Security Directory

The Deutscher Verlagspreis website represents an official German federal government cultural initiative aimed at supporting and awarding independent publishers in Germany. The site provides comprehensive information about the award, participation, jury, and prize winners, targeting publishers and cultural stakeholders. The business model is government-funded, focusing on cultural promotion rather than commercial activities. Technically, the site is built on the Contao CMS platform, leveraging modern JavaScript libraries such as jQuery and Modernizr to enhance user experience. The site is mobile-optimized, accessible, and SEO-friendly with clear navigation and structured content. Security posture is solid with HTTPS enforced and basic session and CSRF protections, though some advanced security headers and policies are missing. Privacy compliance is good, with a cookie consent mechanism and a privacy policy in place, but no explicit terms of service or security policy pages were found. Overall, the site is trustworthy, professional, and safe for general audiences.

H

Die Preise der Hotlist sind verliehen: - Hotlist - Die besten Bücher aus unabhängigen Verlagen

hotlist-online.com

61

The website www.hotlist-online.com serves as a cultural platform dedicated to promoting independent book publishers and their award-winning titles, specifically focusing on the Hotlist 2025 awards. It provides detailed information about the award winners, jury, candidates, and supporting organizations. The platform targets literature enthusiasts, independent publishers, and the book trade, primarily within Germany. Technically, the site is built on the Jimdo CMS platform, leveraging common web technologies such as jQuery and Facebook Pixel for analytics and marketing. The site is mobile-optimized and presents a professional design with clear navigation. Security-wise, the site uses HTTPS and implements cookie consent mechanisms but lacks advanced security headers and explicit privacy policies, which are recommended for compliance and trust. The WHOIS data for the domain is missing or indicates the domain may be unregistered or privacy protected, which raises some concerns about domain legitimacy despite the professional content. Overall, the site is a credible cultural resource with moderate technical maturity and some room for improvement in privacy and security disclosures.

M

MÄRZ Verlag

maerzverlag.de

61

MÄRZ Verlag is a German independent publishing house specializing in radical and non-conventional literature and media. The company operates an e-commerce platform selling books across various genres including literature, poetry, and non-fiction. It maintains a niche market position with a focus on politically and culturally radical content, supported by a subsidiary imprint, Korbinian Verlag. The website is professionally designed, mobile-optimized, and integrates modern digital marketing and analytics tools such as Google Analytics and Matomo, with a strong emphasis on privacy compliance through a comprehensive cookie consent mechanism. Social media presence across major platforms enhances its outreach and community engagement. Technically, the site is built on WordPress with WooCommerce for e-commerce functionality, secured by Wordfence and served over HTTPS with good SSL configuration.

N

Neocom

neocomapp.com

68

Neocom.ai is a technology startup founded in 2020, offering an AI-native commerce experience platform designed to personalize online shopping through an AI shop agent. The website presents a professional and modern design built with Framer and integrates analytics and cookie consent tools, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled and domain transfer protection, but lacks advanced security headers and published security policies. The domain is privacy protected, which is common for startups, and shows no suspicious registration patterns. Overall, the site is functional and credible but would benefit from enhanced transparency and security disclosures.

F

Fase3

fase3.org

59

Fase3 is a small Italian creative agency specializing in authentic storytelling through video production, graphic design, copywriting, and social media management. The company targets businesses and organizations seeking high-quality journalistic-style video content with cinematic quality. The website is professionally designed using WordPress with modern plugins and demonstrates good digital maturity. Privacy and cookie compliance are well implemented, reflecting GDPR adherence. Security posture is strong with HTTPS and security headers, though no explicit security policy or incident response information is published. Overall, the site presents a trustworthy and professional image with active social media engagement and recent content updates.

E

Evidence

evidence.io

49

Evidence.io is a US-based SaaS company founded in 2018 that provides real-time social proof notification services designed to boost conversions and sales for marketers, e-commerce businesses, SaaS companies, agencies, and booking services. The platform integrates with popular tools such as Zapier, WordPress, Shopify, and others, positioning itself as a leading solution in social proof marketing. The website is professionally designed, mobile-optimized, and offers a free 14-day trial to attract users. Technically, the site is built on WordPress using Oxygen Builder, with a modern tech stack including various marketing and analytics tools such as Google Tag Manager, Facebook Pixel, and Inspectlet. Hosting is via AWS, ensuring reliable infrastructure. Security posture is solid with HTTPS enforced and domain transfer protection, though DNSSEC is not enabled and security headers are missing, which are recommended improvements. Privacy compliance is basic with a privacy policy and GDPR compliance badge present, but no cookie consent mechanism detected. Overall, the site is trustworthy, with consistent WHOIS data and clear business contact information. Strategic recommendations include enhancing DNS security, adding security headers, and improving privacy compliance mechanisms.

