Security Directory

The website www.niedersachsen.de is the official portal of the Lower Saxony state government in Germany. It serves as a comprehensive information hub for residents, government officials, and other stakeholders, providing detailed content on politics, state administration, culture, energy, emergency monitoring, integration, and public services. The site is well-structured, multilingual, and professionally designed, reflecting its authoritative government status. The business model is purely informational and service-oriented, targeting the general public and specific groups such as refugees and local citizens. Technically, the site uses a mature technology stack including jQuery, Video.js, FancyBox, Slick Carousel, DataTables, and Matomo analytics, managed via the Powerslave Liveserver CMS. The site demonstrates good mobile optimization, accessibility, and SEO practices, though performance is moderate. Security posture is solid with HTTPS enforced and no visible vulnerabilities, but lacks some security headers and explicit cookie consent mechanisms. Overall, the security posture is good with no detected vulnerabilities or suspicious content. The domain WHOIS data is privacy-protected as per DENIC policies, consistent with a government domain. The site lacks explicit security policies or incident response contacts, which could be improved. Privacy compliance is generally good, though cookie consent mechanisms should be enhanced. The risk assessment is low, with recommendations focusing on improving security headers, cookie consent, and publishing security policies to enhance trust and compliance. The site is trustworthy, professional, and safe for general audiences.

B

Büchergilde Gutenberg

buechergilde.de

53

Büchergilde Gutenberg is a well-established German book community and cooperative founded in 1924, offering curated book subscription boxes, an online bookshop, and literary events. The website reflects a professional and consistent brand presence targeting German-speaking book lovers and literature enthusiasts. Technically, the site uses modern frameworks such as Next.js and React, with good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled but lacks visible security headers and formal privacy or cookie policies. No incident response or vulnerability disclosure information is provided, which could be improved to enhance trust and compliance. Overall, the domain and website appear legitimate and consistent with the business history and sector.

Arbeit und Kultur Saarland gGmbH is a well-established non-profit organization dedicated to supporting cultural actors and projects in the Saarland region of Germany. The organization provides advisory services, project initiation, funding, and networking opportunities to foster a vibrant cultural scene. Their website reflects a professional and consistent brand presence with a focus on cultural events and community engagement. Technically, the site is built on the ProcessWire CMS with modern frameworks like UIkit and includes cookie consent mechanisms to comply with GDPR. Security posture is moderate with HTTPS usage and cookie consent but lacks visible advanced security headers or incident response policies. The domain registration data is minimal but consistent with a non-profit hosted on generic servers. Overall, the website is trustworthy, safe, and well-suited for its target audience.

E

Eugen Pfeifer GmbH

klimapfeifer.de

56

Eugen Pfeifer GmbH is a medium-sized German company specializing in climate technology, including planning, installation, and operation of climate, air, and refrigeration systems. The company targets both industrial and private customers, emphasizing tailored solutions for air conditioning and industrial refrigeration. Their market position is that of an experienced regional specialist with a focus on quality and customer service. Technically, the website is built on Joomla CMS with Bootstrap and jQuery, offering a modern and responsive user experience, though some accessibility and SEO improvements are possible. Security posture is solid with HTTPS and cookie consent mechanisms, but lacks advanced security headers and incident response information. Overall, the site is professional and trustworthy, though contact information is not explicitly presented on the homepage, which could be improved for better business credibility.

The Gesellschaft für Medienförderung Saarland – Saarland Medien – mbH is a regional media promotion company based in Saarland, Germany, focusing on supporting film, games, and media location development. The website clearly communicates its business focus and upcoming liquidation status effective January 1, 2025. The target audience includes media professionals, filmmakers, game developers, and regional stakeholders. The business operates primarily as a public sector entity providing funding, networking, and promotional services within the media industry. Technically, the website is built on WordPress using Visual Composer, Bootstrap 4, and several common plugins such as Events Manager and Contact Form 7. The site is served over HTTPS with good SSL configuration, though it lacks advanced security headers and cookie consent mechanisms. Performance and mobile optimization are moderate to good, with basic accessibility and SEO features. From a security perspective, the site employs HTTPS and some security plugins but lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a privacy policy present but no cookie consent banner. Overall, the website is professional, trustworthy, and suitable for its business purpose, though improvements in security headers, privacy compliance, and incident response transparency are recommended to enhance its security posture and regulatory adherence.

S

Südwestrundfunk

swr.de

59

Südwestrundfunk (SWR) is a large regional public broadcasting organization serving the German states of Baden-Württemberg and Rheinland-Pfalz. The website www.swr.de serves as a comprehensive portal for news, radio, television, and online media content including live streams and event calendars. The site targets a general audience interested in regional and national news, culture, sports, and lifestyle content. Technically, the website employs modern web technologies such as ES6 JavaScript modules, lazy loading, and integrates analytics tools like Chartbeat and Piano Analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are not evident. Privacy compliance is limited in the visible content, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, consistent with a public media entity.

