Security Directory

I

Site Unavailable

iucngreenlist.org

39

The website iucngreenlist.org is currently inaccessible and displays only a minimal 'Site Unavailable' placeholder page. There is no visible content, metadata, or business information available on the site. The domain is registered with GoDaddy.com, LLC since 2019 and is set to expire in 2026, indicating a legitimate registration history. Hosting appears to be provided by SiteGround based on the nameservers. Due to the lack of accessible content, no meaningful technical or business insights can be derived from the website itself. From a technical perspective, the site lacks any detectable scripts, analytics, or security headers. DNSSEC is not enabled, and there is no indication of HTTPS or SSL configuration from the provided data. The absence of privacy, cookie, or terms of service policies further indicates a lack of compliance readiness. No contact information or forms are present, limiting user engagement and trust. Security posture is weak due to the absence of HTTPS and security headers, and the site is currently unavailable which may indicate operational issues or maintenance. The domain registration is consistent and not privacy protected, which is positive for transparency. Overall, the site scores very low on content quality, technical implementation, security, privacy compliance, and business credibility. Strategic recommendations include restoring site availability, implementing HTTPS with proper SSL certificates, adding security headers, publishing privacy and cookie policies, and providing clear contact and incident response information to improve trust and compliance.

I

International Union for Conservation of Nature and Natural Resources

iucnredlist.org

63

The IUCN Red List website represents a globally recognized non-profit organization dedicated to assessing and communicating the conservation status of species worldwide. It serves a diverse audience including researchers, conservationists, policymakers, and the general public. The site offers comprehensive data and resources to support biodiversity conservation efforts and policy development. The organization has a strong market position as the authoritative source for species threat assessments, supported by a broad partnership network and a long history dating back to 1964. Technically, the website employs modern web technologies including HTTPS, JavaScript, and Google Analytics, ensuring good performance, mobile optimization, and accessibility. The infrastructure appears robust with no signs of blocking or WAF interference, and the site uses secure forms with CSRF protection. However, explicit security headers and a cookie consent mechanism could be improved. From a security perspective, the site demonstrates a strong posture with HTTPS enforcement and secure data handling practices. No vulnerabilities or exposed sensitive data were detected. Privacy policies are comprehensive and GDPR compliant, though a visible cookie consent banner is absent. WHOIS data is unavailable due to privacy protection, which is justified for this type of organization. Overall, the website is professional, trustworthy, and well-maintained, with high content quality and clear business credibility. Strategic recommendations include enhancing security header implementation, adding a cookie consent mechanism, publishing a vulnerability disclosure policy, and providing incident response contact details to further strengthen trust and compliance.

I

IUCN

iucncontributionsfornature.org

47

The website iucncontributionsfornature.org is a platform operated by IUCN aimed at enabling members to document conservation and restoration actions aligned with global environmental frameworks such as the Nature 2030 Programme. The platform targets conservation organizations and stakeholders interested in biodiversity and climate-related nature-based solutions. The business model is non-profit and focused on environmental data collaboration. Technically, the site is built on modern frameworks like Nuxt.js and Vue.js, with Cloudflare DNS and uses Fathom Analytics for minimal tracking. However, the site currently suffers from a critical server-side issue returning a 500 Internal Server Error on the /get-started page, significantly impacting user experience and content accessibility. Security posture is moderate with HTTPS enabled but lacks security headers and DNSSEC. Privacy compliance is basic with a privacy policy and terms of service present but no cookie consent mechanism. Contact information is limited to an email address. Overall, the site demonstrates consistent branding and alignment with IUCN's mission but requires urgent technical fixes and security enhancements.

I

IUCN Academy

iucnacademy.org

51

The IUCN Academy website is a professionally developed online education platform specializing in environmental conservation and sustainability training. It offers a range of courses including professional certificates, delivered in hybrid and self-paced formats, targeting individuals and professionals seeking recognized environmental education. The platform leverages modern WordPress technologies including BuddyBoss and Learndash LMS to provide a structured and engaging learning experience. The website is well-branded and consistent, with clear navigation and relevant content that supports its educational mission. From a technical perspective, the site uses a modern tech stack with WordPress CMS, Elementor page builder, and integrates Google Tag Manager for analytics. Hosting and DNS management involve Cloudflare and GoDaddy, with domain registration locked against unauthorized changes. Performance and mobile optimization are good, though accessibility features are basic. SEO practices appear adequate with proper meta tags and structured content. Security posture is solid with HTTPS enforced and domain locking, but there are gaps such as the absence of DNSSEC and lack of published privacy and cookie policies, which impact compliance with GDPR and related regulations. No explicit incident response or vulnerability disclosure mechanisms are found, which could be improved to enhance trust and security readiness. Overall, the website presents a trustworthy and professional front for the IUCN Academy's educational offerings. Strategic improvements in privacy compliance, DNS security, and incident response transparency would further strengthen its security posture and regulatory adherence.

G

Gravitec.net

gravitec.net

57

Gravitec.net is a technology company specializing in automated web push notification services designed to enhance customer engagement, increase website traffic, and improve user retention. Established in 2016, the company has positioned itself as a market leader with over 40,000 websites and 15,000 companies leveraging its platform. Key services include AI-powered notification content generation, campaign automation, detailed analytics, and seamless integrations with popular platforms such as WooCommerce, Shopify, and WordPress. The technical infrastructure of Gravitec.net is robust, utilizing a modern tech stack with extensive use of JavaScript-based analytics and marketing tools including Google Analytics, Mixpanel, Microsoft Clarity, Hotjar, and Visual Website Optimizer. The website demonstrates excellent performance, mobile optimization, and accessibility, reflecting a mature digital presence. Security best practices are observed with HTTPS enforcement, security headers, and CAPTCHA-protected forms, although a dedicated security policy page and incident response contacts are not currently published. From a security perspective, Gravitec.net maintains a strong posture with no detected vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with comprehensive privacy and cookie policies, including consent mechanisms aligned with GDPR requirements. The domain registration data is consistent with the business claims, supporting the legitimacy and trustworthiness of the entity. Overall, Gravitec.net presents a professional, secure, and user-friendly platform with a strong market position in the web push notification space. Strategic recommendations include enhancing transparency with a dedicated security policy, publishing vulnerability disclosure information, and continuous monitoring of third-party scripts to maintain security integrity.

