Security Directory

The Mediengruppe Allgäuer Zeitung operates as a regional media publishing company based in Germany, providing a range of services including newspaper publishing, online news, subscription management, advertising, and educational programs. The website reflects a well-established regional media group with a clear focus on local news and community engagement. Their market position is strong within the Allgäu region, targeting a general audience with diverse media offerings. Technically, the website employs a mix of established front-end libraries and frameworks such as jQuery, UIkit, and FontAwesome, hosted on SchlundTech infrastructure. The site is mobile-optimized and includes modern consent management tools, indicating a mature digital presence. Security-wise, HTTPS is enforced and consent management is implemented, but some older libraries and lack of explicit security headers suggest room for improvement. Overall, the website is professional, trustworthy, and compliant with GDPR, though it lacks explicit security policy and incident response information.

D

DiabetesUndRecht

diabetes-und-recht.de

0

DiabetesUndRecht is a specialized legal consultancy website providing expert legal advice for people with diabetes, focusing on issues such as driving licenses, disability rights, school accompaniment, care levels, medical aids, and labor law. The business operates primarily in Germany and targets individuals affected by diabetes who require legal support. The website is professionally designed with consistent branding and clear navigation, offering a niche service with a strong reputation supported by the credentials of RA Oliver Ebert, including membership in relevant committees and extensive publications. Technically, the site is built on WordPress 6.8.2 using the Gantry5 framework, with common plugins like Contact Form 7 and Borlabs Cookie for consent management. The hosting uses GoDaddy DNS servers, and the site enforces HTTPS with good SEO practices. Mobile optimization and accessibility are adequate, though some improvements in accessibility could be made. Performance is moderate, suitable for the site's content and audience. From a security perspective, the site uses HTTPS and cookie consent mechanisms but lacks explicit security headers and documented security policies or incident response plans. No vulnerabilities or exposed sensitive data were detected in the HTML content. The absence of a vulnerability disclosure policy or security.txt file is noted. Overall, the security posture is good but could be enhanced with additional headers and policies. The overall risk assessment is low, with no signs of malicious activity or content safety concerns. Strategic recommendations include implementing security headers, publishing security policies, and enhancing accessibility. The website demonstrates a trustworthy and professional presence in its niche market.

The website creditreform.hu is currently inaccessible due to a Cloudflare error 523 indicating that the origin web server is unreachable. This prevents access to any meaningful content or business information. The domain was registered in 2020, which is consistent with a relatively new business presence. The only accessible content is a Cloudflare error page with no privacy policies, contact information, or business descriptions. The technical infrastructure relies on Cloudflare as a CDN and security provider, but the origin server connectivity issue severely impacts availability and trustworthiness. Security posture is weak due to lack of accessible content and missing security headers or policies. Overall, the site cannot be fully assessed until origin server issues are resolved.

A

Apo Asset Management GmbH

apoasset.de

0

apoAsset is a German asset management company specializing in health and multi-asset investment funds, serving institutional and private investors as well as advisors and partners. Established in 1999, the company has a strong market position supported by a scientific advisory board and multiple industry awards. The website reflects a professional and trustworthy brand with comprehensive content and clear navigation. Technically, the site is built on WordPress with modern libraries such as Swiper.js and Highcharts, and includes cookie consent management via Borlabs Cookie. Security posture is good with HTTPS enforced and no visible vulnerabilities, though security headers and incident response policies are not publicly documented. Overall, apoAsset demonstrates a mature digital presence with strong compliance and business credibility.

Ö

ÖKORENTA Invest GmbH

oekorenta.de

0

ÖKORENTA Invest GmbH is a well-established German company specializing in sustainable and renewable energy investments, particularly in wind and solar energy portfolio funds. With over 26 years of industry experience and a medium-sized team, the company offers a comprehensive suite of services including fund emission, distribution, asset acquisition, and investor support. Their market position is strong, managing substantial invested capital and a large investor base. The website reflects a professional digital presence built on WordPress with Elementor, featuring modern design and good mobile optimization. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and explicit policies are missing. Overall, the site is trustworthy and business-focused with no signs of malicious or adult content.

D

Drescher & Cie AG

tacheles-investmentgespraech.de

0

Drescher & Cie AG operates the TACHELES investment discussion event, a well-established forum since 2010 that brings together fund industry representatives, politicians, and media in Germany. The website serves as an information and event platform targeting financial professionals and investors, emphasizing transparency and open dialogue in the investment sector. The company positions itself as an important player in the German financial event landscape with a focus on quality and professionalism. Technically, the website is built on TYPO3 CMS with modern frontend technologies including Bootstrap and Font Awesome. It integrates a professional video player and uses structured data for SEO enhancement. The site is mobile-optimized and performs moderately well, though some accessibility features could be improved. Cookie consent is implemented, but explicit privacy and terms of service pages are missing. From a security perspective, the site uses HTTPS and modern libraries but lacks visible security headers and formal security policies. No critical vulnerabilities or exposed sensitive data were detected. WHOIS data is minimal but consistent with the business profile. Overall, the site is trustworthy but could benefit from enhanced privacy compliance and security best practices. Strategic recommendations include publishing comprehensive privacy and terms policies, implementing security headers, improving accessibility, and formalizing incident response and vulnerability disclosure processes to strengthen trust and compliance.

