Security Directory

Z

Zoologischer Stadtgarten Karlsruhe

zoo-karlsruhe.de

56

The Zoologischer Stadtgarten Karlsruhe website represents a well-established zoological garden in Germany focused on family-friendly animal exhibitions, conservation, and education. The site is built on WordPress with the Avada theme, optimized with LiteSpeed caching and enhanced accessibility via the UserWay widget. The technical infrastructure is modern and secure, leveraging HTTPS and Cloudflare DNS services. However, the site lacks explicit privacy and cookie policies, as well as visible contact information and security headers, which are areas for improvement. Overall, the website is professional, content-rich, and trustworthy, serving its audience effectively but with room to enhance privacy compliance and security transparency.

G

Garden of Dreams

gardenofdreams.ba

48

Garden of Dreams is a cultural event organizer focused on the electronic music festival held in Sarajevo, Bosnia and Herzegovina. The website promotes the 2025 festival and includes a talent development program called Dreamers Talent Camp, aimed at supporting emerging DJs and producers from the region. The business model revolves around event management, sponsorship partnerships, and community engagement through online voting and mentorship programs. The website is built on WordPress with modern frontend technologies and integrates multilingual support and social media channels to reach a broad audience. Technically, the site is well-structured with good mobile optimization and SEO practices, though performance is moderate. Security posture is adequate with HTTPS and secure form handling, but lacks some advanced security headers and explicit incident response policies. Privacy compliance is partial, with a privacy policy present but no cookie consent mechanism. Overall, the domain registration is consistent and trustworthy, supporting the legitimacy of the business.

The website www.mpoo.org represents the Zavod za obrazovanje odraslih, an official government institute under the Ministry of Education and Culture of Republika Srpska, Bosnia and Herzegovina. It serves as an informational portal focused on adult education, traffic education, licensing, and related public announcements. The site targets adult learners and professionals seeking education and licensing services within the region. The content is primarily in Serbian and includes resources such as test preparation, schedules, and official notices. Technically, the website is built on WordPress 6.8.2 with a variety of plugins enhancing SEO, accessibility, anti-spam, and content management. The site is mobile-optimized and includes accessibility tools, cookie consent mechanisms, and structured data for SEO. Performance is moderate, with room for improvement in security headers and advanced optimization. From a security perspective, the site uses HTTPS and anti-spam protections but lacks visible security headers like CSP or HSTS. No critical vulnerabilities or exposed sensitive data were detected. Privacy compliance is basic, with a cookie consent modal present but no explicit privacy policy or terms of service pages found. Overall, the website is trustworthy and professional, reflecting its government affiliation. However, improvements in security headers, privacy documentation, and WHOIS transparency would enhance its security posture and compliance standing.

W

Wirtschaftsförderungsgesellschaft des Landkreises Schwäbisch Hall mbH

heimat-kaufen.de

67

Heimat-kaufen.de is a regional voucher system platform aimed at supporting local businesses, service providers, and gastronomy in the Landkreis Schwäbisch Hall, Germany. The website is operated by the Wirtschaftsförderungsgesellschaft des Landkreises Schwäbisch Hall mbH and collaborates with regional financial institutions such as Sparkasse Schwäbisch Hall Crailsheim and Volksbank Heilbronn Schwäbisch Hall eG. The platform offers various voucher products including employer vouchers, city vouchers, and opportunities for businesses and municipalities to participate, thereby fostering local economic retention and growth. Technically, the website employs modern JavaScript libraries such as jQuery and Slick Carousel, integrates Matomo for privacy-conscious analytics, and implements cookie consent mechanisms in compliance with GDPR. The site is mobile-optimized and features a clear navigation structure, although accessibility features are basic. Hosting details are consistent with the domain's regional focus, and the site uses HTTPS with good SSL configuration. From a security perspective, the site enforces HTTPS and cookie consent but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the HTML content. Privacy compliance is strong with a comprehensive privacy policy and cookie consent banner. However, the absence of terms of service and vulnerability disclosure policies is noted. Overall, the website presents a trustworthy and professional digital presence for a regional economic initiative. Strategic recommendations include enhancing security headers, publishing security and incident response policies, and adding terms of service to improve legal clarity and user trust.

B

Bosna Bank International

bbi.ba

59

Bosna Bank International (BBI) is a banking institution based in Sarajevo, Bosnia and Herzegovina, providing a full range of banking services to both individual and corporate clients. The website reflects a professional banking brand with consistent branding and a clear focus on financial services. The target audience includes physical and legal persons seeking banking solutions in the region. The business model is centered on traditional banking services, positioning BBI as a significant player in the Bosnian financial sector. Technically, the website is built on WordPress with Elementor and uses modern web technologies including asynchronous script loading and SEO optimization via Rank Math. The site is mobile-optimized and performs moderately well, though accessibility features are basic. Structured data is implemented correctly, enhancing search engine understanding of the organization. From a security perspective, the site uses HTTPS with good SSL configuration and employs some security plugins like stop-user-enumeration. However, there is a lack of visible security headers and no published security or incident response policies. Privacy compliance is weak, with no visible privacy or cookie policies or consent mechanisms. No forms or contact details were found in the provided content, limiting user engagement and support transparency. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance, security best practices, and clearer contact and policy disclosures to improve user trust and regulatory adherence.

I

Initiative Pro Recyclingpapier

papieratlas.de

38

The website papieratlas.de is operated by the Initiative Pro Recyclingpapier (IPR), a German non-profit initiative focused on promoting the use of recycling paper with the Blue Angel certification across cities, counties, and universities in Germany. The site hosts annual competitions, publishes reports (Papieratlas), and provides educational content to encourage sustainable paper procurement. Supported by key government bodies and associations, it holds a strong position in the environmental and governmental sector in Germany. Technically, the website is built on WordPress with modern versions of jQuery and uses privacy-conscious Matomo analytics. The site is hosted on professional servers (kasserver.com) and employs HTTPS with good SSL configuration. The design is professional, mobile-optimized, and content-rich, with clear navigation and consistent branding. From a security perspective, the site uses HTTPS and has implemented cookie consent mechanisms. However, it lacks explicit security headers and a public security or incident response policy. No vulnerabilities or exposed sensitive data were detected. Privacy compliance is good, with a clear privacy policy and cookie banner. Contact information is transparent and professional. Overall, the website presents a low risk profile with strong legitimacy and trustworthiness. It effectively serves its target audience with relevant content and maintains a good security posture, though improvements in security headers and vulnerability disclosure could enhance its security maturity.