Z

Zoo Duisburg

delfinarium-zoo-duisburg.de

52

The Delfinarium website is an official informational platform for the Zoo Duisburg's dolphinarium, providing educational content about dolphins, their care, and related zoological information. The site targets general visitors and animal enthusiasts, positioning itself as a regional zoological attraction with a focus on dolphin care and education. The business operates as a non-profit entity within the hospitality and non-profit sectors in Germany. Technically, the website is built on TYPO3 CMS with Bootstrap 5 for responsive design, integrating modern tools such as Google Analytics for visitor tracking and Usercentrics for cookie consent management. The site demonstrates good mobile optimization and basic accessibility features, with a moderate performance profile. SEO practices are adequately implemented with proper meta tags and structured navigation. From a security perspective, the site uses HTTPS and incorporates consent management, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected, though improvements in security headers and formal security documentation are recommended to enhance the security posture. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact phone information and social media presence. The absence of email contacts and terms of service pages are minor gaps. The site is safe for general audiences with no adult or questionable content. Strategic recommendations include enhancing security headers, publishing security policies, and adding vulnerability disclosure mechanisms to strengthen trust and compliance.

S

Spline, Inc.

spline.design

62

Spline, Inc. is a technology company specializing in web-based 3D design software that enables real-time collaboration for creative teams and developers. Their platform offers tools for 3D modeling, animation, interactive experiences, and easy embedding into web projects. Positioned as an innovative SaaS provider, Spline targets designers and developers seeking accessible and collaborative 3D design solutions. The company was founded in 2019 and operates primarily from Iceland, leveraging modern web technologies and cloud hosting to deliver a performant and user-friendly experience. Their business model includes free browser-based tools, downloadable desktop apps, and enterprise offerings. The website reflects a professional brand with consistent messaging and strong trust signals including testimonials and customer logos.

DERTICKETSERVICE.DE GmbH & Co. KG is a well-established regional ticketing service provider in North Rhine-Westphalia, Germany, with over 35 years of experience. Operating three main brands—kölnticket, bonnticket, and westticket—the company serves a broad spectrum of clients ranging from small venues to large arenas, managing more than 35,000 events annually. Their business model focuses on comprehensive ticketing solutions, project management, and contact center services tailored to the event industry in the region. Technically, the website is built on TYPO3 CMS with a Bootstrap framework, ensuring a modern and responsive design. The site incorporates standard web technologies including FontAwesome icons and Google Analytics with IP anonymization, alongside a cookie consent mechanism compliant with GDPR opt-out requirements. Hosting is inferred to be with NetCologne, consistent with the regional focus. Performance and SEO are moderate to good, with room for improvement in accessibility and security headers. From a security perspective, the site enforces HTTPS and uses cookie consent scripts to manage user privacy. However, it lacks explicit security policies, incident response contacts, and vulnerability disclosure mechanisms. No critical vulnerabilities or exposed sensitive data were detected. The WHOIS data aligns well with the website content and business claims, indicating legitimacy and consistency. Overall, the website presents a professional and trustworthy digital presence with good business credibility and privacy compliance. Strategic improvements in security headers, incident response transparency, and accessibility could further enhance the security posture and user trust.

Der Deutsche Arbeitsschutzpreis ist eine etablierte Initiative, die alle zwei Jahre Unternehmen auszeichnet, die sich besonders für die Sicherheit und Gesundheit ihrer Beschäftigten engagieren. Die Ausrichtung erfolgt durch namhafte deutsche Institutionen wie das Bundesministerium für Arbeit und Soziales (BMAS), den Länderausschuss für Arbeitsschutz und Sicherheitstechnik (LASI) sowie die Deutsche Gesetzliche Unfallversicherung (DGUV). Die Website dient als zentrale Informationsplattform für Bewerbungen, Preisverleihungen und aktuelle Nachrichten rund um den Arbeitsschutzpreis. Die Zielgruppe sind Unternehmen, Organisationen und Einzelpersonen in Deutschland, die im Bereich Arbeitsschutz tätig sind oder sich engagieren möchten.

D

Deutsche Kinderschutzstiftung Hänsel + Gretel

notinsel.de

54

Notinsel is a reputable non-profit initiative operated by the Deutsche Kinderschutzstiftung Hänsel + Gretel, focused on providing safe havens for children in distress across Germany. The project enjoys strong support from local governments and social organizations, with a network of over 16,000 safe locations. The website effectively communicates its mission, target audience, and services, supported by testimonials and social media presence. Technically, the website is built on TYPO3 CMS with modern web technologies including jQuery and embedded YouTube videos. It is mobile-optimized, accessible, and SEO-friendly, with a moderate performance profile. Privacy and cookie consent mechanisms are well implemented, reflecting good GDPR compliance. From a security perspective, the site uses HTTPS and session management for login states, but lacks explicit security headers and a published security policy or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain WHOIS data aligns with the website's purpose and shows no suspicious patterns. Overall, the website presents a low-risk profile with strong business credibility and privacy compliance. Strategic improvements could include adding security headers, publishing a security policy, and providing vulnerability disclosure information to enhance trust and security posture.

