Security Directory

Gesetzlichekrankenkassen.de is an established German online comparison portal operated by Kassensuche GmbH, specializing in statutory health insurance providers. The site offers comprehensive price and service comparisons, membership application assistance, and detailed information on statutory health insurance benefits. It targets German residents seeking to compare and switch statutory health insurance providers, including employees, self-employed, retirees, and students. The platform leverages 25 years of experience and provides detailed, transparent data to help users make informed decisions.

V

Verband der Ersatzkassen e. V. (vdek)

vdek.com

62

The Verband der Ersatzkassen e. V. (vdek) is a prominent German non-profit association representing the interests of major statutory health insurance substitute funds such as TK, BARMER, DAK-Gesundheit, KKH, and hkk. The website serves as an information and service portal for healthcare stakeholders, policy makers, and insured persons in Germany, offering news, policy positions, and online tools related to healthcare and insurance. The organization holds a significant position in the German healthcare sector, advocating for reforms and providing data and publications relevant to statutory health insurance.

K

KREA DIGITAL s.r.o.

krea.com

59

KREA DIGITAL s.r.o. is a Slovak-based IT company specializing in the development of web and mobile applications, IT outsourcing, and business system solutions. With over 14 years of experience, the company serves a diverse client base including notable brands, positioning itself as a reliable IT partner for custom software development and IT professional outsourcing. The website reflects a professional and consistent brand image with clear service offerings and client references. Technically, the site employs modern web technologies such as Bootstrap, jQuery, and hCaptcha, ensuring responsive design and user-friendly navigation. Security measures include HTTPS enforcement and CAPTCHA integration on forms, although explicit security policies and headers could be improved. Privacy compliance is well addressed with comprehensive privacy and cookie policies and GDPR adherence. However, the absence of WHOIS data for the domain introduces some uncertainty regarding domain legitimacy. Overall, the company presents a credible and professional digital presence with room for enhanced security transparency and WHOIS data clarity.

ITNOMIC is a specialized Austrian web agency providing comprehensive digital services including website creation with Contao CMS, e-commerce solutions using PrestaShop, and SEO/SEA optimization. The company emphasizes economic IT solutions with over 15 years of experience, targeting businesses across Austria. Their technical infrastructure leverages modern open-source platforms and integrates Google marketing and analytics tools with a strong focus on privacy compliance. Security posture is solid with HTTPS and cookie consent mechanisms, though additional security headers and incident response policies could enhance their security maturity. Overall, the website is professional, accessible, and trustworthy, supporting a positive business reputation despite the lack of publicly available WHOIS data.

M

Malu Wilz Beauty Centre

malu-wilz.de

50

Malu Wilz Beauty Centre operates an e-commerce platform specializing in beauty and skincare products, targeting consumers interested in cosmetics and personal care. The website offers a range of products including makeup, skincare collections, and accessories, with a focus on a professional and user-friendly online shopping experience. The business is positioned as a niche retailer within the German market, leveraging a multilingual website to reach both German and English-speaking customers. Technically, the website is built on the OXID eShop Community Edition platform, utilizing common JavaScript libraries such as jQuery and FlexSlider for enhanced user interaction. The site is mobile-optimized with good SEO practices and includes a cookie consent mechanism aligned with GDPR requirements. Performance is moderate, with room for improvement in accessibility features and security headers. From a security perspective, the site enforces HTTPS and uses secure login forms, but lacks visible HTTP security headers and published security policies or incident response contacts. No vulnerabilities or suspicious content were detected, and privacy compliance is well addressed through accessible privacy and cookie policies. The absence of direct contact emails or phone numbers reduces immediate contactability but is mitigated by a contact form. Overall, the website presents a trustworthy and professional e-commerce presence with solid privacy compliance and a moderate security posture. Strategic improvements in security headers, incident response transparency, and accessibility could enhance the site's resilience and user trust.

H

Hats-Trends

hats-trends.de

64

Hats-Trends is a small, established German retailer specializing in fashionable hats, beanies, caps, and related headwear for men, women, and children. Founded in 1992, the company operates an e-commerce platform powered by Jimdo CMS, complemented by presence on marketplaces such as Ebay and Amazon. The business emphasizes handmade quality and trendy designs, targeting fashion-conscious customers seeking affordable headwear. Technically, the website uses modern web technologies including jQuery UI and integrates Google Analytics and POWr.io widgets for analytics and marketing. The site is mobile-optimized with good navigation and content quality. Security posture is solid with HTTPS enforced and cookie consent mechanisms implemented, though some security headers could be improved. Privacy compliance is strong with clear policies and GDPR adherence. Overall, the site projects a trustworthy and professional image with positive trust signals such as Händlerbund membership and extensive customer reviews. No critical vulnerabilities or blocking mechanisms were detected.

L

Landkreisentsorgung Schwarzenberg GmbH

landkreisentsorgung.eu

52

Landkreisentsorgung Schwarzenberg GmbH operates as a regional waste disposal and recycling service provider primarily serving the Schwarzenberg/Erzgebirge area in Germany. The company offers a comprehensive range of services including municipal waste collection, bulky waste disposal, hazardous waste handling, wastewater services, document destruction, container rental, and city cleaning. Their market position is that of a trusted local service provider with a focus on environmental sustainability and compliance. Technically, the website is built on WordPress using common plugins such as WPBakery Page Builder and Ultimate VC Addons. The technology stack includes jQuery, Bootstrap, and Font Awesome, hosted likely via Variomedia AG. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism via Borlabs Cookie. However, it lacks advanced security headers and explicit security or incident response policies. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is supported by a privacy policy and cookie banner, indicating GDPR awareness. Overall, the website is professional, trustworthy, and well-aligned with the business's regional service model. The absence of critical security issues and the presence of trust indicators such as certifications and clear contact information contribute to a strong credibility profile. Strategic improvements could focus on enhancing security headers and publishing explicit security policies to further strengthen the security posture.