D

DRESCHER & CIE AG

drescher-cie.de

0

DRESCHER & CIE AG is an established independent financial information service provider based in Germany, specializing in stock market and fund-related services since 1997. The company offers a broad range of services including capital market research, consulting, editorial content, event organization, and operates an online platform for webinars, podcasts, and media content. Their target audience primarily consists of professional investors and financial intermediaries. The website reflects a mature digital presence built on TYPO3 CMS with modern frontend technologies, providing a professional and accessible user experience. Security posture is adequate with HTTPS and cookie consent mechanisms in place, though explicit security policies and incident response contacts are not published. Overall, the site demonstrates good compliance with GDPR and offers clear navigation and relevant content.

H

Hotel Sopron**** - Négycsillagos szálloda Sopronban családoknak, cégeknek, csoportoknak

hotelsopron.hu

0

Hotel Sopron is a four-star hotel located in the city center of Sopron, Hungary, near the Austrian border. The hotel targets families, companies, and groups, offering renovated rooms, free parking, wifi, and an online booking system. The website is professionally designed using Concrete5 CMS and Bootstrap 3.3.7, providing a good user experience with mobile optimization and clear navigation. The technical infrastructure includes Google Tag Manager and CookieYes for analytics and cookie consent management. Security posture is adequate with HTTPS enabled but lacks advanced security headers and explicit security policies. Privacy compliance is basic with a cookie banner but no visible privacy policy or terms of service pages. Overall, the website is trustworthy and legitimate, supported by a domain age of over 20 years consistent with the business history.

P

PORR s.r.o.

porr.sk

0

PORR Slovakia (porr.sk) is a well-established construction company operating as part of the multinational PORR Group. The company provides a broad range of construction services including engineering, infrastructure, building construction, asphalt production, and specialized construction skills. The website reflects a mature business with over 18 years of domain age and consistent branding aligned with the parent company. Technically, the site uses TYPO3 CMS and modern web technologies, delivering a good user experience with mobile optimization and accessibility features. Security posture is solid with HTTPS enforced and a comprehensive cookie consent mechanism, although some security headers and incident response policies are not publicly disclosed. Privacy compliance is strong, with GDPR-aligned cookie policies and data protection statements. Overall, the website is professional, trustworthy, and suitable for its target audience of construction clients and partners.

The website www.igus.be represents a manufacturer specializing in high-performance polymer components for motion applications, including energy chains, cables, bearings, and robot joints. The site serves primarily as a language selection splash page with minimal content, indicating a larger main site likely exists beyond this entry point. The business appears to be established in Belgium and targets industrial and manufacturing sectors requiring specialized polymer motion components. The business model is direct manufacturing and supply, positioning itself as a key player in its niche. Technically, the site uses basic HTML and JavaScript with Google Tag Manager for analytics. There is no evidence of a CMS or advanced frameworks. The site shows moderate performance and basic mobile optimization but lacks comprehensive SEO and accessibility features. Security headers and HTTPS configuration details are not available from the provided data, limiting the security posture assessment. Security-wise, the site does not expose sensitive data or forms on this splash page, but lacks visible privacy, cookie, or terms policies, which are important for GDPR compliance. The WHOIS data is blocked by the .be registry policy, which is common but reduces transparency. No WAF or blocking mechanisms were detected, and the content is safe with no adult or questionable material. Overall, the site is functional but minimal, with room for improvement in privacy compliance, security best practices, and richer content. The domain appears legitimate but would benefit from enhanced transparency and security measures.

N

Netuna Criação de sites Wordpress

netuna.com.br

0

Netuna Criação de sites Wordpress is a Brazilian digital agency specializing in WordPress website creation, maintenance, SEO optimization, and Google Ads management primarily serving clients in Belo Horizonte and surrounding areas. The company has a well-established market presence with a domain registered since 2009 and client testimonials indicating business activity since 2004. Their website reflects a professional and consistent brand image with a focus on delivering measurable digital marketing results. Technically, the site is built on WordPress with modern plugins and tools, including Yoast SEO, Google Analytics, and Facebook Pixel, supporting effective marketing and analytics capabilities. Security posture is adequate with HTTPS enforced and anonymized analytics, but could benefit from enhanced security headers and explicit privacy and cookie policies. Overall, the website is accessible, well-structured, and trustworthy, with clear contact information and active social media engagement.

M

Mereo

mereo.com

0

Mereo is a Brazilian technology company specializing in human resources management solutions, offering a comprehensive SaaS platform for performance management, competency development, employee engagement, and related HR functions. The company targets medium to large enterprises and has a significant market presence with over one million users impacted. The website is professionally designed using WordPress and Elementor, with modern SEO and analytics tools integrated, reflecting a mature digital infrastructure. Security posture is solid with HTTPS enforcement and domain registration protections, though there is room for improvement in published privacy and security policies. Overall, the website presents a trustworthy and professional image suitable for its B2B audience.

The website cimentoverdedobrasil.com.br is currently inaccessible to visitors, presenting a 403 Access Denied error page. This indicates that the server is actively blocking access, likely due to permission settings or IP restrictions. The page content is minimal and primarily serves as an error notification with guidance on common causes and troubleshooting steps related to file permissions and .htaccess configurations. The site is hosted by HostGator, as indicated by branding and footer links, but no business-specific content, contact information, or privacy policies are available on the page. Technically, the site uses an outdated jQuery library and lacks modern security headers or analytics integrations. The domain uses Microsoft Online name servers, suggesting some integration with Microsoft services, but no registrant details are provided to confirm ownership or legitimacy fully.

