Security Directory

S

Stiftung Liste Basel

liste.ch

57

Liste Art Fair Basel is a Swiss-based non-profit foundation organizing a well-established contemporary art fair event in Basel. The website serves as an information portal for visitors, artists, partners, and press, providing event details, application information, and contact channels. The business is positioned as a key cultural event with long-term partnerships, notably with E. Gutzwiller & Cie, Banquiers. Technically, the site is built on Magnolia CMS, uses modern web standards, and integrates Google Analytics and Tag Manager for visitor tracking. The site is mobile-optimized and provides a cookie consent mechanism, indicating a basic level of privacy compliance. Security posture is good with HTTPS enforced, but lacks advanced security headers and dedicated security policy disclosures. Overall, the website is professional, trustworthy, and serves its audience effectively.

B

Bundesministerium für Bildung, Wissenschaft und Forschung

erwachsenenbildung.at

62

erwachsenenbildung.at is an official Austrian government portal dedicated to adult education, providing comprehensive information, services, and learning opportunities for trainers, coaches, and educational managers. The site is managed by the Bundesministerium für Bildung, Wissenschaft und Forschung and supported by partners such as CONEDU and the Bundesinstitut für Erwachsenenbildung. It serves as a national and international hub for networking and professional development in the adult education sector. Technically, the website employs modern web standards, including HTML5, CSS3, JavaScript, and integrates Cookiebot for consent management and Google Tag Manager for analytics. The site is well-optimized for mobile devices and accessibility, with good SEO practices in place. Security-wise, the site enforces HTTPS, uses appropriate security headers, and provides a robust cookie consent mechanism, although explicit security and incident response policies are not publicly available. Overall, the domain registration aligns perfectly with the official government entity, reinforcing the site's legitimacy and trustworthiness.

P

Pilates Babes GmbH

pilatesbabes.com

67

Pilates Babes GmbH operates a professionally designed e-commerce website focused on Pilates fitness classes, events, retreats, and merchandise primarily targeting the Austrian and German markets. The company leverages the Shopify platform to deliver a mobile-optimized, fast-loading website with integrated social media presence and customer testimonials, positioning itself as a niche wellness brand. Technically, the site uses modern web technologies including Shopify's Dawn theme, JavaScript, CSS, and hCaptcha for form security. The security posture is solid with HTTPS enforced and domain locking, though explicit security policies and incident response contacts are absent. Privacy compliance is limited due to missing privacy and cookie policies. Overall, the website is trustworthy and professional but could improve transparency and compliance documentation.

W

Walzwerk

walzwerk.ch

52

Walzwerk is a mixed-use commercial real estate area located in Münchenstein and Arlesheim, Switzerland, offering a vibrant environment combining business, education, culture, gastronomy, and leisure. The website presents the property as a regional hub for diverse activities, targeting local businesses, cultural participants, and visitors seeking educational and recreational experiences. The business model centers on leasing commercial and cultural spaces and hosting events, supported by a parent company, SF Urban. Technically, the website uses modern web technologies including HTML5, CSS3, JavaScript with jQuery and GSAP, and integrates Google Analytics for user tracking. The site is well-structured, mobile-optimized, and SEO-friendly, though accessibility features are basic. Security posture is solid with HTTPS enforced and cookie consent implemented, but lacks advanced security headers and explicit security policies. No critical vulnerabilities or suspicious elements were detected. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, though contact information is not explicitly provided in the HTML content.

M

Malheur&Fortuna

malheur-fortuna.ch

62

Malheur&Fortuna is a small Swiss architectural and urban planning firm based in Basel, specializing in projects, research, and publications related to urban infrastructure, architecture, and city planning. The company is founded by three architects with Master of Science degrees from ETH Zürich, indicating a high level of professional expertise. Their website reflects a niche market position targeting professionals and academics interested in urban design and infrastructure. Technically, the website uses modern JavaScript modules and Google Analytics with IP anonymization, indicating a moderate level of digital maturity. The site is mobile optimized and SEO friendly but lacks some accessibility features and security headers. Security posture is generally good with HTTPS enforced and cookie consent implemented, but the absence of privacy policy and terms of service pages represents a compliance gap. No critical vulnerabilities or suspicious elements were detected. Overall, the website is professional, trustworthy, and safe for general audiences.

O

Opportunus s.r.o.

ecpaper.cz

42

EcPaper, operated by Opportunus s.r.o., provides a digital solution for converting traditional printed catalogs and flyers into interactive online formats. Their service targets businesses seeking to enhance customer engagement through responsive, SEO-optimized digital catalogs accessible on multiple devices. The company positions itself as a niche technology provider within the Czech Republic, offering tools for catalog management, analytics integration, and online sales channel enhancement. The website reflects a professional and consistent brand image with clear contact information and client references, supporting its credibility in the market. Technically, the website employs modern web standards including HTML5, CSS3, JavaScript, and jQuery, with responsive design facilitated by Bootstrap. Integration with Google Fonts and Google Maps API enhances user experience. The site is powered by dmpCMS, indicating a managed content platform. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are evident through meta tags and structured content. Security posture is adequate with HTTPS usage and secure form handling, but lacks advanced security headers and cookie consent mechanisms, which are important for GDPR compliance. No WHOIS data was retrievable, which raises concerns about domain registration transparency. No signs of malicious content or vulnerabilities were detected in the visible content. Overall, the website presents a trustworthy business front with room for improvement in security best practices and privacy compliance. Strategic recommendations include implementing security headers, cookie consent, and publishing terms of service to enhance user trust and regulatory adherence.

