The site demonstrates good performance, excellent mobile optimization, and solid SEO practices. From a security perspective, the site enforces HTTPS and integrates consent management for privacy compliance. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The absence of a published security policy or incident response contact is noted as an area for improvement. Overall, the security posture is strong for a non-profit organization. The website content is safe for general audiences, focusing on charitable activities without any adult or questionable material. The domain WHOIS data aligns with the organization's profile, supporting legitimacy and trustworthiness. No WAF or blocking mechanisms interfere with content accessibility, allowing full analysis. Strategic recommendations include enhancing security header implementation, publishing a formal security policy and vulnerability disclosure process, and continuing to maintain transparency and user trust through clear contact and privacy information.

L

lafree.ch - Site évangélique d'information

lafree.info

48

lafree.info is a French-language evangelical Christian news and information website affiliated with the Fédération romande d'Églises évangéliques (FREE). It serves a niche audience of French-speaking evangelical Christians primarily in Switzerland, offering news, opinions, event information, and resources related to evangelical faith and community life. The site is well-branded and consistent with its religious mission, providing quality content authored by recognized contributors within the community. Technically, the site is built on Joomla CMS with modern frameworks like Bootstrap and uses Google Analytics for traffic monitoring. While HTTPS is enabled, the site lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. No direct contact emails or phone numbers are found on the analyzed page, which may affect user trust and compliance. The WHOIS data is privacy protected, which is common and justified for this type of non-profit religious media entity. Overall, the site is professional, trustworthy, and safe for general audiences.

L

lafree.ch - Site évangélique d'information

lafree.ch

9

lafree.ch is a French-language evangelical information website primarily serving the French-speaking evangelical Christian community in Switzerland. It functions as a portal and redirection page to a network of affiliated sites offering news, cultural content, biblical education, church resources, and youth commission information. The website is built on Joomla CMS using modern front-end frameworks and integrates Google Analytics for visitor tracking. The design is professional and consistent with the organization's branding, targeting a niche religious audience. However, the site lacks visible privacy and cookie policies, contact emails, and security headers, which are areas for improvement. The domain uses privacy protection for WHOIS data, which is justified given the non-profit religious nature of the organization.

P

pixelegg Informatik & Design GmbH

pixelegg.de

11

pixelegg Informatik & Design GmbH is a well-established German digital agency specializing in TYPO3 CMS solutions, SEO, e-commerce, and marketing automation. Founded in 1998 and based in Mannheim, the company serves a broad range of clients including SMEs, public institutions, and marketing teams across Germany. Their offerings include enterprise-grade TYPO3 projects, local and regional SEO, product information management, and privacy-conscious analytics using Matomo. The website reflects a mature digital infrastructure with a modern tech stack and a strong focus on digital transformation and measurable business outcomes. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security headers and policies could be improved. Overall, the site demonstrates high professionalism, excellent content quality, and strong business credibility.

W

Wolters Kluwer Kft.

complex.hu

70

Wolters Kluwer Kft. operates a professional e-commerce platform (shop.wolterskluwer.hu) focused on legal, tax, accounting, and administrative products and services in Hungary. The company is a leading LegalTech and publishing provider offering databases, software, books, journals, and professional training primarily targeting legal and tax professionals as well as government bodies. The website demonstrates a mature digital presence with clear navigation, professional branding, and a comprehensive product catalog. Technically, the site uses modern web technologies including Bootstrap, Google Tag Manager, and Eloqua forms, with asynchronous script loading and HTTPS enforced, indicating a solid infrastructure. However, there is room for improvement in privacy compliance disclosures and security headers implementation. Security posture is good with no visible vulnerabilities or exposed sensitive data, but the absence of explicit privacy and cookie policies and incident response information reduces compliance confidence. Overall, the website is trustworthy and professionally managed, reflecting the reputation of its parent company, Wolters Kluwer.

E

ECO Schulte

eco-schulte.com

50

ECO Schulte is a German-based manufacturer specializing in door system technology including door closers, locks, fittings, and intelligent door management solutions. The company presents itself as an established player with decades of experience and multiple subsidiaries including international presence in China. The website is professionally designed using TYPO3 CMS and Bootstrap, offering multilingual support and rich multimedia content. The technical infrastructure is modern and includes a compliant cookie consent mechanism via Cookiebot. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response information are lacking. The absence of WHOIS registrant data reduces domain trustworthiness but the website content and branding indicate a legitimate business. Overall, the site is well-structured, user-friendly, and targets professional audiences in the manufacturing and architectural sectors.