G

Grupo Ferroeste

grupoferroeste.com.br

0

Grupo Ferroeste is a large Brazilian industrial group specializing in steel production, fuels, gases, and cement manufacturing with operations across multiple states. The website presents a professional corporate image with clear branding and comprehensive information about its subsidiaries and business sectors. The technical infrastructure is based on WordPress with modern plugins and security features such as hCaptcha and GDPR compliance mechanisms. The security posture is solid with HTTPS enforced and no visible vulnerabilities, though some security headers could be improved. Privacy compliance is strong with detailed policies and a dedicated Data Protection Officer contact. Overall, the website reflects a mature digital presence aligned with the company's industrial business model and regional market position.

O

ORLEN Deutschland GmbH

star.de

0

The website www.star.de represents ORLEN Deutschland GmbH's star brand, offering fuel stations, e-mobility solutions, fleet cards, and promotional services primarily in Germany. The site is professionally designed using TYPO3 CMS, with a clear focus on quality, service, and comfort for its customers. The target audience includes general consumers and fleet operators seeking fuel and mobility services. The business operates in the energy and transportation sectors with a strong regional presence. Technically, the website employs a modern CMS (TYPO3) and integrates Cookiebot for GDPR-compliant cookie consent management. The site is hosted on managed IP infrastructure with secure HTTPS connections and appropriate security headers. Performance and mobile optimization are adequate, though accessibility features could be improved. The site uses multiple third-party analytics and advertising services, all integrated with user consent mechanisms. From a security perspective, the website demonstrates good practices including HTTPS enforcement, cookie consent, and no visible vulnerabilities or exposed sensitive data. However, explicit security policies, incident response contacts, and vulnerability disclosure mechanisms are absent, representing areas for improvement. Privacy compliance is strong with a comprehensive privacy policy and cookie management. Overall, the website is trustworthy, professionally maintained, and compliant with relevant privacy regulations. Strategic recommendations include publishing security and incident response policies, enhancing accessibility, and adding terms of service to further strengthen business credibility and user trust.

Allgäu Outlet is a regional retail business specializing in outlet sales of sportswear, fashion, and accessories from well-known brands. The company emphasizes value shopping with discounts up to 70% and promotes sustainability through a large photovoltaic installation. The website is built on the webEdition CMS platform and uses modern web technologies such as Bootstrap, FontAwesome, and CookieFirst for consent management. The site is mobile optimized and provides a good user experience with clear navigation and relevant content. Security posture is moderate with cookie consent implemented but lacks visible security headers and published security policies. No critical vulnerabilities or blocking mechanisms were detected, and the site is accessible without WAF interference. Overall, the business appears legitimate with a moderate trust level and good privacy compliance. Strategic improvements could focus on enhancing security headers, publishing terms of service, and providing clearer contact information.

The website proof-point-suite.com is currently inaccessible, returning a HTTP 403 Forbidden error page indicating that access is denied. Due to this, no meaningful business content, metadata, or contact information is available for analysis. The domain is registered with 1API GmbH since 2021 and appears legitimate with standard domain status flags, but DNSSEC is not enabled. The hosting provider appears to be Mittwald based on the error page styling and resources. No privacy, cookie, or security policies are published on the accessible page, and no scripts or analytics technologies are detected. The website's security posture cannot be fully assessed due to lack of accessible content and headers. Overall, the site currently provides no business or security information to visitors, which severely limits trust and credibility.

The website rin-diabetes.de is currently unavailable and displays only a minimal placeholder page indicating that the site is under reconstruction. No business description, contact information, or additional content is provided. The domain is hosted on servers associated with hosteurope.de and domaincontrol.com, which are common hosting and DNS providers. Due to the lack of content and metadata, the technical maturity of the site is very low, with no detectable CMS, frameworks, or security headers. The security posture cannot be fully assessed but is likely poor given the absence of HTTPS information and security policies. Overall, the site presents a low trust profile and minimal business credibility at this time.

BNP Paribas Professionnels is a professional banking and insurance website operated by BNP PARIBAS, a major French banking group. The site targets professional clients, offering online banking and insurance services. The domain is well-established since 2015 and registered under BNP PARIBAS in France, reflecting a legitimate and consistent business presence. Technically, the website uses Adobe Experience Manager CMS with modern JavaScript libraries, providing a good user experience and mobile optimization. Security is robust with HTTPS and domain lock statuses, though DNSSEC is not enabled and some security headers could be improved. Privacy compliance is partial, with a cookie consent mechanism present but no explicit privacy policy or terms of service detected in the analyzed content. Overall, the website is professional, trustworthy, and secure, suitable for its banking audience.

U

Udruga za razvoj civilnog društva

smart.hr

0

The website www.smart.hr represents a Croatian non-profit association dedicated to the development of civil society. Established in 2001, it serves as a platform for community support and educational programs targeting NGOs and civil society organizations. The site is built on WordPress using the Divi theme, incorporating standard web technologies and Google Analytics for visitor tracking. While the website demonstrates good design quality and mobile optimization, it lacks explicit privacy, cookie, and terms of service policies, which are critical for GDPR compliance and user trust. Security measures include HTTPS and Google reCAPTCHA, but the absence of security headers and vulnerability disclosure policies suggests room for improvement. Overall, the domain registration data aligns well with the website's purpose and location, indicating a legitimate and established entity.

S

Solidarna

solidarna.hr

0

Solidarna is a Croatian non-profit foundation dedicated to fostering solidarity and community support through various funds and programs. The website presents a professional and well-structured digital presence, leveraging WordPress with Elementor and WooCommerce for content management and e-commerce capabilities. The foundation actively engages with its audience via social media channels and provides transparent information about its programs and donors. Technically, the site employs modern web technologies and maintains good security practices, including HTTPS and security headers. Privacy compliance is evident through a comprehensive privacy policy and cookie consent mechanism. However, the site lacks explicit terms of service, security policy, and vulnerability disclosure information, which could enhance trust and compliance. Overall, the website is trustworthy, well-maintained, and serves its non-profit mission effectively.