The Studer/Ganz Stiftung website represents a small Swiss non-profit foundation focused on promoting literature and cultural initiatives, as evidenced by the mention of the CHRYSALIDE Binding Förderpreis für Literatur. The site is multilingual, targeting German, French, and Italian speakers, reflecting Switzerland's linguistic diversity. The business model centers on cultural sponsorship and foundation activities, positioning it as a niche player within the Swiss cultural sector. Technically, the website employs basic web technologies including HTML5, CSS, JavaScript, and jQuery. The site is moderately optimized for performance and mobile use but lacks advanced SEO and accessibility features. There is no evidence of a CMS or modern frameworks, indicating a simple, possibly static site architecture. From a security perspective, the site lacks visible security headers and cookie consent mechanisms, which are important for GDPR compliance and user trust. No forms or direct contact information are present on the homepage, limiting user engagement and transparency. The WHOIS data aligns well with the website's claims, showing consistent registration details without privacy protection, appropriate for a non-profit entity. Overall, the website is functional but basic, with room for improvement in privacy compliance, security posture, and user engagement. Strategic enhancements in these areas would strengthen trust and regulatory adherence.

F

Outlook

fmp-berlin.de

45

The website fmp-berlin.de hosts a Microsoft Outlook Web Access (OWA) login portal, providing email access services to authorized users, likely employees or members of an organization based in Germany. The site is focused on secure email access and does not provide public-facing business information or marketing content. The technical infrastructure is based on Microsoft OWA technology with standard web technologies such as JavaScript, HTML, and CSS. The site shows moderate digital maturity with basic mobile optimization and accessibility features but lacks advanced SEO and modern web frameworks. Security posture is moderate; HTTPS is used, and the login form uses POST with autocomplete disabled, but there is an absence of explicit security headers and privacy policies. No contact or business information is provided on the page, limiting transparency and trust signals. Overall, the site is functional for its purpose but could improve in security best practices and compliance documentation.

B

BGO

findalternative.co.uk

43

Findalternative.co.uk is a website promoting a real estate development project named '105 Victoria Street' in London, managed by the developer BGO. The site focuses on showcasing the workspace and commercial property offerings with a target completion date in Q3 2026. The business model centers on real estate development and leasing, targeting commercial tenants and businesses seeking workspace in a prime London location. The website is professionally designed with modern web technologies, including SVG graphics and Google Analytics integration, indicating a moderate level of digital maturity. However, the site lacks critical compliance elements such as privacy and cookie policies, and no forms or extensive contact details are provided, limiting user engagement and transparency. Security posture is moderate with HTTPS usage but no visible security headers or explicit security policies. The domain registration is consistent with the business timeline and registered through a reputable registrar, supporting legitimacy. Overall, the site presents a professional front for a niche real estate project but requires improvements in privacy compliance, security best practices, and richer contact information to enhance trust and regulatory adherence.

The website jplayer.it is currently inaccessible beyond a Cloudflare security challenge page, which prevents access to any actual business content or information. The domain WHOIS data is suspicious, showing a creation date in the future (September 18, 2025), which undermines trust and legitimacy. No privacy, cookie, or terms of service policies are present, nor is there any contact information or business description visible. The site uses Cloudflare Turnstile for bot verification, indicating a security mechanism to prevent automated access. Overall, the website lacks transparency and content, making it impossible to assess the business or its services accurately. The security posture is moderate due to HTTPS and DNSSEC, but the absence of security headers and policies reduces confidence.

M

Magistra, a.s.

magistra.cz

62

Magistra.cz is a Czech Republic based online pharmacy and retail pharmacy chain operating over 200 physical locations nationwide. The company offers a broad range of pharmaceutical and healthcare products through its e-commerce platform, supported by a loyalty program and a mobile application facilitating e-prescription reservations. The website is professionally designed with clear navigation and relevant content targeted at general consumers seeking pharmaceutical products and health-related services. Technically, the site uses modern web technologies including HTTPS, Google Tag Manager, and multiple analytics platforms, hosted partially on Microsoft Azure Blob Storage. Security posture is adequate with HTTPS enforced but lacks visible security headers and explicit privacy and cookie policies, which are important for compliance and user trust. The WHOIS data is unavailable, likely due to privacy protection, which is common and justified for this business type. Overall, the site demonstrates a strong business presence and trustworthy e-commerce platform in the healthcare sector.

B

Buch am Platz Winterthur

buchamplatz.ch

65

Buch am Platz Winterthur operates a professional online bookstore serving the local Swiss market. The website offers a broad catalog of books, including new releases and children's books, with customer reviews and event information enhancing user engagement. The business model focuses on retail e-commerce with options for online ordering and in-store pickup, targeting general book buyers in the Winterthur region. Technically, the site uses modern JavaScript libraries such as jQuery and Flatpickr, and implements session management features. However, there is a lack of visible privacy and cookie policies, which impacts compliance. Security posture is moderate with HTTPS implied but missing explicit security headers and incident response contacts. Overall, the website is trustworthy and professionally presented but could improve privacy compliance and security transparency.

