Security Directory

S

Slobodna domena Zadruga za otvoreni kod i dizajn

slobodnadomena.hr

10

Slobodna domena Zadruga za otvoreni kod i dizajn is a Croatian cooperative founded in 2017, specializing in open source software and design services. The cooperative brings together designers, programmers, creatives, and engineers to provide comprehensive expert services, targeting non-profit organizations, socially responsible entities, institutions, and commercial companies. Their business model emphasizes collaboration and social responsibility, positioning them as a niche player in the Croatian technology sector. Technically, the website employs modern web technologies including Matomo analytics with cookies disabled, Google Fonts, SVG graphics, and Turbolinks for navigation. The site is mobile-optimized and includes accessibility features such as dyslexia-friendly typography and contrast adjustments. Performance is moderate with good SEO and accessibility practices, although some improvements in security headers and privacy policies are needed. From a security perspective, the site uses HTTPS with a good SSL configuration and disables cookies in analytics to enhance privacy. However, it lacks explicit privacy and cookie policies, security headers, and vulnerability disclosure mechanisms, which are important for compliance and trust. No forms or sensitive data exposure were detected, and no suspicious or malicious content was found. Overall, the website is professional, trustworthy, and well-aligned with the cooperative's mission. The main risks relate to compliance gaps in privacy and cookie policies and the absence of security headers. Addressing these would improve the security posture and regulatory compliance, enhancing user trust and legal standing.

S

Statistisches Landesamt Baden-Württemberg

statistik-bw.de

58

The Statistisches Landesamt Baden-Württemberg is a major public sector entity providing comprehensive statistical data and consulting services related to the economic and social development of the Baden-Württemberg region in Germany. The website serves a broad audience including researchers, policymakers, and the general public, offering structured and detailed statistical information. Technically, the site is built on the TYPO3 CMS platform with modern web technologies such as Bootstrap and Font Awesome, and it employs Matomo analytics configured to disable cookies, reflecting a privacy-conscious approach. The site is mobile optimized and demonstrates good accessibility and SEO practices. Security-wise, the site uses HTTPS and disables cookies in analytics, but lacks explicit security headers and published security policies or incident response contacts, which are areas for improvement. Overall, the domain appears legitimate and consistent with a government entity, with no signs of blocking or WAF interference. The website is safe, professional, and trustworthy, though it would benefit from enhanced privacy and security disclosures.

O

openPetition gGmbH

openpetition.eu

10

openPetition gGmbH operates a politically neutral, non-profit online platform that enables citizens to start, sign, and promote petitions across the European Union and other countries. With a user base of approximately 15 million people, the platform facilitates grassroots democracy and political participation by providing tools and guidelines for effective petitioning. The website is professionally designed, multilingual, and offers a clear user experience focused on civic engagement and transparency.

O

openPetition

openpetition.de

62

openPetition is a reputable German-based online platform that empowers citizens to create, support, and promote petitions and initiatives. It serves as a bridge between the public and political institutions by forwarding petitions that reach quorum to relevant parliaments. The platform targets a broad audience of citizens interested in civic engagement and political participation, offering multilingual support and a user-friendly interface. Technically, the website employs modern web standards, uses self-hosted analytics for privacy, and maintains good performance and accessibility standards. Security-wise, the site enforces HTTPS and follows several best practices but could enhance its posture by implementing additional security headers and providing explicit incident response contacts. Overall, the domain registration data aligns well with the website's claims, supporting its legitimacy and trustworthiness.

I

Ireland's National Support Network for Horizon Europe

horizoneurope.ie

78

HorizonEurope.ie serves as Ireland's National Support Network for the EU's Horizon Europe research and innovation funding programme. The website provides comprehensive information about the programme's pillars, funding opportunities, success stories, and advisory services to researchers and innovators in Ireland. It is positioned as a trusted government-supported resource to facilitate access to EU funding and promote Irish participation in Horizon Europe. Technically, the site is built on WordPress with common plugins and uses Google Tag Manager for analytics. The site is well-structured, mobile-optimized, and provides a good user experience with clear navigation and relevant content. Security posture is adequate with HTTPS enabled, but lacks some security headers and explicit privacy and cookie policies, which are areas for improvement. The domain registration is consistent with the website's purpose and geographic focus, supporting its legitimacy. Overall, the site is professional, trustworthy, and safe for general audiences, but could enhance privacy compliance and security best practices.

B

Baycloud Systems Ltd.

baycloud.com

68

Baycloud Systems Ltd. operates a mature and established consent management platform focused on privacy compliance with GDPR, CCPA, and ePrivacy laws. The company provides a cookieless and tracking-free analytics solution integrated with consent management, targeting businesses that require robust privacy compliance tools. The platform is trusted by multinational and household brands and has been operational since 2011, supported by a domain registered since 2009. Technically, the website leverages modern frameworks such as Blazor Server and Telerik UI, with a clean and professional design optimized for desktop and mobile users. Security posture is strong with HTTPS and Content-Security-Policy headers, though DNSSEC is not enabled and some additional security headers could improve defenses. Privacy compliance is well addressed with clear privacy and cookie policies and a consent mechanism. However, no explicit terms of service or incident response policies are published. Overall, the website presents a credible and professional business with a strong focus on privacy and compliance.