W

Willy Böhme GmbH & Co. KG

willy-boehme.eu

47

Willy Böhme GmbH & Co. KG is a regional German company specializing in waste disposal, sewage services, and environmental cleaning. The company offers a broad range of services including waste recycling, document destruction, container rental, sewer cleaning, and street cleaning. Their website reflects a well-established business with a clear focus on environmental sustainability and service reliability. The target audience primarily includes regional businesses and municipalities in Germany. Technically, the website is built on WordPress using popular plugins such as WPBakery Page Builder, Contact Form 7, and Borlabs Cookie for privacy compliance. The site is moderately performant, mobile-optimized, and SEO-friendly. Security posture is adequate with HTTPS enabled and cookie consent mechanisms in place, though there is room for improvement in security headers and explicit security policies. Overall, the domain registration and WHOIS data align with the business claims, indicating legitimacy and trustworthiness.

M

MMcom GmbH

mm-com.de

54

MMcom GmbH is a medium-sized IT service provider based in Hof, Germany, operating as a subsidiary of the M&M Militzer & Münch Gruppe, a large logistics company. The company specializes in IT projects, consulting, support, security, system integration, and hosting services, serving both the parent group and external clients. Their website reflects a professional and consistent brand image with clear contact information and compliance with GDPR and cookie regulations. Technically, the site is built on WordPress with modern plugins and frameworks, including reCAPTCHA for spam protection. Security posture is good with HTTPS enforced, though some HTTP security headers are missing and no explicit security policy or incident response contacts are published. Overall, the domain registration is consistent with the business claims, though WHOIS data is limited due to DENIC privacy policies. The website is accessible without WAF blocking and contains no suspicious or adult content.

Z

ZVEI e.V.

zvei.org

69

ZVEI e.V. is a prominent German industry association representing the electrical and digital industries. The organization positions itself as a leader in driving digitalization and technological progress within these sectors. Its website offers extensive content on industry topics, market data, and member services, targeting industry professionals and policymakers. The business model centers on advocacy, networking, and providing industry insights to its members. Technically, the website is built on TYPO3 CMS, leveraging modern JavaScript libraries and a consent-based analytics system (Matomo), reflecting a mature digital infrastructure. Security-wise, the site enforces HTTPS, employs cookie consent mechanisms, and shows no evident vulnerabilities, though explicit security policies and incident response information are not publicly detailed. Overall, the site is professional, trustworthy, and well-structured, with a strong focus on compliance and user privacy. The lack of WHOIS data is mitigated by the site's evident legitimacy and privacy protection is justified for this type of organization.

German Software e.V. is a German initiative focused on promoting excellence in software engineering with an emphasis on IT security and data protection standards 'Made in Germany'. The website serves as a platform to highlight the quality and security of German IT products and companies, targeting primarily German IT firms and customers seeking secure and compliant software solutions. The business model is that of a non-profit initiative aiming to foster trust and quality in the German IT sector. Technically, the website is built on WordPress, utilizing common libraries such as jQuery and Matomo for analytics. The site is moderately optimized for performance and mobile use, with basic accessibility and SEO features. Security posture is adequate with HTTPS enforced and spam protection via honeypot, but lacks advanced security headers and explicit security policies. Privacy compliance is partial, with a privacy policy linked externally but no cookie consent mechanism visible. Overall, the site is professional and trustworthy but could improve in privacy and security transparency.

I

ICOS-CAL

icos-cal.eu

54

ICOS-CAL operates as the Central Analytical Laboratories within the Integrated Carbon Observation System, providing critical calibration and analytical services to support greenhouse gas monitoring across Europe. The organization is affiliated with reputable research institutions such as the Max-Planck-Institute and the University of Heidelberg, positioning it as a key player in European climate research infrastructure. The website reflects this focus with detailed information about their mission, laboratories, and scientific activities, targeting researchers and monitoring stations. Technically, the website employs a moderately modern technology stack including jQuery, Bootstrap, and Piwik analytics. It is well-structured, mobile-optimized, and uses HTTPS to secure communications. However, some improvements could be made in accessibility and SEO optimization. The absence of advanced security headers and cookie consent mechanisms indicates room for enhancement in security and privacy compliance. From a security perspective, the site shows good practices such as HTTPS enforcement and no visible vulnerabilities or exposed sensitive data. The lack of WHOIS data limits full trust verification, but the professional presentation and institutional affiliations support legitimacy. No signs of malware, phishing, or suspicious content were found. Privacy and terms policies are present, though cookie consent is missing. Overall, ICOS-CAL's website is a reliable and professional platform supporting a scientific research infrastructure. Strategic recommendations include implementing cookie consent, enhancing security headers, publishing a vulnerability disclosure policy, and improving accessibility to strengthen compliance and trust.

E

Elektro Schulz GmbH

elektro-schulz.de

52

Elektro Schulz GmbH is a German-based company specializing in the installation, project planning, and maintenance of electrical energy systems including substations, transformer stations, low-voltage switchgear, and energy management solutions. Established in 1991, the company serves industrial clients, public sector entities, and major customers such as Deutsche Bahn, with international operations in over 30 countries. Their business model focuses on delivering turnkey electrical infrastructure projects with a strong emphasis on quality, reliability, and customer-specific solutions. Technically, the website is built on the Contao CMS platform and employs modern web technologies including HTML5, CSS, JavaScript, and several jQuery-based libraries for enhanced user experience. The site is mobile-optimized with good accessibility and SEO practices. Hosting is provided via rzone.de, with secure HTTPS connections and no detected blocking or WAF interference. From a security standpoint, the website enforces HTTPS, includes privacy consent on its contact form, and avoids exposing sensitive data. However, it lacks explicit security headers and incident response contact information. Google Analytics is present but disabled, reflecting a privacy-conscious approach. The privacy policy is comprehensive and GDPR compliant, though no cookie consent banner is implemented. Overall, Elektro Schulz GmbH presents a professional and trustworthy online presence with strong business credibility and adequate technical and security measures. Recommendations include enhancing security headers, adding incident response details, and implementing cookie consent mechanisms to further improve compliance and security posture.