S

Slagalica - Zaklada za razvoj lokalne zajednice

zaklada-slagalica.hr

0

Zaklada Slagalica is a Croatian non-profit foundation dedicated to the development of local communities through philanthropy, grants, and community projects. Established in 2008, it maintains a strong local presence with transparent donation practices and active engagement with civil society organizations. The website reflects a professional and consistent brand image, targeting NGOs, donors, and local stakeholders. Technically, the site is built on WordPress with modern plugins and frameworks, hosted on SiteGround, and optimized for mobile and SEO. Security posture is good with HTTPS and reCAPTCHA integration, though improvements in security headers and incident response transparency are recommended. Privacy compliance is well addressed with GDPR-aligned policies and cookie consent mechanisms. Overall, the site is trustworthy, well-maintained, and serves its community-focused mission effectively.

The Deutsche Diabetes Stiftung is a German non-profit foundation dedicated to diabetes research, prevention, education, and support. The website serves as an information hub for people affected by diabetes, healthcare professionals, and donors. It offers resources such as health checks, prevention tips, and news about foundation activities. The foundation maintains a transparent and professional online presence with clear contact details and donation options. Technically, the site is built on Drupal 7 with modern JavaScript libraries, providing a responsive and user-friendly experience. Security posture is solid with HTTPS and cookie consent mechanisms, though some security headers and incident response information are missing. Overall, the website is trustworthy, well-structured, and compliant with GDPR requirements.

E

event lab. GmbH

dag-dgess.de

0

The website dag-dgess.de represents the joint annual congress of the German Obesity Society (DAG) and the German Society for Eating Disorders (DGESS) scheduled for October 2025 in Stuttgart. It serves as a professional platform for healthcare professionals, researchers, and affected individuals to engage in interdisciplinary exchange, scientific presentations, and workshops. The event is organized by event lab. GmbH, a specialized event organizer in the healthcare sector. The website demonstrates a high level of professionalism, clear branding, and comprehensive content relevant to its target audience. Technically, the site is built on WordPress using the Avada theme framework, enhanced with accessibility and cookie compliance plugins such as Borlabs Cookie and OneTap Pro. The hosting is managed via kasserver.com, and the site employs modern JavaScript libraries and sliders for rich content presentation. Performance is moderate with good mobile optimization and excellent accessibility features, ensuring compliance with modern web standards. From a security perspective, the site uses HTTPS with good SSL configuration and cookie consent mechanisms. While some security headers are not explicitly detected, the overall posture is strong with no visible vulnerabilities or exposed sensitive data. Privacy compliance is well addressed with clear privacy and cookie policies, GDPR adherence, and transparent contact information. Overall, dag-dgess.de is a trustworthy, well-maintained website with a clear business purpose, strong compliance posture, and good user experience. There are no indications of malicious activity or content safety concerns. Strategic recommendations include enhancing security headers, maintaining regular updates, and formalizing incident response documentation to further strengthen security maturity.

A

Atomic Industries, Inc.

replicator.com

0

The website replicator.com currently serves as a placeholder with minimal content, primarily displaying a stylized ASCII art interface and a 'coming soon...' message. The business behind the site appears to be Atomic Industries, Inc., but no detailed business information, services, or contact details are provided. The site targets a general audience but lacks substantive content or clear business model indications. Technically, the site uses standard web technologies including HTML5, CSS3, and JavaScript, with a custom ASCII art animation and fonts loaded from Google Fonts. Hosting appears to be via Replit, inferred from Open Graph metadata, while the domain is registered through NameCheap. Security posture is limited due to lack of DNSSEC, absence of security headers, and no visible HTTPS enforcement details. No privacy, cookie, or terms policies are present, and no contact or incident response information is provided, indicating low privacy compliance and business credibility. Overall, the site is in an early development or pre-launch state, with significant improvements needed in content, security, and compliance to establish trust and professionalism.

The European Association for the Study of Diabetes (EASD) is a reputable non-profit organization focused on advancing diabetes research, education, and clinical care. The website serves as a comprehensive portal for members and the diabetes research community, offering information on annual meetings, educational resources, membership, and research funding. The organization maintains a strong market position within the healthcare and academic sectors, targeting diabetes professionals globally. Technically, the website employs modern frontend technologies such as Bootstrap, AOS, and Swiper, ensuring a responsive and user-friendly experience across devices. The site is well-structured with clear navigation and professional design, supporting excellent content quality and accessibility. Privacy compliance is robust, featuring a detailed privacy policy, cookie consent mechanism, and GDPR adherence. Security posture is solid with HTTPS enforced and no visible vulnerabilities or exposed sensitive data. However, the absence of security headers and a public vulnerability disclosure policy suggests room for improvement. WHOIS data is privacy-protected, which is typical for organizations of this nature and does not detract from the site's legitimacy. Overall, the website presents a low-risk profile with strong business credibility and technical maturity. Strategic recommendations include enhancing security headers, publishing a security.txt file, and providing explicit incident response contacts to further strengthen trust and compliance.