The website perfectwpthemes.com is currently inaccessible due to a Cloudflare Turnstile CAPTCHA challenge page, indicating that the site is protected by Cloudflare's Web Application Firewall (WAF). No actual business content, contact information, or policies are accessible for analysis. The domain is registered with NameCheap since 2018 and uses Cloudflare nameservers, which is consistent with a legitimate website setup. However, due to the content being blocked, no detailed assessment of the business, technical infrastructure, or security posture can be performed. The site does not expose any sensitive data or show signs of vulnerabilities in the provided content. Overall, the risk assessment is limited by the lack of accessible content.

D

Dolans Pub

dolans.ie

54

Dolans Pub is a traditional Irish pub located in Limerick, Ireland, offering a combination of restaurant services and five live music venues. It is a well-established local institution known for hosting a variety of live music events and catering to a diverse audience ranging from solo travelers to large tour groups. The website reflects a hospitality business model focused on live entertainment, food service, and event hosting, positioning itself as a key player in the local entertainment and hospitality market. Technically, the website is built on the Squarespace platform, leveraging modern web technologies including Google Analytics, Facebook Pixel, Mixpanel, and Google Maps API for enhanced user experience and marketing insights. The site is mobile-optimized with good SEO practices and moderate performance. However, accessibility features are basic and could be improved. From a security perspective, the website enforces HTTPS with HSTS enabled, indicating a strong SSL configuration. Security headers are present, and no obvious vulnerabilities or exposed sensitive data were detected. However, the absence of privacy and cookie policies, as well as lack of GDPR compliance indicators, represent compliance gaps. The WHOIS data is unavailable, limiting domain trust verification. Overall, the website presents a professional and trustworthy front for the business but should address privacy compliance and transparency to enhance user trust and regulatory adherence. Strategic improvements in privacy policy publication, cookie consent mechanisms, and security disclosure would strengthen the security posture and compliance standing.

L

Limerick City and County Council

limerick.ie

64

Limerick.ie is the official website for Limerick City and County Council, serving as a comprehensive portal for tourism, local government services, events, and community engagement. The site targets locals, tourists, businesses, and residents, providing authoritative and up-to-date information about the region. The website is well-branded, professionally designed, and consistent with government standards. Technically, the site is built on Drupal 10, leveraging modern analytics tools like Matomo and Google Tag Manager, and employs a cookie consent mechanism via OneTrust, indicating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, with good performance metrics. From a security perspective, the site enforces HTTPS, respects Do Not Track, and uses cookie consent banners, though explicit security policies and vulnerability disclosures are not publicly available. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data is unavailable beyond registry policy text, likely due to privacy protection, which is justified for a government domain. Overall, Limerick.ie demonstrates a strong security posture, excellent content quality, and good privacy compliance, making it a trustworthy and professional government website.

U

University of Limerick

ul.ie

73

The University of Limerick is a well-established higher education institution in Ireland, providing educational and research services primarily targeting students and the academic community. The website reflects a professional and consistent brand image, with comprehensive privacy and cookie policies indicating strong compliance with GDPR regulations. The technical infrastructure is modern, leveraging Drupal 11 CMS, Google Tag Manager, Matomo analytics, and Cookiebot for consent management, demonstrating a mature digital presence. Security posture is generally good with HTTPS enforced and privacy-respecting analytics, though the absence of visible security headers suggests room for improvement. Overall, the website is trustworthy, well-structured, and user-friendly, with no signs of adult or questionable content.

L

Lime Tree Theatre

limetreebelltable.ie

51

Lime Tree Theatre is a cultural venue and event organizer based in Limerick, Ireland, focusing on theatre, music, dance, film, and community arts programs. The organization supports local artists and audiences through diverse programming and professional development initiatives such as Belltable:Connect. The website reflects a medium-sized non-profit entity with a strong local presence and partnerships with arts councils and educational institutions. Technically, the site is built on WordPress with modern plugins and technologies, offering good performance, mobile optimization, and accessibility. Security posture is solid with HTTPS, hCaptcha on forms, and no visible vulnerabilities, though DNSSEC and some security headers could be improved. Privacy compliance is well addressed with clear policies and consent mechanisms. Overall, the site is professional, trustworthy, and well-positioned in its market niche.

T

Ticketsolve

ticketsolve.com

67

Ticketsolve is a specialized SaaS platform providing ticketing, marketing, CRM, fundraising, and membership management solutions tailored for arts, culture, and heritage organizations. With over 360 clients, it holds a strong market position as a trusted partner in the arts and culture sector. The website reflects a professional and user-friendly design, emphasizing collaboration, data-driven insights, and customer success. Technically, the site is built on WordPress with integrations including HubSpot, Google Analytics, and Hotjar, optimized for performance and mobile responsiveness. Security posture is generally good with HTTPS enforced, though the absence of explicit security headers and public incident response policies suggests room for improvement. The lack of WHOIS data transparency slightly impacts trust but does not overshadow the overall professionalism and credibility of the business. Strategic recommendations include enhancing security headers, publishing security policies, and improving WHOIS transparency to bolster trust.