H

Happyworm Ltd

jplayer.org

52

jPlayer.org is the official website for jPlayer, a free and open source HTML5 audio and video media player plugin for jQuery and Zepto. Operated by Happyworm Ltd, the site serves a developer audience seeking cross-platform media playback solutions. The project is well-established since 2010 with an active community and GitHub presence, positioning it as a reputable player in the web media technology space. Technically, the site uses a modern JavaScript stack with jQuery, Zepto, and HTML5, supported by Cloudflare DNS and external analytics and social media integrations. However, some technical debt is evident in the lack of modern security headers and partial use of HTTP resources. Security posture is moderate with no critical vulnerabilities detected but lacking in privacy and cookie policy compliance. The domain registration is consistent and legitimate, with no privacy protection masking ownership, supporting trustworthiness. Overall, the site is professional and functional but would benefit from improved privacy compliance and security hardening.

E

Erasmus Student Network

esn.org

60

Erasmus Student Network (ESN) is a well-established non-profit international student organization founded in 1997, dedicated to supporting and representing international students across Europe. The organization provides a broad range of services including cultural exchange opportunities, student representation, and various online platforms to facilitate student mobility and integration. ESN enjoys a strong market position supported by the Erasmus+ programme and European institutions, with a large network of local sections and corporate partners. The website reflects this maturity with comprehensive content, consistent branding, and a professional design tailored to its target audience of international students and volunteers. Technically, the website is built on the Drupal CMS platform, leveraging modern JavaScript libraries and Google Analytics for tracking. Hosting and DNS services are managed via Cloudflare, providing performance and security benefits. The site is mobile optimized and SEO friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and domain transfer protections in place, but could be improved by enabling DNSSEC and adding more security headers. Privacy compliance is adequate with a clear privacy policy, though cookie consent mechanisms are absent. Overall, the security posture is solid for a non-profit educational organization, with no critical vulnerabilities detected. The absence of explicit incident response or security policies and lack of direct contact emails or phone numbers for support are minor gaps. The website is safe for general audiences, with no adult or questionable content. Strategic recommendations include enhancing DNS security, implementing cookie consent, and publishing security policies to further strengthen trust and compliance.

C

Club of Rome

thefifthelement.earth

49

The Fifth Element website represents the Club of Rome, a well-known non-profit organization based in Switzerland. The site appears to be a recent initiative launched in 2023, focusing on advocacy and awareness likely related to sustainability or global challenges. The website is built on WordPress using the Divi theme, with standard SEO and analytics tools such as Yoast SEO and Google Analytics integrated via MonsterInsights and Google Tag Manager. Cookie consent is managed through CookieYes and Cookie Law Info plugins, indicating a basic level of privacy compliance. However, explicit privacy policies, terms of service, and contact information are not found, which could be improved to enhance transparency and compliance. The domain registration details are consistent with the organization, registered with EuroDNS SA and protected against unauthorized transfers. No WAF or blocking mechanisms are detected, and the site content is accessible and professional.

C

Corporate Watch

corporatewatch.org

48

Corporate Watch is a UK-based non-profit media organization established in 1996, specializing in investigative journalism and research focused on corporate power, social justice, and environmental issues. The organization provides publications, training, and activist support, positioning itself as a niche player in the media sector dedicated to corporate accountability. The website is built on WordPress with WooCommerce integration for sales and donations, utilizing modern web technologies including Matomo for analytics and OpenPGP.js for secure communications. The site demonstrates good design quality, clear navigation, and mobile optimization, serving a target audience of activists, researchers, and socially conscious individuals. Security posture is solid with HTTPS enforced and clientTransferProhibited domain status, though improvements are recommended such as enabling DNSSEC and adding security headers. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is trustworthy and professional, with clear contact information and recognized media certifications.

C

Campagna di pressione alle "banche armate"

banchearmate.it

56

The website "Campagna di pressione alle 'banche armate'" is a non-profit advocacy campaign promoted by notable Italian magazines such as Missione Oggi, Nigrizia, and Mosaico di Pace. It focuses on raising awareness and mobilizing public opinion against banks involved in arms trade. The campaign provides news, documents, and calls to action primarily targeting Italian-speaking citizens interested in ethical finance and peace activism. The website is built on WordPress using Elementor and Bootstrap, offering a good user experience with mobile optimization and clear navigation. However, it lacks formal privacy and cookie policies, and no security policy or incident response information is provided. The website uses HTTPS but does not implement advanced security headers, and a WordPress debug notice is visible, indicating a minor technical issue. WHOIS data is unavailable, likely due to privacy protection, which slightly reduces transparency but is not uncommon for non-profit organizations. Overall, the site is trustworthy and professional but could improve its privacy compliance and security posture.

The website recommon.org currently presents a security challenge page that blocks direct access to its content, indicating the presence of a Web Application Firewall or similar security mechanism. The domain is registered since 2012 with Server Plan Srl as the registrar, showing a stable registration history but lacking detailed registrant information. The visible content is minimal, primarily a redirect page with a loading animation and no substantive business or contact information. The site uses outdated CMS technologies (Joomla 1.5 and WordPress 2.5), which are known to have multiple security vulnerabilities and are no longer supported. No privacy, cookie, or terms of service policies are present, and no contact details or social media links are available. The external link to bitninja.io suggests use of BitNinja security services.