P

Pfarrei Evangelisch unter der Veste

evangelisch-gemeinsam.de

44

The website evangelisch-gemeinsam.de represents a regional non-profit religious community, specifically a parish composed of four evangelical-lutheran congregations in the Coburg area of Germany. It serves as an information portal for church services, events, groups, and community engagement, targeting local members and interested visitors. The site is built on Drupal 10, leveraging modern web technologies and includes a consent management system for GDPR compliance. The technical infrastructure is solid, hosted on a provider indicated by the nameservers kunde24.de, with good mobile optimization and accessibility features. Security posture is strong with HTTPS enforced and cookie consent implemented, though some security headers could be improved and no explicit security policy or incident response information is published. The website does not employ advertising or extensive tracking, enhancing privacy compliance. Overall, the site is trustworthy, professional, and well-aligned with its community-focused mission.

SOREA, spol. s r.o. operates a network of hotels across Slovakia, providing accommodation, wellness, and relaxation services primarily targeting tourists and travelers. The company maintains a professional online presence with a user-friendly reservation system and regularly updated promotional offers. Their market position is that of a well-established regional hospitality provider with a medium-sized business footprint. Technically, the website employs modern JavaScript libraries and frameworks such as jQuery, Flickity, and Fancybox, alongside Google Tag Manager and Facebook SDK for analytics and marketing. The site is mobile-optimized and demonstrates good SEO practices. Security-wise, the website enforces HTTPS and implements cookie consent mechanisms, though it lacks explicit security policy documentation and incident response contacts. No critical vulnerabilities or exposed sensitive data were detected. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

F

Fachkräfte für Mittelfranken

fachkraefte-mittelfranken.de

41

Fachkräfte für Mittelfranken is a regional information portal supported by the IHK Nürnberg für Mittelfranken, focusing on workforce development and HR topics relevant to the Mittelfranken region in Germany. The portal provides companies and HR professionals with practical examples, tools, events, and services to address challenges such as digital transformation, demographic changes, and international workforce integration. The website is well-branded, consistent, and leverages structured data and social media to enhance trust and visibility. Technically, the site is built on WordPress with a modern plugin ecosystem including Fusion Builder and Events Manager. It uses Matomo for privacy-respecting analytics and implements HTTPS with good SSL configuration. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. Privacy and cookie policies are present and GDPR compliant, with a consent mechanism implemented. From a security perspective, the site enforces HTTPS and uses privacy-friendly embedded content. However, it lacks explicit security headers and a public security policy or incident response contact. No vulnerabilities or suspicious domains were detected. WHOIS data aligns well with the website's organizational claims, showing a consistent and legitimate registration history. Overall, the website presents a professional, trustworthy, and secure platform for its target audience. Strategic improvements could include enhanced security headers, explicit incident response information, and more visible contact details to further strengthen trust and compliance.

S

Stiftung der Metallindustrie im Nord-Westen (SMNW)

stiftung-nordwest.de

44

The Stiftung der Metallindustrie im Nord-Westen (SMNW) is a well-established non-profit foundation founded in 2007, focused on promoting education, science, culture, and social initiatives in the northwestern region of Germany. With a significant capital base, it plays an important role in supporting regional development and the metallurgical and electrical industries indirectly through its funding and projects. The website reflects a professional and consistent brand presence, targeting regional institutions and stakeholders with clear, relevant content and regular updates. Technically, the website is built on WordPress using common plugins such as Contact Form 7 and Autoptimize, with jQuery and jQuery UI libraries. The site is mobile-optimized and performs moderately well, with good SEO and accessibility basics. Hosting is managed via domaincontrol.com DNS, a common provider. The site uses HTTPS with strong SSL configuration but lacks some advanced security headers and cookie consent mechanisms. From a security perspective, the site demonstrates good baseline practices including HTTPS enforcement and no visible sensitive data exposure. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No WAF or blocking mechanisms are detected, and no suspicious or malicious content is present. Privacy compliance is basic with a privacy policy present but no cookie consent banner. Overall, the site is trustworthy and professional with a solid business credibility score. Recommendations include implementing cookie consent for GDPR compliance, adding security headers, publishing a security.txt file, and enhancing incident response transparency to improve security posture and compliance.

M

medi GmbH

medi.de

71

medi GmbH operates a professional website focused on medical compression stockings, orthopedic aids, and related sports and fashion products. The company is positioned as an established player in the healthcare sector in Germany, targeting patients, healthcare professionals, and consumers interested in medical and sportswear products. The website is built on TYPO3 CMS and leverages modern web technologies including jQuery UI and Bootstrap, with performance and mobile optimization rated as good. Security is robust with HTTPS enforced, strong security headers, and use of Cloudflare services. The site implements a comprehensive cookie consent mechanism compliant with GDPR, reflecting a mature privacy posture. However, explicit contact information and security policies are not prominently found, suggesting room for improvement in transparency and incident response readiness.

