Security Directory

P

Perspektive Handel Caritas gGmbH

perspektive-handel.at

67

Perspektive Handel Caritas gGmbH is a non-profit social enterprise focused on integrating people with employment barriers into the regular labor market, primarily through training in retail sectors such as shelf management, fresh produce, cash register, and delicatessen. The organization is affiliated with Caritas and operates regionally in Austria, supported by partners like Spar and Arbeit Plus. The website reflects a professional and accessible digital presence built on TYPO3 CMS, incorporating modern web technologies and compliance with GDPR through a comprehensive cookie consent mechanism. Security posture is solid with HTTPS and monitoring tools like Sentry, though some security headers and explicit policies could be improved. Overall, the site is trustworthy, well-branded, and serves its target audience effectively.

W

WIDADO Marktplatz

widado.com

65

WIDADO is an online marketplace specializing in second hand goods, promoting sustainable shopping primarily in the German language market. The platform offers a wide range of product categories including clothing, household items, media, electronics, and leisure products. The website demonstrates a well-structured and user-friendly design with clear navigation and product categorization, targeting general consumers interested in sustainable retail options. Technically, the site uses common JavaScript libraries such as jQuery and Glide.js to enhance user experience, with moderate performance and good mobile optimization. However, there is a lack of visible privacy and cookie policies, and no explicit security headers were detected, indicating room for improvement in security and compliance. The WHOIS data is notably missing or inaccessible, which raises concerns about domain legitimacy and trustworthiness. Overall, while the business model and website content are solid, the security posture and compliance aspects require attention to enhance trust and regulatory adherence.

C

Caritas Oberösterreich

junges-wohnen.at

68

Junges Wohnen - Guter Hirte is a youth housing and support service operated by Caritas Oberösterreich, providing affordable and centrally located accommodation options in Linz for students, apprentices, and young adults. The website reflects a well-established non-profit organization with a clear focus on social services for youth, independent of nationality or religion. The digital infrastructure is based on TYPO3 CMS, integrating modern analytics and tracking tools such as Google Analytics and Sentry, alongside social media engagement on major platforms. Privacy and cookie consent mechanisms are robust and GDPR compliant, reflecting a mature approach to data protection. Security posture is good with HTTPS enforced and no critical vulnerabilities detected, though some security headers could be improved. Contact information is clearly presented, enhancing business credibility. Overall, the website is professional, trustworthy, and well-aligned with the organization's mission.

C

Caritas Oberösterreich

paraplue-steyr.at

67

The website represents Integrationszentrum Paraplü, a social integration center operated under Caritas Oberösterreich, focused on supporting migrants and the local community in Steyr, Austria. It offers a variety of educational and social services, including language courses, counseling, and cultural activities. The site is well-branded, consistent with the parent organization, and targets a broad audience including migrants and locals seeking integration support. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes accessibility and privacy features such as cookie consent and multilingual support. Security posture is good with HTTPS and error monitoring via Sentry, though some security headers could be improved. WHOIS data is unavailable due to quota limits, but the site’s legitimacy is supported by its content and association with Caritas. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

C

Caritas Vorarlberg

caritas-vorarlberg.at

65

Caritas Vorarlberg is a well-established non-profit organization operating in Austria, providing a broad spectrum of social services including family support, refugee assistance, addiction help, and community integration. The website reflects a professional and consistent brand identity aligned with the Caritas Austria network. Technically, the site is built on TYPO3 CMS with modern JavaScript libraries and includes proactive error monitoring via Sentry. The site is GDPR compliant with a comprehensive cookie consent mechanism and multilingual support. Security posture is good with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Overall, the website is trustworthy and serves its target audience effectively.

C

Caritas Tirol

caritas-tirol.at

68

Caritas Tirol is a well-established non-profit social and charitable organization operating primarily in the Tirol region of Austria. The organization provides a wide range of social services including aid for people in need, family and youth support, integration services, and international aid projects. The website reflects a professional and comprehensive digital presence, leveraging TYPO3 CMS and modern web technologies. It includes robust privacy and cookie consent mechanisms aligned with GDPR requirements. Security posture is strong with HTTPS enforcement and integration of Sentry for error tracking, although there is room for improvement in publishing explicit security policies and incident response information. Overall, the website and domain registration details indicate a legitimate and trustworthy entity with a high level of professionalism and user trust.