C

Campagna Abiti Puliti

abitipuliti.org

51

Campagna Abiti Puliti is a non-profit advocacy organization dedicated to promoting structural and meaningful changes for workers in the global textile sector. The website is professionally designed using WordPress and Elementor, targeting an Italian-speaking audience interested in ethical fashion and labor rights. It offers information on campaigns, urgent cases, productions, and a newsroom with articles, reports, and galleries. The organization maintains an active social media presence across Instagram, Facebook, YouTube, and LinkedIn, enhancing its outreach and engagement. Technically, the website employs modern web technologies including WordPress 6.8.3, Elementor 3.29.2, jQuery, and Google Analytics for tracking. It implements GDPR-compliant cookie consent mechanisms via Iubenda, ensuring user privacy awareness. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is adequate with HTTPS enabled and cookie consent in place, but lacks advanced security headers and published security policies. The WHOIS data is unavailable or privacy protected, which is common for non-profit entities, and no suspicious patterns were detected. The domain appears legitimate and consistent with the organization's mission. No critical security vulnerabilities or blocking mechanisms were found, allowing full content accessibility. Overall, Campagna Abiti Puliti demonstrates a solid digital presence with good content quality and business credibility. Security and privacy compliance can be improved by publishing explicit policies and enhancing technical security controls. Strategic recommendations include implementing security headers, adding a security.txt file, and formalizing incident response procedures to strengthen trust and resilience.

I

Interno4 edizioni

interno4edizioni.it

53

Interno4 edizioni is a small Italian publishing house established in 2023, focusing on editions and book publishing. The website presents basic content describing the business and its offerings, targeting a general audience interested in literary works. The technical infrastructure is modern, leveraging Gatsby and Bootstrap frameworks, ensuring good mobile optimization and moderate performance. Security posture is strong with HTTPS and DNSSEC enabled, but lacks advanced security headers and visible incident response policies. Privacy compliance is minimal, with no privacy or cookie policies detected. Overall, the website is functional and moderately professional but requires improvements in compliance and contact transparency to enhance trust and legal adherence.

C

Creative3Studio

creative3studio.com

47

Creative3Studio is a small IT services company based in India, specializing in WordPress design, website development, graphic design, ecommerce solutions, PHP development, mobile development, and online marketing. The company targets businesses and individuals seeking comprehensive digital solutions. The website is built on WordPress using the Astra theme and Elementor page builder, indicating a modern and flexible technical infrastructure. The site is mobile optimized and uses standard web technologies including jQuery and FontAwesome. Security posture is good with HTTPS enforced and use of Google reCAPTCHA on forms, but lacks advanced security headers and published security policies. The absence of WHOIS data and privacy/cookie policies are notable gaps that reduce overall trust and compliance. Contact information is clearly presented, and social media presence is active on Facebook, Twitter, and LinkedIn. Overall, the website is professional and functional but would benefit from enhanced privacy compliance and security transparency.

W

WeMove Europe

wemove.eu

48

WeMove Europe is a well-established non-profit organization focused on social and environmental activism across Europe. The website serves as a community hub for campaigns, petitions, and advocacy efforts aimed at transforming Europe for the benefit of people, future generations, and the planet. The organization leverages digital platforms to mobilize citizens and influence policy. Technically, the website is built on modern frameworks such as Next.js and React, with integrations for analytics (Matomo), cookie consent (Cookiebot), and secure payment processing (PayPal and Stripe). The site demonstrates good performance, mobile optimization, and accessibility standards. Security posture is strong with HTTPS, security headers, and anti-bot measures like Google reCAPTCHA Enterprise. However, explicit security policies and incident response contacts are not publicly disclosed, representing an area for improvement. Overall, the website is professional, trustworthy, and compliant with privacy regulations, making it a credible platform for its mission.

F

FOSAN

fosan.org

61

FOSAN is a non-profit scientific association based in Italy focused on research, training, and consultancy in food science and nutrition. The organization offers services including food development projects, scientific publications, educational courses, and membership benefits. The website is professionally designed using WordPress with modern SEO and slider plugins, providing good content quality and user experience primarily in Italian. Security posture is solid with HTTPS and secure forms, though security headers and explicit privacy policies are missing. The absence of WHOIS registration data limits domain trust verification but the website content and collaborations with reputable institutions support legitimacy. Overall, the site is a credible resource for professionals and researchers in the nutrition sector.

T

Themes Camp

themescamp.com

49

Themes Camp is a small technology business specializing in the development and sale of professional WordPress themes and web templates. Their website targets website managers and developers seeking easy-to-use, customizable themes without coding. The company has a moderate market presence with over 12,500 users and partnerships with major platforms like Elementor and ThemeForest. Technically, the website is built on WordPress using Elementor and several plugins, with good SEO and mobile optimization. Security posture is solid with HTTPS and asynchronous loading of analytics scripts, but lacks some security headers and published policies. The absence of WHOIS data raises legitimacy concerns, though the website content and branding appear professional. Contact is available via a form but lacks direct emails or phone numbers. Privacy and cookie policies are not found, indicating compliance gaps. Overall, the site is functional and trustworthy but would benefit from enhanced transparency and security documentation.