B

Bayerisches Staatsbad Bad Steben

bad-steben.de

51

Bayerisches Staatsbad Bad Steben operates a regional health and wellness spa specializing in radon and moor therapies located in the Naturpark Frankenwald, Germany. The website serves as an information and booking platform targeting tourists and patients seeking therapeutic and wellness services. The business holds a solid market position as a state-recognized spa with unique natural healing offerings. Technically, the site is built on WordPress with a modern tech stack including jQuery, Google Tag Manager, and YouTube integration, hosted by Int-Tech. The site demonstrates good mobile optimization, accessibility, and SEO practices. Security posture is strong with HTTPS, security headers, and privacy compliance, though there is room for improvement in formal security policy publication and incident response readiness. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

N

National Association of German Cooperative Banks (BVR)

bvr.de

59

The National Association of German Cooperative Banks (BVR) serves as the umbrella organization for cooperative banks in Germany, providing strategic partnership, advocacy, and service provision to its members. The website reflects a well-established institution with a clear market position as a leading association in the German banking sector. Key services include lobbying, social engagement, and a protection scheme for cooperative banks. The target audience primarily consists of cooperative banks and financial stakeholders within Germany. Technically, the website is built on IBM Domino XPages technology, utilizing Dojo Toolkit and jQuery libraries, with additional components like Jssor Slider and Bootstrap Notify. The site demonstrates moderate performance and good mobile optimization, though some technologies are somewhat dated. SEO and accessibility are adequately addressed through structured data and meta tags. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks explicit security headers and a formal security policy or incident response contact. No vulnerability disclosure or security.txt file is present. Privacy compliance is mostly met with a comprehensive privacy policy, but no cookie consent mechanism is evident. Overall, the website is professional, trustworthy, and well-aligned with its business purpose. The security posture is adequate but could be improved with modern security best practices and enhanced privacy controls. The domain WHOIS data is consistent with the organization's identity, supporting legitimacy and trustworthiness.

B

Beckerbillett

ticketfritz.de

57

The website ticketfritz.de is an e-commerce platform operated by the company Beckerbillett, specializing in online ticket sales. The site targets a general audience primarily in Germany and offers multi-language support. The business model revolves around providing online shops for ticketing services, with a medium-sized operational scale. The website content is professionally presented with consistent branding and includes essential business information and contact details.

G

Gesamtverband Verkehrsgewerbe Niedersachsen (GVN) e. V.

gvn.de

46

Gesamtverband Verkehrsgewerbe Niedersachsen (GVN) e. V. is a regional non-profit association serving the transport and logistics industry in Niedersachsen, Germany. The website acts as a service and information portal for its members, offering legal advice, training, news, and networking opportunities. The organization targets transport companies and professionals within the region, positioning itself as a key industry representative with a focus on member services and sector-specific expertise. The site is professionally designed, with consistent branding and clear navigation, supporting a positive user experience.

E

European Ocean Biodiversity Information System (EurOBIS)

eurobis.org

52

EurOBIS operates as the European node of the Ocean Biodiversity Information System, providing a valuable open-access platform for marine species distribution data within European waters. The website serves primarily researchers, data providers, and policy makers interested in marine biodiversity. It offers dataset downloads, quality control information, and links to related marine data initiatives. The platform is managed by VLIZ, a reputable marine research institute in Belgium, reinforcing its credibility and scientific focus. Technically, the website employs standard web technologies such as HTML, CSS, JavaScript with jQuery, and Font Awesome for icons. The site is moderately optimized for performance and mobile use, with clear navigation and structured content. However, there is room for improvement in accessibility and SEO optimization. Hosting appears to be managed by a research institution, ensuring stable infrastructure but lacking advanced modern CMS or frameworks. From a security perspective, the site lacks visible security headers and DNSSEC is not enabled, which are areas for enhancement. No forms or analytics scripts reduce attack surface and privacy risks, but the absence of privacy and cookie policies indicates incomplete compliance with GDPR best practices. The domain registration is consistent and long-standing, supporting the site's legitimacy. No WAF or blocking mechanisms were detected, and the content is safe for general audiences. Overall, EurOBIS is a credible, scientifically focused data portal with good business credibility and content quality. Strategic improvements in security headers, privacy compliance, and technical modernization would enhance its security posture and user trust.

S

Stadtverwaltung Maxhütte-Haidhof

maxhuette-haidhof.de

63

The website www.maxhuette-haidhof.de serves as the official digital presence of the city administration of Maxhütte-Haidhof, Germany. It provides comprehensive municipal information, including city council details, local events, urban planning, and citizen services. The site targets residents and visitors, offering online portals for administrative tasks such as registrations and permits. The business model is that of a local government entity focused on public service delivery. Technically, the site is built on the IKISS CMS platform, utilizing legacy but functional JavaScript libraries like jQuery and Slick Carousel. Hosting is provided by Hetzner, a reputable German hosting provider. Accessibility is enhanced through Eye-Able assistive technology scripts, and cookie consent mechanisms comply with GDPR requirements. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though security headers could be improved. No advanced analytics or advertising scripts are present, reflecting a privacy-conscious approach. Overall, the site is professional, trustworthy, and well-aligned with its government function.

T

Tím Zones.sk

pscpsc.cz

45

The website pscpsc.cz is a Czech Republic focused postal code search service operated by Tím Zones.sk. It provides users with the ability to search postal codes by city, street, or postal code, and offers a list of popular postal codes. The site is positioned as a niche informational service targeting the general public in the Czech Republic. Technically, the site uses a custom or unknown CMS with common web technologies such as jQuery, Google Tag Manager, Google Adsense, and Facebook SDK. Hosting is provided by Websupport, a regional hosting provider. The site is mobile optimized and has good SEO and accessibility basics. Security posture is moderate with HTTPS enabled and a consent management platform for GDPR compliance, but lacks explicit security headers and detailed privacy or terms of service pages. No direct company contact emails or phone numbers are present on the site, but contact is available via the parent company Zones.sk. Overall, the site is professional, trustworthy, and safe for general audiences.

T

Team Zones.sk

capcap.it

57

capCAP.it is a specialized Italian website offering postal code (CAP) lookup services for cities and streets across Italy. The site targets Italian residents and users needing postal code information, providing a user-friendly search interface with autocomplete features and popular city CAP listings. The business model appears to be advertising-supported, leveraging Google Adsense and Google Tag Manager for monetization and analytics. The site is relatively new, established in 2022, and operated by Team Zones.sk, a company linked via contact and copyright references.