O

Otava Oy

otavakonserni.fi

57

Otava-konserni is a well-established Finnish media conglomerate specializing in book publishing, learning materials, and media content production. The company holds a leading market position in Finland's publishing industry, with a broad target audience including Finnish consumers, educational institutions, and media consumers. Their business model focuses on multi-channel content delivery, including digital and print formats, supported by a strong brand presence and subsidiaries such as Like and Otavamedia Oy. Technically, the website is built on a modern WordPress platform with integration of popular analytics tools like Google Analytics and Google Tag Manager. The site is mobile-optimized and demonstrates good SEO practices, although there is room for improvement in accessibility and security headers. Hosting and DNS are managed via Cloudflare, ensuring reliable performance and DNS security. From a security perspective, the site uses HTTPS with a good SSL configuration but lacks several recommended security headers. No forms or sensitive data collection points were detected on the main page, reducing immediate risk. However, the absence of explicit privacy and cookie policies and incident response information indicates gaps in compliance and transparency. The WHOIS data is consistent and transparent, reinforcing the legitimacy of the domain and business. Overall, Otava-konserni's website is professional, trustworthy, and well-positioned for its business goals. Strategic improvements in privacy compliance, security headers, and incident response transparency would enhance its security posture and regulatory alignment.

L

Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd

lel-bw.de

63

The Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd operates as a regional government agency providing comprehensive information, advisory services, and educational resources focused on agriculture, rural development, and nutrition in Baden-Württemberg, Germany. The website serves as a key portal for agricultural stakeholders, offering market data, quality assurance tools, publications, and event information. The institution holds a strong regional position as a trusted public service provider in the agricultural sector. Technically, the website employs a modern but custom CMS platform with a technology stack including jQuery, jQuery UI, Matomo analytics, and lazy loading for images. The site is mobile-optimized and accessible, with good SEO practices and structured navigation. The use of Matomo indicates a privacy-conscious approach to analytics. From a security perspective, the site enforces HTTPS and limits cookies to technically necessary ones, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or suspicious activities were detected. WHOIS data confirms domain legitimacy and consistency with the stated business purpose. Overall, the website is a well-maintained, professional government portal with good content quality and business credibility. Strategic improvements in security policy transparency and enhanced security headers would further strengthen its posture.

M

Ministerium für Ländlichen Raum und Verbraucherschutz Baden-Württemberg

bio-aus-bw.de

60

The website bio-aus-bw.de serves as an official information portal managed by the Ministry for Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides comprehensive and up-to-date information on organic agriculture, targeting consumers, producers, educators, and students within the region. The platform offers detailed content on organic product labeling, quality assurance, education, and market information, positioning itself as a trusted government resource in the organic sector. Technically, the site employs a modern tech stack including jQuery, jQuery UI, FontAwesome, and Matomo analytics, hosted on a CMS tailored for government content management. The site is well-structured, mobile-optimized, and accessible, with good SEO practices and a cookie consent mechanism that aligns with GDPR requirements. From a security perspective, while HTTPS usage is implied and cookie consent is implemented, explicit security headers and incident response policies are not evident. No vulnerabilities or exposed sensitive data were detected in the provided content. The WHOIS data shows generic DNS servers but aligns with the domain's governmental purpose, indicating legitimacy. Overall, the site demonstrates a solid security posture and compliance with privacy regulations, though improvements could be made in publishing explicit security policies and enhancing header configurations. The risk level is low, with no signs of malicious activity or content safety concerns.

M

Ministerium für Ländlichen Raum und Verbraucherschutz Baden-Württemberg

vondaheim.de

60

The website 'Von Daheim BW' is an official regional campaign managed by the Ministry for Rural Affairs and Consumer Protection Baden-Württemberg, Germany. It aims to promote regional food products by highlighting the families and stories behind them, targeting local consumers to increase awareness and preference for local goods. The site is well-branded, consistent, and professionally designed with clear navigation and content relevant to its mission. Technically, the site uses a government-managed CMS with modern JavaScript libraries such as jQuery and jQuery UI, and employs Matomo analytics for privacy-conscious user tracking. The site is mobile-optimized and accessible, though performance is moderate. Security practices include cookie consent with necessary cookies only, but lack explicit security headers and incident response information. Security posture is adequate with no visible vulnerabilities or exposed sensitive data, but could be improved by adding security headers and explicit policies. Privacy compliance is good, with a clear privacy policy and cookie banner. Business credibility is high due to official government affiliation and consistent branding. Overall, the site is trustworthy and serves its purpose well, though enhancements in security policy transparency and technical security measures are recommended for further strengthening.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

landwirtschaft-bw.de

64

The website www.landwirtschaft-bw.de is an official government portal managed by the Ministry of Nutrition, Rural Areas, and Consumer Protection of Baden-Württemberg, Germany. It serves as a comprehensive information and service platform focused on agriculture, food, and rural development. The site offers a wide range of resources including market data, advisory services, publications, event announcements, and online applications targeted primarily at agricultural businesses, advisors, and citizens within the region. The content is professionally curated, well-structured, and highly relevant to its audience, reflecting a strong government presence and authority in the sector. Technically, the website employs modern JavaScript libraries such as jQuery and jQuery UI, uses Matomo for privacy-conscious analytics, and is hosted on government infrastructure with PowerDNS nameservers. The site is mobile-optimized, accessible, and SEO-friendly, with a consistent branding and professional design. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, although explicit security headers could be more visible. No vulnerabilities or suspicious activities were detected. Overall, the site demonstrates a mature digital infrastructure aligned with government standards, providing trustworthy and valuable services to its users. The domain registration and WHOIS data confirm legitimacy and consistency with the official government entity. Privacy compliance is well addressed with clear policies and consent mechanisms. Strategic recommendations include enhancing security header implementation, publishing incident response contacts and security.txt files, and improving transparency on data retention policies to further strengthen trust and compliance.