Webtrekk GmbH is a digital analytics company that has been integrated into the Mapp group, offering advanced customer engagement and marketing intelligence solutions under the Mapp Intelligence brand. The website reflects this transition, providing information and redirecting users to Mapp's main site for further details. The company targets businesses seeking data-driven marketing and analytics solutions, positioning itself as a mature player in the technology sector with a history dating back to 2004. Technically, the website employs modern frontend technologies such as Bootstrap and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a professional user experience, though some SEO and accessibility features could be improved. The absence of CMS identification and hosting details limits deeper infrastructure insights. From a security perspective, the site uses HTTPS and custom tracking scripts but lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and overall security posture. The missing WHOIS data for the domain introduces some trust concerns, although the professional presentation and association with Mapp mitigate these risks. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website presents a trustworthy and professional front for Webtrekk's services within Mapp, but improvements in privacy compliance, security headers, and WHOIS transparency are recommended to enhance trust and regulatory adherence.

C

Chemiehoch3

chemiehoch3.de

47

Chemiehoch3 is a German sustainability initiative focused on the chemical industry, providing information, news, publications, and event organization to promote sustainable practices. The website is built on TYPO3 CMS and hosted via plusline.de, featuring a professional and consistent design optimized for mobile devices. However, the site lacks visible privacy and cookie policies, contact information, and security headers, which are critical for compliance and trust. No WAF or blocking mechanisms were detected, allowing full content access. The security posture is basic, with room for improvement in SSL configuration and security best practices. Overall, the site serves its informational purpose well but should enhance compliance and security measures to improve trust and user confidence.

L

Logic Wizard Kft

logicwizard.hu

47

Logic Wizard Kft is a Hungarian IT company specializing in customized software development and comprehensive IT solutions, primarily serving transportation companies, automotive parts dealers, and industrial monitoring sectors. Established in 2012, the company offers tailored business systems including ticketing and sales management for public transport, web catalogs and e-commerce for auto parts, and remote industrial supervision solutions. They also provide Microsoft SPLA and Office 365 licensing services, reinforcing their position as a Microsoft Partner. The website reflects a professional and consistent brand image with clear service offerings targeted at B2B clients in Hungary. Technically, the website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, utilizing jQuery and Bootstrap for responsive design. The site is mobile-optimized and includes SEO best practices, though accessibility features are basic. Google Analytics is used for user tracking, but privacy and cookie policies are absent, indicating room for compliance improvements. Security-wise, the site enforces HTTPS and obfuscates email addresses to reduce spam. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or suspicious content were detected, and the domain registration data aligns well with the business profile, indicating legitimacy. Overall, Logic Wizard Kft presents a credible and professional online presence with solid technical foundations but would benefit from enhanced privacy compliance and security policy disclosures to improve trust and regulatory adherence.

A

Adolf Würth GmbH & Co. KG

wuerth.de

67

Adolf Würth GmbH & Co. KG operates a professional and comprehensive website focused on assembly and fastening technology products for industrial and craft users. The company is positioned as a leading manufacturer and supplier in its sector, offering over 100,000 products including screws, dowels, tools, and safety equipment. The website targets professional users such as workshops, construction sites, and various tradespeople. Technically, the site uses a modern CMS (FirstSpirit), Bootstrap framework, and integrates Visual Website Optimizer for analytics and A/B testing. The site is mobile-optimized and accessible, with good SEO practices. Security posture is solid with HTTPS enabled and no visible vulnerabilities, but lacks explicit security headers and incident response information. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the site is professional and trustworthy but could improve transparency and compliance aspects.

О

ООО «ЭКСПОДАТ»

expodat.com

59

Expodat LLC operates a software and hardware platform designed to facilitate the organization and participation in offline events. Established in 2014 and based in Russia, the company targets event organizers, participants, and visitors by providing tools that streamline event management, registration, and post-event analytics. The website reflects a mature business with a consistent brand presence and a broad partner ecosystem. Technically, the site is built on Joomla CMS with modern web technologies and includes analytics and chat support features. While the site is accessible and professionally designed, it lacks explicit privacy and cookie policies, which are important for GDPR compliance. Security posture is moderate with HTTPS enforced but missing advanced security headers and DNSSEC. Overall, the site is safe and trustworthy but could improve compliance and security practices.