K

Kueez

kueezrtb.com

58

Kueez is a technology company specializing in providing innovative solutions for publishers and performance marketers. Their offerings include the Kueez Monetization Suite and an End2End Marketing Platform designed to drive profitable growth and scalable marketing performance. The company targets digital publishers and marketers seeking to optimize revenue and campaign effectiveness. The website demonstrates a professional and consistent brand presence with strong client logos and active content such as blogs and social media engagement. Technically, the site is built on Webflow with modern libraries and includes GDPR-compliant consent management, indicating a mature digital infrastructure. Security posture is generally good with HTTPS and secure forms, though explicit security headers and published security policies are absent. WHOIS data for the subdomain is unavailable, which is typical for subdomains but slightly reduces trust. Overall, the site is well-designed, functional, and business credible with moderate to high trustworthiness.

L

La Guida Nomade

laguidanomade.it

46

La Guida Nomade is an Italian online portal dedicated to conscious travelers seeking wellness, artisanal, agricultural, commercial, and tourism experiences that respect health, life, and the environment. The website serves as a niche directory and content platform, positioning itself as a reference point for sustainable and mindful travel in Italy. The business is small-sized, founded around 2018, and operates under the parent project La Grande Via. The portal offers categorized listings, blog content, and a contact form to engage users. Technically, the website is built on WordPress with WooCommerce for product listings, enhanced by popular plugins such as Yoast SEO, Revolution Slider, and WPBakery Page Builder. It uses modern web technologies including Google Analytics for tracking, Google Fonts, and FontAwesome icons. The site is moderately optimized for performance and mobile devices, with good SEO practices and structured data implemented. From a security perspective, the site enforces HTTPS and uses Google reCAPTCHA for form protection. However, it lacks explicit security headers like a full Content-Security-Policy and does not publish a security policy or incident response contacts. Privacy compliance is basic, with no visible privacy or cookie policies or consent mechanisms, which is a gap given GDPR requirements. Overall, the website is accessible, professionally designed, and content-rich, targeting a general audience interested in sustainable travel and lifestyle. The security posture is adequate but can be improved with better policy disclosures and headers. The domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

G

Golden Books srl Società Benefit

macrolibrarsi.it

65

Macrolibrarsi is a well-established Italian e-commerce platform specializing in natural and organic products including food, cosmetics, supplements, and books. Operated by Golden Books srl Società Benefit since 2000, it holds a leading position in Italy's ethical wellness market. The website offers a comprehensive product catalog with over 80,000 items, supported by strong customer service and clear business transparency. The company emphasizes sustainability and ethical business practices, targeting health-conscious consumers primarily in Italy and Europe. Technically, the site employs modern web technologies such as Bootstrap, jQuery, Google Tag Manager, and integrates trusted third-party services for reviews and personalization. It is mobile-optimized and SEO-friendly, providing a smooth user experience. Security posture is solid with HTTPS, reCAPTCHA, and cookie consent mechanisms, though some security headers could be enhanced. Overall, the site is trustworthy, compliant with GDPR, and demonstrates strong business credibility.

The website demeter.it is currently serving a security challenge page powered by BitNinja, which blocks access until the visitor completes a CAPTCHA validation. This indicates that the site or its visitors have triggered security mechanisms likely due to suspicious or automated traffic. The page content is minimal and focused solely on security verification, with no direct business or service information accessible. The domain is well-established, created in 2000, and DNSSEC is enabled, suggesting legitimate domain registration. However, the lack of visible business content, contact information, or privacy policies limits the ability to assess the company's market position or credibility. Technically, the site uses AngularJS and jQuery to render the challenge page, but no modern SEO or accessibility features are evident. Security posture is moderate due to the presence of DNSSEC and domain status OK, but the absence of security headers and policies is noted. Overall, the site is currently inaccessible for normal browsing, resulting in a low AI score and limited analysis capability.

T

Terra Nuova Edizioni

terranuovalibri.it

59

Terra Nuova Edizioni is an established Italian publishing company specializing in ecological and natural living literature, including books, ebooks, and magazines. The company targets Italian-speaking audiences interested in sustainable lifestyles, organic agriculture, alternative medicine, and related disciplines. The website serves as an e-commerce platform offering direct sales, subscriptions, and event information, positioning itself as a niche leader since 1977. Technically, the website employs modern web technologies such as jQuery, Bootstrap, Owl Carousel, and integrates Google and Facebook tracking tools with a compliant cookie consent mechanism. Security posture is solid with HTTPS enforced and bot protection via reCAPTCHA, though some security headers could be improved. Privacy compliance is well addressed with clear policies and consent management. Overall, the site is professional, trustworthy, and well-optimized for user experience and SEO.