M

Media centar Islamske zajednice u BiH

mina.ba

47

MINA.ba is the official website of the Muslim Informative News Agency (MINA), operated by the Media Center of the Islamic Community in Bosnia and Herzegovina. The site serves as a niche regional news platform focused on delivering news, announcements, and community updates relevant to the Bosnian Muslim population. It maintains a consistent brand presence and provides clear contact information, supporting its role as a trusted community media outlet. The business model is non-profit and community-oriented, targeting a specific religious and regional audience.

C

Centar za dijalog - Vesatijja

cdv.ba

47

Centar za dijalog - Vesatijja is a Bosnian non-profit organization dedicated to promoting dialogue culture among Muslims and between different religious and worldview communities. The organization focuses on scientific research, educational projects, and media publications including articles, videos, and PDF releases. Their target audience primarily consists of Bosnian-speaking Muslims and individuals interested in interreligious dialogue and Islamic cultural topics. The website reflects a niche position in the non-profit sector with a clear mission and consistent branding. Technically, the website is built on WordPress 6.8.2 with common plugins such as Contact Form 7 and uses modern web technologies including jQuery and Font Awesome. The site is mobile optimized with good SEO practices and moderate performance. However, it lacks some advanced security headers and privacy compliance features such as cookie consent and privacy policy pages. From a security perspective, the site enforces HTTPS and uses secure contact forms, but it does not implement security headers like Content-Security-Policy or X-Frame-Options. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of privacy and cookie policies indicates compliance gaps with GDPR and related regulations. Overall, the website is trustworthy and professional but would benefit from enhanced privacy compliance and security hardening. The WHOIS data is consistent with the website's claims, supporting legitimacy. Strategic improvements in privacy policy publication, cookie consent, and security headers would strengthen the site's security posture and user trust.

M

Mission Foods

missionfoods.com

69

Mission Foods is a well-established brand specializing in Mexican food products such as tortillas, chips, wraps, and related items. The company has a strong market presence since 1977 and targets consumers interested in authentic Mexican cuisine and recipes. Their website provides comprehensive product information, recipes, and store locator services, supporting a retail and e-commerce business model. Technically, the website is built on WordPress with modern technologies including Google Tag Manager, Facebook SDK, and various analytics tools, demonstrating a mature digital infrastructure. The site is mobile-optimized, accessible, and SEO-friendly, contributing to a positive user experience. Security posture is good with HTTPS enforced and no obvious vulnerabilities, though explicit security headers could be improved. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. However, WHOIS data is unavailable or privacy protected, which slightly impacts trust but does not outweigh the strong brand and content quality. Overall, the website is professional, secure, and trustworthy with minor areas for security enhancement.

M

Megaport

megaport.com

68

Megaport is a leading Network as a Service (NaaS) provider specializing in scalable bandwidth solutions for public and private cloud connectivity, metro ethernet, data center backhaul, and Internet Exchange services. The company positions itself as a global leader in cloud networking, targeting enterprises, cloud service providers, and data centers. The website reflects a mature digital presence with comprehensive service descriptions and a professional design. Technically, the site leverages modern web technologies including jQuery, Google Tag Manager, OneTrust for consent management, and Visual Website Optimizer for A/B testing, indicating a high level of digital maturity and performance optimization. Security posture is strong with HTTPS enforcement, security headers, and privacy compliance mechanisms in place. However, the absence of WHOIS registration data and explicit security policies or incident response information slightly detracts from overall trust. The site is free from adult or questionable content and maintains good privacy compliance. Strategic recommendations include publishing detailed security policies, incident response contacts, and vulnerability disclosure information to enhance transparency and trust.

M

Megaport

ecix.net

69

Megaport is a leading provider of cloud networking and internet exchange services, offering solutions such as MegaIX to optimize traffic flow and reduce ISP costs. The company targets ISPs, enterprises, and cloud service providers with a B2B business model. The website reflects a professional and consistent brand presence with comprehensive service descriptions and a focus on technology and telecommunications sectors. Technically, the site employs modern web technologies including jQuery, Google Tag Manager, OneTrust for cookie consent, and Visual Website Optimizer for A/B testing, indicating a mature digital infrastructure. Security posture is strong with HTTPS enforcement, multiple security headers, and no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies and consent mechanisms. Overall, the website presents a trustworthy and professional image, although WHOIS data is unavailable, limiting domain registration verification.

Ú

Únia materských centier

materskecentra.sk

57

Únia materských centier is a Slovak non-profit organization dedicated to supporting mothers and families with young children through a network of mother and family centers. The organization runs various campaigns, educational projects, and advocacy efforts to promote parenting skills, community building, and family welfare. Their website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to their target audience. Technically, the site is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is adequate with HTTPS, reCAPTCHA, and cookie consent, though it lacks published security policies and vulnerability disclosures. Overall, the site is trustworthy and compliant with GDPR, but could improve transparency around security and incident response.