D

Deutsche Säge- und Holzindustrie Bundesverband e.V. (DeSH)

saegewerke.de

58

The website saegewerke.de is the official platform of the Deutsche Säge- und Holzindustrie Bundesverband e.V. (DeSH), a German sawmill and wood industry association. It provides a comprehensive directory of wood suppliers, types of wood, and assortments, targeting industry professionals and businesses in the manufacturing and wood processing sectors. The platform facilitates connections between suppliers and buyers, offering detailed supplier profiles and industry news. The website is well-branded, consistent, and professionally designed, reflecting its role as an industry association hub. Technically, the site uses a modern tech stack including Bootstrap, jQuery, Popper.js, FontAwesome, and Google Maps API. It employs a custom CMS backend and includes a consent management system for GDPR compliance. The site is mobile-optimized and performs moderately well, with basic SEO and accessibility features implemented. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms. However, it lacks explicit published security policies and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with clear privacy and cookie policies present. The WHOIS data is minimal but consistent with the business's German identity. Overall, the website presents a low-risk profile with strong business credibility and good privacy compliance. Strategic recommendations include publishing a formal security policy, adding security headers, and providing incident response contact information to enhance trust and security posture.

I

Instituto de Turismo de la Región de Murcia

turismoregiondemurcia.es

62

The website www.turismoregiondemurcia.es serves as the official tourism portal for the Costa Cálida region in Murcia, Spain. Operated by the Instituto de Turismo de la Región de Murcia, it provides comprehensive travel information, event listings, activity bookings, accommodation search, and cultural insights aimed at tourists and visitors. The site is well-positioned as a government-backed tourism authority, offering a broad range of services to facilitate travel planning and regional exploration. Technically, the site employs modern web technologies including Bootstrap, jQuery, Swiper.js, and integrates multiple analytics and advertising tools such as Google Analytics, Facebook Pixel, and Adform. The site is mobile-optimized, accessible, and SEO-friendly, with consistent branding and professional design. Structured data (JSON-LD) is used to enhance search engine understanding. From a security perspective, the site uses HTTPS and includes several security best practices, though explicit security headers like CSP or X-Frame-Options were not confirmed in the provided data. No vulnerabilities or exposed sensitive data were detected. Privacy and cookie policies are present and include consent mechanisms, indicating good compliance with GDPR requirements. Overall, the website demonstrates a strong security posture, high content quality, and trustworthy business credibility. It effectively supports its mission as a regional tourism promotion platform. Strategic recommendations include enhancing security headers, publishing a security policy, and maintaining regular audits of third-party scripts to sustain security and compliance.

V

Volkshochschule Bielefeld

vhs-bielefeld.de

51

Volkshochschule Bielefeld is a well-established public adult education institution based in Bielefeld, Germany, offering a wide range of courses including political education, culture, health, languages, professional development, and integration programs. The website serves as a comprehensive portal for course information, registration, and community engagement, targeting adult learners in the region. The institution is certified under DIN EN 9001:2015, reflecting its commitment to quality education. Technically, the website is built on TYPO3 CMS with modern web technologies such as Bootstrap and jQuery, providing a responsive and accessible user experience. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some HTTP security headers could be improved. Overall, the site is trustworthy, compliant with GDPR, and provides clear contact and accessibility information.

T

Turnverband Mittelrhein e.V.

tvm.org

33

Turnverband Mittelrhein e.V. is a prominent sports association in Rheinland-Pfalz, Germany, focusing on gymnastics, fitness, and health sports across all age groups. The organization offers a broad range of services including trainer education, event organization, and sports promotion. Their website serves as an information hub with event listings, news updates, and a newsletter subscription, targeting sports clubs, trainers, and enthusiasts. Technically, the site is built on Joomla CMS with modern web technologies such as Bootstrap and jQuery, providing a responsive and user-friendly experience. Security posture is moderate with HTTPS enforced and email cloaking implemented, but lacks advanced security headers and a formal vulnerability disclosure mechanism. Privacy compliance is basic, with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-maintained, though improvements in security and privacy compliance are recommended.