R

RheinFit Sportakademie GmbH

adventure-minigolf-bochum.de

40

Adventure Minigolf Bochum is a small local hospitality and leisure business offering a unique adventure minigolf experience with 24 themed courses, hand-carved sculptures, and additional activities such as football billiards. The company operates under RheinFit Sportakademie GmbH and targets families, friends, and children aged six and above. The website is professionally designed using WordPress and the Divi theme, with good mobile optimization and SEO practices. Contact information and social media presence are clearly provided, enhancing business credibility. Security posture is solid with HTTPS and no visible vulnerabilities, though improvements can be made by adding security headers and cookie consent mechanisms. Overall, the website is trustworthy and well-maintained, supporting the business's local market position.

O

Office Jack

officejack.de

70

Office Jack is a specialized e-commerce retailer based in Germany, focusing on ergonomic office furniture including height-adjustable desks and office chairs. The company targets businesses and institutes looking for modern, ergonomic office solutions. Their market position is that of a niche provider with a strong emphasis on quality, customization, and customer trust, supported by certifications such as Trusted Shops and CHIP Leading Shops 2025. The website is professionally designed, well-branded, and provides clear contact and business information. Technically, the website is built on WordPress with WooCommerce and Elementor, leveraging modern analytics and marketing tools such as Google Analytics, Microsoft Clarity, and Google Tag Manager. The site is mobile-optimized and SEO-friendly, with good performance and accessibility standards. Security posture is strong with HTTPS enforced and bot protection via reCAPTCHA, although some security headers could be improved. No WAF or blocking mechanisms interfere with content access, allowing full analysis. Privacy compliance is robust with a comprehensive privacy policy and cookie consent mechanism in place. No critical vulnerabilities or suspicious patterns were detected in the WHOIS data or website content. Overall, Office Jack presents a trustworthy and professional online presence with a solid technical foundation and good compliance practices, suitable for its business model and target market.

S

Stadtwerke Bochum

stadtwerke-bochum.de

69

Stadtwerke Bochum is a well-established regional energy provider based in Bochum, Germany, with a history spanning approximately 170 years. The company offers a broad range of energy-related services including electricity (with green energy options), natural gas, district heating, water supply, solar energy solutions, heat pumps, and e-mobility services. Their target audience includes both private and business customers within the Bochum region. The website reflects a mature digital presence with comprehensive service information, customer support channels, and active social media engagement. Technically, the website is built on TYPO3 CMS and leverages modern web technologies such as jQuery, Bootstrap, and various UI libraries. It employs a consent management platform (Usercentrics) and integrates Google Tag Manager for analytics, indicating a focus on privacy compliance and user experience. The site is mobile-optimized and accessible, with good SEO practices. From a security perspective, the site uses HTTPS with good SSL configuration and incorporates consent-based script loading. It holds ISO 27001 certification and displays multiple trust badges, reinforcing its commitment to security and sustainability. No critical vulnerabilities or exposed sensitive data were detected. However, explicit security headers could be more visible, and an incident response contact or security.txt file is absent. Overall, Stadtwerke Bochum's website demonstrates a strong security posture, excellent content quality, and robust privacy compliance. It serves as a trustworthy digital front for a major regional utility provider. Strategic recommendations include enhancing security header implementation, publishing incident response information, and maintaining regular audits of third-party scripts.

B

Startseite

bne.nrw

50

The website www.bne.nrw serves as the official state portal for Education for Sustainable Development (BNE) in North Rhine-Westphalia, Germany. It provides comprehensive information, news, events, and resources related to sustainable education initiatives supported by the NRW state government. The portal targets educational institutions, sustainability actors, and the general public interested in sustainable development. It is positioned as a trusted government-backed platform facilitating engagement and knowledge sharing in the sustainability education sector. Technically, the site is built on TYPO3 CMS, a robust open-source content management system, and integrates Matomo for privacy-conscious analytics. The site demonstrates good mobile responsiveness, accessibility, and SEO practices. Cookie consent mechanisms are implemented to comply with privacy regulations. However, no explicit security headers were detected in the HTML source, suggesting room for improvement in security hardening. From a security perspective, the site shows a moderate security posture with no visible vulnerabilities or exposed sensitive data. The WHOIS data is privacy protected or unavailable, which is common and justified for this type of government-related portal. The site lacks explicit security policies or incident response contacts, which could be enhanced to improve transparency and readiness. Overall, the website is a well-maintained, professional, and trustworthy portal with strong business credibility and good privacy compliance. Strategic recommendations include implementing security headers, publishing a security policy, and providing explicit security contact information to further strengthen the security posture and user trust.

G

GERMAX Gerli GmbH

germax.net

50

GERMAX media is a well-established marketing and advertising agency based in Aachen, Germany, founded in 2000. The company offers a broad range of services including web design, corporate design, consulting, and campaign management, targeting businesses and public institutions. Their website reflects a professional and consistent brand image with a comprehensive portfolio and client testimonials, indicating a strong market position in the regional media sector. Technically, the site uses a variety of JavaScript libraries and plugins to deliver a responsive and visually appealing experience, though it appears to be custom-built rather than relying on a popular CMS. Security-wise, the site lacks DNSSEC and explicit security headers, and no cookie consent mechanism is implemented despite a detailed privacy policy. The domain registration is consistent with the business claims, showing a mature and legitimate online presence.