L

Literaturhaus Basel

literaturhaus-basel.ch

55

Literaturhaus Basel is a well-established non-profit cultural institution based in Switzerland, dedicated to promoting literature through events, courses, and community projects. The organization enjoys strong local support from cultural authorities and foundations, positioning it as a key player in Basel's literary scene. The website reflects this with clear event listings, accessibility information, and community engagement features. Technically, the site uses modern web technologies including HTMX and Plyr for media, and integrates Google Analytics for visitor insights. The site is mobile-optimized and accessible, though there is room for improvement in cookie consent and security policy transparency. Security posture is adequate with HTTPS and no visible vulnerabilities, but lacks explicit security headers and incident response information. Overall, the domain registration is consistent with the organization's profile, enhancing trustworthiness.

G

Google LLC

googlemaps.com

68

This website is a Google consent management page designed to handle user consent preferences for Google services, specifically Google Maps, targeting German users. It is part of Google's extensive ecosystem for privacy compliance and user data management. The page is professionally designed, mobile optimized, and uses modern web technologies consistent with Google's standards. The domain is a subdomain of google.com, which is a well-established and trusted domain owned by Google LLC, a subsidiary of Alphabet Inc. The WHOIS data for the subdomain is not separately registered, which is typical for such subdomains. Technically, the site employs Google's proprietary scripts and Material Design Components, hosted on Google Cloud Platform, ensuring fast performance and high availability. Security is robust with HTTPS enforced, comprehensive security headers, and no visible vulnerabilities. Privacy compliance indicators are moderate on this page alone, as explicit privacy and cookie policy links are not present here but are expected on parent domains. No contact information is directly provided on this page. Overall, the security posture is strong, with no detected vulnerabilities or suspicious elements. The site is safe for general audiences, with no adult or explicit content. The domain and content are consistent with a legitimate Google service, supporting a high trustworthiness rating. Strategic recommendations include maintaining security best practices, enhancing explicit privacy and cookie policy visibility, and continuous monitoring of third-party scripts.

H

HESCOM-Software GbR

hescom.de

57

HESCOM-Software GbR is a small German software company specializing in software solutions for antiquarian bookshops, collectors, galleries, and publishers. Their offerings include proprietary software products such as Antiquar-PC, Exlibris-PC, and an integrated webshop solution, targeting niche markets with tailored IT consulting and web design services. The company has a consistent market presence since 2006 and maintains a professional website with clear navigation and relevant content. Technically, the website uses a proprietary web framework with standard web technologies including jQuery and Slick Carousel, and employs Piwik/Matomo for analytics. Mobile optimization and SEO are adequately addressed, though accessibility is basic. Security posture is moderate with HTTPS implied but lacking explicit security headers and published security policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Contact information is clearly provided, enhancing business credibility. Overall, the website is functional and professional but could improve in security and privacy compliance aspects.

The analyzed content corresponds to a Chrome internal error page (chrome-error://chromewebdata/) that displays the offline dinosaur game when no internet connection is available. There is no actual website content, business information, or external links present. The page is a local browser resource and not a public website. Consequently, no business description, contact information, or privacy/security policies are available. The technical infrastructure is limited to client-side JavaScript and HTML5 Canvas used for the game rendering within the browser environment. No external hosting, CMS, or analytics services are involved. Security posture and privacy compliance cannot be assessed due to the nature of the content. Overall, this is not a website but a browser error page, and no meaningful business or security analysis applies.

The Liturgy Office website serves as the official online presence for the Department for Christian Life and Worship under the Catholic Bishops' Conference of England and Wales. It provides liturgical resources, calendar information, prayers, and news relevant to the Catholic community in England and Wales. The site targets clergy, church members, and religious scholars, positioning itself as a trusted resource within the religious non-profit sector. The business model is non-commercial, focusing on service and information dissemination. Technically, the website employs basic web technologies including HTML5, CSS, Google Fonts, and Google Tag Manager for analytics. The site lacks a modern CMS and advanced frameworks, indicating a relatively simple infrastructure. Performance and mobile optimization are basic, with room for improvement in accessibility and SEO. No forms or user input fields reduce complexity and security risks. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but lacks DNSSEC and security headers, which are recommended for enhanced protection. No privacy or cookie policies are present, indicating compliance gaps with GDPR and related regulations. The WHOIS data is transparent and consistent with the organization's identity, supporting legitimacy. No critical vulnerabilities or suspicious patterns were detected. Overall, the website is a reliable and safe resource with good business credibility but requires improvements in privacy compliance, security hardening, and technical modernization to enhance user trust and regulatory adherence.

F

FormPro Angola

formpro-angola.org

44

FormPro Angola is a vocational training and workforce development project focused on Angola, resulting from cooperation between Angola and Germany. The website provides educational resources, event information, and publications related to professional training. It targets professionals, trainees, and institutions involved in Angola's labor market development. The project is positioned as a niche non-profit educational initiative supported by reputable partners such as BMZ and GIZ. Technically, the website uses an older CMS (KONTEXT-CMS) and includes legacy technologies like jQuery 1.7.1, indicating moderate digital maturity. The site is accessible and well-structured but lacks modern security and privacy features. Security posture is moderate with no visible HTTPS enforcement or security headers and outdated JavaScript libraries posing potential risks. Privacy compliance is weak due to absence of privacy and cookie policies. Overall, the website is safe and professional but requires updates to improve security and compliance.