C

Caritas Salzburg

caritas-salzburg.at

69

Caritas Salzburg is a well-established non-profit organization dedicated to supporting and advising individuals facing difficult life situations, including illness, disability, and crises. The organization operates primarily in Austria, with a strong regional presence in Salzburg, and offers a broad range of social services such as emergency aid, care, family support, and integration assistance. Their website reflects a mature digital presence with comprehensive content and clear navigation tailored to their target audience of vulnerable individuals, donors, and volunteers. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries like jQuery and Swiper for interactivity, and integrates advanced monitoring tools such as Sentry for error tracking. The site employs GDPR-compliant cookie consent mechanisms and uses reputable analytics and advertising services, balancing user privacy with operational insights. Mobile optimization and accessibility features are well implemented, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses best practices such as cookie consent and error monitoring. However, some standard security headers are not explicitly detected and could be improved. There is no publicly available security policy or incident response contact, which could enhance trust and preparedness. No vulnerabilities or suspicious activities were identified. Overall, Caritas Salzburg's website demonstrates a high level of professionalism, security, and compliance appropriate for a large non-profit organization. Strategic recommendations include enhancing security headers, publishing security policies, and maintaining regular audits of third-party scripts to sustain a strong security posture.

C

Caritas Kärnten

caritas-kaernten.at

68

Caritas Kärnten is a regional non-profit organization affiliated with the Catholic Church, providing a wide range of social aid and charitable services in the Austrian state of Kärnten. The organization focuses on helping people in difficult life situations regardless of their social, national, or religious background. Key services include social counseling, food and clothing aid, housing support, psycho-social counseling, and care homes. The website reflects a strong market position as a trusted regional leader in social services with a clear mission and comprehensive service offerings. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper for UI components, and integrates Sentry for error monitoring. The site is mobile-optimized, accessible, and SEO-friendly, with a well-implemented cookie consent mechanism ensuring GDPR compliance. The use of HTTPS and security best practices is evident, although explicit security headers like Content-Security-Policy could be improved. From a security perspective, the site demonstrates a mature posture with no visible vulnerabilities or exposed sensitive data. However, it lacks publicly available incident response contacts and a vulnerability disclosure policy, which are recommended for enhanced transparency and security readiness. Overall, Caritas Kärnten's website is professional, trustworthy, and compliant with privacy regulations, effectively supporting its mission to aid vulnerable populations. Strategic improvements in security policy publication and technical security headers would further strengthen its security posture.

C

Caritas der Diözese Graz-Seckau

caritas-steiermark.at

69

Caritas der Diözese Graz-Seckau operates as a leading regional non-profit social aid organization in the Austrian state of Steiermark. The website reflects a comprehensive portfolio of social services including financial and social counseling, housing support, youth and family aid, integration services for refugees and migrants, addiction support, and senior care. The organization is affiliated with the Catholic Church and serves a broad target audience of vulnerable and disadvantaged populations. The site is well-branded, professionally designed, and provides clear navigation and multilingual support to enhance accessibility. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper for UI components. It integrates Sentry for error tracking and Google Analytics and Facebook Pixel for analytics and marketing purposes. The site implements a GDPR-compliant cookie consent mechanism with detailed cookie categorization and user control. Performance is moderate with good mobile optimization and accessibility features. From a security perspective, the site enforces HTTPS and uses Sentry for monitoring, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the content. Privacy compliance is strong with clear privacy and cookie policies. The domain registration is consistent with the organization's identity, enhancing trustworthiness. Overall, the website demonstrates a mature digital presence suitable for a large non-profit organization, balancing user experience, privacy, and security effectively. Minor improvements in security headers and incident response transparency could further strengthen its posture.

C

Caritas Burgenland

caritas-burgenland.at

68

Caritas Burgenland is a regional non-profit organization dedicated to social services and charitable activities in the Burgenland region of Austria. The website clearly communicates its mission to support vulnerable populations and provides extensive information on its services, including care, inclusion, counseling, housing, education, and volunteer opportunities. The organization targets a broad audience including people in need, donors, volunteers, and the general public. The site is well-branded and consistent with the Caritas network's identity. Technically, the website is built on the TYPO3 CMS platform, leveraging modern JavaScript libraries such as jQuery and Swiper for interactivity and user experience. It integrates third-party services like Google Analytics and Facebook Pixel for analytics and marketing, and Sentry for error monitoring, indicating a mature digital infrastructure. The site is mobile-optimized and includes accessibility features such as language selection and read-aloud functionality. From a security perspective, the site enforces HTTPS and employs a comprehensive cookie consent mechanism compliant with GDPR. While no explicit security headers were detected in the provided data, the use of reputable third-party services and absence of exposed sensitive data suggest a solid security posture. However, the site could improve by adding security headers and publishing a security policy or incident response contacts. Overall, Caritas Burgenland's website is professional, trustworthy, and compliant with privacy regulations. It effectively supports its mission through clear communication and user-friendly design, backed by a robust technical foundation.