V

Verband der Privaten Krankenversicherung e.V.

pkv.de

57

The Verband der Privaten Krankenversicherung e.V. is a prominent German association representing private health and nursing insurance providers and their insured members. The website serves as an information and advocacy platform, targeting private insured individuals, insurers, policymakers, and media. It offers news, policy positions, educational content, and links to subsidiary organizations. Technically, the site is built on TYPO3 CMS, uses Bootstrap for styling, and integrates Matomo for analytics, reflecting a moderate level of digital maturity. The presence of embedded YouTube videos and social media integration indicates active engagement with audiences. Security-wise, the site uses HTTPS and privacy-respecting analytics but lacks visible security headers and explicit privacy or cookie policies, which are areas for improvement. Overall, the site is professional, trustworthy, and safe for general audiences, with a solid business credibility and moderate technical implementation.

Jubla Bösingen is a small non-profit youth organization based in Switzerland, focused on organizing youth camps, events, and community activities. The website serves as an information hub for upcoming camps, galleries, and organizational details, targeting children, youth, parents, and local community members. The business model is community-driven, emphasizing youth engagement and event management within a local context. Technically, the website is built on WordPress with common plugins for galleries and event management, showing moderate performance and good mobile optimization. Security posture is adequate with HTTPS enforced but lacks advanced security headers and explicit security policies. Privacy compliance is weak due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve in privacy and security transparency.

J

Jungwacht Therwil

jwtherwil.ch

47

Jungwacht Therwil is a well-established non-profit youth organization based in Switzerland, focused on providing recreational and developmental activities for boys aged 8 to 15. The organization has a long history dating back to 1933 and offers a variety of group meetings, camps, and community events. The website serves as a comprehensive resource for members and interested parties, featuring event calendars, group information, merchandise, and contact details. Technically, the site uses a mix of legacy and modern JavaScript libraries, including multiple versions of jQuery, which may pose security and maintenance challenges. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content. However, there are notable gaps in privacy compliance, as no privacy or cookie policies are present, and security headers are missing. The contact form collects user data but lacks visible advanced security measures. Overall, the site is trustworthy and credible but would benefit from security and compliance improvements.

T

Tennisverband Rheinland e.V.

tennisverband-rheinland.de

58

Tennisverband Rheinland e.V. is a regional tennis association serving the Rheinland-Pfalz region in Germany. The organization focuses on providing tennis-related news, organizing tournaments and league matches, offering trainer and referee education, and supporting sport development initiatives. The website serves as an information hub for tennis players, clubs, and enthusiasts in the region, featuring event calendars, training opportunities, and online booking for tennis halls. The association positions itself as a key regional governing body within the tennis community. Technically, the website is built on the TYPO3 CMS platform with Bootstrap for responsive design. It integrates Google Tag Manager for analytics and includes accessibility enhancements via eyeAble scripts. The site is hosted on servers managed by agenturserver, with multiple nameservers indicating a professional hosting environment. The website demonstrates good mobile optimization, accessibility, and SEO practices, although some security headers and explicit cookie consent mechanisms are absent. From a security perspective, the site uses HTTPS and secure login forms but lacks visible security policies, incident response contacts, and security.txt files. No critical vulnerabilities or suspicious patterns were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Contact information is clearly provided, enhancing trustworthiness. Overall, the website is professional, trustworthy, and well-suited for its audience. Strategic improvements in security headers, cookie consent, and published security policies would enhance compliance and security posture, supporting the association's credibility and user trust.

S

Stadtverwaltung Eschborn

eschborn.de

55

The website www.eschborn.de serves as the official municipal portal for the city administration of Eschborn, Germany. It provides a comprehensive range of online services and information targeted at citizens, businesses, and visitors. The site is well-branded and includes extensive accessibility features to support diverse user needs. The content is primarily in German with multi-language support available through an integrated accessibility tool. The business model is focused on public service delivery and community engagement, positioning the city government as a trusted local authority. Technically, the website is built on TYPO3 CMS, a robust open-source content management system, and employs modern web technologies including Bootstrap and jQuery. Analytics are managed via Matomo and Google Tag Manager, indicating a moderate level of digital maturity. The site is mobile-optimized and demonstrates good SEO and accessibility practices, although some performance optimizations could be considered. From a security perspective, the site enforces HTTPS and includes cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data aligns with the official nature of the site, showing consistent domain registration and hosting. Overall, the website presents a professional and trustworthy digital presence for the Eschborn city administration. Strategic improvements in privacy policy publication, security header implementation, and incident response transparency would enhance compliance and security posture further.