o.open is a small German IT service provider specializing in network design, system integration, hosting, and administration of internet and office networks. The company focuses on supporting social and left-wing projects, providing technical expertise and infrastructure services. The website content is professional and targeted at a niche audience within Germany, with references to partner organizations and detailed contact information. The business appears to have been founded in the early 2000s, with a strong community and social orientation. Technically, the website uses standard modern web technologies such as HTML5, CSS3, and vanilla JavaScript with some security-conscious practices like nonce usage in scripts. However, there is no evidence of advanced frameworks or CMS platforms. The site is moderately optimized for performance and mobile use but lacks comprehensive accessibility and SEO features. Security posture is moderate, with no visible security headers or HTTPS confirmation in the provided data, and no cookie or privacy consent mechanisms detected. From a security perspective, the site does not show signs of blocking or WAF interference, and no vulnerabilities or exposed sensitive data were found in the content. The WHOIS data is limited due to DENIC privacy policies but shows consistent nameservers under the domain's control. The domain legitimacy is high, though some WHOIS details like creation and expiry dates are not disclosed. Privacy compliance is basic, with GDPR-related documents available but no cookie consent. Overall, the website is trustworthy and professional but could improve its security posture and privacy compliance. Strategic recommendations include implementing HTTPS verification, adding security headers, introducing cookie consent mechanisms, and enhancing mobile and accessibility features to improve user experience and compliance.

D

Deutscher Bundestag

bundestag.de

63

The Deutscher Bundestag website serves as the official online presence of the German Parliament, providing comprehensive information about parliamentary activities, members, schedules, and live streams. The site targets the general public and stakeholders interested in German governmental affairs. It demonstrates a high level of content quality, professional design, and clear navigation, reflecting its role as a government information portal. Technically, the site uses standard web technologies including JavaScript and CSS, with moderate performance and good mobile optimization. However, there is a lack of visible security headers and explicit privacy or cookie policies, which are areas for improvement. The security posture is moderate due to missing explicit security best practices and incident response information. Overall, the domain and website are legitimate and consistent with official government use, with no suspicious indicators detected.

D

Die Linke im Europaparlament

dielinke-europa.eu

44

Die Linke im Europaparlament is a political group representing left-wing interests within the European Parliament, focusing on social justice, peace, and democracy in Europe. The website serves as an information hub for their parliamentary activities, news, publications, and contact with representatives. It targets European citizens interested in progressive politics and EU governance. The organization maintains a consistent brand presence and leverages official EU affiliations to establish trust. Technically, the website is built on WordPress with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and FontAwesome. The site is hosted by http.net Internet GmbH and demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are well implemented with proper metadata and Open Graph tags. From a security perspective, the site enforces HTTPS and includes privacy consent mechanisms in its contact forms, aligning with GDPR requirements. However, it lacks advanced security headers and a public vulnerability disclosure policy. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates a consistent and legitimate domain registration. Overall, the website presents a professional and trustworthy digital presence for a political organization, with room for improvement in security hardening and cookie consent implementation to enhance privacy compliance and user trust.

S

Schauspiel Frankfurt

schauspielfrankfurt.de

56

Schauspiel Frankfurt is a cultural institution specializing in theatrical performances and related services such as guided tours, ticket sales, and subscriptions. The website presents a professional and consistent brand image targeting theater enthusiasts and the general public in Frankfurt, Germany. It maintains a digital magazine and active social media presence to engage its audience. The business model is focused on live cultural events and audience engagement through subscriptions and ticketing. Technically, the website is built on the spiritec WebCMS platform tailored for theaters and opera houses. It uses modern web technologies including JavaScript and CSS, with video integration for promotional content. The site is mobile-optimized and provides a good user experience with clear navigation and structured content. Hosting is provided by spiritec-server.de, indicating a specialized hosting environment. From a security perspective, the site uses HTTPS and implements cookie consent mechanisms compliant with GDPR. However, explicit security headers and policies are not evident, and no incident response or vulnerability disclosure information is provided. No critical vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is well addressed with a clear privacy policy and cookie banner. Overall, the website is trustworthy and professional with a solid digital presence. Strategic improvements in security headers, incident response transparency, and accessibility could enhance its security posture and compliance maturity.

B

BookGazette!

bookgazette.xyz

55

Book Gazette is a small independent media platform based in Germany focused on literary reviews, podcasts, and profiles of independent book publishers. The website offers curated content in German targeting readers interested in discovering books from independent publishers. Technically, the site uses modern web standards including HTTPS, JSON-LD structured data, and CDN-hosted assets, delivering a good user experience with responsive design and clear navigation. Security posture is adequate with HTTPS enforced but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professionally presented but could improve in security and privacy transparency.

R

Rotpunktverlag AG

rotpunktverlag.ch

67

Rotpunktverlag AG is a well-established Swiss publishing company specializing in politically engaged and culturally relevant literature, including fiction, political non-fiction, and travel guides. The company has a strong regional presence in Switzerland and a loyal target audience of literature enthusiasts. Their business model includes book publishing, event hosting, and community engagement through shareholder participation and project funding. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content that supports their market position. Technically, the website employs modern web technologies such as HTML5, CSS3, JavaScript, and uses Google Tag Manager for analytics. Hosting assets on Amazon AWS indicates a reliable infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Security posture is good with HTTPS enforced and CSRF protections, but could be improved with explicit security headers and published incident response policies. Overall, the website demonstrates a high level of professionalism and trustworthiness, with transparent contact information and social media presence. Privacy compliance is adequate with a privacy policy and cookie policy present, though lacking an explicit cookie consent mechanism. No signs of malicious activity or content safety concerns were found. Strategically, the company should enhance its security and privacy posture by publishing a security policy, incident response contacts, and implementing a cookie consent mechanism to improve GDPR compliance and user trust.