P

PFPRO IT Services

pfproit.de

60

PFPRO IT Services is a small German IT company based in Saarbrücken, specializing in professional web development, IT consulting, and support services. Founded in 2008, the company offers a range of services including consulting, custom web application development, IT support, remote maintenance, and emergency IT services. They also provide a cloud-based industry solution called PFPRO Cloud R6 targeting sectors like gastronomy and entertainment. The website is well-structured, professionally designed, and targets both businesses and private users in the local region. The company maintains an active presence on LinkedIn, Xing, and GitHub, enhancing its professional credibility. Technically, the website employs a modern technology stack including Bootstrap, FontAwesome, jQuery, Owl Carousel, and Matomo for analytics, combined with Usercentrics for GDPR-compliant cookie consent management. The site is mobile-optimized and uses HTTPS with good SSL configuration. However, explicit security headers are not detected, and no dedicated security policy or incident response information is provided. The website demonstrates good privacy compliance and moderate user tracking through Matomo. From a security perspective, the site shows a solid baseline with HTTPS and consent management but lacks advanced security headers and documented incident response processes. No vulnerabilities or exposed sensitive data were detected in the HTML content. The WHOIS data aligns well with the website's business claims, showing consistent registration information and domain age appropriate for the company's founding date. Overall, PFPRO IT Services presents a trustworthy and professional online presence with good technical implementation and privacy compliance. Strategic improvements could include enhancing security headers, publishing a security policy, and providing incident response contacts to further strengthen trust and security posture.

Z

Zweckverband eGo-Saar

vergabe.saarland

57

The website vergabe.saarland serves as the official electronic procurement platform for the Saarland region in Germany, operated by Zweckverband eGo-Saar. It provides public sector entities such as cities, municipalities, and state administration with a centralized platform to publish tenders and manage electronic submissions. The platform targets businesses and contractors interested in public procurement within Saarland, offering services like digital download of tender documents and electronic bid submission. The site is well-branded with official logos and maintains a professional appearance consistent with government standards. Technically, the website is built on WordPress 6.8.3 with common web technologies such as jQuery and Slick Carousel for UI components. Hosting is provided by plusserver.com, and the site uses HTTPS with a valid SSL certificate. Cookie consent is implemented with an opt-in mechanism for Google Analytics and Facebook Ads, reflecting a good level of privacy compliance. However, some security headers are missing or misconfigured, such as an empty Content-Security-Policy and lack of DNSSEC, which slightly reduce the security posture. From a security perspective, the site enforces HTTPS and uses clientTransferProhibited status on the domain to prevent unauthorized transfers. The WHOIS data aligns well with the website's governmental purpose, showing consistent registration details. No signs of malware, phishing, or suspicious activity were detected. The cookie consent mechanism and privacy policy indicate GDPR compliance, but no explicit security policy or incident response information is published. Overall, vergabe.saarland is a legitimate, regionally focused government procurement platform with good content quality and business credibility. Security practices are adequate but could be improved by enabling DNSSEC, configuring security headers properly, and publishing security policies. The site is safe for general audiences and does not contain any adult or questionable content.

The website www.saarland.de is currently inaccessible due to a 403 Forbidden error page indicating that a security service or WAF is blocking access. The page content is minimal and only displays a block message without any business or contact information. The domain appears to be a legitimate German government domain based on its .de TLD and nameservers pointing to teresto.net, likely a hosting or DNS provider. However, the lack of accessible content prevents a full assessment of the website's business model, services, or compliance posture. Technically, the site uses basic CSS and font resources but no advanced frameworks or analytics are detected. Security headers and SSL configuration cannot be evaluated due to the block. Overall, the site’s security posture is unclear but the presence of a WAF indicates some level of protection. Privacy and compliance documentation are absent from the accessible content.

F

FITKO

115.de

62

The website www.115.de serves as the official German government service portal providing citizens with a centralized phone number (115) to access administrative information and services from federal, state, and local authorities. It targets the general public in Germany, offering comprehensive support for a wide range of administrative topics. The site is well-positioned as a trusted, nationwide service with over 71 million reachable citizens and multiple service centers. The content is professionally curated, accessible, and includes features for easy language and sign language support. Technically, the site is built on the TYPO3 CMS platform, leveraging modern web technologies such as Matomo for privacy-compliant analytics and Cookiebot for consent management. The site demonstrates good mobile optimization, accessibility, and SEO practices. The use of consent-based tracking and blocking mechanisms reflects a mature approach to privacy compliance. From a security perspective, the site enforces HTTPS and integrates cookie consent mechanisms to manage user privacy. While explicit security headers are not fully visible in the provided data, the overall posture is good with no evident vulnerabilities or exposed sensitive data. However, the site lacks publicly available security policies or incident response contacts, which could be improved. Overall, www.115.de is a high-quality, trustworthy government service website with strong privacy and usability features. It is recommended to enhance security transparency by publishing security policies and implementing comprehensive security headers to further strengthen its security posture.