U

UNIOR TEHNA

uniortehna.ba

44

UNIOR TEHNA is a Bosnia and Herzegovina based company specializing in the wholesale and retail distribution of professional tools and equipment from internationally recognized brands. They serve both professional and hobbyist customers, offering electric tools, hand tools, welding apparatus, and abrasive materials. The company also provides authorized servicing and demo presentations to enhance customer engagement. Their market position is that of a trusted regional distributor with partnerships with over 15 global brands. Technically, the website is built on WordPress with a modern plugin ecosystem including Contact Form 7 and Google reCAPTCHA for form security. The site is mobile optimized and provides a good user experience with clear navigation and professional design. Security posture is adequate with HTTPS and anti-bot measures but lacks advanced security headers and formal security policies. Privacy compliance is weak due to the absence of privacy and cookie policies. Overall, the domain registration data aligns well with the business claims, supporting legitimacy and trustworthiness.

M

Milkprocessing

milkprocessing.ba

49

Milkprocessing d.o.o. is a consulting company specializing in the food industry, particularly dairy, meat, and confectionery sectors, with a strong focus on food safety. Founded in 1999 and based in Sarajevo, Bosnia and Herzegovina, the company has established itself as a leader in modernizing the local dairy industry. Their website reflects a professional presence with clear service offerings and industry focus. The target audience includes food industry professionals and companies seeking consulting and equipment solutions. The business model revolves around providing expert consulting services and supplying production and UV/IC equipment.

L

Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd

lel-web.de

63

The Landesanstalt für Landwirtschaft, Ernährung und Ländlichen Raum Schwäbisch Gmünd operates as a regional government agency providing comprehensive information, advisory services, and publications related to agriculture, nutrition, and rural development in Baden-Württemberg, Germany. The website serves a diverse audience including agricultural professionals, policymakers, educators, and the general public interested in these sectors. It offers thematic content ranging from market data to quality assurance tools and educational programs, positioning itself as a trusted regional authority. Technically, the website employs modern web technologies such as jQuery, jQuery UI, FontAwesome, and lazy loading for images, indicating a moderate level of digital maturity. The CMS appears to be custom or proprietary, tailored to the institution's needs. The site is mobile-optimized and accessible, with good SEO practices evident in meta tags and structured navigation. From a security perspective, the site uses HTTPS and includes security tokens in forms, but lacks visible security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected in the analyzed content. Privacy compliance is limited due to the absence of explicit privacy and cookie policies. Overall, the website is professional, trustworthy, and content-rich, but could improve in privacy compliance and security transparency to enhance user trust and regulatory adherence.

M

MobiiliSuomi Oy

mobiili.fi

57

Mobiili.fi is a Finnish media website specializing in mobile phones and mobile technology news, reviews, and tips. Established in 2007 and operated by MobiiliSuomi Oy, it serves Finnish-speaking mobile technology enthusiasts with a comprehensive range of articles and price comparison affiliate links. The website leverages WordPress CMS and integrates modern technologies such as Google Analytics, Google Tag Manager, and OneSignal push notifications, supported by Cloudflare DNS services. The site demonstrates good content quality, professional design, and clear navigation optimized for mobile devices. Security posture is solid with HTTPS enforced and Cloudflare DNS, though DNSSEC is not enabled and some security headers could be improved. Privacy and cookie policies are present with consent mechanisms, indicating GDPR compliance. WHOIS data is transparent and consistent with the business profile, supporting legitimacy. Overall, Mobiili.fi is a trustworthy and well-maintained media portal with moderate technical sophistication and good privacy practices.

M

Muropaketti

muropaketti.com

59

Muropaketti.com is a Finnish media website published by Otavamedian, focusing on comprehensive coverage of games, movies, series, information technology, and mobile devices. The site targets technology and entertainment enthusiasts primarily in Finland, offering news, reviews, interviews, and product tests. It operates on a WordPress CMS with a modern tech stack including Google Tag Manager, Google Ad Manager, and a consent management platform to ensure GDPR compliance. The website demonstrates good SEO practices and mobile optimization, providing a professional user experience with clear navigation and relevant content. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers could be improved. No privacy policy or terms of service pages were detected in the provided content, which is a notable gap in compliance documentation. Overall, the domain is legitimate, well-established since 1999, and the website is trustworthy with extensive advertising and analytics integrations.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

von-daheim.de

61

The website 'Von Daheim BW' is a regional campaign operated by the Ministry for Nutrition, Rural Areas, and Consumer Protection of Baden-Württemberg, Germany. It aims to promote awareness and consumption of regional food products by highlighting the families and stories behind these products. The site targets consumers within the Baden-Württemberg region and serves as an informational platform to strengthen local product recognition and support. The campaign is positioned as a government initiative with a clear focus on regional food and consumer education. Technically, the website employs a proprietary CMS used by Baden-Württemberg state agencies, leveraging jQuery and jQuery UI libraries, and integrates Matomo analytics for privacy-conscious user tracking. The site is moderately performant, mobile-optimized, and accessible, with basic SEO practices in place. Hosting appears to be managed by state infrastructure, ensuring reliability. From a security perspective, the site uses HTTPS and implements a cookie consent mechanism that restricts cookies to technically necessary ones by default. However, explicit security headers and incident response policies are not published, representing areas for improvement. No vulnerabilities or suspicious patterns were detected, and WHOIS data aligns with the official government entity, supporting legitimacy. Overall, the website is professional, trustworthy, and compliant with GDPR principles, though it could enhance transparency by publishing detailed security and incident response policies. The site is safe for general audiences, with no adult or questionable content detected.

M

Ministerium für Ernährung, Ländlichen Raum und Verbraucherschutz Baden-Württemberg

verbraucherinfo-bw.de

63

The website 'verbraucherinfo-bw.de' is an official consumer information portal managed by the Ministry of Food, Rural Areas and Consumer Protection of Baden-Württemberg, Germany. It provides statutory information on food and feed safety, including official control results and regulatory updates. The site targets consumers within the Baden-Württemberg region, offering transparency and compliance with legal obligations under German and EU law. The business model is public service and government information dissemination, with a medium-sized scope consistent with regional government operations. Technically, the site employs a modern JavaScript stack including jQuery and jQuery UI, with privacy-conscious analytics via Matomo. The hosting and DNS infrastructure appear stable and government-affiliated. The site is mobile-optimized and accessible, with good SEO basics and consistent branding. Performance is moderate but acceptable for a government portal. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms aligned with GDPR. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. The privacy policy and cookie policy are comprehensive and GDPR compliant. Overall, the site presents a low-risk profile with strong trust indicators typical of government portals. Recommendations include enhancing security headers, publishing incident response information, and adding explicit contact details for security and data protection officers to improve transparency and compliance.