G

GIG Karasek GmbH

gigkarasek.at

0

GIG Karasek GmbH is an Austrian-based industrial plant construction company specializing in thermal separation and environmental technologies. The company operates globally and offers a range of services including engineering, production, and technical center support. Their market position is that of a specialized medium-sized enterprise with a strong focus on innovation and quality. The website is built on the HubSpot CMS platform, leveraging modern web technologies and marketing tools, providing a professional and user-friendly experience. Security posture is solid with HTTPS and consent mechanisms in place, though some security headers and policies could be improved. The absence of WHOIS data reduces domain trustworthiness slightly, but the overall business credibility remains high based on website content and branding.

B

BFT GmbH

bft-pumps.com

0

BFT GmbH is an Austrian owner-managed company specializing in manufacturing and supplying high-pressure pumps and accessories for waterjet cutting technology. Positioned as the only independent global supplier in this niche, BFT offers innovative ready-to-use solutions and emphasizes quality, sustainability, and customer service. The website reflects a professional industrial business targeting companies requiring advanced waterjet cutting equipment. Technically, the site is built on WordPress with modern plugins and tracking technologies, providing a good user experience and mobile optimization. Security posture is solid with HTTPS and reCAPTCHA integration, though lacks some advanced security headers and explicit incident response information. Privacy compliance is partially addressed with a privacy policy but lacks cookie consent mechanisms. The domain WHOIS data is missing, which raises some legitimacy concerns, but the business references and content support authenticity. Overall, the site is trustworthy with room for security and compliance improvements.

L

LANACO

tehnoloskicentar.ba

0

LANACO Tehnološki centar is a prominent technology hub located in Banja Luka, Bosnia and Herzegovina, operated by LANACO, the largest private IT system integrator in the country. The center hosts a Tier 4 standard data center, conference facilities, and an educational center offering IT courses and seminars. The website reflects a professional and consistent brand image targeting businesses and IT professionals in the region. Technically, the site uses modern web technologies including Bootstrap and Google Analytics, with moderate performance and good mobile optimization. Security posture is moderate but lacks visible security headers and published privacy or cookie policies, indicating room for improvement in compliance and security best practices. WHOIS data confirms the legitimacy and consistency of the domain registration with the business claims. Overall, the website is a reliable digital presence for LANACO's technology center but should enhance privacy and security disclosures to improve trust and compliance.

L

LANACO

station-24.com

0

Station24 is a specialized software solution developed by LANACO, targeting the hospitality industry in Bosnia and Herzegovina and surrounding regions. The platform offers comprehensive modules for order management, administration, kitchen display, and loyalty programs, aiming to streamline restaurant and cafe operations. The website presents a professional image with detailed product descriptions, client testimonials, and partner logos, reflecting a medium-sized business with a solid regional presence. Technically, the site employs modern web technologies including jQuery, Google Analytics, Google Tag Manager, and Google reCAPTCHA v3, ensuring functional and secure user interactions. Security posture is generally good with HTTPS enforced and spam protection on forms, though improvements such as enabling DNSSEC and adding security headers are recommended. Privacy compliance is addressed with a clear privacy policy and cookie consent mechanism, though terms of service and security policies are absent. Overall, the website is trustworthy, well-structured, and serves its target audience effectively.

L

LANACO

ecoone.ba

0

EcoOne.ba is a professional business software website offering cloud-based ERP and accounting solutions primarily targeting small and medium enterprises in Bosnia and Herzegovina. The platform emphasizes accessibility, security, and ease of use, providing multiple packages tailored to different business needs. The website is well-structured, uses modern web technologies, and includes essential privacy and cookie policies, reflecting a mature digital presence. Security posture is adequate with HTTPS and data center security claims, though explicit security headers and incident response policies are not publicly documented. Overall, the site presents a trustworthy and professional image suitable for its target market.

B

Bildungswerk der Hessischen Wirtschaft e.V.

bwhw.de

0

Bildungswerk der Hessischen Wirtschaft e.V. is a regional educational and training organization based in Germany, primarily serving Hessen and Rheinland-Pfalz. The organization focuses on supporting students, trainees, employees, and companies with vocational training, qualification programs, and inclusion initiatives. It operates through a network of subsidiaries and partner organizations, maintaining a strong regional presence with over 60 locations. The website reflects a professional and consistent brand image with multilingual support and a clear focus on education and career development. Technically, the website uses a moderate technology stack including jQuery, Swiper.js for UI components, and Piwik/Matomo for privacy-conscious analytics. The site is mobile-optimized and provides a good user experience, although some technical improvements could be made such as updating JavaScript libraries and implementing security headers. The website is served over HTTPS with no blocking or WAF interference, ensuring secure access. From a security perspective, the site demonstrates basic good practices such as HTTPS and disabling cookies in analytics, but lacks visible security headers and explicit incident response or security policy disclosures. Privacy compliance is partially met with a privacy policy present but no cookie consent mechanism. Contact information is limited on the homepage, which could impact user trust and support accessibility. Overall, the website is trustworthy and professionally maintained with a strong business credibility score. Strategic improvements in security headers, cookie consent, and contact transparency would enhance compliance and user confidence, supporting the organization's mission in vocational education and inclusion.

H

Hanser Verlag

hanser-ecampus.de

0

HANSER eCampus is a digital education platform operated by Hanser Verlag, offering adaptive courses for university students and corporate learners. The platform leverages artificial intelligence to customize learning paths in real-time, enhancing learning efficiency and outcomes. The business is well-positioned in the German education market, recognized by industry awards and providing a broad range of technical and management courses. Technically, the website is built on modern frameworks such as Next.js and React, hosted on AWS CloudFront, and integrates multiple analytics and consent management tools, ensuring good performance and compliance with GDPR. Security posture is solid with HTTPS and several security headers, though improvements like CSP and HSTS are recommended. Overall, the site demonstrates a professional, trustworthy, and user-friendly digital presence with strong privacy and compliance practices.