A

Arisverlag

arisverlag.ch

64

Arisverlag is a small Swiss book publisher and online retailer founded in 2017, specializing in a curated selection of books and literary content targeting German-speaking audiences. The website serves as an e-commerce platform built on Shopify, offering a professional and well-branded user experience with integrated social media channels and a focus on literature and author engagement. Technically, the site is modern, mobile-optimized, and fast, leveraging Shopify's infrastructure and CDN services. Security posture is strong with HTTPS and security headers properly configured, though there is room for improvement in privacy compliance and incident response transparency. Overall, the website is trustworthy and professionally maintained, with no indications of malicious activity or content safety concerns.

K

Korbinian Verlag

korbinian-verlag.de

61

Korbinian Verlag is an independent book publisher based in Berlin, Germany, operating an e-commerce platform primarily through Shopify. The website showcases a curated selection of books and merchandise, targeting literature enthusiasts and general consumers interested in cultural and literary works. The business model focuses on direct online sales and brand building through social media and testimonials. Technically, the site leverages Shopify's robust e-commerce infrastructure, ensuring a modern, mobile-optimized, and accessible user experience with moderate performance. Security posture is adequate with HTTPS enforced and cookie consent implemented, but lacks explicit security headers and formal security policies. Privacy compliance is basic with GDPR-related policies present. Overall, the site is professional, trustworthy, and safe for general audiences.

A

Arbeit und Leben Sachsen-Anhalt gGmbH

aul-lsa.de

47

Arbeit und Leben Sachsen-Anhalt gGmbH is a regional non-profit educational organization based in Magdeburg, Germany, focused on supporting individuals on their educational paths through a variety of programs including political education, workplace education, basic education, and fair employment initiatives. The organization targets adult learners, employees, and youth, offering seminars, educational leave opportunities, and events to foster personal and societal development. The website reflects a well-structured and consistent brand presence with clear navigation and regularly updated content. Technically, the site is built on WordPress with a custom theme, delivering moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and published security policies. Privacy compliance is partial with a privacy policy present but no cookie consent mechanism. Overall, the site is trustworthy and professional, serving its educational mission effectively.

P

Pädagogische Hochschule Weingarten

ph-weingarten.de

58

Pädagogische Hochschule Weingarten is a well-established public university in Germany specializing in educational sciences and teacher training. Founded in 1949, it offers a broad range of bachelor and master programs, emphasizing research-based and practice-oriented education. The institution maintains a strong regional presence and actively engages in knowledge transfer to society. The website reflects a professional and comprehensive digital presence with clear navigation and rich content tailored to students, educators, and researchers. Technically, the site uses modern web standards and privacy-conscious analytics (Matomo), hosted likely on a regional academic network (BelWü). Security posture is good with HTTPS and no exposed sensitive data, though explicit security headers and cookie consent mechanisms could be improved. Overall, the site is trustworthy, compliant with GDPR, and professionally managed.

H

Domain Default page

hdw.dev

41

The website hdw.dev currently serves as a default placeholder page generated by Plesk, a hosting control panel platform. It does not represent an active business or service but provides informational content about Plesk and related tools such as Sitejet Builder and WP Guardian. The site targets web professionals and site owners interested in hosting management solutions. Technically, the site uses basic HTML, CSS, and JavaScript with no detected CMS or advanced frameworks. The hosting environment is likely managed via Plesk. Security posture is minimal with no visible HTTPS enforcement or security headers, and no privacy or cookie policies are present. The domain WHOIS data is privacy protected, limiting trust assessment. Overall, the site is functional as a placeholder but lacks business and security maturity.

B

Bundesamt für Migration und Flüchtlinge

bamf.de

67

The Bundesamt für Migration und Flüchtlinge (BAMF) is a German federal government agency responsible for migration, asylum, refugee protection, integration, and voluntary return programs. The website serves as an official information and service portal targeting migrants, refugees, government entities, and the general public interested in migration-related topics in Germany. It offers comprehensive content, including thematic areas, news, publications, and service center information. The site is well-branded, professionally designed, and provides multi-language support to cater to diverse audiences. Technically, the website is built on the Government Site Builder CMS, a platform tailored for German federal administration websites. It uses modern web standards including HTML5, CSS, JavaScript, and structured data (JSON-LD) for enhanced SEO and accessibility. The site is mobile-optimized and accessible, with a moderate performance profile. Hosting is managed within the German federal infrastructure, ensuring reliability and compliance with government standards. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism with opt-in for statistical tracking via Matomo. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers and a public security policy or incident response contact are not present, representing areas for improvement. The WHOIS data confirms the domain's legitimacy as a government entity with consistent registration and hosting details. Overall, the BAMF website demonstrates a high level of professionalism, trustworthiness, and compliance with privacy regulations such as GDPR. It effectively supports its mission to provide migration-related information and services to its target audience while maintaining a secure and user-friendly online presence.

L

Lehrer-Online

lehrer-online.de

67

Lehrer-Online is a well-established German educational platform providing over 20,000 quality-assured teaching materials, self-learning courses, and tools targeted at teachers and educators. The platform is built on TYPO3 CMS and integrates privacy-conscious analytics (Matomo) and advertising (AdSpirit) with a robust cookie consent mechanism. The website demonstrates a high level of professionalism, excellent content quality, and good technical infrastructure with modern security practices such as HTTPS and Content-Security-Policy headers. However, explicit contact information and formal security policies are not prominently published, which could be improved to enhance trust and compliance. Overall, Lehrer-Online presents a secure, privacy-aware, and user-friendly environment for its educational audience.