M

mainziel.de

mainziel.de

56

mainziel.de is an official municipal traffic and mobility information platform for Frankfurt am Main, providing comprehensive multimodal transport data including live public transport, bicycle routes, parking, and event-related traffic updates. The platform is built on TYPO3 CMS and uses modern web technologies such as jQuery, OpenLayers, and Matomo analytics configured with privacy protections. The website is well-designed, mobile-optimized, and offers a good user experience with clear navigation and relevant content for residents and visitors. Security posture is moderate with HTTPS and privacy-respecting analytics, but lacks explicit security headers and published security policies. No privacy policy or terms of service were detected in the provided content, though cookie consent is managed via Cookiebot. WHOIS data indicates municipal hosting consistent with the website's purpose, supporting legitimacy. Overall, the site is trustworthy and serves as a valuable public service resource.

C

CONVOTIS GmbH

convotis.ch

76

CONVOTIS GmbH is a large German IT services company specializing in digital transformation through its three main business areas: Business IT, Platform IT, and Managed IT. The company supports over 1,000 employees across 26 locations in 8 countries, serving more than 2,400 customers globally. Their offerings include business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business clients. Technically, the site is built on WordPress with Elementor and integrates modern marketing and analytics tools like HubSpot and Google Tag Manager, ensuring good SEO and user experience. Security posture is solid with HTTPS and cookie consent mechanisms, though explicit security policies and incident response contacts are not publicly detailed. The absence of WHOIS data for the domain is a notable anomaly that slightly impacts trust but does not detract from the overall professionalism and legitimacy of the business. Strategic recommendations include publishing formal security and incident response policies and enhancing HTTP security headers to further strengthen trust and compliance.

F

Follett

follett.com

67

Follett is a leading enterprise in the education and campus retail sector, providing comprehensive solutions including campus store management, academic programs, merchandise, and technology services. The company serves a broad audience including students, academic leaders, faculty, and campus auxiliary services, with a strong market presence evidenced by over 1,000 campus partners and 7.5 million students served. The website reflects a mature digital infrastructure built on WordPress with integrations of HubSpot marketing and analytics tools, indicating a moderate to advanced digital maturity. Security posture is generally good with HTTPS enabled and domain transfer protections in place, though improvements are recommended in DNSSEC deployment and security header implementation. Privacy compliance is currently weak due to the absence of visible privacy and cookie policies, which should be addressed to meet GDPR and other regulatory requirements. Overall, the website is professional, trustworthy, and well-aligned with the company's business objectives, but could benefit from enhanced transparency and security practices.

C

CONVOTIS GmbH

lynet.de

76

CONVOTIS GmbH is a large, established IT services company based in Germany, specializing in digital transformation through its three core business areas: Business IT, Platform IT, and Managed IT. The company supports clients globally with a workforce of approximately 1,000 employees across 26 locations in 8 countries. Their service portfolio includes business applications such as SAP and HR services, cloud and security solutions, digital workplace management, and advanced platform integration with AI and data analytics. The website reflects a mature digital presence with professional design, clear navigation, and comprehensive content tailored to business customers seeking IT modernization and efficiency gains. Technically, the site is built on WordPress with Elementor and integrates marketing and analytics tools like HubSpot and Google Tag Manager, indicating a modern digital infrastructure. Security posture is good with HTTPS and cookie consent mechanisms, though there is room for improvement in security headers and incident response transparency. WHOIS data is unavailable, which slightly impacts trust but is not uncommon for corporate domains. Overall, CONVOTIS presents as a credible and professional IT partner with a strong market position.

F

Follett Corporation

dyehardfansupply.com

63

Follett Corporation operates a comprehensive campus retail and merchandise business, specializing in fan shops, campus stores, and virtual retail solutions tailored for collegiate athletics and educational institutions. The company holds a strong market position as a leading provider in this niche, offering a wide range of merchandise and personalized apparel services. Their website reflects a mature digital presence built on WordPress, enhanced with modern marketing and analytics tools such as HubSpot and Google Tag Manager. The site is professionally designed, mobile-optimized, and provides clear navigation and rich content relevant to their target audience of colleges, athletic departments, and fans. Security posture is solid with HTTPS enforced and domain protections in place, though there is room for improvement in security headers and published security policies. Privacy compliance is basic, with clear privacy and cookie policies present but lacking explicit GDPR compliance indicators. Overall, the website and domain registration data support a high legitimacy and trustworthiness profile.

T

Technology Research Hub

technology-research-hub.de

51

Technology Research Hub is a German-based technology research and vendor comparison portal focused on providing high-quality studies, precise comparisons, and vendor insights to business and IT decision makers. The platform offers independent professional user ratings and detailed analyses to assist companies in selecting appropriate software solutions and IT service providers. The website is professionally designed, regularly updated, and uses modern WordPress technologies including Elementor and Yoast SEO to ensure good content presentation and search engine optimization. Hosting is provided by Hetzner, a reputable German hosting provider. Security posture is adequate with HTTPS enabled and cookie consent implemented, though there is room for improvement in security headers and explicit privacy and security policies. Overall, the site is trustworthy, business-focused, and safe for general audiences.

S

SSP AG

ssp.ag

48

SSP AG is a leading German architectural and engineering firm specializing in integral planning, with approximately 200 employees across multiple offices in Bochum, Karlsruhe, Aachen, Berlin, and Münster. The company emphasizes attractiveness, adaptability, and energy efficiency in its projects, positioning itself as a top integrative planning office in Germany. Their website reflects a professional and modern digital presence built on WordPress, enhanced with SEO and cookie management tools, and supported by a GDPR-compliant privacy framework. The site is well-structured, mobile-optimized, and regularly updated with news and project highlights. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. WHOIS data is privacy-protected, which is common and justified for this business type, and no suspicious patterns were detected. Overall, SSP AG demonstrates a mature digital infrastructure aligned with its market position and business needs.