C

Caritas St. Pölten

caritas-stpoelten.at

67

Caritas St. Pölten is a regional branch of the well-established Caritas Austria non-profit organization, providing a wide range of social services including counseling, emergency aid, family support, integration, and care services primarily targeting vulnerable populations in the St. Pölten and Lower Austria West region. The website reflects a professional and consistent brand presence aligned with the parent organization. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and integrates Sentry for error monitoring, indicating a mature digital infrastructure. The site is well-optimized for mobile and accessibility, with good SEO practices and comprehensive cookie consent mechanisms ensuring GDPR compliance. Security posture is solid with HTTPS enforced and client-side monitoring, though some improvements like explicit security headers and published security policies could enhance trust further. Overall, the site is trustworthy, professionally maintained, and compliant with privacy regulations, serving its non-profit mission effectively.

C

Caritas Wien

caritas-wien.at

69

Caritas Wien is a prominent non-profit organization dedicated to providing social services and support to vulnerable populations in Vienna and surrounding regions. Their website reflects a mature digital presence with comprehensive service offerings including counseling, housing, hospice care, family support, and integration services. The organization targets a broad audience including individuals in need, families, migrants, and people with disabilities. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries and third-party integrations such as Google Analytics and Facebook Pixel, all managed with GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and error monitoring via Sentry, though some security headers could be improved. Overall, the site demonstrates professionalism, accessibility, and trustworthiness consistent with a large, established non-profit entity.

C

Caritas Österreich

caritas.at

68

Caritas Österreich is a leading non-profit organization dedicated to providing humanitarian aid and social services across Austria. The website reflects a mature digital presence with a comprehensive offering of services including emergency aid, family support, refugee integration, disability services, and volunteer engagement. The organization maintains a strong market position with multiple regional subsidiaries and a clear focus on social welfare and community support. The website content is professionally curated, targeting a broad audience including people in need, donors, and volunteers. Technically, the site is built on TYPO3 CMS, leveraging modern JavaScript libraries such as jQuery and Swiper for interactive elements. It employs Sentry for error tracking and integrates Google Analytics and Facebook Pixel for analytics and marketing purposes. The site demonstrates good mobile optimization, accessibility, and SEO practices, ensuring a positive user experience. From a security perspective, the website enforces HTTPS, uses security headers, and implements a robust cookie consent mechanism compliant with GDPR. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security policies and incident response contacts are not prominently published, representing an area for improvement. Overall, Caritas Österreich's website is a trustworthy, well-maintained platform that effectively supports its mission. Strategic recommendations include enhancing security transparency, publishing incident response information, and maintaining vigilance on third-party scripts to uphold security and compliance standards.

The website www.eversportsmanager.com is currently inaccessible, serving a 403 Forbidden error page that blocks access to any meaningful content. The domain WHOIS data is unavailable, indicating the domain may not be registered or the WHOIS information is not publicly accessible. Due to the lack of accessible content, no business information, contact details, or privacy policies are present. The technical infrastructure appears minimal with only Google Fonts loaded, and no analytics or security headers detected. This severely limits the ability to assess the company's market position, services, or compliance posture. The security posture is weak due to the lack of HTTPS confirmation and absence of security headers. Overall, the site is not operational for public users, representing a high risk for trust and credibility.

The website www.eversportscorporate.com is currently inaccessible beyond a robot challenge screen that implements a JavaScript proof-of-work captcha. This indicates the presence of a Web Application Firewall (WAF) or security mechanism blocking direct access to the site content. No business information, contact details, or policies are available on the page, and the WHOIS lookup failed to return any registration data, suggesting the domain may be unregistered or privacy-protected to an extreme degree. The technical infrastructure relies on JavaScript and AWS Cloudfront CDN for serving challenge assets, but no CMS or business platform is detectable. Security posture is weak due to lack of visible HTTPS confirmation, security headers, or compliance documentation. Overall, the site is not currently usable for business or customer engagement, and trustworthiness is low.

E

Eversports GmbH

eversports.com

58

Eversports GmbH operates a leading online platform in Austria for booking sports activities, classes, and venues. The website offers a comprehensive range of sports including yoga, pilates, tennis, and fitness, targeting sports enthusiasts seeking flexible and convenient booking options. The platform supports both online and on-site participation, with social features to connect users. Technically, the website is built on modern frameworks such as React and Apollo GraphQL, hosted behind Cloudflare, and integrates error monitoring via Rollbar. It is mobile optimized and performant, with good SEO and accessibility practices. Security posture is strong with HTTPS, security headers, and no visible vulnerabilities. Privacy and cookie policies are present and GDPR compliant. Overall, the site demonstrates a mature digital presence with high professionalism and trustworthiness.