V Label Italia operates as a recognized certification provider specializing in vegetarian and vegan product certification. The website targets consumers and businesses seeking transparency and quality assurance in vegetarian and vegan certifications, positioning itself as a trusted brand in this niche market. The presence of multiple language versions and country-specific subdomains indicates a strategic international outreach. Technically, the website is built on WordPress with the Avada theme, leveraging popular SEO and analytics tools such as Yoast SEO, Google Analytics, and Facebook Pixel, reflecting a moderate to advanced digital maturity. Security posture is generally good with HTTPS enforced and no visible sensitive data exposure; however, the absence of security headers suggests room for improvement. Privacy compliance is basic, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and well-structured, though it would benefit from enhanced privacy and security disclosures.

H

helixjobs.com

helixjobs.com

57

The website helixjobs.com appears to be a job listing portal established recently in 2023. The domain is registered through Hetzner Online GmbH, a reputable hosting provider, indicating a legitimate hosting environment. However, the website content on the analyzed page is minimal and partially restricted by an overlay when loaded in an iframe, limiting full content visibility. There is a lack of critical compliance documents such as privacy policy, cookie policy, and terms of service, which negatively impacts the site's privacy compliance and trustworthiness. The technical infrastructure uses common JavaScript libraries like jQuery and OpenLayers but lacks modern SEO and accessibility features. Security posture is basic with no evident security headers or advanced protections, and DNSSEC is not enabled. Overall, the site is functional but immature in terms of content, compliance, and security maturity.

U

Union Investment

finanzagenda.de

56

FinanzAgenda is a digital platform operated by Union Investment, providing transparent and comprehensive information about the political and public affairs activities of the Union Investment Group. The website targets institutional and private investors interested in financial and political transparency. The platform is well-branded and professionally designed, reflecting a strong market position within the German financial services sector. Technically, the site employs modern JavaScript frameworks, a proprietary CMS, and integrates consent management and analytics tools, indicating a mature digital infrastructure. Security posture is solid with HTTPS and consent mechanisms, though explicit security policies and contact information for incident response are absent, representing areas for improvement. Overall, the site is trustworthy and professionally maintained, with recommendations to enhance privacy disclosures and security transparency.

H

Holidays.ch

upholidays.de

64

The website www.upholidays.de is a professional online travel booking platform primarily targeting German-speaking customers interested in package holidays, flights, and hotel bookings. It offers a variety of travel destinations including beach and city vacations, integrating multiple tour operators and airlines. The platform demonstrates a solid market position within the regional travel industry, focusing on convenience and comprehensive travel options. Technically, the site leverages modern web technologies such as React, Google Tag Manager, and Usercentrics for consent management, ensuring a good user experience and compliance with privacy regulations. The use of HTTPS and nonce-based CSP scripts indicates a good security posture, although some improvements in HTTP security headers and incident response transparency are recommended. Overall, the site is trustworthy, well-branded, and compliant with GDPR, with clear contact information and legal documentation. No adult or NSFW content is present, making it suitable for general audiences.

M

Münchener Hypothekenbank eG

muenchenerhyp-karriere.de

56

Münchener Hypothekenbank eG operates a professional career portal showcasing a wide range of job opportunities primarily in banking, IT, real estate valuation, compliance, and risk management. The company holds a solid market position as a regional mortgage bank in Germany, supported by its subsidiary M-Wert GmbH specializing in real estate valuation. The website demonstrates a moderate level of digital maturity, utilizing AngularJS and a specialized job widget for dynamic content delivery. While the site is well-structured and mobile-optimized, it lacks explicit privacy and cookie policies, which are critical for GDPR compliance. Security posture is generally good with HTTPS enforced and no exposed sensitive data, but the absence of security headers and incident response contacts suggests room for improvement. Overall, the domain and website appear legitimate and trustworthy, with clear business credibility and professional presentation.

M

Münchener Hypothekenbank eG

mhbplus.de

55

Münchener Hypothekenbank eG operates the website mhb-plus.de to promote its Mitglieder-Plus membership program, offering cashback and insurance benefits primarily through partnerships with R+V Versicherung. The site targets members and potential members of the bank, providing clear information on benefits and contact options. Technically, the site is built on Drupal 11 with Bootstrap Barrio theme, uses Matomo for analytics, and Cookiebot for GDPR-compliant cookie consent management. The hosting infrastructure is likely provided by Deutsche Telekom, inferred from the nameservers. Security posture is solid with HTTPS and cookie consent mechanisms, though security headers and incident response policies are not explicitly published. Privacy compliance is supported by Cookiebot's comprehensive privacy policy, though no direct privacy policy page on the domain was found. Contact information includes a phone number and a contact form, but no direct email addresses or social media links were detected. Overall, the website is professional, trustworthy, and well-structured, suitable for its financial services audience.