B

Bayern Tourismus Marketing GmbH

tourismuswissen.bayern

52

Bayern Tourismus Marketing GmbH operates tourismwissen.bayern as an official educational and marketing platform for the Bavarian tourism sector. The company is institutionally supported by the Bavarian government and serves as a central hub for tourism stakeholders, offering digital courses, networking, and marketing resources. The website is built on the Moodle LMS platform, featuring a professional design, accessibility options, and GDPR-compliant privacy and cookie policies. Technically, the site uses modern JavaScript libraries and analytics tools like Matomo, ensuring privacy-conscious user tracking. Security posture is solid with HTTPS and domain transfer protections, though DNSSEC is not enabled and some security headers are missing. Overall, the platform is trustworthy, well-maintained, and aligned with its business goals.

The DSN GROUP operates a professional job portal focused on data protection and IT security careers, primarily targeting German-speaking job seekers. The website provides information about the company, job listings, and contact options, positioning itself as a niche player in the privacy and security recruitment market. The presence of related companies in the footer indicates a broader corporate group structure. Technically, the site uses modern JavaScript libraries such as jQuery and jQuery UI, and is built on the rexx systems platform, suggesting a mature but specialized infrastructure. The website is served over HTTPS, ensuring secure communications, but lacks visible security headers and cookie consent mechanisms, indicating areas for improvement in security posture and privacy compliance. No forms or direct contact emails are present on the main page, but a contact page is linked, suggesting controlled data collection. Overall, the site is professional, trustworthy, and safe for general audiences.

D

datenschutz notizen | News-Blog der DSN GROUP

datenschutz-notizen.de

46

The website 'datenschutz notizen | News-Blog der DSN GROUP' is a specialized German news blog focusing on data protection, information security, and compliance topics. It serves a niche audience of data protection officers, compliance professionals, and organizations interested in legal and technical updates in these fields. The site is professionally designed, regularly updated, and uses structured data to enhance SEO and content discoverability. Technically, it is built on WordPress with modern plugins and frameworks, ensuring good performance and mobile optimization. Security posture is solid with HTTPS and security plugins, though it lacks some advanced security headers and explicit incident response policies. Privacy compliance is mostly good, but the absence of a cookie consent mechanism is a notable gap. Overall, the site is trustworthy, professional, and well-positioned in its market niche.

V

viind GmbH

viind.com

59

viind GmbH is a specialized provider of modular chatbot and voicebot solutions, focusing on automated communication for government agencies and enterprises. Their website presents a professional and comprehensive portfolio of services tailored to sectors such as administration, health departments, banking, insurance, and telecommunications. The company emphasizes flexibility, security, and future-oriented technology in their offerings. The digital infrastructure is built on a modern WordPress CMS with Elementor and various plugins, ensuring a responsive and SEO-optimized user experience. The site includes GDPR-compliant privacy and cookie policies with explicit consent mechanisms, reflecting a mature approach to data protection. Security posture is generally good with HTTPS enforced, though explicit security headers could be improved. The absence of WHOIS data is a notable anomaly, potentially indicating privacy protection or registration issues, which slightly impacts trustworthiness. Overall, the website is well-designed, content-rich, and targets a professional audience effectively.

The College Athlete Payment System (CAPS) website presents a specialized software platform designed to facilitate compliance with new NCAA revenue sharing rules effective July 1, 2025. The platform is developed in partnership with the College Sports Commission and LBi Software, targeting colleges, universities, and student-athletes in the United States. CAPS offers services including cap fund allocation, payment monitoring, compliance management, and educational resources to ensure institutions meet regulatory requirements. The website content is professional and well-structured, reflecting a focused business model in the education sector.

J

jugend-technik-schule

jugend-technik-schule-fds.de

43

Jugend-Technik-Schule is a German educational institution specializing in providing hands-on STEM courses and workshops for children and youth. The website showcases a variety of courses focused on natural sciences and technology, aiming to inspire and educate young learners in these fields. The institution positions itself as a regional leader in youth STEM education with a clear focus on practical learning experiences. Technically, the website is built on WordPress using modern plugins such as Yoast SEO and Brizy page builder, hosted likely by agenturserver. The site is mobile-optimized and SEO-friendly, with a professional design and clear navigation. Security-wise, the site uses HTTPS and a cookie consent mechanism via Usercentrics, but lacks some security headers and formal privacy and terms policies, which are recommended for compliance and trust. Overall, the domain registration data aligns well with the website content, indicating legitimacy and consistency. The site is safe for general audiences with no adult or explicit content.

W

Wirtschaftsregion Mittelbaden e.V.

wirtschaftsregionmittelbaden.de

44

Wirtschaftsregion Mittelbaden e.V. is a regional economic development association serving the Mittelbaden area in Southwest Germany, including the Stadtkreis Baden-Baden and Landkreis Rastatt. The organization focuses on fostering economic growth, supporting career and education initiatives, and enhancing regional infrastructure and quality of life. With over 80 members and a community of approximately 290,000 people, WRM acts as a collaborative network of municipalities, companies, and credit institutions. The website provides information about their services, events, and regional initiatives but lacks explicit privacy, cookie, and security policies.