CCTV News Content Co., Ltd. operates www.cctvplus.com as a global international video agency specializing in news video content, live streaming, archives, and special video services. The company targets media professionals, broadcasters, and international audiences interested in comprehensive news coverage, particularly related to China and global affairs. Their business model revolves around content provision and distribution with subscription and service offerings such as AI speech translation and virtual studio services. The website reflects a medium-sized media entity with consistent branding and professional content quality.

D

Access to this page has been denied

dreamstime.com

50

The website www.dreamstime.com is currently inaccessible due to a PerimeterX Web Application Firewall (WAF) security challenge page requiring human verification. This prevents access to any meaningful content, metadata, or business information. The WHOIS query for the domain returned no match, indicating either a WHOIS server issue or domain registration anomaly, which limits the ability to verify domain ownership and legitimacy. The site uses modern web technologies such as JavaScript and Google Fonts but lacks visible security headers or privacy compliance information in the accessible content. Overall, the security posture and compliance status cannot be fully assessed due to the blocked content. The domain appears legitimate but lacks publicly available registration data and accessible website content for full evaluation.

A

Antares Project GmbH

antares.net

55

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

The website www.lernsax.de/wws/9.php appears to be a minimal content page primarily embedding an iframe with a session-based PHP URL. There is no visible business branding, metadata, or descriptive content to ascertain the company's market position or services. The technical infrastructure includes basic JavaScript libraries such as jQuery and local scripts, hosted on nameservers associated with bringe.net. The site lacks HTTPS information and security headers, indicating a weak security posture. No privacy, cookie, or terms of service policies are present, and no contact or business information is available, limiting trust and compliance evaluation. Overall, the site appears to be an internal or restricted access portal rather than a public-facing business website.

M

Medienberatung NRW

bildungsmediathek-nrw.de

59

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

G

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel

geomar.de

50

GEOMAR Helmholtz-Zentrum für Ozeanforschung Kiel is a prominent German research institution specializing in oceanographic and climate research. The website serves as a comprehensive platform for scientific information, research programs, expeditions, and public outreach. It targets researchers, students, policymakers, and the general public interested in marine and climate sciences. Affiliated with the Helmholtz Association, GEOMAR holds a strong market position in the education and government research sectors. Technically, the website is built on TYPO3 CMS with modern JavaScript libraries such as jQuery and Slick Slider, providing a responsive and accessible user experience. The site demonstrates good SEO practices and mobile optimization, though performance is moderate. Security posture is solid with HTTPS enforced and some security headers present, but could be improved by adding more comprehensive headers and visible incident response policies. Overall, the site is trustworthy and professional, with clear branding and consistent content quality. However, it lacks a visible cookie consent mechanism and explicit security contact information, which are areas for improvement. The domain registration data aligns well with the website content, reinforcing legitimacy and trustworthiness.

Fastenaktion der Diözese St.Pölten is a well-established non-profit organization founded in 1963, operating under the Diocese of St. Pölten in Austria. The organization focuses on supporting international development projects in health, education, pastoral care, and environmental responsibility through donations and volunteer efforts. The website serves as an information hub and donation platform, targeting parish communities and supporters interested in charitable development cooperation. Technically, the site is built on WordPress using the TwentySixteen theme, with modern accessibility and cookie consent features implemented. Hosting is inferred to be on Amazon Web Services, ensuring reliable performance and security. Security posture is strong with HTTPS enforced and no visible vulnerabilities, although security headers could be improved. Privacy compliance is well addressed with a clear cookie consent mechanism and a GDPR-compliant privacy policy. Overall, the website presents a professional, trustworthy, and user-friendly experience aligned with its non-profit mission.

K

Katholische Aktion der Erzdiözese Wien

ka-wien.at

60

Katholische Aktion der Erzdiözese Wien is a small non-profit Christian organization affiliated with the Archdiocese of Vienna. It focuses on societal and ecological engagement to foster a more just and peaceful world, targeting socially conscious Christians and community members in Austria. The website provides information on their activities, volunteer opportunities, spiritual programs, and newsletters to keep their audience engaged. Technically, the website is built on the siteswift-CMS platform, utilizing modern JavaScript libraries such as jQuery, Swiper, and Magnific Popup. It implements cookie consent management via Klaro and uses Google Analytics for visitor tracking. The site is mobile-optimized and accessible, though SEO optimization is basic. From a security perspective, the site enforces HTTPS and uses CSRF tokens in forms, but lacks advanced security headers and published security policies. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good with a clear privacy and cookie policy, including consent mechanisms. Overall, the website is professional, trustworthy, and well-maintained, with clear contact information and consistent branding. Strategic improvements could include enhanced security headers, publishing incident response contacts, and adding a vulnerability disclosure policy to strengthen security posture and trust.