D

Der faire Credit

derfairecredit.at

67

Der faire Credit is an Austrian online consumer credit provider offering fast, paperless loan applications with instant decisions and quick payouts. The website is professionally designed using WordPress and optimized for the Austrian market, targeting consumers seeking convenient financing solutions. The technical infrastructure includes modern web technologies and SEO optimization via Yoast plugin, but lacks visible privacy and cookie policies, which are critical for GDPR compliance. Security posture is adequate with HTTPS enabled, but missing security headers and contact information reduce trust. Overall, the site is legitimate and safe but requires improvements in privacy compliance and security transparency.

H

Happyworm Ltd

jplayer.org

52

jPlayer.org is the official website for jPlayer, a free and open source HTML5 audio and video media player plugin for jQuery and Zepto. Operated by Happyworm Ltd, the site serves a developer audience seeking cross-platform media playback solutions. The project is well-established since 2010 with an active community and GitHub presence, positioning it as a reputable player in the web media technology space. Technically, the site uses a modern JavaScript stack with jQuery, Zepto, and HTML5, supported by Cloudflare DNS and external analytics and social media integrations. However, some technical debt is evident in the lack of modern security headers and partial use of HTTP resources. Security posture is moderate with no critical vulnerabilities detected but lacking in privacy and cookie policy compliance. The domain registration is consistent and legitimate, with no privacy protection masking ownership, supporting trustworthiness. Overall, the site is professional and functional but would benefit from improved privacy compliance and security hardening.

IPConcept is a specialized financial services company focused on fund administration and management solutions, operating primarily in Germany, Luxembourg, and Switzerland. It is a 100% subsidiary of DZ PRIVATBANK, providing services such as private label funds, alternative investment funds, risk management, order management, performance analysis, and reporting. The company targets asset managers, institutional clients, and banks, positioning itself as a reliable partner with a strong backing from a major bank. The website content is professional, well-structured, and GDPR compliant, reflecting a mature digital presence.

WInTO GmbH is a regional government-related company focused on economic, innovation, and tourism promotion in the Oberhavel region of Germany. The website primarily serves as an imprint (Impressum) page providing legal and contact information. The business operates in the government sector with a small organizational size and targets local businesses and stakeholders interested in regional development. The website content is minimal and professional but lacks comprehensive privacy, cookie, and security policies, which are important for compliance and trust. Technically, the website uses basic HTML and CSS with no detected CMS or advanced frameworks. Hosting appears to be on generic servers indicated by the nameservers. The site shows basic mobile optimization and accessibility but lacks SEO optimization and security headers. No analytics or tracking scripts are present, indicating minimal user tracking. From a security perspective, the site uses HTTPS (assumed but not explicitly confirmed), but no security headers or incident response contacts are provided. There are no forms or user input fields, reducing attack surface. However, the absence of privacy and cookie policies is a compliance gap under GDPR. WHOIS data is partially consistent but lacks detailed registrant information, slightly reducing trustworthiness. Overall, the website is safe and professional but basic in content and technical sophistication. Strategic improvements in privacy compliance, security headers, and SEO would enhance trust and digital maturity.

S

Sparkasse Göttingen

spk-goettingen.de

67

Sparkasse Göttingen is a regional financial institution providing a broad range of banking and financial services including online banking, loans, credit cards, investments, insurance, and real estate services. The website targets both private and corporate customers with a strong emphasis on secure and user-friendly online banking experiences. The bank maintains a solid market position within the Göttingen region, supported by comprehensive service offerings and a professional digital presence. Technically, the website is built on a modern infrastructure likely powered by Adobe Experience Manager CMS, utilizing JavaScript, CSS, and React components for dynamic content. The site is well-optimized for mobile devices and accessibility, featuring clear navigation and SEO best practices. The presence of cookie consent mechanisms and privacy policies indicates a mature approach to data protection and compliance. From a security perspective, the website enforces HTTPS and includes session management features such as session timeout warnings. While explicit security headers are not fully confirmed, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. However, the absence of a published security policy or incident response contact suggests room for improvement in transparency and readiness. Overall, the site is trustworthy, professionally maintained, and compliant with GDPR requirements. It demonstrates a high level of digital maturity suitable for a financial institution, with recommendations focusing on enhancing security disclosures and incident response transparency.

G

Göttinger Kulturstiftung

kulturstiftung-goettingen.de

57

The Göttinger Kulturstiftung is a small non-profit cultural foundation affiliated with the city of Göttingen, Germany. It focuses on supporting cultural activities through funding and public information. The website serves as an informational portal for cultural funding opportunities and donation options, targeting local cultural organizations and citizens. The business model is centered on non-profit cultural promotion with a clear local focus. Technically, the website is built on a custom CMS platform (NOLIS) using standard web technologies such as JavaScript and CSS. It features a responsive design with accessibility options like font resizing and contrast toggling. The site is well-structured with clear navigation and SEO-friendly metadata. Performance is moderate with no major issues detected. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, it lacks advanced security headers and does not publish explicit security policies or incident response contacts. No vulnerabilities or exposed sensitive data were found. The WHOIS data confirms domain legitimacy and consistency with the organization's identity. Overall, the website is professional, trustworthy, and suitable for its target audience. Strategic improvements could include enhancing security headers, publishing a security policy, and adding vulnerability disclosure information to strengthen security posture and user trust.