F

Frecciarossa Official Merchandising

frecciarossa.shop

71

Frecciarossa Official Merchandising operates an e-commerce platform specializing in travel-related products such as trolleys, bags, clothing, and accessories, leveraging the strong brand identity of the Italian high-speed train Frecciarossa. The website targets consumers interested in stylish and elegant travel merchandise, positioning itself as the official merchandising partner. The business model is retail-focused, selling branded products online primarily to the Italian market with multilingual support. The company maintains a consistent brand presence and integrates social media channels to enhance customer engagement. Technically, the website is built on the Shopify platform, utilizing modern web technologies including jQuery, Google Tag Manager, and Iubenda for cookie and privacy management. The site demonstrates good mobile optimization, SEO practices, and performance metrics typical of a professionally managed e-commerce store. The use of structured data and canonical tags further supports search engine visibility. From a security perspective, the site enforces HTTPS with strong SSL configuration and implements standard security headers. Cookie consent mechanisms comply with GDPR requirements, and no sensitive data exposure or vulnerable libraries were detected. However, the absence of explicit security policies, incident response contacts, and vulnerability disclosure mechanisms suggests room for improvement in transparency and security maturity. Overall, the website presents a low-risk profile with a solid business foundation and technical infrastructure. Strategic recommendations include enhancing security transparency, adding terms of service, and improving accessibility features to further strengthen trust and compliance.

A

Associazione IWA Italy (International Web Association Italia)

iwa.it

47

IWA Italy is a well-established professional association founded in 2000, dedicated to supporting and enhancing the professionalism of web practitioners in Italy. It offers certifications, training, advocacy, and networking opportunities, positioning itself as a key player in the Italian digital professional landscape. The website reflects a clear focus on quality, ethical standards, and community building among web professionals. Technically, the site uses a modern tech stack including Bootstrap and jQuery, with integrations for social media and privacy compliance via Iubenda. Security posture is solid with HTTPS and cookie consent mechanisms, though it lacks explicit security policy and incident response information. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

A

Agenda della Disabilità

agendadelladisabilita.it

63

Agenda della Disabilità is a non-profit organization based in Italy focused on promoting disability inclusion and sustainable community development. The website serves as a platform for community engagement, advocacy, and dissemination of inclusive initiatives. It targets a general audience interested in social inclusion and disability rights. The organization maintains a modest but consistent online presence with active social media channels and event calendars. Technically, the website is built on WordPress using popular plugins such as Elementor, Yoast SEO, and Google Analytics, reflecting a moderate level of digital maturity. The site is mobile-optimized and SEO-friendly, providing a good user experience. Security-wise, the site enforces HTTPS and DNSSEC, indicating a good baseline security posture. However, it lacks some advanced security headers and explicit security policies, which could be improved. Privacy compliance is basic, with a cookie consent mechanism present but no visible privacy or terms of service pages. Overall, the website is trustworthy and professional, with no signs of malicious activity or adult content.

H

Hostsharing eG

hs.coop

56

Hostsharing eG operates hostsharing.coop, a Mastodon instance dedicated to members of their cooperative hosting community. The website serves as a social networking platform within the Fediverse, enabling decentralized communication. The business is positioned as a niche cooperative provider in the technology sector, focusing on privacy-respecting social media hosting since 2018. The site content is primarily in German, targeting cooperative members and Fediverse users. Technically, the platform uses Mastodon version 4.4.8 with modern web technologies including React and ES modules, providing a responsive and user-friendly experience. Security posture is generally good with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and security headers are not evident. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages found. Overall, the domain registration data aligns well with the business claims, indicating legitimacy and trustworthiness.

D

Domain-Bestellsystem

domain-bestellsystem.de

58

The website domain-bestellsystem.de serves as a login portal for a domain order system targeted primarily at resellers and partners. The site provides a basic interface for reseller users to enter their credentials and access the ordering system. The business model appears to be a B2B reseller platform within the technology sector, focusing on domain management services. The site content is minimal and functional, lacking detailed business or contact information, privacy policies, or terms of service. The target audience is clearly resellers or partners rather than general consumers. From a technical perspective, the website uses legacy JavaScript libraries such as jQuery 1.4.4 and related plugins, which are outdated and pose potential security risks. The HTML and CSS are basic but functional, with moderate performance and basic mobile optimization. There is no evidence of a modern CMS or advanced frameworks. The site lacks visible security headers and there is no explicit confirmation of HTTPS usage in the provided data, which raises concerns about secure data transmission. The login form uses POST and masks passwords, but overall security posture is moderate due to outdated libraries and missing headers. Security evaluation reveals several areas for improvement. The use of outdated JavaScript libraries is a significant vulnerability. The absence of security headers and unclear SSL/TLS configuration further reduce security confidence. No privacy or cookie policies are present, indicating poor privacy compliance. No contact or incident response information is provided, limiting transparency and trust. No WAF or blocking mechanisms were detected, and the site content is fully accessible. WHOIS data is limited but shows professional DNS hosting with no privacy protection, suggesting moderate legitimacy. Overall, the website scores in the average range with notable deficiencies in privacy compliance, security best practices, and business transparency. Strategic recommendations include upgrading all JavaScript libraries, implementing HTTPS with strong SSL/TLS, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to enhance trust and compliance.

H

Hostsharing eG

geno.social

57

geno.social is a niche Mastodon instance dedicated to cooperatives, cooperative organizations, and cooperative activists. Operated by the cooperative Hostsharing eG, it provides a decentralized social media platform that integrates with the broader fediverse, promoting small, secure, and independent instances. The website clearly communicates its mission and target audience, offering account registration via a contact form and providing transparent contact information. The business model centers on community-driven social media hosting with a focus on cooperative values. Technically, the site runs Mastodon version 4.4.8 with a React-based frontend, leveraging modern JavaScript modules and polyfills for compatibility. The site is mobile-optimized and provides a good user experience with clear navigation and relevant content.