L

Landratsamt Reutlingen

ganzesachemachen.de

45

The website ganzesachemachen.de serves as the official career portal for Landratsamt Reutlingen, a regional government authority in Germany. It provides comprehensive information on current job openings, training and study opportunities, and employee benefits, targeting prospective employees and trainees. The site emphasizes family-friendly work conditions, flexible working hours, and professional development, positioning itself as an attractive employer in the public sector. The content is well-structured, professionally presented, and supported by employee testimonials and multimedia content to enhance engagement. Technically, the site is built on WordPress with a modern tech stack including UIkit, Owl Carousel, and Borlabs Cookie for privacy management. It uses HTTPS with good SSL configuration and integrates Google Tag Manager with consent mechanisms. The site is mobile-optimized and accessible, with embedded videos and maps controlled via cookie consent blockers to comply with privacy regulations. From a security perspective, the site follows best practices such as enforcing HTTPS and managing cookie consent. While explicit security headers are not fully confirmed, no vulnerabilities or exposed sensitive data were detected. The WHOIS data indicates generic hosting providers but aligns with the site's government affiliation, suggesting legitimacy. No WAF or blocking mechanisms interfere with content access. Overall, the website demonstrates a strong security posture, good privacy compliance, and professional business credibility. It effectively supports the Landratsamt Reutlingen's recruitment and employer branding efforts, with recommendations to enhance security headers and maintain regular updates to sustain its secure and compliant status.

B

Bayerisches Staatsministerium für Digitales

bayernportal.de

65

The BayernPortal website is an official digital government portal operated by the Bavarian State Ministry for Digital Affairs. It provides comprehensive administrative services and information for citizens, businesses, and public administrations within Bavaria. The portal offers detailed descriptions of government services, online procedures, and contact information for relevant authorities, supporting digital transformation in public administration. The site targets a broad audience including citizens, entrepreneurs, and administrative bodies, positioning itself as a central hub for digital government services in Bavaria. Technically, the website employs modern JavaScript libraries such as jQuery, Swiper.js, and accessibility tools like ReadSpeaker and FriendlyCaptcha. The site is well-optimized for mobile devices and accessibility, featuring clear navigation and a professional design. Cookie consent mechanisms are robust, offering granular control over cookie categories, and the site uses Matomo Analytics for privacy-respecting user behavior analysis. From a security perspective, the site enforces HTTPS and uses secure session cookies. However, explicit security headers like Content Security Policy or HSTS are not evident, and no published security policy or incident response contacts are found. No vulnerabilities or suspicious domains were detected. The WHOIS data aligns with official government registration, confirming the site's legitimacy. Overall, BayernPortal demonstrates a mature digital infrastructure with strong privacy compliance and excellent user experience. Strategic improvements could include publishing a formal security policy, adding security headers, and providing incident response contacts to enhance trust and security posture further.

D

Drohnen-Lexikon.de

quadrocopter-mit-kamera.org

54

Drohnen-Lexikon.de is a German-language informational website focused on providing comprehensive listings and reviews of drone manufacturers worldwide. The site targets hobbyists, professionals, and commercial users interested in drone technology, offering detailed product descriptions, comparisons, and affiliate-linked purchase options. The business model centers on affiliate marketing, supported by clear disclosures and product recommendations. Technically, the site is built on WordPress with a modern plugin stack including Yoast SEO, Complianz GDPR compliance, and affiliate toolkit integrations. Hosting is provided by Alfahosting, and the site demonstrates good mobile optimization and SEO practices. Security posture is adequate with HTTPS enabled and GDPR compliance mechanisms in place, though explicit privacy and terms of service pages are not detected in the provided content. No critical vulnerabilities or blocking mechanisms are present, and the site maintains a moderate to good trust level. Overall, the site is professional, content-rich, and well-positioned as a niche informational and affiliate platform in the drone technology sector.

L

levigo holding gmbh

levigo.com

50

levigo holding gmbh is a German IT service provider specializing in managed services, professional IT consulting, cloud infrastructure, and document management software solutions. The company targets medium-sized enterprises primarily in the Stuttgart region and broader German-speaking markets. Their website reflects a professional and consistent brand image, offering detailed information about their services and subsidiaries. Technically, the site is built on WordPress with modern plugins and frameworks, including Yoast SEO and Matomo analytics, indicating a mature digital presence. Security posture is solid with HTTPS enforced and no visible vulnerabilities, though formal security policies and incident response contacts are not published. Overall, levigo presents as a credible and trustworthy IT services company with good privacy compliance and user experience.

K

K-system.CZ s.r.o.

k-system.cz

46

K-system.CZ s.r.o. is a Czech Republic-based medium-sized company specializing in IT systems, ERP implementation, accounting services, electrical installations, application development, and education. Established in 1999, the company has over 22 years of experience and serves more than 200 customers. Their website reflects a professional and consistent brand presence with clear service offerings and customer testimonials, positioning them as a trusted regional player in technology and related sectors. Technically, the website is built on WordPress with modern tracking and analytics tools, optimized for mobile with good SEO practices. Security posture is strong with HTTPS, reCAPTCHA protection on forms, and spam prevention measures, though some HTTP security headers could be improved. Privacy and cookie policies are present and GDPR compliant. WHOIS data is unavailable, limiting domain trust verification, but the website content and contact information support legitimacy. Overall, the site is well-structured, secure, and business-focused, suitable for its target audience.

R

Ruck

ruck.co.uk

64

Ruck.co.uk is a niche media website focused on delivering rugby news, fixtures, scores, and related content primarily targeting rugby fans in the United Kingdom and English-speaking countries. The site offers original content sourced from leagues, teams, and players, positioning itself as a specialized rugby news outlet. It operates on a WordPress platform with a modern tech stack including Bootstrap, jQuery, and various advertising and analytics integrations. The website demonstrates good digital maturity with SEO optimization, mobile responsiveness, and user-friendly navigation. Security posture is solid with HTTPS enforcement and some security best practices, although it lacks explicit security policies and incident response information. Privacy compliance is well addressed with comprehensive privacy and cookie policies and a consent management system. Overall, the site is professional, trustworthy, and content-rich, but the absence of WHOIS data and direct contact information slightly reduces business credibility.