MyProApp.io is a minimally developed website with only a logo image and no substantive content or metadata. The domain is registered through a privacy protection service, typical for small or early-stage businesses, with a registration date in 2021. The lack of business descriptive content, contact information, or policies limits the ability to assess the company's market position or services. Technically, the site is simple HTML hosted behind Cloudflare DNS but lacks DNSSEC and security headers, indicating a basic security posture. No analytics, tracking, or advertising technologies are present, and the site shows minimal SEO or accessibility features. Security-wise, the site uses HTTPS but lacks additional security best practices and policies, resulting in a low security score. Overall, the website appears to be in an early development or placeholder state, with significant room for improvement in content, compliance, and security to build trust and credibility.

I

Information Solutions Limited

theweborchard.com

60

The Web Orchard is a creative web design and digital marketing agency based in Shrewsbury, Shropshire, operating under Information Solutions Limited. The company offers a comprehensive suite of services including bespoke web design, WordPress development, e-commerce solutions, SEO, PPC, content marketing, and hosting support. Positioned as a leading agency in the Shropshire region, it serves a diverse clientele including businesses, public sector organizations, and charities. The website reflects a professional and consistent brand image with strong client testimonials and certifications such as Cyber Essentials, reinforcing its market credibility. Technically, the website is built on WordPress with modern technologies including WPBakery Page Builder, jQuery, and integrates multiple analytics and marketing tools such as Google Analytics, Google Tag Manager, and Microsoft Clarity. The site is mobile-optimized with good SEO practices and moderate performance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though there is room for improvement in implementing security headers and publishing explicit security policies. From a security and compliance perspective, the site demonstrates good privacy compliance with a comprehensive privacy policy and cookie consent banner. However, no explicit incident response or vulnerability disclosure information is publicly available. The absence of WHOIS data for the domain is a notable anomaly that slightly reduces trustworthiness, though the professional presentation and business information mitigate concerns. Overall, the site presents a low-risk profile with recommendations to enhance security headers and transparency. Strategically, the company should focus on improving its public security posture by publishing incident response details and security policies, and consider registering or updating WHOIS information to enhance domain legitimacy. Continued investment in technical modernization and accessibility will support sustained growth and client trust.

B

BGO

bgo.com

67

BGO is a globally recognized real estate investment management firm operating across North America, Europe, and Asia. With over $89 billion USD in assets under management and a client base exceeding 750 institutional investors, BGO offers comprehensive services including investment management, lending, property management, and sustainable investing. The company is part of SLC Management under Sun Life, reinforcing its strong market position and credibility. The website reflects a mature digital presence built on the HubSpot CMS platform, leveraging modern web technologies and analytics tools to deliver a professional user experience. Security posture is strong with HTTPS, domain transfer protections, and cookie consent mechanisms in place, though DNSSEC is not enabled. No critical vulnerabilities or security issues were detected. Privacy compliance is well addressed with clear policies and consent banners. Overall, BGO's website demonstrates high professionalism, trustworthiness, and alignment with its business objectives.

U

Universitätsklinikum Leipzig AöR

uniklinikum-leipzig.de

56

Universitätsklinikum Leipzig is a large, reputable university hospital in Germany providing comprehensive healthcare services, medical education, and research. The website serves multiple audiences including patients, students, and medical professionals, offering detailed information on clinical services, education programs, and research initiatives. The institution holds recognized certifications such as the lung cancer center certification, reinforcing its medical excellence. Technically, the website is built on Microsoft SharePoint with Bootstrap and jQuery, ensuring responsive design and moderate performance. Analytics are handled via Matomo with privacy-conscious settings disabling cookies. Security posture is strong with HTTPS enforced and secure form handling, though some security headers and explicit incident response policies are absent. Overall, the site is professional, trustworthy, and well-aligned with its institutional mission.

H

Helium Development

customerfields.com

65

Customer Fields is a specialized SaaS provider offering Shopify store owners tools to collect, manage, and approve customer data through custom registration forms and customer profiles. The company operates under Helium Development, with a focus on enhancing Shopify customer account capabilities. The website demonstrates a professional and consistent brand presence with clear business offerings targeted at e-commerce merchants and developers. Technically, the site uses modern JavaScript frameworks and integrates analytics and customer engagement tools such as Google Analytics, Hotjar, and Intercom, indicating a mature digital infrastructure. Security posture is solid with HTTPS enabled and domain protections in place, though improvements could be made by enabling DNSSEC and adding security headers. Privacy and cookie policies are present but hosted on the parent company site, with no direct contact information or incident response details visible on the main site. Overall, the website is trustworthy, well-maintained, and suitable for its target audience.