The website 'Vereinssuche Landessportbund Nordrhein-Westfalen e.V.' serves as an informational platform for searching sports clubs affiliated with the Landessportbund Nordrhein-Westfalen, a regional non-profit sports federation in Germany. The site targets residents and sports enthusiasts in North Rhine-Westphalia, providing a centralized resource for club information. The business model is non-profit and focused on public service rather than commercial revenue. Technically, the site employs modern web technologies including Blazor WebAssembly and Bootstrap CSS, indicating a contemporary frontend infrastructure. Hosting appears to be managed via Deutsche Telekom infrastructure, inferred from the nameservers. The site shows moderate performance and basic mobile optimization, with dynamic content loading via Blazor. However, the content on the main HTML is minimal, relying on client-side rendering. From a security perspective, the site uses HTTPS, but no explicit security headers were detected in the provided data. There are no visible privacy or cookie policies, nor contact information for security incidents, which limits compliance and user trust. No forms or data collection mechanisms were found on the landing page, reducing immediate attack surface but also limiting user engagement features. Overall, the website is legitimate and consistent with its stated purpose and regional focus. However, improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and regulatory adherence.

M

anthrazit CMS |

mopage.ch

46

The website cms.anthrazit.org serves as a login portal for the anthrazit CMS platform, providing access to registered users. The site is minimalistic, focusing on authentication with no public-facing business information or marketing content. The platform appears to be a specialized CMS solution, but lacks visible business identity or contact details, limiting external trust signals. Technically, the site uses modern JavaScript libraries such as jQuery 3.7.1 and Bootstrap CSS for styling, and it is optimized for mobile devices with responsive design elements. However, the absence of security headers and privacy policies indicates room for improvement in compliance and security maturity. The WHOIS data is unavailable due to a malformed query or privacy protection, which is common for CMS platforms but reduces transparency. Overall, the site is functional but basic, with moderate technical implementation and security posture.

D

DigiShop GmbH

weltholz.de

59

Weltholz is a German-based wood import company specializing in high-quality timber and exclusive wood products for wholesale and retail customers. The website presents a professional and well-structured platform targeting B2B clients such as large and wood dealers. It offers a comprehensive product catalog, marketing support, and online tools like a terrace planner. Technically, the site uses a custom ColdFusion backend with modern frontend libraries including jQuery, Bootstrap, and Slick Slider, integrated with HubSpot and Google Analytics for marketing and analytics. The security posture is solid with HTTPS and cookie consent mechanisms, though security headers are not explicitly detected and could be improved. Privacy compliance is strong with clear policies and consent management. Overall, the site is trustworthy, well-branded, and professionally maintained.

G

Gesamtverband Deutscher Holzhandel e. V

gdholz.de

41

Gesamtverband Deutscher Holzhandel e. V (GD Holz) is a representative industry association for the German wood trade sector, aggregating the interests of 800 member companies. The organization focuses on advocacy, education, sustainability, and regulatory compliance support such as EUTR/EUDR. The website reflects a professional and well-structured digital presence with a modern WordPress infrastructure, SEO optimization, and active social media engagement. However, explicit privacy and cookie policies are not found, and contact information is not clearly presented on the homepage. Security posture is adequate with HTTPS enabled but lacks visible security headers and incident response information. Overall, the site is trustworthy and serves its target audience effectively.