M

Münchener Hypothekenbank eG

meindarlehen.de

50

Münchener Hypothekenbank eG operates the website www.meindarlehen.de as a digital customer portal for mortgage loan management. The portal offers services such as personal data updates, payout requests, repayment options, contract adjustments, and membership management, targeting loan customers primarily in Germany. The website reflects an established financial institution with a medium-sized market presence and a focus on customer self-service through a modern web interface. Technically, the site is built on Drupal CMS, utilizing common libraries such as jQuery, Bootstrap, FontAwesome, and Slick Carousel for UI components. The site is mobile-optimized and accessible, with moderate performance characteristics. Security posture is good with HTTPS enforced and cookie consent managed via Cookiebot, but lacks explicit security headers and published security policies. Analytics are handled via Matomo, indicating a privacy-conscious approach. Contact information is clearly provided, enhancing business credibility. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

D

DZ BANK AG

dzbank.com

66

DZ BANK AG is a leading German corporate and investment bank serving cooperative banks and their clients. The website demonstrates a mature digital presence with comprehensive information on corporate governance, compliance, sustainability, investor relations, and client services. The technical infrastructure leverages Adobe Experience Manager CMS, modern JavaScript libraries, and privacy-conscious analytics tools such as Matomo and Usercentrics. Security posture is strong with HTTPS enforcement, security headers, and consent management, though the absence of a public security.txt and incident response contacts suggests room for improvement. The missing WHOIS data is a notable anomaly but does not detract from the professional and trustworthy nature of the website content. Overall, DZ BANK's website reflects a well-established financial institution with a strong emphasis on compliance and sustainability.

D

DZ PRIVATBANK

sogehtassetservicing.com

72

DZ PRIVATBANK, together with its subsidiary IPConcept, operates the website 'So geht Asset Servicing!' offering modular and full-service asset servicing solutions for the entire fund lifecycle. The company targets fund initiators and institutional investors primarily in Germany, Luxembourg, and Switzerland. The website presents a professional and comprehensive overview of services including custodian, transfer agent, central administration, and AIFM/KVG services, supported by a well-structured team section and multiple contact options. Technically, the site is built on WordPress with modern integrations such as Google Tag Manager and consent management tools, ensuring GDPR compliance and good user experience across devices. Security posture is strong with HTTPS enforcement and security headers, though the absence of a public security policy and incident response details is noted. The WHOIS data is missing, which raises some concerns about domain registration transparency, but the overall branding and external references support legitimacy. Strategic recommendations include publishing security and incident response policies and enhancing transparency around domain registration.

IPConcept is a specialized financial services company focused on fund administration and management solutions, operating primarily in Germany, Luxembourg, and Switzerland. It is a 100% subsidiary of DZ PRIVATBANK, providing services such as private label funds, alternative investment funds, risk management, order management, performance analysis, and reporting. The company targets asset managers, institutional clients, and banks, positioning itself as a reliable partner with a strong backing from a major bank. The website content is professional, well-structured, and GDPR compliant, reflecting a mature digital presence.

M

MyGiftCard

mygiftcard.it

68

MyGiftCard is an established Italian e-commerce platform specializing in the sale of gift cards from major brands across various sectors including retail, food, electronics, and travel. The website offers services such as online activation and balance verification of gift cards, targeting Italian consumers seeking convenient gifting solutions. The platform also features MyGiftCardPlus, a loyalty or enhanced service program. Technically, the site is built on Magento with a mix of modern and legacy JavaScript libraries, and integrates Google Analytics and Tag Manager with privacy-conscious configurations like IP anonymization. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS enforced and cookie consent mechanisms in place, though improvements in security headers and explicit security policies are recommended. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the site scores well on content quality, privacy compliance, and business credibility, making it a trustworthy platform for gift card purchases.

E

Esselunga

esselungajob.it

73

Esselungajob.it is the official career portal for Esselunga, a leading Italian retail company. The website provides job listings, career information, and application capabilities targeted at job seekers primarily in Italy. The site is professionally designed, mobile optimized, and uses modern web technologies including jQuery, Bootstrap, and SAP SuccessFactors platform components. Privacy and cookie policies are implemented with GDPR compliance in mind, including a cookie consent banner with accessibility features. Security posture is good with HTTPS enforced and anti-clickjacking measures, though DNSSEC is not enabled and some advanced security headers could be added. No explicit contact or incident response information is publicly available. WHOIS data confirms domain legitimacy and consistency with the business profile. Overall, the site is a trustworthy and professional recruitment platform for Esselunga.

WInTO GmbH is a regional government-related company focused on economic, innovation, and tourism promotion in the Oberhavel region of Germany. The website primarily serves as an imprint (Impressum) page providing legal and contact information. The business operates in the government sector with a small organizational size and targets local businesses and stakeholders interested in regional development. The website content is minimal and professional but lacks comprehensive privacy, cookie, and security policies, which are important for compliance and trust. Technically, the website uses basic HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be on generic servers indicated by the nameservers. The site shows basic mobile optimization and accessibility but lacks SEO optimization and security headers. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but no security headers or incident response contacts are provided. There are no forms or user input fields, reducing attack surface. However, the absence of privacy and cookie policies is a compliance gap under GDPR. WHOIS data is partially consistent but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website is safe and professional but basic in content and technical sophistication. Strategic improvements in privacy compliance, security headers, and SEO would enhance trust and digital maturity.