D

DigitalGenius

digitalgenius.com

64

DigitalGenius is an AI-powered customer service automation platform tailored for ecommerce businesses. The company positions itself as a specialized AI agent that handles pre- and post-purchase customer inquiries, aiming to transform customer experience in the ecommerce sector. The website presents a professional design built on the Framer CMS platform and integrates modern marketing and analytics tools such as HubSpot, TikTok Pixel, and Google Analytics. However, the site lacks visible privacy, cookie, and terms of service policies, as well as explicit contact information, which impacts its compliance and trustworthiness. The domain WHOIS data is unavailable, raising questions about the domain's registration status and legitimacy.

M

MSV GmbH

recyclingportal.eu

39

Recyclingportal.eu is a professional German-language media portal specializing in news, market data, and resources related to waste management, recycling, and the circular economy. Operated by MSV GmbH, the site targets industry professionals and stakeholders, providing timely updates, event information, and advertising opportunities. The platform maintains a consistent brand presence and leverages social media channels to extend its reach. Technically, the website is built on WordPress 6.8.3, utilizing modern libraries such as jQuery and FontAwesome, and integrates Google Analytics and Tag Manager for user tracking. The site is mobile-optimized with a moderate performance profile and good SEO practices. However, some accessibility features and security headers are lacking. From a security perspective, the site enforces HTTPS and uses secure login forms but lacks comprehensive security headers like CSP and X-Frame-Options. There is no visible security policy or incident response contact, and cookie consent mechanisms are absent, which may impact GDPR compliance. No vulnerabilities or exposed sensitive data were detected in the HTML content. Overall, recyclingportal.eu presents a trustworthy and professional online presence with room for improvement in privacy compliance and security hardening. Strategic enhancements in these areas would strengthen user trust and regulatory adherence.

N

nd - Journalismus von links

nd-aktuell.de

49

nd-aktuell.de is a German left-wing news media website operated under a cooperative funding model. It provides political, cultural, and social news, podcasts, and newsletters targeting left-leaning audiences in Germany. The site is professionally designed, content-rich, and offers multiple subscription and donation options to sustain its operations. Technically, the site uses a custom CMS (KONTEXT-CMS by WARENFORM), integrates modern JavaScript libraries, and employs a consent management platform to comply with GDPR. Hosting is provided by SINMA, and analytics are handled via privacy-respecting Matomo. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No explicit security policies or incident response contacts are published. WHOIS data is minimal but consistent with the CMS and hosting providers, indicating legitimacy. Overall, the site is trustworthy, well-maintained, and compliant with privacy regulations.

M

MDR (Mitteldeutscher Rundfunk)

mdrjump.de

62

MDR JUMP is a digital entertainment brand operated by Mitteldeutscher Rundfunk (MDR), a major public broadcaster in Germany. The website serves as a hub for radio streaming, podcasts, video content, event information, and traffic updates primarily targeting audiences in Eastern Germany and Mitteldeutschland. The platform is well-branded, professionally designed, and integrates social media and Alexa skill support to enhance user engagement. The content is diverse, catering to a broad general audience with a focus on entertainment and community.

D

db deutsche bauzeitung

db-bauzeitung.de

50

db deutsche bauzeitung is a well-established German architecture specialist magazine with a history spanning approximately 150 years. It provides professional content focused on architecture, construction, and related disciplines, targeting architects, planners, and industry professionals. The website supports a subscription model with digital and print offerings, complemented by advertising and event recommendations. The business operates under the Konradin Mediengruppe umbrella, leveraging modern digital infrastructure to deliver content and manage subscriptions securely. Technically, the website is built on WordPress with a robust tech stack including Yoast SEO Premium for search optimization, jQuery, FontAwesome, and a consent management platform ensuring GDPR compliance. The site integrates advertising via Adspirit and uses Matomo and Google Tag Manager for analytics, reflecting a mature digital presence. Mobile optimization and user experience are good, though accessibility could be improved. Security posture is solid with HTTPS enforced and consent mechanisms in place. However, explicit security headers like CSP and X-Frame-Options are not evident, suggesting room for enhancement. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is strong, with clear policies and cookie consent mechanisms. Overall, the website presents a professional, trustworthy, and compliant digital platform for its niche audience. Strategic improvements in security headers and accessibility would further strengthen its posture.