Wirtschaftsinitiative Mittelstand Main-Kinzig is a regional business network focused on fostering collaboration among entrepreneurs, scientists, and politicians within the Main-Kinzig district in Germany. The organization operates as a membership-based association aiming to strengthen the economic stability and competitiveness of local medium-sized enterprises through joint projects and initiatives. The website is built on WordPress with modern plugins such as Yoast SEO and Borlabs Cookie, indicating a mature digital infrastructure with good SEO and privacy compliance. Security posture is solid with HTTPS enforced and cookie consent mechanisms in place, though some security headers are missing and could be improved. No critical vulnerabilities or exposed sensitive data were found. Overall, the site presents a professional and trustworthy image with clear contact information and comprehensive privacy policies, but lacks explicit terms of service and incident response details.

F

Flexocube

flexocube.de

0

Flexocube is a German-based small business specializing in modular outdoor kitchens designed for balconies and gardens. Their business model combines e-commerce with an online configurator and physical shop presence, targeting both private consumers and businesses. The website is professionally designed using WordPress and Elementor, with a consistent brand image and clear navigation. The company emphasizes product flexibility, quality, and customer satisfaction, supported by testimonials and a 10-year warranty on color fastness. Technically, the site uses modern web technologies and integrates marketing and analytics tools such as Cookiebot, HubSpot, and Google Tag Manager. Security posture is good with HTTPS and cookie consent mechanisms, though some security headers and policies are missing. Privacy compliance is moderate due to the absence of explicit privacy and terms of service pages. Overall, the domain registration and website content align well, indicating a legitimate and trustworthy business.

D

Der Kreisausschuss des Main-Kinzig-Kreises

kulturpreis.net

0

The website kulturpreis.net serves as the official online presence for the Kulturpreis des Main-Kinzig-Kreises, a regional cultural award program in Germany. It provides comprehensive information about the award, including past recipients, jury details, application procedures, and event impressions. The site is managed by the Kreisausschuss des Main-Kinzig-Kreises, a governmental body, and is supported by local Sparkassen institutions. The content is well-structured, professionally presented, and targeted at cultural stakeholders and the regional community. Technically, the site is built on Joomla CMS with modern front-end technologies such as Bootstrap 5 and jQuery. It is hosted under a stable domain registered since 2002, with HTTPS enabled and a clientTransferProhibited status indicating domain security. However, some security best practices like DNSSEC and security headers are missing. The site lacks a cookie consent mechanism, which may affect privacy compliance. From a security perspective, the site is accessible without WAF or blocking mechanisms, uses HTTPS, and does not expose sensitive data. The absence of tracking and advertising scripts suggests minimal user tracking, enhancing privacy. Contact information is clearly provided, supporting business credibility. Overall, the site demonstrates a solid security posture with room for improvement in security headers and privacy mechanisms. The overall risk is low given the nature of the site as a regional government cultural award platform. Strategic recommendations include enabling DNSSEC, implementing security headers, and adding cookie consent to enhance compliance and security posture.

Bildungspartner Main-Kinzig GmbH operates as a regional adult education provider in Germany, offering a broad range of courses including languages, vocational training, health, culture, and online learning. The organization targets adult learners, companies, and public authorities within the Main-Kinzig region, positioning itself as a trusted educational partner. The website reflects a professional and consistent brand presence with clear navigation and relevant content tailored to its audience. Technically, the website is built on the CMS CONTENIDO 4.10 platform and utilizes common web technologies such as jQuery, Font Awesome, and W3.CSS. The site is mobile-optimized with good SEO practices and moderate performance. Security is well-handled with HTTPS enforced and basic anti-spam measures, though it lacks advanced security headers and an incident response policy. From a security perspective, the site shows a solid posture with no visible vulnerabilities or exposed sensitive data. Privacy compliance is evident through a GDPR-compliant privacy policy and cookie consent banner. However, there is room for improvement in publishing explicit security policies and vulnerability disclosure mechanisms. Overall, the website is trustworthy, professionally maintained, and suitable for its educational mission. Strategic enhancements in security policies and technical headers would further strengthen its posture and user trust.

L

LAG SCHULEWIRTSCHAFT Hessen

iammint.de

0

I AM MINT is a well-established educational project operated by LAG SCHULEWIRTSCHAFT Hessen, focusing on promoting STEM careers through mentoring by apprentices. The project addresses the growing demand for skilled workers in MINT professions by providing early career orientation and practical experiences for students in Hessen, Germany. The website reflects a strong regional presence with a network of schools and companies, supported by public funding from the EU, the state of Hessen, and the Bundesagentur für Arbeit. Technically, the website employs modern web technologies including HTML5, CSS3, jQuery, and the lightslider plugin for interactive content. It uses Piwik/Matomo for privacy-conscious analytics with cookies disabled, indicating a good privacy posture. The site is mobile-optimized and accessible, with clear navigation and professional design. However, some security best practices such as security headers and cookie consent mechanisms are missing. From a security perspective, the site uses HTTPS with a good SSL configuration and avoids exposing sensitive data. No WAF or blocking mechanisms are detected, and no vulnerabilities are apparent in the provided content. The privacy policy is comprehensive and GDPR compliant, but the absence of a cookie consent banner is a minor compliance gap. Overall, the website is trustworthy, professional, and well-aligned with its educational mission. Strategic improvements in security headers, cookie consent, and incident response policies would enhance its security and compliance posture further.