C

CKEditor.com

ckeditor.com

73

CKEditor.com is a well-established technology company specializing in WYSIWYG HTML editors with collaborative rich text editing capabilities. Founded in 2007, it serves a broad audience including developers and enterprises, offering a robust software solution trusted by over 20,000 companies worldwide. The company operates primarily on a SaaS and open-source business model, providing extensive documentation and support to its users. The website reflects a mature market position with professional branding and consistent messaging.

G

Global Payments UK

realexpayments.com

72

Global Payments UK operates as a leading provider of payment technology and software solutions, delivering a comprehensive commerce platform to businesses across multiple sectors including retail, healthcare, education, and transportation. The company offers a wide range of services such as card machines, online payments, POS systems, payment reporting, analytics, and business funding. As a subsidiary of Global Payments US, it maintains a strong market position with a global footprint and a consistent brand presence. The website reflects a mature digital infrastructure with modern technologies and good mobile optimization, supporting a professional user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and vulnerability disclosures are absent. WHOIS data is unavailable, which slightly impacts domain transparency and trust. Overall, the site is well-designed, content-rich, and trustworthy for business users seeking payment solutions.

The website www.listenlayer.com appears to be inaccessible or blocked, with WHOIS data indicating the domain is not registered or the data is unavailable. The website content is incomplete and truncated, preventing a full analysis of business operations, services, or technical infrastructure. No privacy, cookie, or terms of service policies are present, nor is there any contact or security incident response information. The lack of WHOIS data and website content suggests the domain may not be active or is protected by privacy or security mechanisms. This severely limits the ability to assess the company's market position, technical maturity, or security posture. Overall, the site presents a high risk due to lack of transparency and accessibility.

M

Mitteldorf Catering Leipzig

mitteldorf.de

51

Mitteldorf Catering Leipzig is a family-run catering business specializing in providing high-quality catering services for events ranging from small gatherings of 30 guests to large events with up to 3,000 attendees. The company emphasizes fresh, regional ingredients and offers a variety of buffet options tailored to diverse tastes. Their market position is that of a reliable local catering partner in Leipzig, serving both private and corporate clients. Technically, the website is built on WordPress using the Divi theme, enhanced with modern tools such as Google Analytics, Google Maps, and reCAPTCHA to ensure usability and security. The hosting is provided by RZone, a reputable German hosting provider. Security posture is strong with HTTPS enforced, cookie consent mechanisms in place, and no visible vulnerabilities. Privacy compliance is well addressed with a comprehensive privacy policy and cookie consent banner. Overall, the website reflects a professional and trustworthy business presence with good technical implementation and compliance.

B

Berlin Phil Media GmbH

berliner-philharmoniker-recordings.com

60

Berliner Philharmoniker Recordings is an e-commerce platform dedicated to selling classical music albums and recordings associated with the prestigious Berliner Philharmoniker orchestra. The website offers products in multiple formats including CD, vinyl, and digital downloads, targeting classical music enthusiasts and collectors worldwide. The site is branded consistently with the official Berliner Philharmoniker identity and partners with related entities such as the Digital Concert Hall. Technically, the website is built on the Magento e-commerce platform, utilizing modern JavaScript libraries and search technologies like Algolia, and incorporates FriendlyCaptcha for form security. The site is accessible, mobile-optimized, and provides a professional user experience with clear navigation and relevant content. Security posture is good with HTTPS enforced and CAPTCHA protections, though some security headers are missing and no explicit cookie consent mechanism was detected. The WHOIS data for the domain is unavailable, which raises some concerns about domain registration legitimacy, but the website content and branding strongly suggest it is a legitimate official site. Overall, the site presents a low risk but would benefit from improved transparency in domain registration and enhanced privacy compliance features.

B

Berliner Philharmoniker

digitalconcerthall.com

67

The Digital Concert Hall is a specialized streaming platform operated under the brand of the Berliner Philharmoniker, a world-renowned classical orchestra based in Germany. The platform offers live and on-demand streaming of concerts, films, interviews, and other classical music content, targeting classical music enthusiasts globally. The business model is subscription-based, with options for monthly or annual access, positioning it as a niche leader in classical music digital media. Technically, the website leverages modern web technologies including React and Theoplayer for video streaming, with good mobile optimization and accessibility features. The presence of structured data and SEO best practices enhances discoverability. Security posture is strong with HTTPS enforced and multiple security headers present, though the absence of a visible cookie consent mechanism and published security policies are areas for improvement. The lack of WHOIS data is a notable anomaly, potentially indicating privacy protection or a recent domain registration, which slightly reduces trustworthiness. Overall, the site is professional, trustworthy, and well-positioned in its market segment.