S

Stiftung Niedersachsen

stnds.de

54

Stiftung Niedersachsen is a regional cultural foundation dedicated to promoting and funding cultural projects throughout the German state of Niedersachsen. The foundation operates as a non-profit entity, supporting a wide range of cultural sectors including music, theater, museums, literature, and social culture. Their website reflects a professional and well-structured digital presence, targeting cultural institutions, artists, and non-profit projects within the region. The foundation's market position is that of a key regional cultural supporter with a clear focus on fostering cultural diversity and sustainability.

S

Südwestrundfunk

swr.de

59

Südwestrundfunk (SWR) is a large regional public broadcasting organization serving the German states of Baden-Württemberg and Rheinland-Pfalz. The website www.swr.de serves as a comprehensive portal for news, radio, television, and online media content including live streams and event calendars. The site targets a general audience interested in regional and national news, culture, sports, and lifestyle content. Technically, the website employs modern web technologies such as ES6 JavaScript modules, lazy loading, and integrates analytics tools like Chartbeat and Piano Analytics, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforced and no visible sensitive data exposure, though explicit security headers and vulnerability disclosures are not evident. Privacy compliance is limited in the visible content, lacking explicit privacy and cookie policies or consent mechanisms. Overall, the site is professional, trustworthy, and well-branded, consistent with a public media entity.

A

Antares Project GmbH

antares.net

55

Antares Project GmbH is a German company specializing in advancing digital education through its Edupool platform, which facilitates easy and fast lesson planning and a marketplace for educational media and apps. The company has a strong presence across all German federal states and is used by a majority of schools in Germany. Supported by partnerships with major educational publishers and Deutsche Telekom AG, as well as funding from the EU and regional government, Antares positions itself as a key player in the digital education sector. Technically, the website is built on modern web technologies using Webflow CMS and includes minimal but effective analytics via Plausible, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS implied, but lacks advanced security headers and explicit policies. Privacy compliance is reasonable with a privacy policy present but no cookie consent mechanism. Overall, the website is professional, trustworthy, and well-aligned with its business goals.

M

Medienberatung NRW

bildungsmediathek-nrw.de

59

Bildungsmediathek NRW is a regional educational media platform serving schools and educators in North Rhine-Westphalia, Germany. It offers a wide range of educational media, apps, and materials to support teaching and learning. The platform is supported by governmental and regional bodies, ensuring a trusted and authoritative source of educational content. The website is professionally designed with clear navigation and a strong focus on accessibility and user experience. Technically, it employs modern web technologies including JavaScript frameworks and privacy-focused analytics, hosted likely on specialized educational cloud infrastructure. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with clear privacy and terms policies, but lacks a cookie consent mechanism. Overall, the site is trustworthy, well-maintained, and serves its educational mission effectively.

Emmaus Innsbruck is a small non-profit organization affiliated with Caritas der Diözese Innsbruck, focused on supporting homeless and unemployed individuals with prior addiction issues. Their services include various labor and integration assistance programs, psychotherapeutic support, and a solidarity-based agricultural project. The website is professionally designed with clear navigation and relevant content tailored to their target audience. Technically, the site uses basic web technologies including an outdated jQuery version, lacks advanced security headers, and does not implement cookie consent mechanisms, indicating room for improvement in security and privacy compliance. Security posture is moderate with HTTPS usage but missing modern security best practices. Overall, the domain registration data aligns well with the organization's profile, supporting legitimacy and trustworthiness.

T

Just a moment...

thepeopleevents.com

56

The website thepeopleevents.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, which prevents direct content analysis. The domain is registered with GoDaddy.com, LLC since 2020 and uses Cloudflare DNS servers, indicating a legitimate setup. However, no business information, privacy policies, contact details, or content are publicly visible. The technical infrastructure relies on Cloudflare for security and DNS, but the lack of accessible content and metadata limits the ability to assess the website's business model, services, or compliance posture. Security posture is minimal from the public perspective, with no visible security headers or policies. Overall, the site appears to be protected by a WAF but lacks publicly accessible content for further evaluation.

E

Ethos Media Group srl

secsolution.com

76

Secsolution.com is a professional Italian B2B online magazine and information portal focused on security, cybersecurity, privacy, and related technologies. Operated by Ethos Media Group srl, it serves security professionals in Italy by providing news, articles, podcasts, training opportunities, and event promotion such as the Secsolution Forum. The website demonstrates a solid market position as a leading security information source in Italy with a consistent brand and quality content. Technically, the site uses modern web technologies including Bootstrap, jQuery, and Google Analytics, with responsive design and good SEO practices. However, some security best practices such as HTTP security headers are missing, and the WHOIS data for the domain is unavailable, raising concerns about domain registration legitimacy. Privacy compliance is well addressed with GDPR-compliant cookie consent and a privacy policy. Overall, the site is professional and trustworthy but would benefit from enhanced security configurations and domain registration transparency.

E

Elie Kupsc

eliekupsc.com

63

Elie Kupsc is a Swiss-based graphic designer and illustrator specializing in branding, digital UI/UX, and artistic direction. The website serves as a professional portfolio showcasing over 15 years of experience, notable distinctions, and international exhibitions. The business targets institutional and cultural sectors, offering visual identity creation, logo design, and digital services. Technically, the site is built on Squarespace, leveraging modern web technologies with good mobile optimization and moderate performance. Security posture is strong with HTTPS and HSTS enabled, though explicit privacy and security policies are absent. Overall, the site reflects a credible, professional creative business with room for improvement in privacy compliance and security transparency.