S

Süddeutsche.de GmbH

sueddeutsche.de

63

Süddeutsche.de GmbH operates a leading German news website providing current news, commentary, and background reports. The site targets a broad audience interested in national and international news, leveraging a digital subscription and advertising business model. The company maintains a strong market position in the German media landscape with a professional and consistent brand presence. Technically, the website employs a modern tech stack including subscription management via Piano, Google Tag Manager, Datadog logging, and advanced advertising technologies. The site is mobile optimized and uses consent management platforms to comply with GDPR requirements. Security posture is strong with HTTPS enforcement and security headers, though explicit security policies and incident response contacts are not publicly published. Overall, the website is trustworthy, professionally maintained, and compliant with privacy regulations, though improvements in transparency around security and contact information could enhance user trust.

L

Leibniz-Institut für ökologische Raumentwicklung e. V.

ioer.info

54

The Leibniz-Institut für ökologische Raumentwicklung e. V. is a reputable German research institute specializing in ecological spatial development and urban planning. It operates under the Leibniz Association and is publicly funded by federal and state governments. The website reflects a mature digital presence with comprehensive content targeting researchers, policymakers, and urban development professionals. The institute offers research programs, data services, publications, and knowledge transfer activities. Technically, the site is built on TYPO3 CMS with modern frontend frameworks and privacy-conscious analytics (Matomo). Security posture is solid with HTTPS and privacy-respecting analytics configurations, though improvements are recommended in cookie consent and security policy disclosures. Overall, the site is professional, trustworthy, and well-aligned with its institutional mission.

L

Leibniz-Institut für ökologische Raumentwicklung e. V.

ioer-isbe.de

49

The website ioer-isbe.de represents the Leibniz-Institut für ökologische Raumentwicklung e. V., a German research institute focused on ecological spatial development. The site provides an information system centered on the built environment, emphasizing sustainability, resource management, and risk assessment related to natural hazards. It targets researchers, urban and regional planners, and industry stakeholders by offering data, publications, and tools related to building materials and environmental risks. Technically, the site is built on TYPO3 CMS with modern frontend frameworks like Bootstrap and jQuery, and uses Matomo analytics configured for privacy. Security posture is good with HTTPS and privacy-respecting analytics, but lacks some security headers and explicit incident response information. The site is accessible without WAF or blocking mechanisms and shows consistent branding and professional content.

C

Cartloom

cartloom.com

66

Cartloom is a specialized ecommerce platform founded in 2007, offering easy-to-integrate shopping cart solutions and hosted storefronts for selling physical and digital products. The company targets website owners and online sellers seeking quick ecommerce enablement with minimal technical overhead. Cartloom maintains a niche market position with a focus on simplicity, digital goods delivery, and integration with major payment processors such as PayPal, Stripe, and AuthorizeNet. The website demonstrates strong branding consistency, professional design, and clear navigation, supporting a positive user experience. Technically, Cartloom employs modern frontend technologies including AlpineJS and uses privacy-conscious analytics via Fathom. The site is mobile-optimized and performs well, with good SEO and accessibility features. However, there is no detected CMS or explicit hosting provider information. The domain is well aged and consistent with the business history, registered since 2007 with no privacy protection, indicating transparency. From a security perspective, the site enforces HTTPS and has domain transfer protections but lacks DNSSEC and security headers such as Content-Security-Policy or X-Frame-Options. No explicit security or incident response policies are published, and no vulnerability disclosure or security.txt files are found. Privacy compliance is basic; a privacy policy and terms of service exist but lack explicit GDPR compliance statements and no cookie consent mechanism is present. Contact information is not explicitly provided on the site, which may impact user trust. Overall, Cartloom presents a professional and trustworthy ecommerce platform with solid technical foundations and a clear business model. To enhance security posture and privacy compliance, the company should implement security headers, cookie consent, GDPR statements, and publish incident response and vulnerability disclosure policies. Adding clear contact information would further improve business credibility and user trust.

E

EVIE – Engagement, Vielfalt und Integration im Ehrenamt

phronesis-bildung.de

58

The website 'EVIE – Engagement, Vielfalt und Integration im Ehrenamt' is a German non-profit focused on promoting volunteer engagement, diversity, and integration within community and neighborhood projects. It offers educational training programs such as 'Fortbildung für Vereinsmitglieder', 'Train the Trainer', and 'Nachbarschafts-Coach'. The site is built on the Squarespace platform, leveraging modern web technologies and hosting infrastructure, providing a moderate performance and good mobile optimization. Security posture is strong with HTTPS and HSTS enabled, but lacks explicit privacy and cookie policies, which impacts compliance. Contact information is not clearly provided, limiting direct communication channels. Overall, the site is professional and trustworthy within its niche but could improve privacy compliance and user contact accessibility.