T

Team Zones.sk

plzplz.at

59

plzPLZ.at is a specialized online service providing postal code search functionality for cities and streets in Austria. The website is operated by Team Zones.sk and targets general users seeking postal code information. It offers autocomplete search features and lists popular postal codes, enhancing user convenience. The site is well-positioned in its niche market, focusing on Austrian postal code data with a clear and consistent branding approach. Technically, the website employs a modern tech stack including jQuery, jQuery UI, Google Fonts, Google Tag Manager, and Google Adsense for advertising and analytics. Hosting is provided by websupport.sk, a known hosting provider. The site is mobile-optimized and demonstrates good SEO practices, although accessibility features are basic. Performance is moderate, with room for optimization. From a security perspective, the site uses HTTPS and a comprehensive consent management platform to comply with GDPR cookie and tracking regulations. However, explicit security headers are not detected, and no formal security or incident response policies are published. The site does not expose sensitive data and uses secure forms for user input. Advertising partners and tracking vendors are numerous but transparently disclosed via the consent mechanism. Overall, the website presents a moderate risk profile with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, explicit privacy and security policies, and enhanced contact information would strengthen trust and compliance. The domain registration is consistent and legitimate, supporting the website's credibility.

V

Verband der W. K. St. V. Unitas e.V.

unitas.org

10

The website www.unitas.org represents the Verband der Wissenschaftlichen Katholischen Studentenvereine Unitas e.V., the oldest Catholic student and academic association in Germany, founded in 1855. It serves as a community platform for Catholic students and alumni across 29 university locations, offering social, educational, and religious activities. The organization uniquely includes both male and female student associations and emphasizes lifelong connections and social responsibility through various projects and events. The site content is primarily in German and targets Catholic students and academics in Germany.

K

Kunstverein Friedberg

kunstverein-friedberg.de

64

Kunstverein Friedberg is a small non-profit art association based in Germany, founded in 1976, dedicated to presenting and promoting contemporary art. The organization offers exhibitions featuring both established and emerging artists, providing a cultural platform beyond commercial galleries and museums. The website serves as an information hub for members and art enthusiasts, promoting events, membership benefits, and regional art activities. Technically, the website is built on the Jimdo Creator CMS platform, hosted by Jimdo GmbH, and incorporates standard web technologies including jQuery UI and embedded widgets from POWr.io and Google services. The site is mobile-optimized and includes a cookie consent mechanism compliant with GDPR requirements. Security posture is adequate with HTTPS enforced, but lacks advanced security headers and explicit incident response or security policies. Overall, the website is professional, trustworthy, and serves its target audience effectively, though there is room for improvement in security and compliance documentation.

N

Neuer Kunstverein Aschaffenburg e.V.

kunstlanding.de

65

The website kunstlanding.de represents Neuer Kunstverein Aschaffenburg e.V., a non-profit cultural association focused on contemporary art exhibitions and community engagement in Aschaffenburg, Germany. It offers a platform for artists and art enthusiasts, hosting exhibitions, events, and providing membership opportunities. The site is well-structured, primarily in German, and targets local and regional audiences interested in art and culture. Technically, the website is built on the Jimdo Creator CMS platform, utilizing standard web technologies including jQuery UI and embedded Google Maps. The site demonstrates moderate performance with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and Open Graph data. From a security perspective, the site enforces HTTPS and implements a cookie consent mechanism compliant with GDPR. However, additional security headers are missing, and no explicit security policies or incident response information is provided. No vulnerabilities or exposed sensitive data were detected in the content. The WHOIS data aligns with the hosting and business information, indicating a legitimate domain registration. Overall, kunstlanding.de is a credible, well-maintained cultural website with good privacy compliance and moderate security posture. Strategic improvements in security headers and incident response transparency could enhance its security maturity.

KHG Erlangen is a small, non-profit community organization serving students and young academics in Erlangen, Germany. The website provides information about their spiritual, social, and support services including regular religious services, community events, counseling, and housing assistance. The organization positions itself as an inclusive and open community welcoming diverse backgrounds. Technically, the website is built on the Contao CMS platform with modern frontend libraries such as jQuery and Bootstrap, hosted on NSHost infrastructure. The site is mobile optimized and offers a good user experience with clear navigation and relevant content. Security posture is moderate with HTTPS enabled but lacks visible security headers and a public security policy. Privacy compliance is basic with a privacy policy page present but no cookie consent mechanism. Overall, the website is trustworthy and professional, serving its community effectively.

B

British Chamber of Commerce

bccequilibrium.cz

43

The website bccequilibrium.cz represents the Equilibrium Mentoring Programme operated by the British Chamber of Commerce in the Czech Republic. It focuses on empowering women in business and non-profit sectors through mentorship and community engagement. The programme has a well-established presence since 2011, boasting a large community of mentors and mentees. The website content is professionally presented, with detailed mentor profiles and programme statistics, targeting women seeking career development and leadership growth. Technically, the site is built on WordPress with the Avada theme and uses common plugins for e-commerce and event management. It is hosted via a Czech registrar and uses HTTPS, ensuring secure connections. However, the site lacks visible privacy and cookie policies, which impacts its privacy compliance score. Security headers are not detected, and no explicit contact emails or phone numbers are found, which could affect user trust and compliance. Overall, the site is functional, professional, and safe for general audiences, but could improve in privacy transparency and security best practices.

V

Vernetzte Kirche

evangelische-termine.de

51

Evangelische Termine is a specialized event calendar platform serving the Evangelical Lutheran Church community in Bavaria, Germany. It offers a searchable calendar of church-related events, location-based event discovery, and user login functionality for event submissions. The platform is supported by the Vernetzte Kirche organization and promotes mobile applications for iPhone and Android to enhance accessibility. The website content is well-structured, professionally designed, and consistent with its non-profit religious mission. Technically, the site uses a modern tech stack including Bootstrap 5, jQuery, and FontAwesome, hosted on a provider associated with the domain's nameservers. The site is mobile optimized and provides basic accessibility features. However, there is room for improvement in SEO and security headers implementation. The login form uses secure POST methods, but no advanced security policies or vulnerability disclosures are present. From a security perspective, the site shows a moderate security posture with no visible critical vulnerabilities or exposed sensitive data. The absence of security headers and cookie consent mechanisms are notable gaps. Privacy compliance is partially met with a privacy policy page but lacks cookie consent and detailed GDPR indicators. The domain WHOIS data aligns well with the website's purpose and shows no suspicious patterns, supporting a high legitimacy score. Overall, Evangelische Termine is a trustworthy, well-maintained platform with a clear community focus. Strategic improvements in security headers, privacy compliance, and transparency around incident response would enhance its security posture and user trust.