D

Deutsche Krebshilfe

bewegung-bei-krebs.org

65

The website bewegung-bei-krebs.org is a specialized German-language informational platform focused on the role of sport and physical activity in cancer therapy and rehabilitation. It is supported and funded by the reputable Deutsche Krebshilfe and is part of the IMPLEMENT project. The platform targets cancer patients, their relatives, and healthcare professionals, providing scientifically validated content, therapy offers, and free sports counseling. The site demonstrates a clear mission to support oncological rehabilitation through movement therapy, positioning itself as a trusted resource in this niche healthcare segment. Technically, the website uses modern web technologies including the Scrivito CMS, Bootstrap for styling, and Matomo for privacy-conscious analytics. Hosting appears to be on AWS infrastructure, and the site is mobile-optimized with good SEO practices. However, some security enhancements such as enabling DNSSEC and adding security headers could improve the overall security posture. From a security perspective, the site enforces HTTPS and has domain transfer protections in place. Cookie consent mechanisms are implemented, and privacy policies are present and GDPR compliant. No critical vulnerabilities or suspicious content were detected. The absence of a security policy or incident response contact is noted as an area for improvement. Overall, the website scores well on content quality, business credibility, and privacy compliance, with moderate scores in technical implementation and security posture. It is a professionally maintained, trustworthy platform serving a sensitive healthcare niche with a clear non-profit orientation.

S

Settelen AG

settelen.ch

53

Settelen AG is a well-established Swiss mobility service provider based in Basel, with a history dating back to 1883. The company offers a comprehensive range of services including new and used car sales, garage and repair services, car rental, moving services, and group travel by bus. It holds a strong regional market position and is recognized as a leading Toyota center in Switzerland. The website is professionally designed, content-rich, and targets both private and corporate customers in the Basel region. Technically, the site is built on TYPO3 CMS with modern frontend technologies and includes Google Analytics for visitor tracking. Security posture is good with HTTPS enabled and no visible vulnerabilities, though security headers and explicit policies could be improved. Privacy compliance is basic with clear privacy and cookie policies and consent mechanisms. Overall, the site reflects a credible and trustworthy business with strong branding and user experience.

PuzzlePlayz.com is a Swedish website operated by Bulls, a company specializing in providing digital and printed crossword puzzles, sudoku, and similar puzzle content. The business positions itself as the largest provider of online crosswords in Sweden, targeting puzzle enthusiasts and publishers. Their services include responsive digital puzzles compatible across devices and digitalization of existing puzzles. The website content is professional and consistent with the business focus, though it lacks comprehensive privacy and cookie policies. Technically, the website uses standard web technologies including Bootstrap CSS and Google Analytics with Google Tag Manager for tracking. The domain is registered through a reputable registrar and hosted with DNS services via Cloudflare. The site is mobile optimized and performs moderately well but lacks advanced SEO and accessibility features. Security practices are basic with HTTPS enabled but missing important security headers and DNSSEC. From a security perspective, the website shows moderate maturity. HTTPS is implemented, and Google Analytics is configured with secure cookie flags. However, the absence of security headers, DNSSEC, and published privacy or incident response policies indicates room for improvement. No critical vulnerabilities or adult content were detected, and the domain registration is consistent and legitimate. Overall, the website is functional and professional but would benefit from enhanced privacy compliance, security hardening, and transparency to improve trust and regulatory adherence.

D

Disciples-Escoffier Indonesia

disciples-escoffier.id

52

Disciples-Escoffier Indonesia is a professional culinary organization dedicated to developing the skills of chefs and gastronomic practitioners in Indonesia. The organization focuses on education, training, and hosting the Young Talents Escoffier competition to promote young Indonesian culinary talents nationally and internationally while preserving the culinary heritage of Auguste Escoffier. The website is built on WordPress with a modern tech stack including Bootstrap and Google Fonts, hosted behind Cloudflare DNS. The site is accessible and well-structured with good SEO optimization but lacks explicit privacy, cookie, and terms of service policies. Security posture is moderate with HTTPS enabled but missing advanced security headers and DNSSEC. The domain WHOIS data shows inconsistencies with a future creation date, which raises concerns about registration legitimacy. Overall, the website is professional and safe for general audiences but requires improvements in privacy compliance and security best practices.