M

MINT FResH

mint-fresh.de

0

MINT FResH is a small regional educational initiative based in Hessen, Germany, focused on providing after-school STEM (MINT) programs for students. The website presents the program as a free service offering expert advice, support, and certification for completed modules, targeting students and their parents. The organization maintains a social media presence on Facebook and Instagram, enhancing community engagement. Technically, the website is built on WordPress using the Avia Framework, optimized with WP Rocket and Yoast SEO plugins, ensuring good performance and SEO readiness. Security posture is adequate with HTTPS enabled and no exposed sensitive data, but lacks advanced security headers and published security policies. Privacy compliance is limited due to the absence of a privacy policy and terms of service, though a cookie consent mechanism is implemented. Overall, the site is professional, trustworthy, and safe for general audiences.

The website joinlist.com currently serves an error page indicating that the expected form could not be found, suggesting the site is either inactive or misconfigured. The domain is long-standing, registered since 1998 via NameCheap, and uses AWS nameservers, indicating a stable technical foundation. However, the lack of active content, absence of privacy or cookie policies, and no contact information severely limit the site's business credibility and user trust. Technically, the site uses jQuery 3.7.0 and references Direct Mail for Mac, but no modern frameworks or CMS are detected. Security posture is minimal with no DNSSEC and no security headers observed in the HTML content. Overall, the site appears to be a placeholder or defunct, with poor content quality and minimal user engagement features.

The website cvd-technologies.com is currently a placeholder page hosted by STRATO, indicating the domain is reserved and no content has been uploaded. The domain was registered recently in September 2024, consistent with the lack of active website content. There is no business information, contact details, or policies published on the site. The technical infrastructure appears minimal, with no detected CMS or advanced technologies. Security posture is weak due to the absence of HTTPS confirmation and security headers. No privacy or cookie policies are present, and no forms or data collection mechanisms exist. Overall, the site is not yet operational and provides no business or security assurances.

F

fit GmbH

mum-deo.de

0

fit GmbH operates the MUM brand, specializing in vegan deodorant products marketed primarily in Germany and several international markets. The company emphasizes sustainability with alcohol- and perfume-free deodorants packaged in glass bottles, targeting active individuals seeking effective personal care solutions. The website reflects a well-established brand with a history dating back to 1888, positioning itself as a niche player in the retail personal care sector. The business model combines e-commerce with physical retail availability, supported by a store locator feature and multilingual country-specific domains. Technically, the website uses a modern e-commerce CMS platform (likely Shopware), integrates Matomo analytics with cookie consent mechanisms, and employs responsive design for mobile optimization. While the site performs moderately well, there is room for improvement in SEO and accessibility. Security posture is solid with HTTPS enforced and privacy-aware tracking, but lacks explicit security headers and published security policies. The absence of a terms of service page and incident response contacts suggests areas for legal and security maturity enhancement. Overall, the website is professional, trustworthy, and compliant with GDPR requirements, with clear contact information and consistent branding. The security and privacy practices are adequate but could be strengthened by adding formal policies and technical security headers. No critical vulnerabilities or suspicious indicators were found, and the domain registration aligns with the business claims. Strategic improvements in security transparency and legal completeness would further enhance trust and compliance.

M

Mudcon GmbH

mudcon.de

0

Mudcon GmbH is a certified environmental service provider specializing in the professional disposal and recycling of drilling sludge, primarily serving construction and industrial clients in Northern Germany. The company operates under the parent organization Seier Gruppe and emphasizes sustainability, compliance, and efficiency in its service offerings. The website reflects a strong market position with clear communication of certifications and services. Technically, the site is built on WordPress with modern frameworks and plugins, ensuring good SEO, mobile optimization, and user experience. Security posture is solid with HTTPS, cookie consent, and no visible vulnerabilities, though explicit security policies and incident response contacts are absent. Overall, the digital presence supports a trustworthy and professional business image.

B

BHK Tief- und Rohrbau GmbH & Co. KG

bhk-rohrbau.de

0

BHK Tief- und Rohrbau GmbH & Co. KG is a well-established German company specializing in pipeline construction, civil engineering, and cable laying services. Founded in 1990 and operating under the parent company SEIER Gruppe, BHK serves regional clients with a focus on quality, reliability, and sustainable infrastructure development. The company offers a broad range of services including house connections, vacuum excavation, horizontal drilling, and network planning, positioning itself as a trusted partner in the energy and transportation sectors. Technically, the website is built on WordPress with modern frameworks such as UIkit and enhanced by SEO tools like Yoast. It employs Google Tag Manager and Cookiebot for analytics and privacy compliance, respectively. The site is mobile-optimized, accessible, and demonstrates good performance and SEO practices. Multiple office locations are clearly presented with comprehensive contact information, supporting strong business credibility. From a security perspective, the website enforces HTTPS and uses cookie consent mechanisms, but lacks explicit security headers and published security policies or incident response contacts. No vulnerabilities or exposed sensitive data were detected. The domain registration data aligns well with the business claims, showing consistency and legitimacy. Overall, the website reflects a professional, trustworthy, and compliant digital presence suitable for its industry and audience. Strategic improvements in security headers and transparency around security policies could further enhance trust and resilience.