L

Landesvertretung Brandenburg

landesvertretung-brandenburg.de

41

The Landesvertretung Brandenburg website serves as the official federal representation of the state of Brandenburg in Berlin. It functions as a governmental portal providing information about the state's interests at the federal level, including news, events, and political activities. The site targets politicians, citizens of Brandenburg, and stakeholders interested in regional federal affairs. The business model is public administration with a focus on political representation and communication. Technically, the website is built on WordPress using the Avada theme and several plugins such as Contact Form 7 and The Events Calendar. It is hosted on servers associated with kasserver.com and employs Matomo analytics for user tracking with privacy considerations. The site is mobile-optimized and demonstrates good SEO practices. From a security perspective, the site uses HTTPS and implements CAPTCHA on forms to prevent spam. However, explicit security headers are not detected, and there is no visible security policy or incident response contact information. No critical vulnerabilities or suspicious elements were found, but improvements in security headers and transparency are recommended. Overall, the website is professional, trustworthy, and compliant with GDPR regulations, with a good balance of content quality and technical implementation. The risk level is low, but enhancing security policies and disclosures would further strengthen its posture.

I

IMAGO

imago-images.de

54

IMAGO is a leading independent image agency based in Germany, specializing in providing high-quality visual content including editorial, sports, creative, archive images, and videos. It holds a strong market position as the largest sports content producer in Europe and serves media professionals, sports organizations, and brands with licensed visual assets and related services such as API and FTP access. The website demonstrates a mature digital infrastructure leveraging modern technologies like React, HubSpot forms, and advanced consent management, ensuring a seamless user experience with fast performance and mobile optimization. Security posture is strong with HTTPS, strict Content-Security-Policy, and no visible vulnerabilities, complemented by comprehensive privacy and cookie policies that align with GDPR requirements. Overall, IMAGO presents a professional, trustworthy, and well-maintained online presence suitable for its target audience.

Y

Yahoo Inc

oath.com

51

Yahoo Inc is a well-established global media and technology company with a strong presence in advertising and digital media solutions. The website presents a professional and comprehensive overview of its services, including Yahoo Ads, DSP, Search, and various media brands such as AOL and Engadget. The company targets advertisers, partners, and general internet users, leveraging its 30+ years of market presence. Technically, the website is built on modern technologies including Webflow CMS, Google Tag Manager, and Hotjar for analytics, hosted via Amazon CloudFront, ensuring fast performance and excellent mobile optimization. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though explicit security headers and incident response information are lacking. Privacy compliance is strong with clear policies and GDPR adherence. However, the absence of WHOIS registration data for the domain www.yahooinc.com raises concerns about domain legitimacy despite the professional content and branding. Overall, the site scores well on content quality and technical implementation but is penalized for domain registration inconsistencies.

I

Improve Digital

improvedigital.com

64

Improve Digital is a well-established advertising technology company founded in 2007, offering a proprietary platform that automates the purchase and sale of digital advertising. Positioned as a medium-sized player within the technology and media sectors, it serves both media buyers and sellers with products such as Marketplace, Origin, and Extend. The company is part of the Azerion group, enhancing its market credibility and reach. The website reflects a professional digital presence with clear segmentation for its target audiences and comprehensive business descriptions. Technically, the site is built on WordPress with modern SEO and analytics tools like Yoast SEO and Matomo, hosted on AWS infrastructure. Mobile optimization and accessibility are adequately addressed, providing a good user experience. Security-wise, the site enforces HTTPS, uses cookie consent mechanisms, and maintains domain transfer protections, though it lacks published security policies or incident response contacts. Overall, the website is trustworthy, compliant with GDPR, and free from suspicious content or vulnerabilities, making it a reliable digital asset for the company.

J

Jaimo Solutions GmbH

stage.bio

52

Stage is a privacy-focused social media aggregation platform operated by Jaimo Solutions GmbH, based in Germany. The service emphasizes data privacy by storing social media content on German servers and delivering it without user tracking, advertising, or cookies. The website is built using modern web technologies including Angular and Ionic, providing a responsive and user-friendly experience optimized for mobile devices. The platform targets organizations and users who prioritize privacy in social media content consumption. Technically, the site is well-structured but lacks advanced SEO optimization and some accessibility features. Security posture is solid with HTTPS enforced and no tracking scripts, though security headers could be improved. The WHOIS data is privacy protected, which aligns with the company's privacy-centric business model. Overall, the website presents a professional and trustworthy image with a moderate AI score reflecting good content quality and technical implementation.