A

ASEAG

aseag.de

49

ASEAG is the largest mobility service provider in Aachen and the surrounding StädteRegion Aachen, Germany. The company offers comprehensive public transportation services including timetable information, ticket sales, and customer support. The website reflects a well-established public transport business with a clear focus on serving local residents and visitors. ASEAG maintains a strong digital presence with integrated journey planners and departure monitors, leveraging partner services such as auskunft.avv.de. The site is built on TYPO3 CMS and incorporates modern web technologies and analytics tools such as Matomo and Google Tag Manager, ensuring a robust technical infrastructure. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security policies and incident response contacts are not publicly disclosed. Overall, ASEAG's website demonstrates professionalism, good user experience, and compliance with privacy regulations, positioning it as a trustworthy and credible transportation service provider.

S

Sparkasse Gelsenkirchen

sparkasse-gelsenkirchen.de

70

Sparkasse Gelsenkirchen operates as a regional financial institution providing a broad range of banking and financial services to private and corporate customers. The website reflects a mature digital presence with comprehensive product offerings including accounts, loans, investments, insurance, and real estate services. The bank holds a strong market position locally, supported by multiple industry awards and a consistent brand image. Technically, the site is built on a modern CMS platform (likely Adobe Experience Manager), with good mobile optimization, accessibility, and SEO practices. Security posture is solid with HTTPS enforcement and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. Overall, the site is professional, trustworthy, and compliant with GDPR requirements.

G

GELSEN-NET Kommunikationsgesellschaft mbH

gelsen-net.de

64

GELSEN-NET Kommunikationsgesellschaft mbH is a regional telecommunications provider based in Gelsenkirchen, Germany, with over 40 years of experience. The company specializes in delivering fiber optic internet, telephony, TV, and tailored IT solutions to private customers, businesses, and the housing industry within the Emscher-Lippe region. Their market position is strong regionally, supported by personalized service and a comprehensive product portfolio. Technically, the website is built on TYPO3 CMS, integrates modern tracking and marketing tools like Google Tag Manager and Ads, and implements GDPR-compliant cookie consent mechanisms. Security posture is solid with HTTPS enforced and secure form handling, though explicit security policies and incident response contacts are not published. Overall, the website is professional, accessible, and trustworthy, reflecting a mature digital presence aligned with business goals.

The website neurabot.de is currently non-functional, displaying a database connection error which prevents access to any meaningful content or business information. The site lacks any metadata, privacy or cookie policies, contact details, or security features. The domain is hosted on servers managed by kasserver.com, but no registrant or company information is available to verify legitimacy or business operations. Due to the lack of content and accessibility, the technical infrastructure appears immature or improperly maintained, with no evidence of modern web technologies or security best practices. The security posture is weak, with no HTTPS or security headers detected, exposing the site to potential risks. Overall, the site presents a high risk due to unavailability and lack of transparency, and it is recommended to restore database functionality, implement HTTPS, and add essential security and compliance policies to improve trust and security.

The website at westfalenfahrplan.de is currently inaccessible, returning a 403 Forbidden error page with no visible content. This prevents any meaningful extraction of business, technical, or security information from the site itself. The domain is hosted on Amazon AWS infrastructure, indicating a professional hosting environment. However, the lack of accessible content severely limits the ability to assess the company's services, market position, or compliance posture. No privacy, cookie, or terms of service policies are detectable, nor is there any contact or incident response information available. The security posture cannot be evaluated due to the absence of content and headers. Overall, the site appears to be blocked or restricted, which significantly impacts trust and usability.

Datenportal Münsterland is a regional data portal focused on providing access to data and services related to the Münsterland region in Germany. The platform is associated with Münsterland e.V. and DREIKON GmbH & Co. KG, indicating a collaboration between regional organizations and technology partners. The website offers API documentation and a query builder tool, targeting government entities, businesses, researchers, and citizens interested in regional data. The business model appears to be a service-oriented platform supported by regional stakeholders, aiming to enhance data transparency and accessibility. Technically, the website employs a simple and clean design using custom fonts and basic CSS styling. There is no evidence of advanced JavaScript frameworks or CMS usage. The site is accessible over HTTPS, but lacks visible security headers and modern SEO or accessibility features. Performance is moderate with basic mobile optimization. No analytics or advertising technologies are detected, indicating a privacy-conscious approach or minimal tracking. From a security perspective, the site shows basic good practices such as HTTPS usage and a login portal for managers. However, it lacks explicit security headers, privacy policies, cookie consent mechanisms, and incident response information. No forms are present on the main page, reducing attack surface, but also limiting user interaction. The WHOIS data is minimal but consistent with the regional focus, with no privacy protection or suspicious patterns detected. Overall, the website is functional and trustworthy for its purpose but would benefit from enhanced privacy compliance, security hardening, and richer content to improve user trust and regulatory adherence.

M

Meteored

meteored.com

69

Meteored is a weather forecasting service providing worldwide animated weather maps, satellite imagery, radar data, air quality, pollution, and hurricane tracking. The platform targets meteorology enthusiasts and the general public seeking detailed weather information. It offers multi-language support and mobile applications across major platforms, enhancing accessibility and user engagement. The website demonstrates a good level of professionalism with consistent branding and quality content focused on weather services. Technically, the site employs modern web technologies including JavaScript, WebGL, and integrates Google Tag Manager and advertising services. The site is mobile optimized and provides a moderate performance experience. SEO practices are well implemented with appropriate meta tags and structured navigation. From a security perspective, the website enforces HTTPS and uses a consent management platform for privacy compliance. However, it lacks explicit security policies and incident response information. No critical vulnerabilities or exposed sensitive data were detected. The absence of WHOIS data for the domain is a concern, potentially indicating privacy protection or registration inconsistencies, which slightly lowers the trust score. Overall, Meteored presents a reliable and professional weather information service with good technical and privacy compliance. Strategic improvements in domain registration transparency and security policy disclosures would enhance trust and security posture.