P

Paulbergman GmbH

alumnii.de

49

Alumnii, operated by Paulbergman GmbH, is a specialized SaaS platform focused on providing comprehensive alumni network management solutions primarily for educational institutions, companies, foundations, and associations in Germany. The platform offers integrated services including member management, newsletters, payment processing, event management, job boards, and mentoring functionalities. The company positions itself as a niche provider with a strong emphasis on GDPR compliance and German-based hosting. Technically, the website is built using modern web technologies such as Jekyll for static site generation, Bootstrap for responsive design, and integrates analytics via Matomo. The site is mobile-optimized, accessible, and SEO-friendly, reflecting a mature digital infrastructure. Security measures include HTTPS with strong encryption and Google reCAPTCHA to protect forms, although additional security headers and explicit cookie consent mechanisms are absent. From a security perspective, the site demonstrates good practices with encrypted communications and data protection aligned with GDPR. However, the absence of published incident response contacts and vulnerability disclosure policies suggests room for improvement in transparency and readiness. The WHOIS data aligns well with the website's claims, showing consistent domain registration and hosting in Germany without privacy protection, enhancing trustworthiness. Overall, Alumnii presents a professional, trustworthy, and well-structured online presence suitable for its target audience. Strategic enhancements in security policies and privacy mechanisms would further strengthen its compliance and user trust.

R

Rechtsanwaltskanzlei Nolte › ‹ Pustejovsky

np-recht.de

44

Rechtsanwaltskanzlei Nolte › ‹ Pustejovsky is a specialized law firm based in Freiburg, Germany, offering expert legal services in areas such as corporate law, labor law, inheritance law including business succession, family law, data protection, IT law, and intellectual property law. The firm targets both companies and private individuals, positioning itself as a boutique legal service provider with a strong focus on specialized legal fields. Their website reflects a professional and consistent brand image with comprehensive service descriptions and regular legal updates via their blog and social media channels. Technically, the website is built on WordPress with modern SEO and caching plugins, ensuring moderate performance and good mobile optimization. The hosting is managed via kasserver.com, and the site uses HTTPS with a good SSL configuration. However, some security best practices such as security headers and incident response disclosures are missing, which could be improved to enhance the security posture. From a security perspective, the site shows no signs of vulnerabilities or exposed sensitive data. The absence of a cookie consent mechanism and security headers are minor gaps in GDPR compliance and security hardening. The WHOIS data aligns well with the website content, showing consistent domain registration and no privacy protection, which supports the legitimacy of the business. Overall, the website is trustworthy, professionally maintained, and suitable for its target audience. Strategic improvements in privacy compliance and security policies would further strengthen its position and user trust.

I

Informationsdienst Wissenschaft (idw)

wisskomm.social

66

Wissenschaft trötet is a Mastodon-based social networking platform hosted on wisskomm.social, primarily serving the scientific community associated with the Informationsdienst Wissenschaft (idw). The platform facilitates content sharing and social interaction among members of scientific institutions. It positions itself as an independent Mastodon server within the fediverse, focusing on community-driven content without advertising or algorithmic interference. The website demonstrates a consistent and professional branding aligned with its scientific audience. Technically, the site leverages Mastodon version 4.4.7 with React and modern JavaScript modules, providing a responsive and moderately performant user experience. Security posture is adequate with HTTPS implied and no visible vulnerabilities, though security headers and explicit policies are lacking. Privacy compliance is basic, with a privacy policy present but no cookie consent or terms of service pages. Overall, the site is safe, trustworthy, and suitable for general audiences, but could improve in transparency and security documentation.

E

EUPeace

eupeace.eu

55

EUPeace is a European non-profit network dedicated to promoting peace, justice, and inclusiveness through education, research, outreach, and mobility programs. The organization targets students, academics, and civil society actors interested in peacebuilding and European cooperation. Their offerings include educational tracks, research hubs, mobility portals, and outreach initiatives designed to foster collaboration and civic engagement across Europe. The website is professionally designed, multilingual, and structured to facilitate easy navigation and access to resources. Technically, the website is built on WordPress with modern plugins such as Slider Revolution and integrates cookie consent and email/push notification services like ConsentManager and Brevo. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. Performance is moderate, with room for optimization. From a security perspective, the site enforces HTTPS, employs security headers, and uses cookie consent mechanisms, reflecting a solid security posture. However, it lacks a publicly available security policy, incident response contacts, and vulnerability disclosure mechanisms, which are recommended for enhanced transparency and trust. Overall, the website presents a low-risk profile with a strong focus on educational content and community engagement. Strategic improvements in security transparency and contact information could further enhance trust and compliance.

The website diviblock.com currently serves a single purpose: to block browser inspect tools with a message instructing users to close such tools and refresh the page. There is no accessible business content, product information, or service descriptions. The domain is registered via NameCheap since 2020, indicating a relatively recent but stable registration. The site appears to be related to a WordPress plugin or tool designed to prevent inspection of website code, but no further business details are provided. Technically, the site uses WordPress and Google Fonts but lacks visible security headers or HTTPS confirmation in the provided data. The security posture is minimal, with DNSSEC not enabled and no privacy or cookie policies present. Overall, the site is low in content quality and business credibility due to the lack of accessible information and blocking mechanisms.

D

Divi.Help

divi.help

46

Divi.Help operates as a specialized community forum providing free support for users of the Divi WordPress theme. It also offers premium memberships granting access to a suite of Divi-related plugins, child themes, and AI-powered design tools. The business targets Divi users and web designers seeking both community assistance and advanced Divi products. The website is built on the XenForo forum platform with a UI.X theme, hosted on StableHost, and incorporates standard web technologies such as jQuery and Font Awesome icons. The site demonstrates good content quality, clear navigation, and mobile responsiveness, supporting a positive user experience. However, it lacks visible privacy, cookie, and terms of service policies, which impacts compliance and trust.