S

Stadt Nürnberg

nuernberg.de

64

The website www.nuernberg.de is the official city portal for Nürnberg, Germany, providing comprehensive information and services related to city administration, events, news, and citizen engagement. It serves a broad audience including residents, visitors, and stakeholders interested in municipal affairs. The site is professionally designed with a strong emphasis on accessibility, multilingual support, and user-friendly navigation. The content is rich, relevant, and regularly updated, reflecting a mature digital presence for a large government entity. Technically, the site is built on the IMPERIA CMS platform, utilizing JavaScript libraries including jQuery and jQuery UI, with Cookiebot managing cookie consent and Matomo for analytics. The infrastructure appears stable and hosted on city-managed servers. Performance is moderate with good mobile optimization and accessibility features. However, the use of an outdated jQuery version presents a minor security risk. From a security perspective, the site enforces HTTPS and implements cookie consent mechanisms, but lacks explicit security headers and a published security policy or incident response contact. No vulnerabilities or exposed sensitive data were detected in the provided content. Privacy compliance is strong, with clear GDPR-aligned privacy and cookie policies. Overall, the website demonstrates a high level of professionalism, trustworthiness, and compliance suitable for a government portal. Strategic improvements include updating JavaScript libraries, publishing a security policy, and enhancing security headers to further strengthen the security posture.

B

Brunata Minol

minol.de

57

Brunata Minol is a leading German service provider specializing in metering, IoT, and energy management solutions tailored for the housing and real estate sectors. Their offerings include heating cost billing, water and heat meters, smoke detector services, E-Mobility solutions, and energy certificates, positioning them as a comprehensive partner for landlords, property managers, and tenants. The company operates under the Minol-ZENNER-Gruppe umbrella, indicating a strong corporate backing and market presence. Technically, the website is built on the Contao Open Source CMS platform, leveraging modern JavaScript libraries such as jQuery and jQuery UI. The site is well-structured, mobile-optimized, and incorporates accessibility and SEO best practices. Hosting is managed via Managed IP, consistent with enterprise-grade infrastructure. The site employs HTTPS with good SSL configuration and includes cookie consent mechanisms aligned with GDPR requirements. From a security perspective, the website demonstrates solid practices including secure forms, no visible vulnerabilities, and privacy compliance. However, it lacks explicit security policy and incident response pages, which could enhance transparency and trust. The WHOIS data aligns well with the website's claims, showing consistent domain registration and no suspicious patterns. Overall, the site reflects a professional, trustworthy, and mature digital presence suitable for its target audience in the energy and real estate sectors. Strategic improvements could focus on publishing dedicated security and incident response information to further strengthen security posture and user confidence.

S

Stadtwerke Nürtingen GmbH

sw-nuertingen.de

61

Stadtwerke Nürtingen GmbH is a regional utility company providing essential services including electricity, gas, water, district heating, and highspeed internet to the Nürtingen area in Germany. The company emphasizes regional economic support and customer-centric service, offering digital tools such as mobile apps and online customer portals to enhance user experience. Their market position is that of a trusted regional energy and telecommunications provider with a medium-sized operational footprint. Technically, the website is built on the Neos CMS platform using the Flow PHP framework, with modern JavaScript libraries and a responsive design ensuring good performance and accessibility. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved and incident response information is not publicly detailed. Overall, the website is professional, trustworthy, and compliant with GDPR, serving a general audience without any adult or questionable content.

G

Genussakademie Frankfurt

genussakademie.com

59

Genussakademie Frankfurt is a well-established culinary school and event organizer founded in 2004, offering a wide range of cooking courses, tastings, private dining experiences, and culinary travel options primarily targeting consumers interested in gastronomy and cooking in the Frankfurt region. The website demonstrates a solid technical infrastructure with the use of modern JavaScript libraries, Google Tag Manager, and a consent management platform, reflecting a mature digital presence. Security posture is adequate with HTTPS enabled and consent mechanisms in place, though improvements such as enabling DNSSEC and adding security headers are recommended. Overall, the site is professional, trustworthy, and compliant with GDPR requirements, supporting a positive user experience and business credibility.

N

Netzwerk Nachbarschaftshilfe e.V.

netzwerk-nachbarschaftshilfe.de

44

Netzwerk Nachbarschaftshilfe e.V. is a small non-profit organization based in Freiburg, Germany, focused on supporting rural communities in Baden-Württemberg by providing training and support for neighborhood help associations. The organization aims to improve quality of life for elderly and needy residents while empowering local women with work opportunities. The website reflects a professional and consistent brand presence with relevant content including news, events, and downloadable resources. Technically, the site is built on Edith CMS, uses jQuery and Bootstrap, and is hosted on w-commerce.de infrastructure. It employs Matomo analytics with respect for cookie consent, but lacks a visible cookie consent banner and some security headers. The security posture is good with HTTPS enforced and no obvious vulnerabilities, though improvements in security headers and incident response disclosures are recommended. Overall, the site is safe, accessible, and trustworthy, serving its community-oriented mission effectively.