N

NETZCOCKTAIL

netzcocktail.de

49

NETZCOCKTAIL is a German-based small business specializing in the development of successful websites with professional features aimed at optimizing Google search rankings. The company targets businesses seeking comprehensive website development and SEO services, positioning itself as a niche player in the technology sector. The website demonstrates a professional design with consistent branding and good content quality, although explicit privacy and terms of service policies are not present in the analyzed content. Technically, the site uses modern technologies including jQuery and Usercentrics for cookie consent management, and it is built on the AmphiCMS platform. HTTPS is enabled, and reCAPTCHA is used to enhance security. However, the absence of security headers and detailed contact information limits the overall security posture and trustworthiness. The site is accessible without any WAF or security challenges, indicating good availability.

T

TFGpl sp. z o.o.

ebutik.pl

70

eButik.pl is a well-established Polish online boutique specializing in women's fashion, offering a broad range of clothing categories including plus size and seasonal collections. The company, TFGpl sp. z o.o., has been operating since 2003, positioning itself as a trusted retailer with a focus on quality, style, and affordability. The website demonstrates strong digital maturity with a modern e-commerce platform (IdoSell Shop), comprehensive privacy and cookie policies, and integration of advanced marketing and analytics tools such as Google Analytics, Facebook Pixel, and TrustMate reviews. Security posture is robust with HTTPS enforced and privacy compliance evident, though some security headers could be improved. Overall, the site provides an excellent user experience with mobile optimization and clear navigation, supported by credible business information and positive customer feedback.

W

Westdeutsche Zeitung

wz.de

64

Westdeutsche Zeitung is a German regional news media company providing digital news content through a website that offers both advertising-supported free content and a paid subscription model called WZ+. The website targets a general audience interested in regional and current news. The technical infrastructure includes modern web technologies such as custom web components, web fonts, and Cloudflare for DNS and hosting services. Google Tag Manager is used for analytics and tracking, with a clear consent mechanism for GDPR compliance. Security posture is moderate with HTTPS implied but lacks explicit security headers and published security policies. Overall, the site is functional and compliant but could improve in security transparency and technical SEO. The domain WHOIS data shows Cloudflare nameservers but lacks detailed registrant information, which is common but limits full trust assessment. No adult or explicit content is present, making the site safe for general audiences.

S

Stadtwerke Krefeld

swk.de

63

Stadtwerke Krefeld (SWK) is a regional utility provider in Germany offering a broad range of services including electricity, gas, heat, water, mobility, and waste management primarily serving private and business customers in Krefeld and the Niederrhein region. The company positions itself as a strong local partner with a focus on sustainable energy solutions such as 100% TÜV-certified green electricity and innovative mobility offerings including car sharing and public transport services. The website reflects a professional and modern digital presence built on Next.js with a focus on user experience and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms in place, though explicit privacy policies and security disclosures are not prominently found. The domain is hosted on Vodafone IP infrastructure and appears legitimate with consistent branding and partner ecosystem integration. Overall, SWK demonstrates a mature business and digital infrastructure with room for improvement in transparency around privacy and security policies.

C

CHEMPARK

chempark.de

68

CHEMPARK is a major chemical industry park located in North Rhine-Westphalia, Germany, hosting approximately 500 companies over an 11 km² area. The website presents CHEMPARK as a leading sustainable chemical park in Europe, offering infrastructure and services to chemical companies. The business model focuses on providing industrial site services, sustainability initiatives, and visitor management to its target audience of chemical industry stakeholders. The website is professionally designed, with consistent branding and good content quality, targeting industry professionals and partners. Technically, the website is built on WordPress using Elementor and Yoast SEO, with Cloudflare providing CDN and security services including DDoS protection and CAPTCHA via Cloudflare Turnstile. Security is further enhanced by the Wordfence plugin. Analytics are handled by Matomo, respecting privacy compliance with a comprehensive cookie consent mechanism implemented by Real Cookie Banner Pro. The site is mobile-optimized and performs moderately well. Security posture is strong with HTTPS enforced, multiple security headers present, and anti-spam measures on forms. However, no explicit security policy or incident response contact information is published, and no vulnerability disclosure policy is found. Overall, the site is trustworthy and professionally maintained, with room for improvement in transparency around security policies. The overall risk is low, with recommendations to publish security policies, incident response contacts, and vulnerability disclosure information to enhance trust and compliance further.

H

Home Instead GmbH & Co.

homeinstead.de

51

Home Instead GmbH & Co. operates Germany's largest private home care and support service network, offering individualized and compassionate care for elderly and dependent individuals. With over 179 locations across 15 federal states, the company provides a broad range of services including senior care, dementia support, 24-hour care, and assistance for people with special needs. The website is professionally designed, mobile-optimized, and rich in content, reflecting a mature digital presence. Technical infrastructure is based on WordPress with modern plugins for SEO and cookie consent, hosted on UI-DNS servers. Security posture is strong with HTTPS, security headers, and cookie consent mechanisms in place, though explicit security policies and incident response details are not published. Overall, the domain registration data aligns well with the business claims, indicating high legitimacy and trustworthiness.

S

Sparkasse Krefeld

sparkasse-krefeld.de

69

Sparkasse Krefeld is a regional financial institution in Germany offering a comprehensive range of banking and financial services including online banking, accounts, loans, investments, insurance, and private banking. The website targets both private and corporate customers with a strong emphasis on secure online services and customer support. The site is well-branded, professionally designed, and provides extensive information and navigation options for its users. Technically, the website is built on a modern CMS platform (likely Adobe Experience Manager), uses HTTPS, and includes accessibility and SEO best practices. Security posture is strong with session management, cookie consent, and no visible vulnerabilities, although explicit security policy and incident response information are not publicly disclosed. The domain WHOIS data is consistent and trustworthy, supporting the legitimacy of the business. Overall, the website demonstrates a mature digital presence with good privacy compliance and user experience.