M

MINT-Campus Alte Schmelz e.V.

mintcampus.de

55

MINT-Campus Alte Schmelz e.V. is a small, regional non-profit organization based in Germany focused on engaging youth in STEM education and sustainable development. The organization operates a student research and technology center and an open youth workshop, offering educational courses, workshops, and projects such as the EU-funded CERTEB_OPT energy management initiative. The website reflects a professional and consistent brand presence with clear contact information and partnership acknowledgments. Technically, the site is built on the cm4all CMS platform, hosted by Strato, and uses older JavaScript libraries which may pose security risks. The site implements GDPR-compliant privacy and cookie policies with user consent mechanisms. However, no explicit security or incident response policies are published. Overall, the website is accessible, content-rich, and trustworthy, but could improve its security posture by updating libraries and adding security headers.

A

AQAS e.V.

aqas.de

66

AQAS e.V. is a German accreditation agency specializing in quality assurance for higher education institutions through program and system accreditation. The organization holds recognized certifications from European and international accreditation bodies, positioning it as a reputable entity in the education sector. The website presents clear service offerings including accreditation procedures, consulting, workshops, and international accreditation services, targeting academic institutions and stakeholders. Technically, the website is built on WordPress with modern plugins and a professional theme, offering good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and some obfuscation of emails, but lacks explicit security headers and cookie consent mechanisms. No forms or direct contact details are visible on the homepage, suggesting contact information is provided on dedicated pages. Overall, the site is professional, trustworthy, and compliant with GDPR, though improvements in security policies and transparency are recommended.

H

Hochschule für Technik und Wirtschaft des Saarlandes

htwsaar.de

67

The Hochschule für Technik und Wirtschaft des Saarlandes (htw saar) is a public university in Germany specializing in technology and economics education. It offers a broad range of bachelor and master degree programs, including dual and international studies, supported by strong research activities and partnerships. The website reflects a mature digital presence with a professional design, clear navigation, and multilingual support, targeting students, researchers, and academic partners. Technically, the site is built on TYPO3 CMS with Matomo analytics, delivering moderate performance and good mobile optimization. Security posture is solid with HTTPS enabled, but lacks explicit security headers and formal privacy/cookie policies, indicating room for compliance improvement. WHOIS data confirms domain legitimacy and alignment with the institution's identity. Overall, the site is trustworthy and professional but should enhance privacy and security disclosures to meet modern compliance standards.

R

RegioHelden GmbH

herofil.es

64

RegioHelden GmbH is a German online marketing agency established in 2010, specializing in digital marketing services such as SEO, content management, and web design. The company positions itself as a creative and authentic partner for businesses seeking digital visibility and success, while also emphasizing a strong internal culture and career opportunities. Their website is built on WordPress, hosted on bunny.net infrastructure, and employs modern web technologies including Matomo analytics and Google Maps embeds. The site is well-optimized for mobile and accessibility, with a professional design and clear navigation. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, though some security headers could be improved. Privacy compliance is strong, with a detailed privacy policy and GDPR-aligned consent management. No critical vulnerabilities or suspicious patterns were detected. Overall, the website reflects a credible, professional digital marketing agency with a good balance of business and technical maturity.

Rheinische Post Events operates as a regional event ticketing platform affiliated with the Rheinische Post media group, focusing on event promotion and ticket sales primarily in Germany. The website offers a professional and user-friendly interface for purchasing tickets to events such as the Halloween Party 2025 in Düsseldorf. The platform leverages modern web technologies including Vue.js and Vuetify, integrating third-party services like Google Maps and Mapbox for enhanced user experience. Consent management and GDPR compliance are well implemented, reflecting a mature approach to privacy and user data protection. However, the absence of publicly available WHOIS data for the domain raises concerns about registration transparency, although the website's branding and technical setup suggest legitimate business operations. Security posture is strong with HTTPS enforced and no visible vulnerabilities, but security headers could be improved. Overall, the site presents a trustworthy and professional front for event ticketing with room for enhanced security practices and WHOIS transparency.

R

RPM Invest

rpm-invest.de

41

RPM Invest operates as the strategic investment unit of the Rheinische Post Mediengruppe, focusing on fast-growing technology and digital media companies with proven business models. The company provides capital, expertise, and a broad network to support founders and entrepreneurs through long-term partnerships and flexible investment structures. The website reflects a professional and consistent brand presence, showcasing portfolio companies and investment criteria. Technically, the site is built on WordPress using Elementor and Gravity Forms, with good mobile optimization and SEO practices. Security posture is solid with HTTPS enforced, though security headers and explicit privacy policies are missing. No blocking or WAF challenges were detected, allowing full content access and analysis.

The website hatartalannyar.hu represents the MOL – Új Európa Alapítvány, a cultural foundation focused on sponsoring and promoting a wide range of cultural festivals and events in Hungary and neighboring regions. The foundation supports music, theater, dance, literature, film, gastronomy, and folk traditions, positioning itself as a key player in the cultural sponsorship landscape. The site content and branding align well with the foundation's mission and target audience, primarily Hungarian cultural event attendees. Technically, the website is built on Joomla CMS with modern libraries such as jQuery and Bootstrap, providing a responsive and user-friendly experience. The presence of Google Analytics indicates moderate user tracking, balanced with basic privacy compliance through downloadable privacy and cookie policies. Security posture is moderate with HTTPS usage and CSRF tokens but lacks explicit security headers and incident response information. Overall, the site is professional, trustworthy, and well-aligned with its business purpose, though improvements in security and privacy mechanisms are recommended.