S

SPAR Österreichische Warenhandels-AG

spar.at

69

SPAR Österreichische Warenhandels-AG operates a leading supermarket chain in Austria, offering a wide range of food products, promotions, online shopping, and additional services such as party catering and a mobile app. The website reflects a mature digital presence with comprehensive content tailored to a broad audience, including families and general consumers. The company is well-established with a strong market position and consistent branding across its digital assets. Technically, the website leverages Adobe Experience Manager as its CMS, integrates Adobe Analytics for data insights, and uses Google Maps API for location services. Security measures include HTTPS enforcement, Cloudflare Turnstile captcha for bot protection, and a consent management platform ensuring GDPR compliance. However, explicit security policies and incident response contacts are not prominently published, indicating room for improvement in transparency. Overall, the website is professional, trustworthy, and compliant with privacy regulations, supporting SPAR's reputation as a reliable retail brand in Austria.

M

Meine Kirchenzeitung

tirolersonntag.at

66

Meine Kirchenzeitung is a regional media outlet focused on church and community news in Tirol, Austria, providing current news, reports, opinions, and images primarily related to religious and local topics. The website offers services such as news articles, ePaper subscriptions, event listings, and community photo sharing, targeting readers interested in faith and regional affairs. The business model is based on media publishing with advertising and subscription revenue streams. The site maintains consistent branding and professional editorial content, supported by author profiles and clear privacy policies.

M

MAXI ZOO

maxizoo.fr

69

MAXI ZOO is a well-established French e-commerce retailer specializing in pet products, including food, accessories, and care items. The website targets pet owners in France and operates under the umbrella of the Fressnapf Group, a recognized leader in the pet retail sector. The platform offers a comprehensive shopping experience with clear navigation, mobile optimization, and professional design. Technically, the site employs modern web technologies such as Vue.js and Adobe Tag Manager, ensuring a responsive and interactive user experience. Security measures are robust with HTTPS enforcement and multiple security headers, although the absence of a published security policy and incident response details indicates room for improvement. The lack of WHOIS data is a concern but does not detract significantly from the overall legitimacy given the brand's market presence. Overall, MAXI ZOO presents a secure, professional, and user-friendly online store with good privacy compliance and trustworthy business practices.

F

Fressnapf

fressnapf.com

53

Fressnapf is a large retail company specializing in pet supplies, serving primarily the German market. The website presents a professional design with good mobile optimization and moderate performance. The technical infrastructure includes Adobe Tag Manager for marketing and analytics purposes, and the domain is hosted with EuroDNS, indicating a stable hosting environment. However, the website lacks visible privacy and cookie policies, security headers, and explicit contact information, which are critical for compliance and trust. The WHOIS data is consistent with a legitimate business, showing no privacy protection or suspicious registration patterns. Overall, the site demonstrates a moderate digital maturity but requires improvements in security and privacy compliance to enhance trust and regulatory adherence.

Katholische Jungschar Südtirols is the largest children's organization in South Tyrol, Italy, serving over 9,500 children with more than 350 groups and 2,200 group leaders. The organization provides a wide range of services including annual programs, courses, campsites, and media resources aimed at children and youth. Their market position is strong within the regional non-profit sector focused on youth development. Technically, the website is built on WordPress with modern plugins and frameworks, offering good mobile optimization and SEO. Security posture is solid with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response contacts are absent. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

K

Katholische Kirche Kärnten

kath-kirche-kaernten.at

67

Katholische Kirche Kärnten operates as the official online portal for the Catholic Church in the Kärnten region of Austria, providing daily news, event information, and community engagement tools for its audience. The website serves as a comprehensive resource for parishioners and interested individuals, offering spiritual content, organizational updates, and access to church services and events. The platform maintains a consistent brand identity and high content quality, reflecting its role as a trusted religious institution's digital presence. Technically, the website employs a modern tech stack including jQuery, Slick Slider, and Google Analytics, with a responsive design optimized for mobile devices. The site uses HTTPS with strong SSL configuration and incorporates privacy and cookie consent mechanisms, demonstrating compliance with GDPR and user privacy standards. While no explicit security policies or incident response contacts are published, the site follows good security practices such as CSRF protection and encrypted form submissions. Security posture is solid with no detected vulnerabilities or suspicious domains linked. The site integrates social media channels effectively and maintains transparency through an impressum and privacy policy. Overall, the website is professional, trustworthy, and well-maintained, supporting the Catholic Church's mission in the region. Recommendations include enhancing security headers, publishing a formal security policy or incident response contact, and considering a terms of service page to further improve compliance and user trust.

K

Katholische Kirche Steiermark

graz-seckau.at

68

Katholische Kirche Steiermark operates as the official Catholic Diocese of Graz-Seckau, Austria, providing religious, educational, and community services. The website serves as a comprehensive portal for diocesan news, parish information, faith education, and community engagement. It holds a strong regional position as a trusted religious authority with a history dating back to 1218. Technically, the site is built on the siteswift-CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper.js, and integrates Google Maps and Matomo analytics. The site is mobile-optimized and accessible, with a clear navigation structure and professional design. Security posture is solid with HTTPS, security headers, and CSRF protections, though explicit security policies and incident response details are not publicly disclosed. Privacy compliance is well managed with a comprehensive privacy policy and cookie consent mechanism. Overall, the site is trustworthy, professional, and well-maintained, serving its target audience effectively.