G

Gastronomie Delic Zoo Gastronomie Zoo Krefeld

zoogastronomie-krefeld.de

46

Gastronomie Delic Zoo Gastronomie Zoo Krefeld is a small hospitality business operating within the Krefeld Zoo in Germany, offering food and beverage services in a family-friendly environment. The website is built on WordPress with modern plugins such as Yoast SEO and Slider Revolution, providing a good user experience and SEO optimization. The site includes a cookie consent mechanism but lacks explicit privacy policy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and published security policies. Contact is primarily via a contact form, and social media presence is limited to Facebook. Overall, the website is professional and trustworthy for its business scope but could improve in privacy and security transparency.

Zoofreunde Krefeld e.V. is a well-established non-profit association dedicated to supporting the Krefeld Zoo through memberships, donations, and sponsorship programs. With over 50 years of history, the organization plays a vital role in enhancing animal welfare and zoo infrastructure. The website reflects a professional and consistent brand image, targeting zoo visitors, animal lovers, and local community members interested in supporting the zoo. Technically, the site is built on TYPO3 CMS, hosted via Rheinmedia, and demonstrates good mobile optimization and accessibility. Security posture is solid with HTTPS and cookie consent mechanisms, though lacking explicit security policy and incident response information. The presence of Meta Pixel tracking is disclosed and controlled via consent. Overall, the domain registration data aligns well with the website content, indicating legitimacy and trustworthiness.

R

rheinmedia gmbh

rheinmedia.de

41

rheinmedia gmbh is a German digital communication agency specializing in website development, consulting, design, and programming services primarily using TYPO3 CMS. The company targets businesses and organizations seeking professional online project realization and digital communication solutions. Their portfolio includes projects for local utilities, agricultural services, and fair trade campaigns, indicating a focus on regional and socially conscious clients. The website is professionally designed, mobile-optimized, and provides clear navigation, reflecting a mature digital presence. Technically, the website employs a traditional tech stack including jQuery 1.9.1, Flexslider, and Matomo analytics configured with cookie disabling to respect user privacy. The site is served over HTTPS, but uses an outdated jQuery version which may expose security risks. No advanced security headers were detected, and no cookie consent mechanism is present, indicating room for improvement in privacy compliance. The site lacks structured data markup and visible contact emails or phone numbers on the homepage, relying on a separate contact page. From a security perspective, the site demonstrates basic good practices such as HTTPS and privacy-conscious analytics but should update its JavaScript libraries and implement security headers to enhance protection. The absence of cookie consent banners and explicit privacy policy links on the homepage suggests partial GDPR compliance. No incident response or vulnerability disclosure information is provided, which could be improved to strengthen trust. Overall, rheinmedia presents a trustworthy and professional digital agency with a solid business model and good technical foundation but with moderate security and privacy compliance gaps. Strategic improvements in updating dependencies, enhancing security headers, and implementing cookie consent would elevate their security posture and compliance standing.

The website info.wizid.com presents a professional and well-structured online presence for a business offering an all-in-one booking system tailored for leisure facilities such as zoos, museums, and parks. The platform integrates ticket sales, resource management, event handling, and cash register management into a single intelligent system with AI capabilities and full online integration. The site is built on WordPress using popular page builders and includes a cookie consent mechanism compliant with GDPR principles, although no explicit privacy policy or terms of service pages were found. Technically, the site uses modern web technologies and is mobile optimized, but lacks visible security headers and detailed security policies. The WHOIS data for the subdomain is unavailable, which is typical for subdomains but reduces domain trustworthiness slightly. Overall, the site is functional, business-focused, and safe for general audiences.

D

Decathlon spółka z ograniczoną odpowiedzialnością

decathlonkariera.pl

58

Decathlonkariera.pl is the official career website for Decathlon Poland, a large retail company specializing in sports equipment and apparel. The site targets job seekers passionate about sports, offering information about current job openings, company values, and employee benefits. The business is well-established with a domain age consistent with its market presence since 2013. The website is professionally designed, mobile-optimized, and provides clear navigation and relevant content for its audience. Technically, the site is built on WordPress and uses common analytics and marketing tools such as Google Analytics, Google Tag Manager, and Facebook SDK. Hosting is provided by OVH SAS, a reputable provider. Performance is moderate with good mobile optimization. However, some security best practices like DNSSEC and security headers are missing, and there is no visible cookie consent mechanism, which could impact privacy compliance. From a security perspective, the site uses HTTPS and does not expose sensitive data or vulnerable libraries in the provided content. The absence of security headers and incident response information suggests room for improvement. Privacy compliance is partially met with a privacy policy linked on the main Decathlon domain, but cookie consent and GDPR explicit indicators are lacking. Overall, the website is trustworthy and professional, serving its business purpose effectively. Strategic improvements in security headers, cookie consent, and incident response transparency would enhance its security posture and compliance standing.

D

Decathlon Outdoor

decathlon-outdoor.com

56

Decathlon Outdoor operates a digital platform focused on providing free access to thousands of outdoor routes for walking, cycling, and snowshoeing primarily in France and its overseas territories. The platform targets outdoor enthusiasts and tourists seeking detailed itineraries with maps and voice navigation. The website is built using modern JavaScript frameworks such as Nuxt.js and integrates analytics and consent management tools like Amplitude and Didomi, reflecting a moderate level of digital maturity. Security posture is adequate with HTTPS usage implied, but lacks visible security headers and comprehensive privacy policy documentation, which are areas for improvement. The absence of WHOIS data reduces domain trustworthiness, but the professional presentation and consistent branding support the platform's legitimacy. Strategic recommendations include enhancing security headers, publishing clear privacy policies, and improving WHOIS transparency to strengthen trust and compliance.