Festo Inc. is a globally recognized enterprise specializing in industrial automation technology and training services. The company operates a comprehensive multilingual and multinational website infrastructure, serving a broad industrial customer base worldwide. Their digital presence reflects a mature and professional business with a strong emphasis on localized content and compliance with international data protection regulations such as GDPR. Technically, the website leverages modern web technologies including React.js and integrates a professional consent management platform (Didomi) to manage user privacy preferences effectively. Security posture is strong with HTTPS enforcement, domain transfer protection, and a well-managed domain registration history, although DNSSEC is not enabled. The absence of explicit security policies or incident response contacts suggests room for improvement in transparency and security communication. Overall, the website is well-designed, user-friendly, and trustworthy, supporting Festo's position as a leader in the manufacturing and automation sector.

F

Frank Carius

msxfaq.de

61

MSXFAQ is a specialized knowledge resource and FAQ website focused on Microsoft Exchange, Skype for Business, Teams, Office 365, and Outlook technologies. It serves a professional and expert audience primarily in Germany, providing technical guides, news updates, and tools related to Microsoft enterprise communication platforms. The website is authored and maintained by Frank Carius, with a long operational history dating back to 2004, indicating a stable and trusted source of information in its niche. Technically, the website uses a straightforward HTML/CSS/JavaScript stack with Google Tag Manager for analytics. It is hosted with domain control services typical for small to medium-sized websites. The site is moderately optimized for mobile and SEO, with basic accessibility features. Security practices include HTTPS enforcement, iframe embedding prevention, and privacy-conscious referrer policies, though there is room for improvement in security headers and explicit vulnerability disclosure. The security posture is solid for a content-focused site, with no detected vulnerabilities or exposed sensitive data. Privacy compliance is basic, with privacy and cookie policies present but lacking active consent mechanisms. Contact information is limited to a contact form, with no direct emails or phone numbers visible. Social media presence is active across multiple platforms, enhancing trust and engagement. Overall, MSXFAQ presents a professional, trustworthy, and technically sound resource for its target audience. Strategic improvements in privacy compliance, security policy transparency, and incident response readiness would further enhance its security posture and user trust.

P

Pro-Linux

pro-linux.de

58

Pro-Linux is a well-established German online magazine focused on Linux, Open Source, and related technologies. It offers a broad range of content including news, articles, workshops, program version updates, job listings, and community forums. The site targets technology enthusiasts, IT professionals, and developers primarily in the German-speaking market. Its business model revolves around content publishing supported by advertising and community engagement. The website is hosted by Schlundtech and uses a proprietary CMS (nb3 system v1.6). The technical infrastructure is moderate with standard web technologies and Google AdSense for monetization. Security posture is adequate with HTTPS enabled and secure login forms, but lacks advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism detected, which may pose GDPR compliance risks. Overall, the site is credible and trustworthy with a strong niche presence but could improve in privacy and security practices.

L

LamaPoll

lamapoll.com

62

LamaPoll is a German-based company providing a professional online survey tool designed for businesses, research institutes, public sector entities, as well as students and educators. The platform emphasizes ease of use, versatility, and strong data protection compliance, including GDPR adherence. With over 10,000 companies using their service, LamaPoll holds a strong market position in Germany, supported by multiple certifications such as ISO 27001, TISAX AL2, and BSI security validations. Their business model is SaaS-based, offering both paid licenses and free access for students, focusing on secure, customizable, and responsive survey solutions. Technically, the website uses a mature technology stack including jQuery and Matomo analytics configured for privacy (no cookies). The site is well-optimized for mobile devices, accessible, and SEO-friendly. Hosting is supported by Google Domains DNS infrastructure, with all servers located in Germany, ensuring compliance with local data protection laws. Security posture is strong, with full HTTPS enforcement, end-to-end encryption, one-way encryption for sensitive data, and regular penetration testing. However, some improvements could be made by adding explicit security headers and publishing a security.txt file. Privacy compliance is excellent, with clear privacy and cookie policies, no third-party trackers, and GDPR-aligned data handling. Overall, LamaPoll presents a trustworthy, professional, and secure online survey platform with a strong focus on data protection and user privacy. The website quality and business credibility are high, making it a reliable choice for organizations needing compliant survey solutions.

A

Arbeit und Leben gGmbH

berufssprachkurse-mainz.info

61

The website berufssprachkurse-mainz.info represents a vocational language course offering operated by Arbeit und Leben gGmbH under commission from the German Federal Office for Migration and Refugees (BAMF). The courses target migrants and individuals seeking to improve their German language skills for professional integration and recognition, particularly in healthcare professions. The site is hosted on WordPress.com and uses standard WordPress technologies with Jetpack and other common plugins. The content is professionally presented with relevant images and course descriptions, targeting a German-speaking audience. Technically, the site is well-structured, mobile-optimized, and uses HTTPS, but lacks some advanced security headers and a visible privacy policy page. No contact emails or phone numbers are directly provided on the main pages, which slightly reduces transparency. The WHOIS data is privacy protected by Identity Digital Inc., which is common and justified for this type of non-profit educational site. Overall, the site is legitimate, secure, and serves its educational purpose effectively.