K

Katholische Kirche Vorarlberg / Diözese Feldkirch

kath-kirche-vorarlberg.at

64

Katholische Kirche Vorarlberg / Diözese Feldkirch operates as a regional Catholic Church institution in Austria, providing religious services, community engagement, cultural heritage preservation, and educational programs. The website serves as a comprehensive portal for parishioners and the general public interested in church activities and spiritual resources. The organization positions itself as a trusted non-profit entity with a strong regional presence in Vorarlberg. Technically, the website is built on the siteswift CMS platform, utilizing modern JavaScript libraries such as jQuery, Photoswipe, and Swiper for enhanced user experience. The site demonstrates good mobile optimization and SEO practices, although some accessibility features could be improved. Security posture is solid with HTTPS enforced, CSRF protection in forms, and a GDPR-compliant cookie consent mechanism via Klaro. However, additional security headers and published security policies would strengthen the security framework. Overall, the website is professional, trustworthy, and well-aligned with its mission, though contact information and incident response details are not explicitly visible in the provided content.

The website www.lagerkochbuch.at is a non-profit community platform operated by the Diözesanleitung der Jungschar Wien, focused on providing cooking recipes, meal planning tools, and shopping list generation for youth groups and volunteers preparing meals for large groups. The site is well-branded and consistent with the Austrian youth organization Jungschar Wien, targeting children, youth leaders, and adult volunteers. Technically, the site uses an AngularJS 1.x framework with Bootstrap and Material Design components, delivering a moderate performance and good mobile optimization. Security posture is adequate with HTTPS and cookie consent implemented, but lacks modern security headers and uses an outdated JavaScript framework that may expose vulnerabilities. Privacy compliance is good with a visible privacy and cookie policy, though terms of service and explicit security policies are missing. Overall, the site is trustworthy, safe, and professionally presented, but would benefit from technical modernization and enhanced security practices.

K

Katholische Jungschar Österreichs

kaleidio.at

47

The website kaleidio.at represents a well-established non-profit organization, the Katholische Jungschar Österreichs, focused on organizing large-scale children's summer camps and community events in Austria and South Tyrol. It serves a broad audience of children and families, emphasizing child protection, community engagement, and pastoral care. The site is professionally designed with consistent branding and clear navigation, supporting its position as a leading event organizer in its sector. Technically, the site is built on TYPO3 CMS and leverages modern JavaScript libraries such as jQuery and Leaflet.js for interactive features. It integrates a GDPR-compliant cookie consent mechanism via the TRUENDO Privacy Center and uses Google Analytics with IP anonymization. The site is mobile-optimized and demonstrates good SEO practices, although some accessibility features could be improved. From a security perspective, the site uses HTTPS with anonymized analytics but lacks explicit security headers and publicly available incident response or vulnerability disclosure policies. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear privacy and cookie policies in German. Contact information is limited to an email address, with no phone or physical address explicitly provided. Overall, kaleidio.at is a trustworthy and professionally managed website for a non-profit organization with a clear mission and community focus. Strategic improvements in security headers, incident response transparency, and expanded contact details would enhance its security posture and user trust.

D

Dreikönigsaktion der Katholischen Jungschar Österreichs

kinderarbeitstoppen.at

47

The website www.kinderarbeitstoppen.at is a well-structured non-profit advocacy platform operated by Dreikönigsaktion der Katholischen Jungschar Österreichs, focused on combating child labor globally through awareness campaigns, educational materials, and political advocacy for supply chain legislation. The site targets a broad audience including activists, educators, and policymakers, positioning itself as a trusted voice in child labor issues within Austria and Europe. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and privacy-conscious analytics tools such as Matomo, alongside Google Tag Manager and Facebook Pixel for marketing and tracking. The presence of a comprehensive cookie consent mechanism and GDPR-compliant privacy policy reflects a mature approach to privacy and compliance. Security posture is strong with HTTPS enforced and no evident vulnerabilities, though some security headers could be improved. Overall, the site demonstrates good digital maturity and professionalism, with clear contact information and active social media engagement. The domain registration data aligns well with the website's claims, supporting legitimacy and trustworthiness.

The website jungscharshop.at is an e-commerce platform operated by the Catholic Jungschar organization in Austria, offering religious educational materials, games, and gifts targeted at youth groups and church communities. The site serves a niche market within the non-profit religious sector, focusing on supporting youth work through product sales. The technical infrastructure uses Bootstrap, jQuery, and Google Analytics, with basic mobile optimization and accessibility features. While the site is functional and professionally designed, some backend PHP warnings are visible, indicating code quality issues that could pose security risks. Cookie consent and privacy policies are implemented, reflecting GDPR compliance awareness, but explicit security policies and incident response information are absent. Overall, the site is moderately secure and trustworthy but would benefit from technical and security improvements.