S

Stadtwerke Göttingen AG

stadtwerke-goettingen.de

55

Stadtwerke Göttingen AG is a regional energy utility company serving Göttingen and its surrounding areas with electricity, gas, district heating, and water services. The company emphasizes sustainability and innovation, offering additional services such as photovoltaic systems and e-mobility solutions under its brand neuwerk. The website reflects a mature digital presence with a professional design, clear navigation, and comprehensive content tailored to residential and commercial customers. Technically, the site is built on TYPO3 CMS and integrates modern analytics and marketing tools with a strong focus on GDPR compliance through a consent management platform. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though explicit security policies and incident response contacts are not published. Overall, the domain registration data aligns well with the business claims, supporting the legitimacy and trustworthiness of the site.

Wir-e.de is a German-language platform dedicated to enabling institutions, communities, and individuals within the church context to create, discover, and subscribe to websites quickly and free of charge. The platform serves a niche market focused on church-related digital presence, providing a valuable service to non-profit and community organizations. Technically, the website is built on a modern Ruby on Rails stack, utilizing Bootstrap and Font Awesome for UI components, and includes a custom CMS for content management. The site is mobile responsive and implements basic accessibility and SEO features. Security-wise, the site enforces HTTPS, includes standard security headers, and uses CSRF tokens in forms, reflecting a good security posture. However, it lacks publicly available security policies, incident response contacts, and vulnerability disclosure mechanisms. Privacy compliance is addressed with a cookie consent banner and a privacy policy page, indicating GDPR awareness. Overall, the website is trustworthy, professional, and well-suited for its target audience, though it could improve transparency and contactability.

R

Romantik Hotel Gebhards

gebhardshotel.de

43

Romantik Hotel Gebhards is a historic hospitality business located in Göttingen, Germany, offering accommodation, event hosting, and dining services. The website reflects a well-established brand with a focus on guest experience and local tourism. The business targets tourists, business travelers, and event organizers, positioning itself as a premium local hotel with a strong reputation. Technically, the site is built on Silverstripe CMS and integrates multiple booking engines, showing a moderate level of digital maturity. The site is mobile optimized and uses modern tracking and consent tools such as Google Tag Manager and Cookiebot. Security posture is adequate with HTTPS and consent mechanisms in place, but lacks explicit security headers and published security policies. Privacy compliance is partial, with cookie consent but no visible privacy or terms pages. Overall, the site is professional and trustworthy with room for improvement in security and compliance documentation.

S

Sparkasse Göttingen

spk-goettingen.de

67

Sparkasse Göttingen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, credit cards, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong emphasis on secure and user-friendly online banking experiences. The bank maintains a solid market position within the Göttingen region, supported by comprehensive service offerings and a professional digital presence. Technically, the website is built on a modern infrastructure likely powered by Adobe Experience Manager CMS, utilizing JavaScript, CSS, and React components for dynamic content. The site is well-optimized for mobile devices and accessibility, featuring clear navigation and SEO best practices. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to data protection and compliance. From a security perspective, the website enforces HTTPS and includes session management features such as session timeout warnings. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It demonstrates a high level of digital maturity suitable for a financial institution, with recommendations focusing on enhancing security disclosures and incident response transparency.

R

Ristorante Fellini

fellini-goettingen.de

66

Ristorante Fellini is a family-run Italian restaurant based in Göttingen, Germany, offering traditional Italian pizzas and dishes with an online ordering platform powered by Shopify. The website targets local customers seeking authentic Italian cuisine with convenient online access. The business operates in the hospitality sector with a small-sized footprint and a focus on community engagement. Technically, the website leverages modern web technologies including Shopify's e-commerce platform, jQuery, Font Awesome for icons, and Cookiebot for cookie consent management, indicating a moderate level of digital maturity. The site is mobile-optimized and provides a good user experience with clear navigation and professional design. Security-wise, the website uses HTTPS and implements cookie consent, but lacks explicit security headers and formal privacy or terms of service documentation, which are areas for improvement. No WAF or blocking mechanisms were detected, and the WHOIS data is minimal but not suspicious. Overall, the website is functional and trustworthy for its business purpose but would benefit from enhanced security and compliance documentation.

V

Velo Voss

velo-voss.de

43

Velo Voss is a small, established bicycle retailer located in Göttingen, Germany, specializing in high-quality e-bikes and bicycles. The company offers personalized consultation, repair services, bike leasing options, and training opportunities. They are a Bosch-certified eBike expert, which enhances their credibility and market position. The website is professionally designed with good content quality, clear navigation, and mobile optimization. Technically, it is built on WordPress with modern plugins and SEO tools, hosted on a German hosting provider. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies could be improved. Overall, the website reflects a trustworthy and professional local business with a clear focus on customer service and quality products.