S

SaarLB

pole-franco-allemand.de

53

The website pole-franco-allemand.de represents SaarLB's Franco-German team, providing support for projects and investments across the Rhine region. It targets businesses and investors involved in cross-border activities, positioning itself as a regional financial support entity. The site is built on WordPress with Elementor, leveraging modern web technologies and SEO tools like Rank Math. It employs Matomo analytics and a cookie consent mechanism, indicating awareness of privacy compliance requirements. However, the absence of explicit privacy and terms of service policies suggests room for improvement in compliance documentation. Security posture is moderate with HTTPS enabled but lacking security headers and published security policies. Overall, the site is professional, well-branded, and trustworthy, but could enhance transparency and security practices.

B

Biosphären-VHS St. Ingbert

vhs-igb.de

43

Biosphären-VHS St. Ingbert is a municipal adult education provider offering a wide range of courses and cultural events to the citizens of St. Ingbert, Germany. The website reflects a well-structured and content-rich platform targeting community education, integration, health, languages, and digital literacy. The institution holds a solid local market position as a trusted public education entity. Technically, the site uses a proprietary CMS (CMX) with modern web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is adequate with HTTPS enforced and no visible vulnerabilities, though improvements are recommended in cookie consent and security policy transparency. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks some advanced privacy and security disclosures.

K

Kinowerkstatt St. Ingbert

kinowerkstatt.de

57

Kinowerkstatt St. Ingbert is a small, non-commercial cultural cinema located in Saarland, Germany, focusing on showcasing culturally and historically significant films. Supported by public funding and local partners, it offers both in-person screenings and online viewing options. The website reflects a well-structured and professionally presented platform with clear navigation and relevant content for its target audience. Technically, the site uses modern web technologies such as Bootstrap and jQuery, and employs Matomo for privacy-conscious analytics. However, some security best practices like security headers and cookie consent mechanisms are missing, which could be improved to enhance compliance and security posture. Overall, the domain registration and website content are consistent and trustworthy, indicating a legitimate cultural institution.

Z

Zweckverband Elektronische Verwaltung im Saarland

ego-saar.de

52

Zweckverband Elektronische Verwaltung im Saarland (eGo Saar) is a government entity focused on supporting and modernizing digital administration for municipal governments and associations in the Saarland region of Germany. The organization acts as a service provider and consultant, offering secure infrastructure, shared specialized procedures, and digital services to streamline administrative workflows. Their market position is that of a regional competence center for digital transformation in public administration, targeting local government bodies and public sector organizations. Technically, the website is built on the Umbraco CMS platform, utilizing modern web technologies such as jQuery, Slider Revolution, and Font Awesome. The site is mobile-optimized with a professional design and clear navigation. Analytics are handled via Matomo, reflecting a privacy-conscious approach. However, the site lacks a cookie consent mechanism and visible security headers, which are areas for improvement. From a security perspective, the site enforces HTTPS and does not expose sensitive data in the HTML content. The presence of a dedicated information security page indicates awareness of security policies, though incident response contact details and vulnerability disclosure mechanisms are absent. The WHOIS data aligns well with the website's regional and organizational claims, supporting legitimacy. Overall, the website presents a trustworthy and professional digital presence for a government service provider. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing incident response contacts, and improving accessibility features to further strengthen compliance and security posture.

The website gis-sanktingbert.de serves as the official geoportal for the city of St. Ingbert, Germany, providing comprehensive geospatial data and mapping services to residents and stakeholders. The portal offers various map-based services including topographic maps, building plans, land use plans, construction site information, environmental data, and public reporting tools. The site is clearly positioned as a local government service with a focus on transparency and public accessibility. Technically, the site employs a classic web stack with Bootstrap 3.2.0, jQuery 1.12.4, and Font Awesome 4.0.3, alongside geospatial technologies such as UMN Mapserver, PostgreSQL/PostGIS, and OpenLayers as indicated in metadata keywords. Hosting is provided by Contabo, a known hosting provider, with stable DNS configuration. The site is moderately optimized for performance and mobile use, though some modernization opportunities exist, particularly updating JavaScript libraries and enhancing accessibility. From a security perspective, the site uses HTTPS but lacks visible security headers and a cookie consent mechanism, which are important for GDPR compliance and security hardening. No forms or sensitive data exposure were detected on the homepage, reducing immediate risk. The privacy policy is present and linked, indicating basic compliance with data protection regulations. No incident response or vulnerability disclosure information is publicly available, which could be improved to enhance trust. Overall, the website demonstrates a solid foundation as a municipal geoportal with good content quality and business credibility. Security posture is adequate but could benefit from enhancements in headers, consent mechanisms, and updated libraries. The site is safe for general audiences with no adult or questionable content. Strategic improvements in privacy compliance and security practices would further strengthen the portal's trustworthiness and regulatory adherence.