Felhangolva.hu is a Hungarian cultural platform launched in 2023, focusing on promoting emerging Hungarian music talents and organizing concerts and events in partnership with established cultural institutions such as MOL - Új Európa Alapítvány, A38 Hajó, Budapest Music Center, and Müpa. The website is built on Joomla CMS with Bootstrap and jQuery technologies, providing a moderately performant and mobile-optimized user experience. However, it lacks visible privacy and cookie policies, contact information, and security headers, which are important for compliance and trust. The site uses HTTPS and includes Google Analytics for visitor tracking but does not provide cookie consent mechanisms, indicating privacy compliance gaps. Overall, the platform serves a niche cultural community with good content relevance and professional branding but would benefit from enhanced security and privacy practices.

F

Fachhochschule Dortmund

fh-dortmund.de

61

Fachhochschule Dortmund is a well-established public university of applied sciences in Germany offering approximately 70 Bachelor and Master degree programs across eight faculties. The institution targets prospective students, current students, academic staff, alumni, and industry partners, positioning itself as a key regional educational and research hub. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and extensive information on academic offerings, research, and career services. Technically, the site is built on the Sitepark CMS platform, employs modern JavaScript and SVG assets, and integrates Matomo analytics with privacy-conscious configurations. Security posture is strong with HTTPS enforcement, privacy-respecting analytics, and cookie consent mechanisms. No critical vulnerabilities or blocking mechanisms were detected. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR requirements.

B

Berufsbildende Schulen Cuxhaven

bbs-cux.de

48

Berufsbildende Schulen Cuxhaven is a regional vocational education center in Germany offering a broad spectrum of full-time and dual training programs, international projects such as Erasmus+, and various educational support services. The institution targets students, apprentices, educators, and local businesses, positioning itself as a key regional player in vocational education. The website reflects a well-structured, content-rich platform with consistent branding and clear navigation, supporting its educational mission effectively. Technically, the website is built on WordPress with a modern plugin ecosystem including Smart Slider 3 and Download Manager. It is hosted on a German hosting provider with HTTPS enabled, ensuring secure communication. The site demonstrates good mobile optimization and moderate performance, though accessibility features are basic. No advanced security headers were detected, and no cookie consent mechanism was found, indicating areas for compliance improvement. From a security perspective, the site maintains a good posture with HTTPS and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers, vulnerability disclosure, and incident response information suggests room for enhancement. Privacy compliance is partially met with a comprehensive GDPR privacy policy but lacks cookie consent mechanisms. The WHOIS data aligns well with the website's identity, supporting legitimacy. Overall, the website is professional, trustworthy, and suitable for its educational purpose. Strategic improvements in security headers, cookie consent, and incident response transparency would further strengthen its security and compliance posture.

internetlehrer GmbH is a specialized e-learning service provider based in Germany, operating since 2003. The company focuses on developing learning modules, blended learning scenarios, and virtual classroom integrations, leveraging open source technologies such as ILIAS. Their market position is that of an established niche player and ILIAS Premium Partner, serving education professionals and institutions with tailored e-learning solutions. The website reflects a professional and consistent brand image with clear contact information and relevant content in German. Technically, the website is built on WordPress 6.1.9 with common libraries like jQuery and Cycle2 for slideshows. Hosting appears to be with 1&1 IONOS, indicated by the presence of their WordPress assistant plugin. The site is moderately performant, mobile-optimized, and uses HTTPS with a good SSL configuration. However, it lacks advanced security headers and a cookie consent mechanism, which are important for GDPR compliance. From a security perspective, the site enforces HTTPS and does not expose sensitive data or use vulnerable libraries. There is no evidence of a published security policy or incident response contacts, which could be improved. No WAF or blocking mechanisms are detected, and the WHOIS data is consistent with the business claims, indicating legitimacy. Privacy compliance is partial due to the absence of cookie consent. Overall, the website is trustworthy and professional but could enhance its privacy and security posture by implementing cookie consent, security headers, and publishing security policies. These improvements would strengthen compliance and user trust while maintaining the solid business credibility already established.

E

ELAN e.V.

elan-ev.de

48

ELAN e.V. is a German non-profit organization specializing in the development and support of open source software tailored for higher education institutions. With over 15 years of active involvement in open source communities, ELAN e.V. empowers universities by providing flexible, secure digital teaching and learning tools. Their market position is strengthened by their community engagement and recognized certifications such as the Open EdTech Associate Membership. The organization offers services including software development, consulting, hosting, and support, targeting educators and students in the academic sector. Technically, the website is built on a modern WordPress platform enhanced with plugins like Rank Math PRO for SEO, Matomo for privacy-conscious analytics, and Oxygen Builder for design flexibility. Hosting and DNS services are managed via Cloudflare, ensuring robust performance and security. The site demonstrates good mobile optimization and accessibility, with a professional and consistent branding approach. From a security perspective, the site enforces HTTPS and employs privacy-respecting analytics. However, it lacks visible cookie consent mechanisms and explicit security or incident response policies. No vulnerability disclosure or security.txt files are present, which could be improved to enhance transparency and trust. Overall, the security posture is solid but could benefit from additional compliance features. The overall risk assessment is low, with the website presenting a trustworthy and professional front for ELAN e.V. Strategic recommendations include implementing cookie consent, publishing security policies, and adding vulnerability disclosure information to further strengthen compliance and user trust.