D

Dreikönigsaktion, Hilfswerk der Katholischen Jungschar

dka.at

51

Dreikönigsaktion is a non-profit charitable organization affiliated with the Catholic youth group in Austria, focusing on providing aid and development assistance to over a million people in Africa, Asia, and Latin America. The website serves as an informational and fundraising platform, leveraging the TYPO3 CMS and modern web technologies to deliver content primarily in German to a general audience. The organization maintains a consistent brand presence and demonstrates a commitment to privacy through the implementation of a cookie consent mechanism and the use of privacy-respecting analytics tools like Matomo. Security posture is solid with HTTPS enforced, though there is room for improvement in security headers and explicit security policies. Overall, the website is professional, trustworthy, and well-positioned within its sector.

C

Caritas Österreich

aufrunden.at

48

The website 'Aufrunden, bitte.' is a charitable initiative operated by Caritas Österreich in partnership with major Austrian retail chains such as BILLA, PENNY, BIPA, and SUTTERLÜTY. It enables customers to round up their purchase amounts to support social projects for disadvantaged people in Austria. The initiative has been active since 2013 and has collected significant donations, demonstrating strong market presence and community engagement. The website content is well-structured, professionally designed, and targets Austrian consumers with clear calls to action and informative content about the initiative and its impact. Technically, the website uses a modern tech stack including Bootstrap for responsive design, jQuery for interactivity, and integrates Google Analytics and Facebook SDK for tracking and social media engagement. The site is mobile optimized and SEO friendly, although some accessibility features could be improved. Security practices include anonymized IP tracking and a cookie consent banner, but there is a lack of explicit security headers and no published security or incident response policies. From a security perspective, the site is accessible without WAF blocking and shows no signs of vulnerabilities or exposed sensitive data. However, it lacks advanced security policies and vulnerability disclosure mechanisms. The WHOIS data confirms the domain is legitimately registered to Caritas Österreich with consistent registration details and domain age matching the initiative's history. Overall, the website is trustworthy, professionally maintained, and compliant with basic privacy regulations. Strategic improvements in security headers, incident response transparency, and vulnerability disclosure would enhance its security posture and user trust.

C

Caritas

ife-austria.at

64

The website www.ife-austria.at represents an established non-profit organization under Caritas Austria, focused on facilitating international volunteer deployments in social projects across multiple continents. It targets individuals seeking meaningful volunteer experiences abroad, providing structured programs, risk assessments, and support. The site is well-branded, consistent, and offers comprehensive information about its services and deployment locations. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper, and integrates Sentry for error monitoring. It demonstrates good mobile optimization, accessibility, and SEO practices. The presence of a detailed cookie consent mechanism and GDPR-compliant privacy policy reflects a mature approach to privacy compliance. Security posture is strong with HTTPS enforced, appropriate security headers, and no visible vulnerabilities. However, explicit security policies and incident response information are not published, which could be improved. Analytics and tracking are implemented responsibly with user consent. Overall, the site is professional, trustworthy, and secure, with minor areas for enhancement in transparency around security policies and direct contact information.

Emmaus Innsbruck is a small non-profit organization affiliated with Caritas der Diözese Innsbruck, focused on supporting homeless and unemployed individuals with prior addiction issues. Their services include various labor and integration assistance programs, psychotherapeutic support, and a solidarity-based agricultural project. The website is professionally designed with clear navigation and relevant content tailored to their target audience. Technically, the site uses basic web technologies including an outdated jQuery version, lacks advanced security headers, and does not implement cookie consent mechanisms, indicating room for improvement in security and privacy compliance. Security posture is moderate with HTTPS usage but missing modern security best practices. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

C

Caritas Schulen

caritas-schulen.at

66

Caritas Schulen is a well-established non-profit educational institution in Austria specializing in social, health, and care profession training for youth and adults. The website reflects a professional and accessible platform with comprehensive educational offerings and strong cooperation with social organizations. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and SEO best practices. Security posture is good with HTTPS and cookie consent mechanisms, though explicit security headers and incident response information are absent. Overall, the site is trustworthy and compliant with GDPR, serving its target audience effectively.

F

Freiwilligen Zentrum Salzburg

freiwilligenzentrum-salzburg.at

54

Freiwilligen Zentrum Salzburg is a regional non-profit organization dedicated to promoting and coordinating voluntary social engagement in the Salzburg region of Austria. The organization acts as a hub and service center for volunteers and social institutions, offering information, placement, and training services. The website is professionally designed using WordPress with modern plugins such as Elementor and Yoast SEO, providing a good user experience and mobile optimization. Social media integration and a cookie consent mechanism demonstrate digital maturity and privacy awareness. Security posture is solid with HTTPS and privacy-respecting analytics via Matomo, though explicit privacy and security policies are not published. WHOIS data confirms the legitimacy and consistency of the domain registration with the organization's claims.