The domain adj.st is registered since 2016 with ST Registry and uses NS1 name servers. However, the website content is inaccessible, returning a minimal HTML page with the message 'Url not found'. No metadata, scripts, or business information is available to analyze. This lack of content prevents any meaningful assessment of the company's business model, services, or market position. Technically, the site appears to lack HTTPS and security headers, indicating poor security posture. The domain is privacy protected under GDPR, which is common but reduces transparency. Overall, the site is not currently operational or publicly accessible, limiting any further analysis.

S

Sinsay

sinsay.com

70

Sinsay operates as an international online fashion retailer targeting women, men, and children across 19 countries. The website serves as a country selector landing page, directing users to localized stores. The business model is e-commerce retail with a focus on affordable fashion. The site demonstrates consistent branding and a professional presentation, indicating a mature market presence. Technically, the website employs modern JavaScript frameworks and third-party services such as Cookiebot for consent management, New Relic for monitoring, and Google Tag Manager for analytics. Hosting is provided via Akamai, suggesting a robust content delivery infrastructure. The site is mobile-optimized and SEO-friendly, though accessibility features are basic. From a security perspective, HTTPS is enforced, and a comprehensive cookie consent mechanism is in place, supporting GDPR compliance. However, no explicit security headers were detected in the HTML content, and no direct contact information for security or incident response was found. The WHOIS data for the domain is unavailable, which slightly reduces trustworthiness but does not negate the professional appearance and functionality of the site. Overall, the website presents a low-risk profile with good privacy compliance and a solid technical foundation. Strategic improvements in security headers, transparency of contact information, and WHOIS data availability would enhance trust and security posture.

Z

Zoologische Gesellschaft für Arten und Populationsschutz e.V.

zgap.de

60

The Zoologische Gesellschaft für Arten und Populationsschutz e.V. (ZGAP) is a well-established German non-profit organization dedicated to the conservation of lesser-known and highly endangered animal species. With a history dating back to 1982, ZGAP operates numerous conservation projects across more than 50 countries, focusing on species protection, research, and public awareness. Their website serves as an information hub for members, donors, and the general public, offering project details, membership options, donation opportunities, and event information. The organization maintains a strong social media presence and complies with GDPR through comprehensive privacy and cookie policies.

G

Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH)

g-e-h.de

57

The Gesellschaft zur Erhaltung alter und gefährdeter Haustierrassen e.V. (GEH) is a well-established German non-profit organization founded in 1981, dedicated to the conservation of old and endangered livestock breeds. With over 2100 members from diverse backgrounds including agriculture, biology, and veterinary medicine, the organization provides educational resources, workshops, publications, and conservation projects. Their website reflects a professional and consistent brand presence, offering clear navigation and multiple channels for engagement and donations. Technically, the site is built on Joomla CMS with standard web technologies and demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS and cookie consent mechanisms, though it lacks advanced security headers and an explicit security policy. Overall, the domain and website content align well, indicating a trustworthy and credible online presence.

Deutsche Tierpark-Gesellschaft e.V. is a German non-profit organization dedicated to supporting and promoting zoological parks and animal parks. The website serves as an informational and engagement platform for zoo visitors, members, and supporters. It offers event information, organizational details, and resources related to zoological parks. The organization operates within a niche non-profit sector with a clear focus on animal parks in Germany. Technically, the website is built on WordPress, utilizing modern web technologies including JavaScript, PHP, and integrations with Google services such as Google Fonts, Google Maps, and YouTube embeds. The site employs a professional cookie consent mechanism compliant with GDPR, and uses plugins like Real Cookie Banner Pro and Formidable Forms to manage privacy and user interactions. Hosting is provided by rzone.de, with appropriate SSL and security headers in place, indicating a good level of technical maturity. From a security perspective, the website enforces HTTPS, implements security headers, and maintains privacy compliance with a clear cookie consent mechanism. No critical vulnerabilities or exposed sensitive data were detected. However, the site lacks a dedicated security policy or incident response information, which could enhance trust and preparedness. Overall, the security posture is solid but could benefit from formalized policies and incident response contacts. The overall risk assessment is low, with the website presenting a trustworthy and professional front for the non-profit organization. Strategic recommendations include adding explicit security and incident response policies, enhancing accessibility, and maintaining regular audits of third-party integrations to mitigate potential risks. These steps will strengthen compliance, security posture, and user trust over time.

W

WSW Wuppertaler Stadtwerke GmbH

wsw-online.de

55

WSW Wuppertaler Stadtwerke GmbH is a regional utility company based in Germany, providing reliable energy supply and innovative mobility solutions primarily to private customers, businesses, and young people. The company holds a strong market position in the Wuppertal region, offering electricity, gas, district heating, public transport services, and e-mobility solutions. Their digital presence is built on the TYPO3 CMS platform, integrating modern technologies such as Google Tag Manager, Usercentrics for consent management, and Mouseflow for analytics, reflecting a mature digital infrastructure. Security posture is robust with HTTPS enforcement, security headers, and no visible vulnerabilities, although explicit security policies and incident response contacts are not published. Overall, the website is professional, well-structured, and compliant with GDPR, supporting a high level of trust and user experience.