K

K-System

falcocomputer.cz

46

K-System is a Czech Republic-based IT service provider specializing in tailored IT infrastructure solutions including network management, server solutions, cloud services, security, virtualization, backup systems, and point-of-sale systems. The company targets businesses seeking reliable and professional IT support and infrastructure. Their website demonstrates a solid digital presence built on WordPress with modern technologies and multiple analytics and tracking tools integrated. Security posture is generally good with HTTPS enforced and use of security plugins, though the absence of security headers and explicit privacy and cookie policies indicates room for improvement. The lack of WHOIS data limits domain trust assessment, but the professional presentation and client references support legitimacy. Overall, the site is well-structured, user-friendly, and content-rich, catering effectively to its target audience.

L

Landkreis Böblingen

biodiversitaet-bb.de

43

The website www.biodiversitaet-bb.de serves as an official informational platform dedicated to biodiversity initiatives within the Landkreis Böblingen region in Germany. It provides comprehensive resources, project overviews, and educational content aimed at local citizens, businesses, and municipalities to promote biodiversity conservation and sustainable practices. The site is well-positioned as a regional government resource with a clear focus on environmental stewardship and community engagement. Technically, the website is built on WordPress 6.8.2, utilizing modern web technologies including jQuery, Tailwind CSS, and FontAwesome icons. It employs plugins such as Borlabs Cookie for GDPR-compliant cookie management and SpamJam for spam protection. The hosting appears to be provided by Your-Server.de, a common German hosting provider. The site demonstrates good mobile optimization, accessibility, and SEO practices, contributing to a positive user experience. From a security perspective, the site enforces HTTPS and uses cookie consent mechanisms, reflecting a good baseline security posture. However, explicit security headers are not detected, and no published security or incident response policies are found. No vulnerabilities or exposed sensitive data were identified in the HTML content. Privacy compliance is strong with a comprehensive privacy policy and cookie consent in place. Overall, the website is trustworthy, professionally maintained, and aligned with its governmental mission. It poses low risk from a security and compliance standpoint. Strategic improvements could include enhancing security headers, publishing incident response information, and providing clearer direct contact details to further strengthen trust and operational resilience.

D

der-wirtschaftsstandort.com

der-wirtschaftsstandort.com

46

Der-Wirtschaftsstandort.com is a German-language online magazine focused on providing information about economic locations, companies, startups, and industry solutions within the DACH region. The website serves business professionals, investors, and startups seeking insights into regional economic opportunities. It operates on a WordPress platform with modern SEO and performance optimizations, including Yoast SEO and WP Rocket plugins. The site employs GDPR-compliant cookie consent mechanisms and uses Matomo Analytics for user tracking. Security posture is adequate with HTTPS enforced and domain transfer protections, though DNSSEC is not enabled and no explicit security or incident response policies are published. Overall, the website presents a professional and trustworthy business information portal with good content quality and technical implementation.

L

Landkreis Karlsruhe

landkreis-karlsruhe.de

70

Landkreis Karlsruhe operates as the official government district authority for the Karlsruhe region in Germany, providing a wide range of public services including administration, social welfare, environmental management, and community engagement. The website serves as a comprehensive portal for residents and stakeholders, offering access to online services, news updates, and detailed information about district governance and programs. The organization maintains a strong market position as a regional government entity with a focus on transparency and citizen support. Technically, the website employs a modern technology stack including jQuery, Leaflet for mapping, Mustache.js for templating, and a custom or ikiss-based CMS framework. The site demonstrates good mobile optimization, accessibility features, and SEO practices, although some security headers could be enhanced. Performance is moderate, with a professional design and clear navigation structure supporting a positive user experience. From a security perspective, the site enforces HTTPS and holds ISO 27001 certification, indicating a mature information security management system. Cookie consent mechanisms and privacy policies align with GDPR requirements. However, explicit security headers like Content-Security-Policy and X-Frame-Options are not clearly declared, and no public incident response or vulnerability disclosure policies are found. No vulnerabilities or exposed sensitive data were detected in the analysis. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy and security standards. It effectively supports the district's mission to provide transparent and accessible public services. Strategic recommendations include enhancing security headers, publishing incident response contacts, and maintaining up-to-date third-party libraries to further strengthen security posture.

L

LINUS WITTICH Medien Gruppe

meinhandwerker-regional.de

64

meinhandwerker-regional.de is a regional classifieds and advertising platform operated by the LINUS WITTICH Medien Gruppe, targeting handymen and local service providers in Germany. The website offers users the ability to search, list, and manage advertisements related to local businesses and services. It features a professional design with good navigation and mobile optimization, supported by a modern technology stack including jQuery, Bootstrap, and Matomo analytics. Security posture is solid with HTTPS enforced and secure login forms, though some security headers and explicit policies could be improved. Privacy compliance is basic with a privacy policy and cookie consent mechanism present. Overall, the site is legitimate, well-branded, and trustworthy within its niche.

The Town of Superior, Colorado's official municipal website serves as a comprehensive portal for residents, businesses, and visitors, offering extensive information on community events, government services, public safety, and recreational activities. The site positions itself as a trusted local government resource with a clear focus on transparency and community engagement. The presence of multiple language options and social media integration enhances accessibility and outreach. Technically, the website employs a modern technology stack including jQuery, Google Maps API, and the OpenCities CMS platform by Granicus, built on ASP.NET WebForms. The site demonstrates good mobile optimization, accessibility features, and moderate performance. Analytics and user experience tools such as Monsido and Google Tag Manager are utilized for monitoring and improvement. From a security perspective, the site enforces HTTPS and avoids exposing sensitive data. However, it lacks some recommended security headers and a cookie consent mechanism, which are areas for improvement. The WHOIS data is incomplete, likely due to .gov domain policies, but the domain's legitimacy is supported by its official government status and consistent branding. Overall, the website is professional, trustworthy, and well-maintained, with minor gaps in privacy compliance and security best practices. Strategic enhancements in security headers and privacy mechanisms would further strengthen its posture.