N

Nicht(s) vergessen - Gut vorbereitet für die letzte Reise

nichtsvergessen.de

52

Nicht(s) vergessen is a German non-profit initiative supported by Evangelical regional churches and their diaconal works, focusing on providing resources and support for end-of-life planning, bereavement, and related topics. The website offers brochures, online seminars, and informational materials to help individuals prepare for their last journey with dignity and peace. The target audience primarily consists of adults interested in advance care planning and grief support. Technically, the site is built on a W-Commerce Edith CMS platform, utilizing jQuery, Bootstrap, and Matomo analytics, reflecting a mature but somewhat traditional technology stack. The site is well-optimized for mobile devices and provides a good user experience with clear navigation and professional design. Security-wise, the site enforces HTTPS and uses privacy-respecting analytics, but lacks explicit security policies and some advanced security headers. Privacy compliance is strong, with a comprehensive privacy policy and cookie consent mechanism in place. Overall, the website is trustworthy, professionally maintained, and serves a niche non-profit sector effectively.

E

Evangelische Landeskirchen und ihre Diakonischen Werke

was-bleibt.de

62

The website www.was-bleibt.de represents a non-profit initiative jointly operated by Evangelische Landeskirchen and their Diakonische Werke, focusing on legacy, testament, and end-of-life planning topics. It offers educational content, free brochures, online seminars, and events to support individuals in planning their last will and related matters. The site targets a general German-speaking audience interested in these sensitive topics. Technically, the site is built on Edith CMS with a modern frontend using jQuery, Bootstrap, and Matomo analytics, hosted on w-commerce.de infrastructure. Privacy and cookie policies are well implemented with GDPR compliance and consent mechanisms. Security posture is good with HTTPS and no visible vulnerabilities, though some security headers could be improved. Overall, the site is professional, trustworthy, and well-aligned with its non-profit mission.

M

Messe Essen GmbH

ipm-essen.de

67

Messe Essen GmbH operates the IPM ESSEN website, which serves as the world-leading trade fair for the horticulture industry. The site provides comprehensive information about the entire value chain of plant production, technology, floristry, equipment, and point of sale. It targets professional audiences in the gardening and plant sectors, positioning itself as a key global event in this niche. The website employs a modern technical stack including jQuery, Usercentrics for consent management, Google reCAPTCHA for bot protection, and multiple advertising and analytics platforms. Hosting is managed via kasserver.com, indicating a professional hosting environment. Security posture is strong with HTTPS enforced and CSRF protections in place, though explicit security headers and policies are absent. Privacy compliance is partially addressed through cookie consent but lacks a clear privacy policy or terms of service. Overall, the site is professional, content-rich, and trustworthy but could improve transparency around privacy and security policies.

A

AudiobookSTORE.com

audiobookstore.com

64

AudiobookSTORE.com is a well-established e-commerce platform specializing in digital audiobook downloads and podcast episodes, serving a general audience primarily in the United States. Founded in 2006 with a domain registered since 2003, the company offers a large catalog of over 200,000 audiobooks and 100 million podcast episodes, accessible via web and mobile apps. The business model focuses on direct digital sales, subscription services like FlexPass™, and gift certificates, positioning itself as a niche player in the digital media retail market. Technically, the website employs a modern technology stack including jQuery, Bootstrap, and various analytics and optimization tools such as Google Tag Manager, FullStory, and Visual Website Optimizer. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and security. The site is mobile-optimized with good SEO and accessibility practices, although some improvements in security headers and cookie consent mechanisms are recommended. From a security perspective, the site uses HTTPS with a good SSL configuration and domain transfer protections. However, DNSSEC is not enabled and several important security headers are missing, which could expose the site to certain risks. Privacy compliance is basic with a privacy policy present but lacking explicit cookie consent. No incident response or vulnerability disclosure information is found. Overall, AudiobookSTORE.com demonstrates a solid business and technical foundation with a high trustworthiness rating. Strategic improvements in security headers, DNS security, and privacy compliance would enhance its security posture and regulatory adherence.

H

Heinrichs-Verlag gGmbH

heinrichs-verlag.de

64

Heinrichs-Verlag gGmbH operates as a regional publishing company based in Bamberg, Germany, specializing in religious and cultural publications. Their flagship product is the Heinrichsblatt, a weekly church newspaper serving the Archdiocese of Bamberg, complemented by a book publishing arm offering regional guides and religious literature. The company targets readers interested in church news, regional culture, and religious content, leveraging subscription and direct sales models. The website reflects a professional and consistent brand presence with clear navigation and relevant content for its audience. Technically, the website is built on the Jimdo Creator CMS platform, utilizing modern web technologies including jQuery UI and third-party widgets from POWr.io. The site is hosted by Jimdo GmbH and employs HTTPS with a good SSL configuration. Performance is moderate with good mobile optimization and basic accessibility features. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site enforces HTTPS and includes a cookie consent mechanism compliant with GDPR. However, explicit security headers such as Content-Security-Policy and X-Frame-Options are not detected, representing an area for improvement. No vulnerabilities or exposed sensitive data were found. The absence of a published security policy or incident response contacts suggests room for enhancing transparency and readiness. Overall, the website is safe, trustworthy, and compliant with privacy regulations, serving its niche audience effectively. Strategic recommendations include implementing additional security headers, enhancing accessibility, and publishing security and incident response information to bolster user trust and compliance posture.

Midvox is a German media company specializing in modern book marketing and social media integration for printed books. It offers digital marketing solutions such as 'Blick ins Buch' (look inside the book) previews, flippable covers, and social media widgets to facilitate book sales across online and physical retailers. The company serves a large network of over 1,400 publishers and thousands of retailers, positioning itself as an important player in the book marketing ecosystem. Technically, the website uses a variety of older JavaScript libraries and custom scripts, hosted on domaincontrol.com name servers, with moderate performance and basic mobile optimization. Security posture is limited due to lack of visible HTTPS enforcement and security headers, and no privacy or cookie policies are present, indicating compliance gaps. Overall, the website is functional but would benefit from modernization and enhanced security and privacy practices.