G

Gemeinschaft der Zooförderer e.V.

zoofoerderer.de

53

Gemeinschaft der Zooförderer e.V. is a German non-profit association dedicated to supporting zoos and zoo friends through organizing events, publishing reports, and promoting animal conservation. The website serves as a community hub for members and interested parties, providing information on meetings, projects, and the 'Zootier des Jahres' initiative. Technically, the site is built on WordPress with a modern theme and uses HTTPS, ensuring a secure browsing experience. However, it lacks some advanced security headers and cookie consent mechanisms, which are recommended for GDPR compliance. The absence of explicit contact information and terms of service pages slightly reduces business transparency. Overall, the site is well-structured, content-rich, and trustworthy for its target audience.

V

Verband deutschsprachiger Zoopädagogen

vzp.de

63

The Verband deutschsprachiger Zoopädagogen (VZP) is a German-speaking non-profit association dedicated to zoo pedagogy, fostering education and interest in biodiversity and conservation through zoos. The website serves as a platform for news, events, and information exchange among zoo educators. Technically, the site is built on the Jimdo Creator CMS, hosted on Jimdo's infrastructure, and employs modern web technologies including jQuery and Swiftype for search functionality. The site is mobile-optimized and provides a cookie consent mechanism, although it lacks explicit privacy and terms of service pages. Security posture is moderate with HTTPS enabled but missing advanced security headers and incident response information. Overall, the website is professional, content-rich, and trustworthy, serving a niche educational community effectively.

S

Stadt Wuppertal

wuppertal.de

63

The website www.wuppertal.de serves as the official digital presence of the city government of Wuppertal, Germany. It provides comprehensive information and services related to citizen services, culture, education, economy, tourism, politics, and administration. The site targets residents, tourists, businesses, and cultural enthusiasts, positioning itself as a central hub for municipal information and interaction. The business model is that of a public sector entity delivering government services and information digitally. Technically, the website is built on the Sitepark CMS platform, leveraging modern web technologies including responsive design, SVG icons, and privacy-focused analytics via Matomo. Hosting and DNS are managed through Cloudflare, ensuring performance and security benefits. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and employs DNSSEC, with no visible vulnerabilities or exposed sensitive data. Privacy compliance is strong, featuring a comprehensive privacy policy, cookie consent mechanisms, and minimal user tracking. However, explicit security policies and incident response contacts are not prominently available, which could be improved. Overall, the website reflects a mature digital infrastructure appropriate for a large municipal government entity. It balances user experience, privacy, and security effectively, supporting its role as a trusted source of official information and services.

D

Deutsche Gesellschaft für Herpetologie und Terrarienkunde

dght.de

47

The Deutsche Gesellschaft für Herpetologie und Terrarienkunde (DGHT) is a German non-profit organization dedicated to the conservation and study of amphibians and reptiles. The website serves as an information hub for conservation projects, terraristic expertise, environmental education, and scientific research. It targets conservationists, herpetologists, hobbyists, and educators. The organization maintains a reputable position within its niche, supported by partnerships and a membership model. Technically, the website is built on WordPress with Bootstrap and jQuery, hosted on Strato servers, and demonstrates moderate performance and good mobile optimization. Security posture is adequate with HTTPS enabled but lacks advanced security headers and formal vulnerability disclosure mechanisms. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism detected. Overall, the site is professional, trustworthy, and content-rich, with room for security and privacy improvements.

F

Frogs & Friends e.V.

frogs-friends.org

50

Frogs & Friends e.V. is a German non-profit organization dedicated to amphibian conservation and public awareness through innovative media and interactive content. The website serves as an educational platform offering rich multimedia resources, project videos, exhibitions, and opportunities for citizen participation. The organization targets a general audience interested in environmental conservation and amphibians. Technically, the website employs AngularJS, integrates YouTube APIs, and uses Matomo for privacy-conscious analytics. The site is mobile-optimized with good navigation and content quality, though accessibility features could be improved. Security posture is moderate with HTTPS implied but lacking explicit security headers and incident response policies. WHOIS data is unavailable due to privacy protection, which is typical for non-profits. Overall, the site is trustworthy, professional, and safe for general audiences.

C

Clickonometrics

clickonometrics.pl

50

Clickonometrics operates as an advertising technology platform specializing in ad server solutions and campaign management tools for publishers, advertisers, and ad networks. Founded in 2016 and based in Poland, the company offers services including RTB, SSP, DSP, and various advertising pricing models such as CPC, CPA, CPS, and CPM. The website presents a professional and consistent brand image targeting a niche market within the online advertising ecosystem. Technically, the website employs a modern but straightforward technology stack including Bootstrap, jQuery, Google Fonts, and Google Analytics for tracking. The site is mobile-optimized and structured with clear navigation, though accessibility features are basic. Hosting and domain registration are managed through OVH sas, a reputable provider, with domain status flags enhancing domain security. However, no CMS or advanced frameworks are detected. From a security perspective, the site uses HTTPS and has domain-level protections but lacks visible security headers and explicit incident response or security policies. Privacy compliance is minimal, with a basic privacy policy located on a separate opt-out page and no cookie consent mechanism despite the use of tracking scripts. Contact information is not provided on the landing page, limiting transparency. Overall, the website is functional and professional but would benefit from enhanced security practices, improved privacy compliance, and more transparent business contact information to strengthen trust and regulatory adherence.

I

InPost sp. z o.o.

inpost.pl

71

InPost sp. z o.o. operates a comprehensive parcel delivery and logistics platform primarily serving individual customers and businesses in Poland. The company is a market leader in parcel lockers (Paczkomat®) and courier services, offering a wide range of shipping options including international shipments and fulfillment services. The website reflects a mature digital presence with a professional design, clear navigation, and mobile optimization. Technically, the site uses Drupal CMS, integrates Google Tag Manager and Didomi for consent management, and employs modern JavaScript frameworks. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. The WHOIS data confirms domain legitimacy and long-term operation since 2006. Overall, the website is trustworthy, compliant with GDPR, and provides a positive user experience.