P

PRÜM-Türenwerk GmbH

tuerenhandbuch-pruem.de

61

PRÜM-Türenwerk GmbH operates a professional website focused on door manufacturing and providing detailed door handbooks and specification texts. The site targets professionals in construction and architecture sectors, offering specialized product information. The company maintains a medium-sized manufacturing business based in Germany with consistent branding and a good quality web presence. Technically, the website is built on TYPO3 CMS with modern frontend technologies such as Bootstrap and jQuery UI. The site is moderately performant, mobile-optimized, and includes SEO best practices. Cookie consent and privacy policies are well implemented, reflecting GDPR compliance. However, explicit security headers and incident response policies are not published. Security posture is adequate with HTTPS and cookie management but could be improved by adding security headers and explicit security policies. No vulnerabilities or exposed sensitive data were detected. Tracking includes Google Analytics and Facebook Pixel with user consent mechanisms. Overall, the website is professional, trustworthy, and compliant with privacy regulations. The domain WHOIS data is partially consistent with the website content, supporting legitimacy. No blocking or WAF challenges were detected, allowing full content analysis.

B

Bundesinstitut für Öffentliche Gesundheit (BIÖG)

loveline.de

66

Loveline.de is a German government-backed youth portal providing comprehensive educational content on love, friendship, health, appearance, sex, and contraception. It targets teenagers and offers interactive videos, anonymous question submission, and consultation center search services. The website is professionally designed, mobile-optimized, and highly accessible, reflecting a mature digital presence. Technically, it is built on TYPO3 CMS with Matomo analytics hosted locally in Germany, ensuring privacy compliance and data protection. Security posture is solid with HTTPS and anonymized analytics, though explicit security headers and incident response policies are absent. WHOIS data is minimal but consistent with the website's government affiliation. Overall, the site is trustworthy, safe for general audiences, and compliant with GDPR requirements.

H

Hochparterre

klima-bauen.ch

46

Klima-bauen.ch is a Swiss media platform operated by Hochparterre AG, focusing on climate-conscious architecture, landscape architecture, and spatial planning. The website offers a rich collection of news articles, practical tips, publications, and videos aimed at professionals in the building and planning sectors. It positions itself as a niche media outlet dedicated to promoting sustainable and climate-friendly building practices. Technically, the site is built on TYPO3 CMS with Bootstrap and integrates advertising and tracking services such as adition and Google Tag Manager. The site is mobile-optimized and provides a professional user experience with clear navigation and relevant content. Security posture is adequate with HTTPS and reCAPTCHA usage, but lacks important security headers and explicit privacy and cookie policies, indicating compliance gaps. Contact information is limited to a login form for subscribers, with no direct emails or phone numbers publicly available. WHOIS data confirms the domain's legitimacy and consistency with the business identity. Overall, the site is trustworthy and professionally maintained but would benefit from enhanced privacy compliance and security best practices.

Arenenberg is a culturally significant hospitality and educational estate located in Switzerland, owned by the Canton of Thurgau since 1906. The website presents a comprehensive offering including hotel accommodations, dining, museum visits, seminars, events, wine experiences, and public courses. The business targets tourists, cultural visitors, and local community members seeking educational and leisure activities. Technically, the website is built on WordPress with WooCommerce and uses modern libraries and plugins to provide multilingual support, booking integration, and GDPR compliance. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and formal policies are missing. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

A

Aargau Tourismus AG

aargautourismus.ch

48

Aargau Tourismus AG operates as the regional tourism authority for the canton of Aargau in Switzerland, providing comprehensive tourism information, event promotion, and services such as meeting location facilitation and an online shop for vouchers. The website targets tourists, cultural enthusiasts, families, and event attendees, positioning itself as a trusted regional tourism hub with strong partnerships and certifications like Swisstainable. Technically, the site employs modern tracking and analytics tools including Google Analytics and Facebook Pixel, uses Bootstrap and jQuery UI for UI components, and is likely powered by the ZMS CMS platform. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent implemented, though it lacks explicit security policies and incident response information. Overall, the domain registration data aligns well with the business identity, supporting legitimacy and trustworthiness.

H

Hochparterre

hochparterre.ch

46

Hochparterre is a Swiss media platform specializing in architecture, planning, and design news, publications, and events. It serves professionals and enthusiasts in the Swiss architecture and design community, offering news articles, event information, subscription services, and an online shop. The website is built on TYPO3 CMS with modern frontend technologies and integrates multiple advertising and tracking services. The site is well-designed, mobile-optimized, and provides a professional user experience. Security posture is good with HTTPS and secure form practices, but lacks visible privacy and cookie policies, as well as explicit security and incident response policies. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site is a reputable media outlet with room for improvement in privacy compliance and security transparency.