Y

youngCaritas Österreichweit

youngcaritas.at

41

youngCaritas Österreichweit is a non-profit organization focused on youth engagement in social actions and workshops across Austria. The website serves as a national platform to promote various campaigns, workshops, and youth participation initiatives aimed at helping people in need. The organization targets children, youth, teachers, and multipliers with a clear mission to facilitate social responsibility and community involvement. Technically, the website is built on WordPress with modern plugins for SEO, cookie management, and social sharing, demonstrating a moderate to good level of digital maturity. The site is mobile optimized and uses HTTPS with standard security headers, reflecting a good security posture. However, explicit privacy and terms of service pages were not found in the provided content, indicating room for improvement in compliance documentation. Overall, the website is professional, trustworthy, and safe for general audiences.

Helium Development is a specialized technology company focused on building Shopify apps and providing website design services tailored to e-commerce merchants. Established in 2015, the company positions itself as a Shopify Expert, delivering reliable and customer-centric software solutions that enhance online business operations. Their website reflects a professional and consistent brand image, targeting Shopify merchants seeking custom app development and improved user experience. Technically, the website employs modern JavaScript technologies, integrates analytics and user behavior tracking tools such as Google Tag Manager and Hotjar, and maintains good mobile optimization and SEO practices. Hosting and DNS configurations are standard, with domain registration secured through GoDaddy and DNS managed via NS1, although DNSSEC is not enabled. From a security perspective, the site enforces HTTPS and domain registration locks, indicating good domain security hygiene. However, the absence of DNSSEC, security headers, and a public incident response contact or vulnerability disclosure page suggests areas for improvement. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, Helium Development presents a trustworthy and professional online presence with moderate to strong security posture and compliance. Strategic enhancements in DNS security and security policy transparency would further strengthen their risk profile and customer trust.

U

Universitätsklinikum Leipzig

wirsindukl.de

47

The website 'wirsindukl.de' serves as the official recruitment portal for Universitätsklinikum Leipzig, the largest hospital in Leipzig, Germany. It provides comprehensive information about job opportunities, benefits, career development, and international recruitment. The site targets healthcare professionals and applicants seeking employment or training in medical and administrative fields. The business is well-positioned in the healthcare sector with recognized certifications and a strong employer brand. Technically, the site is built on GravCMS, uses modern JavaScript libraries like jQuery and Swiper.js, and implements GDPR-compliant cookie consent mechanisms. The site is mobile-optimized, accessible, and SEO-friendly. Security posture is good with HTTPS enforced and secure forms, though it lacks explicit security policy and incident response information. Overall, the site is professional, trustworthy, and compliant with privacy regulations, making it a reliable resource for prospective employees.

V

Vautron Rechenzentrum AG (Registrar)

die-zukunft.eu

51

Die-zukunft.eu is a German-language political media platform focused on fostering debates about the future of Europe and the European Union. It operates as a non-profit media outlet providing blog articles, podcasts, e-papers, and event information primarily targeting German-speaking European citizens interested in left-wing political discourse. The platform is positioned as a niche player in the political media landscape with a consistent brand and good content quality. Technically, the website is built on WordPress with modern plugins for SEO, page building, and privacy-respecting analytics (Matomo). The site is hosted by a reputable provider and uses HTTPS with a cookie consent mechanism compliant with GDPR. Security posture is good but could be improved by adding more HTTP security headers and a vulnerability disclosure mechanism. Overall, the website is safe, professional, and trustworthy with no adult or explicit content detected.

N

nd - Journalismus von links

dasnd.de

49

nd-aktuell.de is a German left-wing political news media website operated under a cooperative business model. It offers news articles, podcasts, newsletters, and subscription services targeting politically engaged readers interested in progressive perspectives on politics, society, culture, and sports. The website is well-branded, professionally designed, and provides rich content with clear navigation and multiple engagement channels including social media and donation options. Technically, the site runs on a custom CMS (KONTEXT-CMS) with legacy jQuery and modern consent management tools, hosted by SINMA. It uses Matomo analytics for privacy-friendly tracking and implements GDPR-compliant cookie consent. Security posture is good with HTTPS enforced, but lacks explicit security headers and published security policies. Contact information is primarily via web forms and cooperative site links, with no direct emails or phone numbers found. Advertising is present but limited to programmatic ads and Facebook Pixel tracking. Overall, the site is trustworthy, safe, and well-positioned in its niche media market.

D

Deniz, Gebauer, Junk, Langhammer GbR

warenform.de

51

WARENFORM GbR is a small, established German agency founded in 2001 specializing in communication solutions, design, and custom software development primarily for NGOs, political entities, unions, and media organizations. Their service offerings include consulting, corporate design, website development, print materials, event communication, and bespoke software applications. The company maintains a professional online presence with a well-structured website built on the KONTEXT-CMS platform, leveraging modern JavaScript libraries and Matomo analytics with privacy-conscious configurations. Security posture is solid with HTTPS and Content-Security-Policy headers, though improvements are recommended in cookie consent and formal security policies. Contact information is transparent and complete, including a published PGP key for secure communication. Overall, the website reflects a trustworthy and credible business with a moderate technical maturity and good compliance with privacy regulations.