M

Martin-Luther-Universität Halle-Wittenberg

uni-halle.de

53

Martin-Luther-Universität Halle-Wittenberg is a well-established public university in Germany, founded in 1502, offering a broad range of academic programs and research activities. The website serves as an information portal for students, researchers, applicants, and other stakeholders, providing news, study information, and institutional resources. The university maintains a strong academic reputation with international collaborations and prestigious research grants. Technically, the website uses a custom CMS with JavaScript libraries and Piwik/Matomo analytics, hosted on a German academic network. The site is moderately optimized for performance and accessibility but lacks advanced mobile responsiveness and some modern security headers. Security posture is adequate with HTTPS usage but could be improved by adding explicit security policies and cookie consent mechanisms. Overall, the site is professional, trustworthy, and content-rich, though some compliance and security best practices could be enhanced.

U

Universität Kassel

uni-kassel.de

66

Universität Kassel is a well-established public university in Germany, founded in 1969, offering a broad range of academic programs and research initiatives with a strong emphasis on sustainability and interdisciplinary collaboration. The website reflects a mature digital presence with comprehensive content targeting students, researchers, and staff, supported by a modern TYPO3 CMS infrastructure and privacy-conscious analytics via Matomo. Security posture is solid with HTTPS and cookie consent mechanisms, though formal security and incident response policies are not explicitly published. Overall, the site demonstrates high professionalism, trustworthiness, and compliance with GDPR standards.

U

Universität Passau

uni-passau.de

68

Universität Passau is a reputable German university focused on providing excellent research and innovative teaching to approximately 12,000 students from over 100 countries. The website reflects a mature digital presence built on TYPO3 CMS, featuring comprehensive academic and administrative content tailored to diverse target groups including students, researchers, and businesses. The technical infrastructure includes privacy-conscious analytics via Matomo with cookies disabled, indicating a commitment to user privacy. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though improvements can be made by implementing cookie consent mechanisms and publishing explicit security policies. Overall, the site demonstrates high professionalism and trustworthiness appropriate for an academic institution.

H

Hochschule Osnabrück

hs-osnabrueck.de

66

Hochschule Osnabrück is a well-established University of Applied Sciences in Germany providing a broad range of academic programs including Bachelor, Master, dual studies, and continuing education. The institution emphasizes practical learning, internationalization, and research, serving students, academic staff, and partners. The website reflects a professional and comprehensive digital presence with clear navigation, multilingual support, and active social media engagement. Technically, the site is built on TYPO3 CMS, uses modern JavaScript libraries, and integrates privacy-conscious analytics (Matomo). Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response information are not published. Overall, the domain registration and hosting align with the university's official infrastructure, indicating high legitimacy and trustworthiness.

H

Herr Stratmann Gestaltungswesen

herrstratmann.de

53

Herr Stratmann Gestaltungswesen is a small German-based consultancy specializing in marketing concepts, corporate design, brand development, and digital transformation services. Founded in 2008 by Martin Stratmann, the company offers personalized and strategic support to businesses seeking to enhance their marketing and digital presence. The website reflects a professional and consistent brand image with clear service offerings and contact information. Technically, the site is built on WordPress using Elementor and Yoast SEO, ensuring a modern and SEO-friendly infrastructure. Security posture is solid with HTTPS enabled and no visible vulnerabilities, though improvements can be made by adding security headers and incident response information. Privacy compliance is basic, with a privacy policy present but lacking a cookie consent mechanism. Overall, the site is trustworthy and well-positioned for its niche market.

K

Katharineum zu Lübeck

katharineum.de

52

Katharineum zu Lübeck is a historic public gymnasium in Germany, founded in 1531, offering a broad educational program including classical languages and extracurricular activities. The website serves as an official informational portal for students, parents, and staff, providing schedules, news, and organizational details. Technically, the site is built on WordPress with a modern plugin ecosystem including Yoast SEO and Matomo analytics, indicating a moderate level of digital maturity. Security posture is adequate with HTTPS enabled but lacks some security headers and explicit privacy and cookie policies, which are important for GDPR compliance. Overall, the site is professional and trustworthy but could improve privacy transparency and security hardening.

C

Carl von Ossietzky Universität Oldenburg

uol.de

62

Carl von Ossietzky Universität Oldenburg is a well-established public university in Germany, founded in 1973, offering a broad range of academic programs and research activities. The website serves students, researchers, academic staff, and the general public with comprehensive information about study programs, research, campus life, and international cooperation. The university positions itself as a research-oriented institution with a strong regional and international presence.

H

Hochschule Niederrhein

hs-niederrhein.de

59

Hochschule Niederrhein is a large and reputable University of Applied Sciences in Germany, offering a wide range of Bachelor and Master degree programs with a strong emphasis on applied research and practical education. The institution serves a diverse audience including prospective students, current students, international participants, and academic staff. The website reflects a professional and modern digital presence built on TYPO3 CMS, integrating accessibility tools and comprehensive cookie consent mechanisms. Security measures such as HTTPS and Content Security Policy are implemented, indicating a mature security posture. No critical vulnerabilities or compliance gaps were detected, and the WHOIS data aligns well with the institution's identity, supporting legitimacy. Overall, the website is well-designed, trustworthy, and compliant with GDPR requirements.