H

Hogrefe Verlag GmbH & Co. KG

hogrefe.de

67

Hogrefe Verlag GmbH & Co. KG is a well-established German publishing company specializing in psychology, healthcare, and related educational materials. Founded in 1949 and headquartered in Göttingen, Germany, the company offers a broad portfolio including books, psychological tests, journals, eTesting platforms, and continuing education services. The website reflects a mature digital presence with multilingual support and a focus on professional and academic audiences. Technically, the site is built on TYPO3 CMS, employs modern frontend technologies like Tailwind CSS, and integrates Google Tag Manager and a consent management platform to ensure GDPR compliance. Security posture is good with HTTPS enforced and secure login forms, though explicit security headers and incident response information are not publicly documented. The absence of WHOIS data limits domain registration trust verification, but the website's professional presentation and clear business information support its legitimacy. Overall, Hogrefe demonstrates a strong market position in educational publishing with a solid digital infrastructure and compliance awareness.

G

Göttinger Kulturstiftung

kulturstiftung-goettingen.de

57

The Göttinger Kulturstiftung is a small non-profit cultural foundation affiliated with the city of Göttingen, Germany. It focuses on supporting cultural activities through funding and public information. The website serves as an informational portal for cultural funding opportunities and donation options, targeting local cultural organizations and citizens. The business model is centered on non-profit cultural promotion with a clear local focus. Technically, the website is built on a custom CMS platform (NOLIS) using standard web technologies such as JavaScript and CSS. It features a responsive design with accessibility options like font resizing and contrast toggling. The site is well-structured with clear navigation and SEO-friendly metadata. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

A

AKB Stiftung

akb-stiftung.de

42

The AKB Stiftung website represents a small, regional non-profit foundation with a family heritage focus. The site content is minimal but clearly communicates the foundation's regional engagement and mission. The business model is typical for a non-profit foundation, relying on regional initiatives and likely donations or grants. The market position is niche and localized, with no evident commercial activities or services offered online. Technically, the website is built on WordPress using the Enfold theme and several plugins including Slider Revolution and MediaElement.js. The site is served over HTTPS, indicating a basic level of security. However, the technical implementation is basic with limited mobile optimization and no advanced SEO or accessibility features detected. The site lacks privacy and cookie policies, which is a compliance gap. From a security perspective, the site has HTTPS enabled but lacks security headers and does not disclose any security or incident response policies. There are no visible vulnerabilities or exposed sensitive data, but the absence of security best practices and policies suggests room for improvement. No analytics or tracking scripts are present, indicating minimal user tracking. Overall, the website is safe and appropriate for a general audience, with no adult or questionable content. The lack of contact information and compliance documentation reduces trust and business credibility. Strategic improvements in privacy compliance, security headers, and contact transparency are recommended to enhance trust and compliance.

V

VGH Stiftung

vgh-stiftung.de

44

VGH Stiftung is a medium-sized non-profit foundation based in Germany, focusing on cultural education, literature, monument preservation, and scientific research. The foundation supports various projects and events primarily in northern Germany, including literary festivals, educational workshops, and scientific awards. The website reflects a professional and consistent brand image with a clear focus on its cultural mission. Technically, the site is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie for cookie consent management. The site is mobile-optimized and uses HTTPS, ensuring secure communications. However, there is a lack of explicit privacy policy and terms of service pages, which impacts privacy compliance ratings. Security headers are not detected, suggesting room for improvement in security hardening. No direct contact information or incident response contacts are visible, which could affect user trust and compliance. Overall, the website is well-structured and trustworthy but would benefit from enhanced privacy and security disclosures.

S

Stiftung Niedersachsen

stnds.de

54

Stiftung Niedersachsen is a regional cultural foundation dedicated to promoting and funding cultural projects throughout the German state of Niedersachsen. The foundation operates as a non-profit entity, supporting a wide range of cultural sectors including music, theater, museums, literature, and social culture. Their website reflects a professional and well-structured digital presence, targeting cultural institutions, artists, and non-profit projects within the region. The foundation's market position is that of a key regional cultural supporter with a clear focus on fostering cultural diversity and sustainability.

Landschaftsverband Südniedersachsen is a regional non-profit association based in southern Lower Saxony, Germany, dedicated to supporting cultural heritage, museum consulting, and funding regional projects. The website serves as an informational portal offering access to funding opportunities, museum advisory services, provenance research, and cultural project updates. The organization targets local governments, cultural institutions, and the general public interested in regional culture. Technically, the website is built on the Contao CMS platform, uses modern JavaScript libraries such as jQuery and Mmenu.js, and employs Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, with a clear navigation structure and consistent branding. Security-wise, the site uses HTTPS and has domain transfer protections but lacks DNSSEC and explicit security headers, representing areas for improvement. Privacy compliance is basic with a privacy policy present but no cookie consent mechanism detected. Overall, the website is professional, trustworthy, and well-suited for its audience, with moderate technical maturity and a solid security posture.