T

troet.cafe

troet.cafe

73

troet.cafe operates as the largest German-speaking Mastodon instance, providing a federated social networking platform for users to connect, share, and explore content within the Fediverse. The platform emphasizes community engagement and social interaction without advertising or algorithmic interference. Technically, the site is built on Mastodon version 4.3.8, leveraging modern web technologies including React and WebSockets for real-time communication. The site is mobile-optimized and presents a consistent, professional design with good navigation and content relevance. Security-wise, the site enforces HTTPS and uses script integrity attributes, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partially met with a privacy policy present, but no cookie consent mechanism is detected. Overall, the domain is privacy protected in WHOIS, which is typical for such platforms, and the site shows no signs of blocking or WAF interference, indicating good accessibility and trustworthiness.

S

sinma GmbH

sinma.de

60

sinma GmbH is a small German telecommunications company specializing in providing full-service internet solutions tailored for business customers. Their offerings include fiber optic leased lines, DSL with fixed IPs, web hosting, server housing, virtual servers, backup solutions, VPN networks, and related services such as domain management and firewalls. The company emphasizes high availability and security in their network solutions and has been operating since 1991, indicating a long-standing presence in the market. The website reflects a professional and consistent brand image with clear navigation and relevant business content targeting German business clients. From a technical perspective, the website employs basic web technologies including JavaScript and CSS without modern frameworks or CMS detected. The site is moderately optimized for performance and accessibility but lacks advanced mobile optimization. There is no evidence of analytics or tracking scripts, which suggests minimal user tracking. However, the absence of security headers and explicit SSL/TLS information indicates room for improvement in technical security measures. Security posture evaluation reveals gaps such as missing privacy and cookie policies, lack of security headers, and limited contact information. No incident response or vulnerability disclosure information is provided, which could impact trust and compliance. The WHOIS data shows partial consistency with the website's claims but lacks detailed registrant information, limiting full legitimacy verification. Overall, the site is accessible without WAF or blocking mechanisms, and content safety is rated safe with no adult or questionable content. The overall risk assessment suggests the company maintains a moderate security and compliance posture suitable for its business scale but should prioritize implementing privacy policies, enhancing security headers, and expanding contact information to improve trust and regulatory compliance. Strategic recommendations include publishing comprehensive privacy and cookie policies with consent mechanisms, enforcing HTTPS with proper security headers, and establishing clear incident response and vulnerability disclosure channels.

D

Deniz, Gebauer, Junk, Langhammer GbR

warenform.net

10

WARENFORM GbR is a small German agency founded in 2001 specializing in communication solutions, design, and custom software development. Their client base includes political representatives, NGOs, unions, media, and companies, positioning them as a niche provider with a strong portfolio and trusted reputation. The website reflects a professional and consistent brand image with comprehensive service descriptions and client references. Technically, the site uses a custom CMS (KONTEXT-CMS) with a modern but somewhat dated JavaScript stack including jQuery and various plugins. Hosting appears to be managed by a partner IT company, o.open.de. Security posture is strong with HTTPS, Content-Security-Policy headers, and privacy-conscious Matomo analytics implementation. However, the site lacks an explicit cookie consent mechanism and formal incident response contact details. Overall, the site is well-maintained, trustworthy, and compliant with GDPR requirements.

BGO Living is a Canadian property management company specializing in residential apartments and townhomes across multiple provinces. The company emphasizes exceptional resident service, community engagement, and environmental responsibility, managing over 45 rental communities. Their website reflects a professional and modern digital presence built on Vue.js and the Rentsync platform, with good mobile optimization and accessibility features. Privacy and cookie compliance are well implemented with clear policies and user consent mechanisms. Security posture is moderate with room for improvement in HTTP security headers and explicit incident response information. The absence of WHOIS data reduces domain trust slightly but does not detract significantly from the overall legitimacy given the professional content and external references. Strategic recommendations include enhancing security headers, verifying SSL configuration, and publishing explicit security policies to improve trust and compliance.

W

Welput

welput.com

58

Welput is a large, specialist unlisted Central London office fund managed by BentallGreenOak (BGO). The company focuses on creating sustainable, wellness-oriented office environments with a strong emphasis on future-proofing and community engagement. Their portfolio includes major developments such as 105 Victoria Street and Regent's Wharf, targeting high sustainability certifications like BREEAM Outstanding and WELL Platinum. The website reflects a professional and modern digital presence built on WordPress, with good SEO and mobile optimization. Security posture is adequate with HTTPS and cookie consent mechanisms, though improvements such as DNSSEC and security headers are recommended. Overall, the site is trustworthy and well-aligned with the business's market position and audience.