C

CCC CZ servis, s.r.o.

cccservis.cz

44

CCC CZ servis, s.r.o. is a Czech company specializing in simplifying European toll payments and related services for owners of recreational vehicles and passenger cars. They provide electronic toll devices compliant with the European Electronic Toll Service (EETS), fuel cards in partnership with Shell, and insurance solutions for motorhomes. The company positions itself uniquely in the Czech market as the sole provider of EETS services for vehicles over 3.5 tons, targeting a niche audience of travelers across multiple European countries. Their business model revolves around monthly rental fees for toll devices and fuel cards, combined with invoicing for actual toll usage, offering convenience and administrative relief to customers. The website content is professionally presented in Czech, with clear service descriptions, partner references, and contact information.

S

Stiftung der Evangelischen Landeskirche in Baden

gutes-stiften.org

55

The Stiftung der Evangelischen Landeskirche in Baden is a non-profit foundation focused on supporting charitable giving and foundation establishment within the Baden region of Germany. The organization provides advisory services for donors and foundations, including inheritance and precautionary initiatives, targeting individuals and entities with a Christian values orientation. The website reflects a professional and consistent brand presence, with clear contact information and relevant content tailored to its audience. Technically, the website is built on Edith CMS and utilizes common web technologies such as jQuery and Matomo analytics, with a moderate performance profile and good mobile optimization. The use of HTTPS and clientTransferProhibited domain status indicates a secure baseline, though DNSSEC is not enabled and security headers are absent, representing areas for improvement. From a security perspective, the site demonstrates privacy-conscious tracking by disabling cookies in Matomo and provides a comprehensive privacy policy compliant with GDPR. However, the absence of a cookie consent mechanism and explicit security policies limits full compliance. No incident response or vulnerability disclosure information is published. Overall, the website is trustworthy and professionally maintained, with minor technical and compliance gaps. Strategic improvements in DNS security, cookie consent, and security headers would enhance the security posture and regulatory compliance.

D

Diakonisches Werk Baden

diakonie-baden.de

42

Diakonie Baden is a leading non-profit social welfare organization in Baden-Württemberg, Germany, affiliated with the Evangelical Church. The website provides comprehensive information about their social services, including care, migration support, family services, and volunteer opportunities. The organization targets individuals in need, volunteers, and social institutions, positioning itself as a key player in the regional social welfare sector. Technically, the site is built on TYPO3 CMS with a modern tech stack including jQuery, Bootstrap, and various UI libraries, ensuring good performance, accessibility, and mobile optimization. Security posture is strong with HTTPS, consent management, and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is robust with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and well-maintained, reflecting the organization's credibility and commitment to social causes.

E

Evangelische Landeskirche in Baden

ekiba-leicht.de

51

The website ekiba-leicht.de is operated by the Evangelische Landeskirche in Baden, a regional religious institution in Germany focused on providing accessible information in easy German language. The site targets individuals with language or cognitive challenges, promoting inclusion and accessibility in church-related content and community work. The business model is non-profit and government-related, with a medium organizational size and a clear focus on accessibility services. Technically, the website uses Edith CMS hosted on w-commerce.de infrastructure, leveraging jQuery, Matomo analytics, and Bootstrap-like responsive design. The site is moderately performant, mobile-optimized, and accessible, with good SEO practices. However, it lacks explicit cookie consent mechanisms and some security headers, which are areas for improvement. Security posture is solid with HTTPS enforced and email obfuscation implemented, but the absence of security policies and incident response contacts limits transparency. No critical vulnerabilities or suspicious patterns were detected. The domain WHOIS data aligns well with the organization's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and serves its target audience effectively. Strategic improvements in privacy compliance and security transparency would enhance its posture and user trust.

G

Górskie Ochotnicze Pogotowie Ratunkowe

gopr.pl

56

Górskie Ochotnicze Pogotowie Ratunkowe (GOPR) is a Polish mountain rescue organization dedicated to providing rescue services and safety information in mountainous regions of Poland. The organization operates multiple regional groups with central stations, offering emergency contact numbers, avalanche warnings, and safety education. The website serves as an information hub for tourists, skiers, and hikers, providing weather conditions, avalanche risk updates, and a dedicated rescue application. GOPR is supported by government funding and partners, reflecting its important role in public safety. Technically, the website is built on a modern CMS platform (Vela CMS) and utilizes a variety of JavaScript libraries such as jQuery, FancyBox, and Slick Carousel to enhance user experience. The site is mobile optimized and includes accessibility features, though some improvements in security headers and SEO could be made. Google Analytics is used for visitor tracking with a visible cookie consent mechanism, indicating basic privacy compliance. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks visible security headers and explicit published security policies or incident response contacts. The absence of WHOIS data for the domain reduces transparency but does not contradict the legitimacy suggested by the official content and government affiliations. Overall, the site presents a good security posture with room for improvement in formal security documentation and technical hardening. The overall risk assessment is moderate-low, with recommendations focusing on enhancing security headers, publishing incident response policies, and improving WHOIS transparency. The website effectively supports GOPR's mission to provide mountain rescue services and safety information to the public.

D

Diözesanstelle Ehe Familie Leben

ehe-familie-lebensberatung.de

45

The website www.ebfr-efl.de represents the Diözesanstelle Ehe Familie Leben, a regional non-profit counseling service operating within the Archdiocese of Freiburg, Germany. It offers psychological counseling for marriage, family, and life issues, targeting individuals, couples, and families regardless of their background. The site provides information on counseling services, online counseling, training, and contact details, positioning itself as a trusted regional support entity. Technically, the site is built on the Edith CMS platform and hosted by w-commerce.de. It uses a modern tech stack including jQuery, AblePlayer for accessible video playback, and Matomo for analytics. The website is mobile-optimized and accessible, though SEO metadata is basic. Performance is moderate with well-structured navigation and consistent branding. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks important security headers and a cookie consent mechanism, which impacts GDPR compliance. No explicit security or incident response policies are published. Analytics usage is moderate with privacy-conscious settings but could be improved with clearer user consent. Overall, the website is professional and trustworthy for its intended audience but would benefit from enhanced privacy compliance, security headers, and visible policy documentation to improve user trust and regulatory adherence.