E

eKonferencije.com

ekonferencije.com

0

eKonferencije.com is a specialized platform focused on providing IT solutions for organizing scientific and professional conferences, seminars, and congresses. The platform offers services such as electronic paper submission, reviewer management, reporting, mass notifications, multimedia content, and participant feedback. It targets academic institutions, conference organizers, researchers, and authors primarily in the Serbian-speaking region. The business operates as a small-sized entity founded in 2012, with a niche market position in academic event management. Technically, the website employs a modern but somewhat dated technology stack including jQuery, Bootstrap, AngularJS, and FontAwesome. Hosting is provided by Bitlab Hosting as inferred from the nameservers. The site is mobile optimized and has a moderate performance profile. SEO and accessibility are basic but functional. The site uses HTTPS but lacks advanced security headers and DNSSEC, indicating room for security enhancements. From a security perspective, the site enforces HTTPS but does not implement DNSSEC or security headers such as CSP or HSTS. There is no visible privacy or cookie policy, nor incident response or vulnerability disclosure information, which are compliance gaps especially under GDPR. Contact information is present but limited. No WAF or blocking mechanisms were detected, and the site content is fully accessible. Overall, the website is functional and professional with good business credibility but requires improvements in privacy compliance and security posture to enhance trust and regulatory adherence. Strategic recommendations include implementing privacy and cookie policies, enabling DNSSEC, adding security headers, and establishing incident response contacts.

D

Dr. Aichhorn GmbH

aichhorn-group.at

0

Dr. Aichhorn GmbH operates as a group focused on developing and optimizing companies within the investment goods industry, particularly in manufacturing high-pressure technology and sustainable forestry. The group includes subsidiaries specializing in high-pressure equipment for chemical and petrochemical industries, high-pressure pumps, and thermal separation apparatus. Their market position is strong in Europe with global operations in their niche sectors. The website presents a professional image with clear business descriptions and contact information, targeting industrial clients and partners. Technically, the website uses Bootstrap for responsive design and Typekit for fonts, with a cookie consent mechanism implemented to comply with GDPR. The site shows moderate performance and basic mobile optimization but lacks advanced SEO and accessibility features. No CMS or hosting provider details are evident, and no analytics or tracking beyond cookie consent is detected. From a security perspective, the site uses HTTPS (assumed from URL), but no explicit security headers or policies are visible. The cookie consent banner is a positive privacy compliance indicator. No incident response or vulnerability disclosure information is provided, which could be improved. The WHOIS data aligns well with the business claims, indicating legitimacy. Overall, the website is safe, professional, and compliant with basic privacy requirements but could enhance its security posture and technical sophistication to improve trust and resilience.

D

d.vinci

dvinci.de

0

d.vinci is a German-based technology company specializing in recruiting and onboarding software solutions designed to optimize HR processes. Their offerings include applicant management, onboarding software, career pages, and multiposting services, targeting HR departments and recruiters. The company positions itself as an expert in seamless and efficient HR workflows, supported by a professional and well-structured website with strong SEO and digital presence. Technically, the website is built on WordPress with modern plugins such as Yoast SEO Premium and Borlabs Cookie for privacy compliance. Hosting is provided by SchlundTech, a reputable German hosting provider. Security posture is strong with HTTPS enforced and cookie consent mechanisms in place, though some security headers could be improved. No critical vulnerabilities or exposed sensitive data were detected. Overall, the website reflects a mature digital infrastructure and a trustworthy business presence in the HR technology sector.

R

Reframax

reframax.com.br

0

Reframax is a Brazilian company specializing in refractory solutions and industrial services including thermal insulation, electromechanics, and industrial painting. With over 25 years of experience and a client base exceeding 500 customers domestically and internationally, it holds a strong market position in the manufacturing and industrial sectors. The website reflects a professional and well-established business with comprehensive service offerings and a clear focus on quality and compliance. Technically, the site is built on WordPress with modern frameworks and plugins ensuring good performance, mobile optimization, and SEO. Security posture is solid with HTTPS, reCAPTCHA on forms, and no exposed sensitive data, although explicit security policies and incident response contacts are absent. Overall, the site is trustworthy, compliant with privacy regulations, and provides clear contact channels.

E

event lab. GmbH

haicon.cc

0

The website haicon.cc represents the Helmholtz AI Conference 2025, a well-established scientific event focused on artificial intelligence applications in science. The conference is organized by event lab. GmbH in association with the Helmholtz Artificial Intelligence Cooperation Unit and multiple Helmholtz research centers. The site targets researchers, AI professionals, and industry partners, offering conference programs, workshops, poster sessions, and networking opportunities. The business model centers on event organization and community building within the AI research domain. The website demonstrates strong branding consistency and professional content quality, reflecting its reputable market position within the scientific community. Technically, the site is built on WordPress using the Avada theme and several plugins including LayerSlider and Borlabs Cookie for cookie management. Accessibility is a key focus, with the OneTap Pro accessibility plugin providing multiple modes for users with disabilities. The site is mobile-optimized and performs moderately well, with good SEO and meta tag implementation. External links to partner institutions and social media channels are properly integrated. From a security perspective, the website enforces HTTPS with strong SSL configuration and includes standard security headers. Cookie consent mechanisms are in place, and privacy policies are comprehensive and GDPR compliant. However, explicit security policies, incident response contacts, and vulnerability disclosure information are not found, representing areas for improvement. No vulnerabilities or suspicious content were detected. Overall, haicon.cc is a trustworthy, professional, and secure platform for hosting a major AI scientific conference. Strategic recommendations include publishing dedicated security and incident response pages, enhancing direct contact information for security matters, and considering a formal vulnerability disclosure policy to further strengthen trust and compliance.